Edit tour

Windows Analysis Report
http://info.ipreo.com/Privacy-Policy.html

Overview

General Information

Sample URL:	http://info.ipreo.com/Privacy-Policy.html
Analysis ID:	1446520
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected suspicious javascript

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

Executes massive DNS lookups (> 100)

Found iframes

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2276 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7592 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://info.ipreo.com/Privacy-Policy.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: chromecache_355.2.dr

Binary or memory string: "\n")+"-----END RSA PRIVATE KEY-----"};H.prototype.getPublicKey=function(){return"-----BEGIN PUBLIC KEY-----\n"+(this.wordwrap(this.getPublicBaseKeyB64())+"\n")+"-----END PUBLIC KEY-----"};H.prototype.hasPublicKeyProperty=function(a){a=a||{};return a.hasOwnProperty("n")&&a.hasOwnProperty("e")};H.prototype.hasPrivateKeyProperty=function(a){a=a||{};return a.hasOwnProperty("n")&&a.hasOwnProperty("e")&&a.hasOwnProperty("d")&&a.hasOwnProperty("p")&&a.hasOwnProperty("q")&&a.hasOwnProperty("dmp1")&&a.hasOwnProperty("dmq1")&&

memstr_4abf5e2d-5

Phishing

AI detected phishing page

Source: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%

LLM: Score: 7 brands: S&P Global Reasons: The URL 'https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?' is highly suspicious. The domain 'doubleclick.net' is not associated with S&P Global, which is the brand identified in the image. The URL also contains numerous tracking parameters and redirects, which is a common technique used in phishing attacks. The presence of login forms without a CAPTCHA further raises suspicion. Therefore, it is likely a phishing site. DOM: 26.44.pages.csv

AI detected suspicious javascript

Source: https://www.spglobal.com/marketintelligence/en/

LLM: Score: 8 Reasons: The code is obfuscated, which is a common technique used to hide malicious intent. It dynamically creates and appends a script element to the document head with a source URL that is also obfuscated. This behavior is suspicious because it can be used to load external malicious scripts without the user's knowledge. DOM: 0.31.pages.csv

Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-PZNSJJB
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-NKVB4WM
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.spglobal.com
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://11756258.fls.doubleclick.net/activityi;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-PZNSJJB
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: //www.googletagmanager.com/ns.html?id=GTM-NKVB4WM
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.spglobal.com
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://11756258.fls.doubleclick.net/activityi;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472282236
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=3bc6b5a1-dc2d-4c37-9337-988f2e03ceb7&sessionStarted=1716472291.903&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472282236&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: Iframe src: https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&upid=b2bmdj2&upv=1.1.0&paapi=1

Source: https://www.spglobal.com/marketintelligence/en/	HTTP Parser: No favicon
Source: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html	HTTP Parser: No favicon
Source: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html	HTTP Parser: No favicon
Source: https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.spglobal.com	HTTP Parser: No favicon
Source: https://11756258.fls.doubleclick.net/activityi;dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F?	HTTP Parser: No favicon
Source: https://www.spglobal.com/en	HTTP Parser: No favicon
Source: https://www.spglobal.com/en	HTTP Parser: No favicon
Source: https://c1.adform.net/imatch/pixels?bt=0&uid=6252180897247519748&agencyId=7248&advertiserId=2079078&src=tp&rnd=781195	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319	HTTP Parser: No favicon
Source: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F	HTTP Parser: No favicon
Source: https://flo.uri.sh/visualisation/15507338/embed?auto=1	HTTP Parser: No favicon
Source: https://flo.uri.sh/visualisation/15507338/embed?auto=1	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/upb/?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=&expires=30	HTTP Parser: No favicon
Source: https://ib.adnxs.com/setuid?entity=82&code=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&google_push&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97	HTTP Parser: No favicon
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&upid=b2bmdj2&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expiration=1719064287&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic	HTTP Parser: No favicon
Source: https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1	HTTP Parser: No favicon
Source: https://11756258.fls.doubleclick.net/activityi;dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?	HTTP Parser: No favicon
Source: https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&upid=b2bmdj2&upv=1.1.0&paapi=1	HTTP Parser: No favicon

Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: No <meta name="author".. found
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: No <meta name="author".. found

Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: No <meta name="copyright".. found
Source: https://www.spglobal.com/marketintelligence/en/pages/product-login	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49730 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 12

Source: global traffic

TCP traffic: 192.168.2.5:65444 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: urldefense.com to http://www.spcapitaliq.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: urldefense.com to http://www.spglobal.com

Source: global traffic

DNS traffic detected: number of DNS queries: 125

Source: global traffic	HTTP traffic detected: GET /v2/visitors
Source: global traffic	HTTP traffic detected: GET /v2/player_loads

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49730 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /industry/financial-markets.html HTTP/1.1Host: ihsmarkit.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v3/__http://www.spcapitaliq.com/__;!!GjvTz_vk!S23AgMpOHeRszJTw0uERhApJ206Qy-6sZgONselCccTEnesoxmXELyzjpgIAJ4dUeu42X6YW-6U7TAxHRak42voGpjIk$ HTTP/1.1Host: urldefense.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/forms2/js/forms2.js HTTP/1.1Host: app-sjqe.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/concured-shim.js HTTP/1.1Host: cdn.concured.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets.js HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script/config/spglobal/19bf0a5e.json HTTP/1.1Host: assets.concured.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /in.js HTTP/1.1Host: platform.linkedin.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/marketintelligence/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.spglobal.com HTTP/1.1Host: platform.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings?session_id=2e62094c07b0bcd5863083a35b7577a11a1fc9a9 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://platform.twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://platform.twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/hls/jWqYTL70JBGZA_wGoN5WzA/,full_hd,hd,480p,sd,.mp4.urlset/master.m3u8?eiF43Ig41U8wbA0Savxf0TzeSnYi3ejBhfCDWo8lgF3LSIs_r-nwDjRrAN9Q72evSjw4Gom2aJNMmBiXwev7cXup7vW37c4YA0u2jrt1bobPywI6HKg0axDHkKOFsDh9cg76Owek-7S1FESoOran4WKzmKi5MbeTlv1lFn5zuE__xsg8NjpCLcX53qabvkaVSHT8hg HTTP/1.1Host: cdn.vidyard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://play.vidyard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/1b11452b-62cc-4fad-8149-9b39c40329a4.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /settings?session_id=2e62094c07b0bcd5863083a35b7577a11a1fc9a9 HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/visitors HTTP/1.1Host: raw.vidyard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbnails/jWqYTL70JBGZA_wGoN5WzA/7e5d6d1b3cdaa7e4a5d1d9.jpg HTTP/1.1Host: cdn.vidyard.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/1b11452b-62cc-4fad-8149-9b39c40329a4.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/visitors
Source: global traffic	HTTP traffic detected: GET /media/hls/jWqYTL70JBGZA_wGoN5WzA/,full_hd,hd,480p,sd,.mp4.urlset/master.m3u8?eiF43Ig41U8wbA0Savxf0TzeSnYi3ejBhfCDWo8lgF3LSIs_r-nwDjRrAN9Q72evSjw4Gom2aJNMmBiXwev7cXup7vW37c4YA0u2jrt1bobPywI6HKg0axDHkKOFsDh9cg76Owek-7S1FESoOran4WKzmKi5MbeTlv1lFn5zuE__xsg8NjpCLcX53qabvkaVSHT8hg HTTP/1.1Host: cdn.vidyard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbnails/jWqYTL70JBGZA_wGoN5WzA/7e5d6d1b3cdaa7e4a5d1d9.jpg HTTP/1.1Host: cdn.vidyard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/player_loads HTTP/1.1Host: raw.vidyard.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/player_loads
Source: global traffic	HTTP traffic detected: GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/018e8a70-0f3b-7e64-9425-2236b00a879c/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/018e8a70-0f3b-7e64-9425-2236b00a879c/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zi-tag.js HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/6d462c1fd1fbf4524156773cc7d41d65.js HTTP/1.1Host: ob.fishrobotflower.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"Content-Type: application/jsonsec-ch-ua-mobile: ?0Authorization: Bearer 1edd5669f11674524557User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36visited_url: https://www.spglobal.com/marketintelligence/en/Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1Host: 11756258.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/5cb57702-8ef7-437e-a62b-408fe78cd310/6363e1f2-8f9e-4538-82e0-901d90e0cf02/splogo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: not-navigation-source, trigger, event-sourceReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1Host: 11756258.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/5cb57702-8ef7-437e-a62b-408fe78cd310/6363e1f2-8f9e-4538-82e0-901d90e0cf02/splogo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /formcomplete.js HTTP/1.1Host: ws-assets.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&gjid=236941860&_gid=628374559.1716472251&_u=YHBAAEAAAAAAACAEK~&z=1376759657 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&gjid=351969260&_gid=628374559.1716472251&_u=YHDAAEABAAAAACAGK~&z=101072218 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/javascriptvisited-url: https://www.spglobal.com/marketintelligence/en/_vtok: OC40Ni4xMjMuMTc1_zitok: ac746a0716b51e6738171716472254sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/marketintelligence/en/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ct?id=36498&url=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1716472252436&hl=1&op=0&ag=300509663&rand=040071195005060211758750255662960922957918772088120906196602121961211153850280480068&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /banners/scripts/st/trackpoint-async.js HTTP/1.1Host: s2.adform.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: vfhbo3jsnvrutdkuee1akd0lj.litix.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /banners/scripts/st/trackpoint-sync.js HTTP/1.1Host: s2.adform.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/__http://www.spglobal.com__;!!GjvTz_vk!S23AgMpOHeRszJTw0uERhApJ206Qy-6sZgONselCccTEnesoxmXELyzjpgIAJ4dUeu42X6YW-6U7TAxHRak42sA2nCnI$ HTTP/1.1Host: urldefense.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://11756258.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&_u=YHBAAEAAAAAAACAEK~&z=1562181121 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&_u=YHDAAEABAAAAACAGK~&z=1332001211 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=mBwsWHnfOK&ts=2222&cb=1716472254658 HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&_u=YHBAAEAAAAAAACAEK~&z=1562181121 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&_u=YHDAAEABAAAAACAGK~&z=1332001211 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=mBwsWHnfOK&ts=2222&cb=1716472254658 HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /include/1716472500000/n6k2yubr6fw7.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /formcomplete-v2/forms HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /gw1/trw?aid=spglobal&trwv.uid=spglobal-1716472255215-3a36b654&trwv.vc=1&trwsa.sid=spglobal-1716472255217-b61b91f1&trwsb.cpv=1&ctzo=-04:00&uri=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&pm=&viewedTypes=&rts=1716472255219 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.45853412486275036&rts=1716472256075 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.8736560985077646&rts=1716472258112 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visualisation/15507338/embed?auto=1 HTTP/1.1Host: flo.uri.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/runtime~main.96c083f3.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rollbarjs/refs/tags/v2.26.2/rollbar.min.js HTTP/1.1Host: cdn.rollbar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.spglobal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /template/20762/v21/static/choices/styles/css/choices.min.css HTTP/1.1Host: flo.uri.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://flo.uri.sh/visualisation/15507338/embed?auto=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /template/20762/v21/static/bundle.css HTTP/1.1Host: flo.uri.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://flo.uri.sh/visualisation/15507338/embed?auto=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /core/assets/js/main~493df0b3.8510c064.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://js.driftt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863 HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/37.b6614199.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863 HTTP/1.1Host: ad.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=08facf54-2b74-422f-96ff-028f64cd56b8; tuuid_lu=1716472265
Source: global traffic	HTTP traffic detected: GET /core/assets/css/8.ab226b4a.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ul_cb/match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863 HTTP/1.1Host: ad.360yield.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=08facf54-2b74-422f-96ff-028f64cd56b8; tuuid_lu=1716472265; um=!42,ZSrbma4RjwcEaasVwZ4vV6KeHiFsfi5qnbLj46mvKjY.,1717681863; umeh=!42,0,1778680266,-1
Source: global traffic	HTTP traffic detected: GET /redir/?partnerid=22&partneruserid=6252180897247519748&redirurl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d10%26cid%3DSMART_USER_ID HTTP/1.1Host: rtb-csync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adform/1/info?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=70&user_id=6252180897247519748 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?uid=6252180897247519748&bid=9gdtmu1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscale-ih/tpui?tpid=42&tpuid=6252180897247519748&cburl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d9%26uid%3D__ADSCALE_USER_ID__ HTTP/1.1Host: ih.adscale.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; CMPS=1297; CMPRO=1297
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /398366.gif?partner_uid=6252180897247519748 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=710&j=0&buid=6252180897247519748 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/42.f634da7c.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/?uid=6252180897247519748&bid=9gdtmu1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa5b84457-17050000010f5454; SERVERID=21588~DM
Source: global traffic	HTTP traffic detected: GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adform/1/info?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"visited_url: https://www.spglobal.com/ensec-ch-ua-mobile: ?0Authorization: Bearer 1edd5669f11674524557User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json_zitok: ac746a0716b51e6738171716472254sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc"
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?dsp_id=70&user_id=6252180897247519748 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9326d0b9-3a0d-4d01-bbb3-688e8f328e75; c=1716472267; tuuid_lu=1716472267
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CJ6oGBIeChoIARCUdRoTNjI1MjE4MDg5NzI0NzUxOTc0OBAAGg0IzJO9sgYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=u3mdUNp9EDnOqJPN3yx0QhirN6N+uLH3XSLqV53NrAM=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; CMPS=1297; CMPRO=1297
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=710&j=0&buid=6252180897247519748&xl8blockcheck=1 HTTP/1.1Host: loadm.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="c4692e41261fd428073242b026cfe1d8"; ud="eJxrXxzq6XKLQSHZxMzSKNXE0MjMMC3FxMjCwNzYyMQoycDILDkt1TDFYnFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo9fugMAGVonlQ%253D%253D"
Source: global traffic	HTTP traffic detected: GET /adform/1/info2?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=3A07A931BD2D6041
Source: global traffic	HTTP traffic detected: GET /core/assets/js/8.c896b87e.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /adscale-ih/tpui?tpid=42&tpuid=6252180897247519748&cburl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d9%26uid%3D__ADSCALE_USER_ID__ HTTP/1.1Host: ih.adscale.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/16.968cf6f5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/24.091525a5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/17.3c8edd3c.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537113484&val=6252180897247519748 HTTP/1.1Host: eu-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thirdparty/click?p=adfo HTTP/1.1Host: api.adrtx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?_cmsrc=adformx&idt=100&did=6252180897247519748 HTTP/1.1Host: cm.adsafety.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/javascriptvisited-url: https://www.spglobal.com/en_vtok: OC40Ni4xMjMuMTc1_zitok: ac746a0716b51e6738171716472254sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537113484&val=6252180897247519748 HTTP/1.1Host: eu-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
Source: global traffic	HTTP traffic detected: GET /include/1716472500000/px2iwrcmfxwz.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=1024&google_cm&google_ula=1641347&party=1&google_hm=NjI1MjE4MDg5NzI0NzUxOTc0OA HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /api/sync?pid=5324&it=1&iv=cf8bef7f1bcd0321b7a679017e3d01786da7f5487e160d688e05dff7606569f8791426b5417dce21&_=2 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adform/1/info2?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1Host: uipus.semasio.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: SEUNCY=3A07A931BD2D6041
Source: global traffic	HTTP traffic detected: GET /pixel.gif HTTP/1.1Host: load77.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="c4692e41261fd428073242b026cfe1d8"; udo="gAAAAAQAAASeKLUv%252FWCeA80YAHbrn0YQa6oOAAAAANwpAHBoQFQQwft5oMKaHdFoADBKsIEEKo%252Fpm7d9JtfX3KZRbr6brPiSeLf6aHCyLFpkVwwkK5luiGQ0PBZTjQCKAIwAHLdVPFISzWRMnmJoQrSNIj94WZfEAAQ1eTjyue6lNx6JHp9NiRFmeOjhswv1rD5nyvGY4uuyN7g7NmGKmh0LGHCV4Zgi%252F6SlyE1Sw2cMBj5Ea2pRLBhq7vQ%252FgNSXEjaS9WO%252FCbHh%252FyU%252Fm81mP%252BD%252FIxL8yMbcadSzEpHilyXicOioIPn%252FIJtWBeI%252B0xQC6huDWinJaWkZ4i4%252FeGOLlubt7XHd5m0gpjmGNdZTfdE%252BmhxNkYfkGb4%252BzgM3jMdtD%252Fy0b9uY3W3IjCGnbZSzpJOry60a6khNC%252FPkaPla25ZicnuswpQLpe1zbzVoTrNVoTrJ8jxDlQQqndp3%252FQAhywvTFD3Gcg6BX5OG3Mea7HxSToplBjnycNQCHSJERCrZRIRVxWKwasJWRUh9wpFv0pRrSNSVuuCaDs%252FY1BVQfNVxGDrEGDHeZrnszdJxls8C2ik5g%252FDkc6uDliK64pilhjw%252FduuhtdsaaHP74mnf5tjQ1u2N6xvsuJXyI2Ppob1to08y46NC9Wlgnp0aNWsOVCxDV9xNJ7j0rpRWdV857p0MIayrgtjfIeI%252F9h9kE9nEA4EHwYpgGgaXSHQKXlewUAhEw2SZpSUgVP7%252FQIAX8JKXSED4iQ2CGAoWNLFpI5kiNLHgR9qX%252FXBxtECLRuFAgdsRoJ6K2y9oOOGGh556ZHLfkgumMZJHLBg6lrKJyIY6xvLJtTGXjvW1qMpGS1LZVqr%252Bh8mu2luxVUlrh%252BUXB6e04KboCjsgQAJCkEPGG%252FSFs5jk7CswkEIytUCyA%252BVOjoDdrhu7L5iHBFhgtW2wiUmtXwRE5OQQsg6LQIJByPjMDBms8HNl5su4ve%252F2Jt%252BTvLoirMm5JksjUGrmmxsQf6ds9cgx2Uqti4%252Bi5VsoBraRBawwd99CZMTLKIM7CZ5aylldMQ15KZGpb2S1Rs5j2wKhj%252FcbvywDeusP9wk%253D"; ud="eJxrXxzq6XKLQSHZxMzSKNXE0MjMMC3FxMjCwNzYyMQoycDILDkt1TDFYnFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FdAcAbZ0qlA%253D%253D"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bluekai&google_cm&google_sc&google_hm=ckxSTXZUSGQ5OU9HeEEyWg%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /getuid?https://c1.adform.net/serving/cookie/match?party=3&id=$UID&redirect=1 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/bidswitch/9326d0b9-3a0d-4d01-bbb3-688e8f328e75?gdpr=&gdpr_consent=&us_privacy= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?_cmsrc=adformx&idt=100&did=6252180897247519748 HTTP/1.1Host: cm.adsafety.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adality-cdn-content/pixel.gif HTTP/1.1Host: s3-eu-west-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match/bounce/?uid=6252180897247519748&bid=9gdtmu1 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=18fa5b84457-17050000010f5454; SERVERID=21588~DM
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /data.js?rnd=62fe5c0e6ad95 HTTP/1.1Host: tags.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/39.eeb001f3.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?cc=1&id=537113484&val=6252180897247519748 HTTP/1.1Host: eu-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
Source: global traffic	HTTP traffic detected: GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/32.1bf39f41.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/39.f1d268f5.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=6252180897247519748 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs HTTP/1.1Host: pdw-adf.userreport.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc1.adform.net%2Fserving%2Fcookie%2Fmatch%3Fparty%3D3%26id%3D%24UID%26redirect%3D1 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1586&dpuuid=6252180897247519748&redir=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1007%26cid%3D%24%7BDD_UUID%7D%26noredirect%3D1 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=65333287272203360842745703209020999402
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/bidswitch/9326d0b9-3a0d-4d01-bbb3-688e8f328e75?zcc=1&cb=1716472272007 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212269628&_puid=6252180897247519748 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=29685749-a200-4e71-bbe5-055ace8a158d&sessionStarted=1716472271.413&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472259218&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=adform&rurl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1084%26cid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie/?redirect=https%3A%2F%2Fdmp.adform.net%2Fserving%2Fcookie%2Fmatch%2F%3Fparty%3D1049%26cid%3D%25%25COOKIE%25%25 HTTP/1.1Host: dsp.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /formcomplete-v2/forms HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=6252180897247519748 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_391=22924-6252180897247519748&KRTB&23263-6252180897247519748&KRTB&23481-6252180897247519748; PugT=1716472271
Source: global traffic	HTTP traffic detected: GET /1272.js HTTP/1.1Host: js.idio.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/v1/interact?configId=a09783d4-f2df-4c99-9355-5ed608d27275&requestId=64b49639-6189-4d6f-8d44-3c9d847fb6d8 HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=65333287272203360842745703209020999402
Source: global traffic	HTTP traffic detected: GET /pixel.gif HTTP/1.1Host: load77.exelator.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: EE="c4692e41261fd428073242b026cfe1d8"; udo="gAAAAAQAAASeKLUv%252FWCeA80YAHbrn0YQa6oOAAAAANwpAHBoQFQQwft5oMKaHdFoADBKsIEEKo%252Fpm7d9JtfX3KZRbr6brPiSeLf6aHCyLFpkVwwkK5luiGQ0PBZTjQCKAIwAHLdVPFISzWRMnmJoQrSNIj94WZfEAAQ1eTjyue6lNx6JHp9NiRFmeOjhswv1rD5nyvGY4uuyN7g7NmGKmh0LGHCV4Zgi%252F6SlyE1Sw2cMBj5Ea2pRLBhq7vQ%252FgNSXEjaS9WO%252FCbHh%252FyU%252Fm81mP%252BD%252FIxL8yMbcadSzEpHilyXicOioIPn%252FIJtWBeI%252B0xQC6huDWinJaWkZ4i4%252FeGOLlubt7XHd5m0gpjmGNdZTfdE%252BmhxNkYfkGb4%252BzgM3jMdtD%252Fy0b9uY3W3IjCGnbZSzpJOry60a6khNC%252FPkaPla25ZicnuswpQLpe1zbzVoTrNVoTrJ8jxDlQQqndp3%252FQAhywvTFD3Gcg6BX5OG3Mea7HxSToplBjnycNQCHSJERCrZRIRVxWKwasJWRUh9wpFv0pRrSNSVuuCaDs%252FY1BVQfNVxGDrEGDHeZrnszdJxls8C2ik5g%252FDkc6uDliK64pilhjw%252FduuhtdsaaHP74mnf5tjQ1u2N6xvsuJXyI2Ppob1to08y46NC9Wlgnp0aNWsOVCxDV9xNJ7j0rpRWdV857p0MIayrgtjfIeI%252F9h9kE9nEA4EHwYpgGgaXSHQKXlewUAhEw2SZpSUgVP7%252FQIAX8JKXSED4iQ2CGAoWNLFpI5kiNLHgR9qX%252FXBxtECLRuFAgdsRoJ6K2y9oOOGGh556ZHLfkgumMZJHLBg6lrKJyIY6xvLJtTGXjvW1qMpGS1LZVqr%252Bh8mu2luxVUlrh%252BUXB6e04KboCjsgQAJCkEPGG%252FSFs5jk7CswkEIytUCyA%252BVOjoDdrhu7L5iHBFhgtW2wiUmtXwRE5OQQsg6LQIJByPjMDBms8HNl5su4ve%252F2Jt%252BTvLoirMm5JksjUGrmmxsQf6ds9cgx2Uqti4%252Bi5VsoBraRBawwd99CZMTLKIM7CZ5aylldMQ15KZGpb2S1Rs5j2wKhj%252FcbvywDeusP9wk%253D"; ud="eJxrXxzq6XKLQSHZxMzSKNXE0MjMMC3FxMjCwNzYyMQoycDILDkt1TDFYnFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FdAcAbZ0qlA%253D%253D"
Source: global traffic	HTTP traffic detected: GET /core/assets/css/27.b5e8f5e1.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/25.c695453b.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2FAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/3.2a4c7561.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cs HTTP/1.1Host: pdw-adf.userreport.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adality-cdn-content/pixel.gif HTTP/1.1Host: s3-eu-west-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212289188&_puid=Zk9J0WKLLYCxiR0_W-siGM2w&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A4HQI6oJZtTgiuGR4djSvMxQZPxapYawk
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=71ei9rr&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"}]
Source: global traffic	HTTP traffic detected: GET /redirect/standard?url=https%3A%2F%2Fdmp.adform.net%2Fserving%2Fcookie%2Fmatch%2F%3Fparty%3D1145%26cid%3D%7BWEBO_CID%7D HTTP/1.1Host: redirect.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/upb/?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSgCMgsI2OPb0cTO_TwQBTgB
Source: global traffic	HTTP traffic detected: GET /core/assets/css/1.196b564b.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/css/28.812d5a7c.chunk.css HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/10/0.gif?puid=6252180897247519748 HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/1.8afeb691.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/27.530d2daf.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=29685749-a200-4e71-bbe5-055ace8a158d&sessionStarted=1716472271.413&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472259218&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2FenAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/25.6f7efac1.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=29685749-a200-4e71-bbe5-055ace8a158d&sessionStarted=1716472271.413&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472259218&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2FenAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ia.js HTTP/1.1Host: s.idio.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/?dspInit=1001213&dspCookie=6252180897247519748 HTTP/1.1Host: s.ad.smaato.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/assets/js/28.9cf73a22.chunk.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=1716472275220&ip=8.46.123.175&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D217163104891002579221 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3A4HQI6oJZtTgiuGR4djSvMxQZPxapYawk
Source: global traffic	HTTP traffic detected: GET /cookie-sync/stv?gdpr=&gdpr_consent=&gdpr=null HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=71ei9rr&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSgCMgsI2OPb0cTO_TwQBTgB
Source: global traffic	HTTP traffic detected: GET /setuid?entity=91&code=6252180897247519748 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572
Source: global traffic	HTTP traffic detected: GET /redirect/standard?url=https%3A%2F%2Fdmp.adform.net%2Fserving%2Fcookie%2Fmatch%2F%3Fparty%3D1145%26cid%3D%7BWEBO_CID%7D&bounce=1&random=3764634676 HTTP/1.1Host: redirect.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AFFICHE_W=CaecarcOISEJ68
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&st=adform&rurl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1084%26cid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=UvkZkbdd1Sa8QF5
Source: global traffic	HTTP traffic detected: GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFwoIYXBwbmV4dXMSCwjo5cGsrs79PBAFEhUKBmdvb2dsZRILCL6Dwqyuzv08EAUSFgoHcnViaWNvbhILCNqfwqyuzv08EAUYBSgDMgsI9sPE2cTO_TwQBUIPIg0IARIJCgV0aWVyMxABWgc5bzU5M3F3YAE.
Source: global traffic	HTTP traffic detected: GET /c/10/10/2/1.gif?puid=6252180897247519748&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#1
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=128&cm=217163104891002579221 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"}]
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.5839695299827767 HTTP/1.1Host: a.idio.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.07091976468957428 HTTP/1.1Host: a.idio.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/smaato/285cc7b641?gdpr=0&gdpr_consent= HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
Source: global traffic	HTTP traffic detected: GET /cookie-sync/stv?gdpr=&gdpr_consent=&gdpr=null&_bee_ppp=1 HTTP/1.1Host: match.prod.bidr.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: checkForPermission=ok
Source: global traffic	HTTP traffic detected: GET /?mapped=6252180897247519748&partner=68 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adform/6252180897247519748?redirect_url=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1219 HTTP/1.1Host: match.contentexchange.meConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visualisation/15507338/embed?auto=1 HTTP/1.1Host: flo.uri.shConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 26 Oct 2023 17:28:16 GMT
Source: global traffic	HTTP traffic detected: GET /xuid?mid=7354&xuid=6252180897247519748&dongle=AD20 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=91&code=6252180897247519748 HTTP/1.1Host: secure.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tbPl1M66+q([OUezrC[OIr1NZFw5Sgu[NXw$?ZOywyvLX26%3If)y3KL9D3I?+is1HX!
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c4e190252a3ef1b7; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-d3a0ENM4oaGFs_ptrDIsW_yrMkpzpkQgJcHbSvHOQQ&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F10%2F124%2F1%2F2.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: ice.360yield.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=08facf54-2b74-422f-96ff-028f64cd56b8; tuuid_lu=1716472265; um=!42,ZSrbmfE5pwWO7w39rQtHP62V1Z.-rAql.U.bNQz0d3cv,1717681863; umeh=!42,0,1778680267,-1
Source: global traffic	HTTP traffic detected: GET /?partner=290&mapped=6252180897247519748 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c4e190252a3ef1b7; done_redirects109=1
Source: global traffic	HTTP traffic detected: GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tbPl1M66+q([OUezrC[OIr1NZFw5Sgu[NXw$?ZOywyvLX26%3If)y3KL9D3I?+is1HX!
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7354&xuid=6252180897247519748&dongle=AD20&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=241663095295977393984; tluid=241663095295977393984
Source: global traffic	HTTP traffic detected: GET /map/c=8545/tp=CKGY/tpid=Zk9J0cMGPKkzOkJE-hOvl2TE/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
Source: global traffic	HTTP traffic detected: GET /put?d=d52&uid=6252180897247519748 HTTP/1.1Host: e1.emxdgt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.5839695299827767 HTTP/1.1Host: a.idio.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.07091976468957428 HTTP/1.1Host: a.idio.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=8587/tp=CLOD/tpid=c4e190252a3ef1b7/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
Source: global traffic	HTTP traffic detected: GET /cq/10/124/1/2.gif?puid=08facf54-2b74-422f-96ff-028f64cd56b8&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#2; 3pi=10#1716472277163#-141909363#6252180897247519748
Source: global traffic	HTTP traffic detected: GET /embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=120&cm=ead1c4978695489dadb5610506d96b01 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"}]
Source: global traffic	HTTP traffic detected: GET /embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSABKAIyCwjY49vRxM79PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSABKAIyCwjY49vRxM79PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSABKAIyCwjY49vRxM79PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-7d834d9e.css HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-12250e24.js HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://play.libsyn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/vendor-c69516f0.js HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://play.libsyn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=104&icm&cver&mapped=ead1c4978695489dadb5610506d96b01&gdpr=0 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=c4e190252a3ef1b7; done_redirects109=1; done_redirects104=1
Source: global traffic	HTTP traffic detected: GET /setuid?entity=82&code=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tb[8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<xTD._PlZ[C[-kX-G!rXw
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&google_push&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://match.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYBSACKAIyCwjY49vRxM79PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /getuid?https://id5-sync.com/c/10/2/0/3.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tb[8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<xTD._*PlZ[C[-kX-G!rXw
Source: global traffic	HTTP traffic detected: GET /xuid?ld=1&mid=7354&xuid=6252180897247519748&dongle=AD20&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluid=241663095295977393984
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=null HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYBSACKAIyCwjY49vRxM79PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1Host: sync.targeting.unrulymedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
Source: global traffic	HTTP traffic detected: GET /assets/index-7d834d9e.css HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-12250e24.js HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://play.libsyn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/vendor-c69516f0.js HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://play.libsyn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap/ping/v2 HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/clickagy/usersync?cookieQ=1&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f#1716472280674
Source: global traffic	HTTP traffic detected: GET /?zdid=1332&zcluid=c4e190252a3ef1b7 HTTP/1.1Host: spl.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-12250e24.js HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://play.libsyn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/vendor-c69516f0.js HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://play.libsyn.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-7d834d9e.css HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#2; 3pi=10#1716472277163#-141909363#6252180897247519748\|124#1716472279908#-487590125
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=5&cm=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"}]
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/widget/init/v3 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /api/episode/id/29751633 HTTP/1.1Host: html5-player.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://play.libsyn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://play.libsyn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap/ping/v2 HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /420246.gif?partner_uid=Zk9J0cMGPKkzOkJE-hOvl2TE HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=zc1d838tqq3OqJPN3yx0QhirN6N+uLH3XSLqV53NrAM=; pxrc=CM2TvbIGEgUI6AcQABIFCOhHEAA=
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/widget/init/v3 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 1334519-19.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: RArtLXUhuzf1WaY8PdrOyg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1Host: 1510748-48.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: scLRP1vyx5y7lArYPzujNQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /api/episode/id/30072173 HTTP/1.1Host: html5-player.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://play.libsyn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://play.libsyn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#2; 3pi=2#1716472282254#809728343#3507891500191884572\|10#1716472277163#-141909363#6252180897247519748\|124#1716472279908#-487590125
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=114&cm=66239d93f40ebe711ac52618dac642b663630aabe96d6c2f51b264b4355b4ad925abae5358c0e7bc HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"}]
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEFiSCCEpK_XY_hBYWTauXJE&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://c1.adform.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=7745f62c-3738-44ad-6482-93a794c9b45d; zsc=m%24%91S5.%B2%A1%1Du6%F1J%19%C3osE%92%D7o.%E5%95%F5%8B%0D%1A%EB%7F%C2%8F%FA%9ES%03%F85%8C%80%3A%5Dx5T%2A%CD%D0H%0F%FE%FB%C7%CDM%91%C6%1A%217r%0B%AE%DEl%9B%9Bt%07%BD%04a~%03%5C~O4%0B%8B%D7%83%22
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"visited_url: https://www.spglobal.com/ensec-ch-ua-mobile: ?0Authorization: Bearer 1edd5669f11674524557User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json_zitok: ac746a0716b51e6738171716472254sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc"
Source: global traffic	HTTP traffic detected: GET /sync/stickyads/446c1f822c2967226f60d9a9212036d5?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/episode/id/29751633 HTTP/1.1Host: html5-player.libsyn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/libsyn-logo--black.png HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/episode/id/30072173 HTTP/1.1Host: html5-player.libsyn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=a09783d4-f2df-4c99-9355-5ed608d27275&requestId=6801e961-cf34-487b-ab9c-71dd474eb94a HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw1/rtp/api/v1_1/visitor?sid=spglobal-1716472255217-b61b91f1&aid=spglobal&1716472282772 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472282776 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-full-1.260.0.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.spglobal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /include/1716472500000/px2iwrcmfxwz.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "7c4c8a7061350329f108e3f92f2b6acc"If-Modified-Since: Wed, 22 May 2024 13:34:06 GMT
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 1334519-19.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: w2RisahLDikC87CpmZgiVg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /api/episode/id/30072173 HTTP/1.1Host: html5-player.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://play.libsyn.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://play.libsyn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1Host: 1510748-48.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: kOZd/2smIHDSYCLL4K8e4A==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /assets/libsyn-logo--black.png HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?google_gid=CAESEFiSCCEpK_XY_hBYWTauXJE&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zc=7745f62c-3738-44ad-6482-93a794c9b45d; zsc=m%24%91S5.%B2%A1%1Du6%F1J%19%C3osE%92%D7o.%E5%95%F5%8B%0D%1A%EB%7F%C2%8F%FA%9ES%03%F85%8C%80%3A%5Dx5T%2A%CD%D0H%0F%FE%FB%C7%CDM%91%C6%1A%217r%0B%AE%DEl%9B%9Bt%07%BD%04a~%03%5C~O4%0B%8B%D7%83%22
Source: global traffic	HTTP traffic detected: GET /assets/libsyn-logo--black.png HTTP/1.1Host: play.libsyn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"}]
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/javascriptvisited-url: https://www.spglobal.com/en_vtok: OC40Ni4xMjMuMTc1_zitok: ac746a0716b51e6738171716472254sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=UvkZkbdd1Sa8QF5; matchadform=5
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=75129f8f-dcd4-4652-af2c-8e054b6e6926&sessionStarted=1716472284.101&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472275617&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472275617 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=4&cm=5e07638e-be7e-42f3-942b-3117d96e7e8e&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"}]
Source: global traffic	HTTP traffic detected: GET /assets/libsyn-logo--black.png HTTP/1.1Host: play.libsyn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/concured-shim.js HTTP/1.1Host: cdn.concured.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "3bf94b2503b59b5845342d97ee58afd7"If-Modified-Since: Wed, 19 Jul 2023 15:25:05 GMT
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYASABKAIyCwj2iIqIxc79PBAFOAFaCXN0aWNreWFkc2AC
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=79908&dpuuid=Zk9J0cMGPKkzOkJE-hOvl2TE&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=65333287272203360842745703209020999402; dpm=65333287272203360842745703209020999402
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073026&val=Zk9J0cMGPKkzOkJE-hOvl2TE HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
Source: global traffic	HTTP traffic detected: GET /script/config/spglobal/19bf0a5e.json HTTP/1.1Host: assets.concured.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=124&cm=65333287272203360842745703209020999402 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"}]
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"}]
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRgFKAMyCwiIs5nHxc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..If-None-Match: "2775054c068b37509e0798448f7fd32c"If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/marketintelligence/en/pages/product-loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /gw1/rtp/api/v1_1/visitor?sid=spglobal-1716472255217-b61b91f1&aid=spglobal&1716472282772 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472282776 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=39&external_user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expiration=1719064287&gdpr=0&gdpr_consent= HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; CMPS=1297; CMPRO=1297
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=79908&dpuuid=Zk9J0cMGPKkzOkJE-hOvl2TE&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=65333287272203360842745703209020999402; dpm=65333287272203360842745703209020999402
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1Host: 1510748-48.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: Hp+OeG3tJGcvnau5Uveyuw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 1334519-19.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: HrSKF1fc79miOONbvrUhmw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M40<E:2jUF']wIg2GTtv9+21!]taa8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<x*TD4YQp$kNOZ<tIvErm0wUyl)(Vv/zx]H?>/ECOc4GsDWDDZGr:Gm`byWsw-sI!+leN3FR@PsXH%!5NOuewL+B
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=clickagy&google_sc&google_cm&google_hm=Wms5SjBjTUdQS2t6T2tKRS1oT3ZsMlRF HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRgFKAMyCwiIs5nHxc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
Source: global traffic	HTTP traffic detected: GET /settings?session_id=394edb16d9da2cff3adda4f9a379805c1d7ddc11 HTTP/1.1Host: syndication.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://platform.twitter.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://platform.twitter.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D209%26userId%3D$UID%26gdpr%3D%26gdpr_consent%3D HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3507891500191884572; XANDR_PANID=25ibNVgOTkSHEsG1FNznYrsK2urJcSEbv4MPPaz-uGdreY2S-9Mdv_M0SMHpUxudc6PhWTxCLrLuhyXImxtoqbx1zHSsKj4Ln9kO50RceJc.; receive-cookie-deprecation=1; anj=dTM7k!M40<E:2jUF']wIg2GTtv9+21!]taa8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<x*TD4YQp$kNOZ<tIvErm0wUyl)(Vv/zx]H?>/ECOc4GsDWDDZGr:Gm`byWsw-sI!+leN3FR@PsXH%!5NOuewL+B
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
Source: global traffic	HTTP traffic detected: GET /track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiag_3ixc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
Source: global traffic	HTTP traffic detected: GET /activityi;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1Host: 11756258.fls.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289418&z=0.25825000654887664 HTTP/1.1Host: a.idio.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=124&cm=65333287272203360842745703209020999402 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
Source: global traffic	HTTP traffic detected: GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiag_3ixc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289421&z=0.8996201111484932 HTTP/1.1Host: a.idio.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /assets/libsyn-logo--black.png HTTP/1.1Host: play.libsyn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ&rst=59195&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/&ptid=85a29931a2f9233e&af=err,xhr,stn,ins&be=6339&fe=51717&dc=10443&perf=%7B%22timing%22:%7B%22of%22:1716472224723,%22n%22:0,%22f%22:5278,%22dn%22:5279,%22dne%22:5279,%22c%22:5279,%22s%22:5279,%22ce%22:5956,%22rq%22:5956,%22rp%22:6340,%22rpe%22:6596,%22di%22:16781,%22ds%22:16781,%22de%22:16782,%22dc%22:57749,%22l%22:57757,%22le%22:58056%7D,%22navigation%22:%7B%7D%7D&fp=16473 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"visited_url: https://www.spglobal.com/marketintelligence/en/pages/product-loginsec-ch-ua-mobile: ?0Authorization: Bearer 1edd5669f11674524557User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json_zitok: ac746a0716b51e6738171716472254sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc"
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "2775054c068b37509e0798448f7fd32c"If-Modified-Since: Mon, 20 May 2024 07:02:14 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiag_3ixc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
Source: global traffic	HTTP traffic detected: GET /formcomplete-v2/forms HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537073026&val=Zk9J0cMGPKkzOkJE-hOvl2TE HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/add/bulk/v2 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/libsyn-logo--black.png HTTP/1.1Host: play.libsyn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
Source: global traffic	HTTP traffic detected: GET /gw1/trw?aid=spglobal&trwv.uid=spglobal-1716472255215-3a36b654&trwv.vc=1&trwsa.sid=spglobal-1716472255217-b61b91f1&trwsb.cpv=2&ctzo=-04:00&uri=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&ma=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&pm=&viewedTypes=&rts=1716472289897 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.24843124122508198&rts=1716472289950 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=clickagy&google_sc&google_cm&google_hm=Wms5SjBjTUdQS2t6T2tKRS1oT3ZsMlRF HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /ct?id=36498&url=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1716472289501&hl=1&op=0&ag=300509663&rand=746718229522998980176122669166101862225065117717611698525827222092820873586156280681&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /activityi;dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1Host: 11756258.fls.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /include/1716472500000/n6k2yubr6fw7.js HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "7c4c8a7061350329f108e3f92f2b6acc"If-Modified-Since: Wed, 22 May 2024 13:34:06 GMT
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=f03aae80-b45c-40b7-8c7a-418b39367c97&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_391=22924-6252180897247519748&KRTB&23263-6252180897247519748&KRTB&23481-6252180897247519748; PugT=1716472274
Source: global traffic	HTTP traffic detected: GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.3340324958241343&rts=1716472290951 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/add/bulk/v2 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/episode/id/30072173 HTTP/1.1Host: html5-player.libsyn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
Source: global traffic	HTTP traffic detected: GET /syncd?dsp_id=93&user_group=1&user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=9326d0b9-3a0d-4d01-bbb3-688e8f328e75; c=1716472267; tuuid_lu=1716472269
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/javascriptvisited-url: https://www.spglobal.com/marketintelligence/en/pages/product-login_vtok: OC40Ni4xMjMuMTc1_zitok: ac746a0716b51e6738171716472254sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/marketintelligence/en/pages/product-loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /settings?session_id=394edb16d9da2cff3adda4f9a379805c1d7ddc11 HTTP/1.1Host: syndication.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://11756258.fls.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAEoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289418&z=0.25825000654887664 HTTP/1.1Host: a.idio.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
Source: global traffic	HTTP traffic detected: GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289421&z=0.8996201111484932 HTTP/1.1Host: a.idio.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bidswitch HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAEoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=103&gdpr=&gdpr_consent=&gdpr=null HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f#1716472280674
Source: global traffic	HTTP traffic detected: GET /unified/v1/master/getSubscriptions HTTP/1.1Host: js.zi-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
Source: global traffic	HTTP traffic detected: GET /core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=3bc6b5a1-dc2d-4c37-9337-988f2e03ceb7&sessionStarted=1716472291.903&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472282236&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472282236 HTTP/1.1Host: js.driftt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap/ping/v2 HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0 HTTP/1.1Host: 1334519-19.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: jn4gj4/jqh35CAnzVZ9Rag==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=ERWzNJ6PTM&ts=1607&cb=1716472291108 HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/widget/init/v3 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=1389&tp=STSC&tpid=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26partner_url%3Dhttps%253A%252F%252Fads.stickyadstv.com%252Fuser-registering%253FdataProviderId%253D721%2526userId%253D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
Source: global traffic	HTTP traffic detected: GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472293515 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /formcomplete-v2/forms HTTP/1.1Host: ws.zoominfo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.spglobal.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAIoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=ERWzNJ6PTM&ts=1607&cb=1716472291108 HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.spglobal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
Source: global traffic	HTTP traffic detected: GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472293515 HTTP/1.1Host: abrtp1.marketo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: BIGipServerabrtp1_https=!flFsNGg1h100Ec2JMaUfYxEamMjeMpqmtwLIPnPBB25oNhZvGA+w/v4mJ/DdREcS8F5AkQL/M/2i1Hc=
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push?partner_id=2499&partner_device_id=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&partner_url=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D721%26userId%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtEBAUBRRoTQAkFQlQQGQkNA19bTVMVEU8%3D&rst=12556&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/pages/product-login&ptid=1ba195abfb1ffda3&af=err,xhr,stn,ins&be=649&fe=11856&dc=6414&perf=%7B%22timing%22:%7B%22of%22:1716472281024,%22n%22:0,%22f%22:3,%22dn%22:23,%22dne%22:23,%22c%22:23,%22s%22:23,%22ce%22:336,%22rq%22:336,%22rp%22:649,%22rpe%22:1212,%22di%22:7055,%22ds%22:7055,%22de%22:7063,%22dc%22:12474,%22l%22:12476,%22le%22:12505%7D,%22navigation%22:%7B%7D%7D&fp=3920&fcp=3920 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /universal_pixel.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "2775054c068b37509e0798448f7fd32c"If-Modified-Since: Mon, 20 May 2024 07:02:14 GMTsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://insight.adsrvr.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiu4teUxs79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1Host: 1510748-48.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: iIEABqs1PD2yPj4oO78EPw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 1334519-19.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: fEKY3s8qWLWVDs2Ub9icyA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /idsync/ex/push/check?partner_id=2499&partner_device_id=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&partner_url=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D721%26userId%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: pixel.tapad.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1716472296323; TapAd_DID=2b2d55cf-a8af-4149-b717-ff43feeea344
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap/ping/v2 HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0 HTTP/1.1Host: 1334519-19.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: bW22qoEcKPwnyKT+dy44RA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/widget/init/v3 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAM7i4pY8BYgABUYA.AM0F1nj-VhoZCsCa01mh8i0iJmEA1nllyPdi0Y9Ipr8&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 1510748-48.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: bt2PwQQ8VQgjJUqc8vkCqQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /widget_bootstrap HTTP/1.1Host: bootstrap.driftapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=stickyadstv&append=1&cb=9240255&redirect=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D690%26userId%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.ipredictive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAM7i4pY8BYgABUYA.AM0F1nj-VhoZCsCa01mh8i0iJmEA1nllyPdi0Y9Ipr8&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 1510748-48.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: lJeMHrf/cqex0RQXFoJUpw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0 HTTP/1.1Host: 1334519-19.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: AYh2pgMktMYY1yEnkvJzqA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/add/bulk/v2 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/event3/bulk HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAM7i4pY8BYgABUYA.AM0F1nj-VhoZCsCa01mh8i0iJmEA1nllyPdi0Y9Ipr8&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1Host: 1510748-48.chat.api.drift.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://js.driftt.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: /z+VAKb0wDTJ0rLmoAJ/Zg==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obs.fishrobotflower.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
Source: global traffic	HTTP traffic detected: GET /monitoring/metrics/add/bulk/v2 HTTP/1.1Host: metrics.api.drift.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Privacy-Policy.html HTTP/1.1Host: info.ipreo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.spcapitaliq.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_422.2.dr	String found in binary or memory: <a aria-label="Facebook" role="link" class="w-8 h-8 flex leading-[0] hover:bg-grey-80 text-white-base" href="https://www.facebook.com/sandpglobal" data-event-name="link \| social-click" data-link-location="SocialShare / Footer Component" data-contact-social-platform="Facebook" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_422.2.dr	String found in binary or memory: <a aria-label="LinkedIn" role="link" class="w-8 h-8 flex leading-[0] hover:bg-grey-80 text-white-base" href="https://www.linkedin.com/company/2934" data-event-name="link \| social-click" data-link-location="SocialShare / Footer Component" data-contact-social-platform="LinkedIn" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_422.2.dr	String found in binary or memory: <a aria-label="Youtube" role="link" class="w-8 h-8 flex leading-[0] hover:bg-grey-80 text-white-base" href="https://www.youtube.com/channel/UCfXvCHeuAzcYIrR8WeHJgSw" data-event-name="link \| social-click" data-link-location="SocialShare / Footer Component" data-contact-social-platform="Youtube" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_422.2.dr	String found in binary or memory: "sameAs": [ "https://www.spglobal.com/zh/spg-wechat-article","https://twitter.com/SPGlobal","https://www.instagram.com/sp_global/","https://www.linkedin.com/company/2934","https://www.youtube.com/channel/UCfXvCHeuAzcYIrR8WeHJgSw","https://www.facebook.com/sandpglobal" ] equals www.facebook.com (Facebook)
Source: chromecache_422.2.dr	String found in binary or memory: "sameAs": [ "https://www.spglobal.com/zh/spg-wechat-article","https://twitter.com/SPGlobal","https://www.instagram.com/sp_global/","https://www.linkedin.com/company/2934","https://www.youtube.com/channel/UCfXvCHeuAzcYIrR8WeHJgSw","https://www.facebook.com/sandpglobal" ] equals www.linkedin.com (Linkedin)
Source: chromecache_422.2.dr	String found in binary or memory: "sameAs": [ "https://www.spglobal.com/zh/spg-wechat-article","https://twitter.com/SPGlobal","https://www.instagram.com/sp_global/","https://www.linkedin.com/company/2934","https://www.youtube.com/channel/UCfXvCHeuAzcYIrR8WeHJgSw","https://www.facebook.com/sandpglobal" ] equals www.twitter.com (Twitter)
Source: chromecache_422.2.dr	String found in binary or memory: "sameAs": [ "https://www.spglobal.com/zh/spg-wechat-article","https://twitter.com/SPGlobal","https://www.instagram.com/sp_global/","https://www.linkedin.com/company/2934","https://www.youtube.com/channel/UCfXvCHeuAzcYIrR8WeHJgSw","https://www.facebook.com/sandpglobal" ] equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: function(h){return h.form===g})};return{store:function(g,h){var m=f(g);m?m.button=h:e.push({form:g,button:h})},get:function(g){var h=f(g);return h?h.button:null}}}function d(e,f,g,h,m){var n=Iz("fsl",g?"nv.mwt":"mwt",0),p;p=g?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!p.length)return!0;var q=Nz(e,"gtm.formSubmit",p),r=e.action;r&&r.tagName&&(r=e.cloneNode(!1).action);q["gtm.elementUrl"]=r;O(121);if("https://www.facebook.com/tr/"===r)return O(122),!0;m&&(q["gtm.formSubmitElement"]=m);if(h&&n){if(!tI(q, equals www.facebook.com (Facebook)
Source: chromecache_413.2.dr, chromecache_544.2.dr, chromecache_421.2.dr	String found in binary or memory: return b}AC.K="internal.enableAutoEventOnTimer";var hc=ma(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_380.2.dr	String found in binary or memory: var PAYLOAD = {"ENV":{"widget":{"alumni_url":"https://www.linkedin.com/cws/alumni","followmember_url":"https://www.linkedin.com/cws/followmember","settings_url":"https://www.linkedin.com/cws/settings","share_url":"https://www.linkedin.com/cws/share","share_counter_url":"https://www.linkedin.com/countserv/count/share","company_url":"https://www.linkedin.com/cws/company/profile","member_profile_url":"https://www.linkedin.com/cws/member/public_profile","full_member_profile_url":"https://www.linkedin.com/cws/member/full_profile","referral_center_url":"https://www.linkedin.com/cws/referral","apply_url":"https://www.linkedin.com/cws/job/apply","mail_url":"https://www.linkedin.com/cws/mail","apply_counter_url":"https://www.linkedin.com/countserv/count/job-apply","company_insider_url":"https://www.linkedin.com/cws/company/insider","sfdc_member_url":"https://www.linkedin.com/cws/sfdc/member","sfdc_company_url":"https://www.linkedin.com/cws/sfdc/company","sfdc_signal_url":"https://www.linkedin.com/cws/sfdc/signal","cap_recruiter_member_url":"https://www.linkedin.com/cws/cap/recruiter_member","jymbii_url":"https://www.linkedin.com/cws/jymbii","today_url":"https://www.linkedin.com/cws/today/today","login_url":"https://www.linkedin.com/cws/login","alumni_facet_url":"https://www.linkedin.com/college/alumni-facet-extension","csap_beacon_url":"https://www.linkedin.com/cws/csap/beacon","recommend_product_url":"https://www.linkedin.com/biz/{COMPANY_ID}/product?prdId={PRODUCT_ID}","recommend_product_counter_url":"https://www.linkedin.com/biz/api/recommendation/count?type=PDCT&id={PRODUCT_ID}&callback={CALLBACK}"}},"extensions":{"Login":"https://platform.linkedin.com/xdoor/extensions/Login.js","Wizard":"https://platform.linkedin.com/xdoor/extensions/Wizard.js","Debug":"https://platform.linkedin.com/xdoor/extensions/Debug.js","FollowCompany":"https://www.linkedin.com/pages-extensions/FollowCompany.js"},"options":{"urls.relay":"https://platform.linkedin.com/xdoor/widgets/relay.html","urls.apiProxy":"https://api.linkedin.com/xdoor/widgets/api/proxy.html","urls.signin":"https://www.linkedin.com/uas/connect/user-signin","urls.logout":"https://www.linkedin.com/uas/connect/logout","urls.authorize":"https://www.linkedin.com/uas/oauth2/authorize","urls.www.linkedin.com":"https://www.linkedin.com","urls.userSession":"https://www.linkedin.com/xdoor/widgets/user/session.html","urls.pkceAuthorization":"https://www.linkedin.com/oauth/web-pkce/authorization","urls.oauthRedirect":"https://platform.linkedin.com/xdoor/widgets/oauth-redirect.html"},"i18n":{"share":{"ar_AE":" equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: info.ipreo.com
Source: global traffic	DNS traffic detected: DNS query: ihsmarkit.com
Source: global traffic	DNS traffic detected: DNS query: www.spglobal.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.stagingciq.com
Source: global traffic	DNS traffic detected: DNS query: urldefense.com
Source: global traffic	DNS traffic detected: DNS query: www.spcapitaliq.com
Source: global traffic	DNS traffic detected: DNS query: app-sjqe.marketo.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: assets.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: cdn.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: cdn.concured.com
Source: global traffic	DNS traffic detected: DNS query: platform.twitter.com
Source: global traffic	DNS traffic detected: DNS query: platform.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: assets.concured.com
Source: global traffic	DNS traffic detected: DNS query: ws.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: raw.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: syndication.twitter.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: ob.fishrobotflower.com
Source: global traffic	DNS traffic detected: DNS query: js.zi-scripts.com
Source: global traffic	DNS traffic detected: DNS query: 11756258.fls.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: vfhbo3jsnvrutdkuee1akd0lj.litix.io
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: abrtp1-cdn.marketo.com
Source: global traffic	DNS traffic detected: DNS query: s2.adform.net
Source: global traffic	DNS traffic detected: DNS query: obs.fishrobotflower.com
Source: global traffic	DNS traffic detected: DNS query: ws-assets.zoominfo.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: rtp-static.marketo.com
Source: global traffic	DNS traffic detected: DNS query: a1.adform.net
Source: global traffic	DNS traffic detected: DNS query: js.driftt.com
Source: global traffic	DNS traffic detected: DNS query: abrtp1.marketo.com
Source: global traffic	DNS traffic detected: DNS query: 565-bdo-100.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: flo.uri.sh
Source: global traffic	DNS traffic detected: DNS query: customer.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: conversation.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: metrics.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: targeting.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: cdn.rollbar.com
Source: global traffic	DNS traffic detected: DNS query: spglobal.scene7.com
Source: global traffic	DNS traffic detected: DNS query: server.seadform.net
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: public.flourish.studio
Source: global traffic	DNS traffic detected: DNS query: ad.360yield.com
Source: global traffic	DNS traffic detected: DNS query: ad.yieldlab.net
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: ih.adscale.de
Source: global traffic	DNS traffic detected: DNS query: rtb-csync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: ads.stickyadstv.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: loadm.exelator.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: uipus.semasio.net
Source: global traffic	DNS traffic detected: DNS query: 491-vng-790.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: eu-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: api.adrtx.net
Source: global traffic	DNS traffic detected: DNS query: cm.adsafety.net
Source: global traffic	DNS traffic detected: DNS query: beacon.krxd.net
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: load77.exelator.com
Source: global traffic	DNS traffic detected: DNS query: s3-eu-west-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: 1f2e7.v.fwmrm.net
Source: global traffic	DNS traffic detected: DNS query: tags.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: pdw-adf.userreport.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: js.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: a.audrte.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: dsp.adfarm1.adition.com
Source: global traffic	DNS traffic detected: DNS query: aorta.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: hemsync.clickagy.com
Source: global traffic	DNS traffic detected: DNS query: js.idio.co
Source: global traffic	DNS traffic detected: DNS query: insight.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: sync.targeting.unrulymedia.com
Source: global traffic	DNS traffic detected: DNS query: dmp.adform.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: redirect.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: sync.teads.tv
Source: global traffic	DNS traffic detected: DNS query: s.ad.smaato.net
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: s.idio.co

Source: unknown

HTTP traffic detected: POST /v2/visitors HTTP/1.1Host: raw.vidyard.comConnection: keep-aliveContent-Length: 71sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://play.vidyard.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/xml; charset=UTF-8Content-Length: 127Access-Control-Allow-Origin: *Access-Control-Expose-Headers: Cache-Control, Content-Length, Content-Type, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-TraceX-GUploader-UploadID: ABPtcPpVPQpSX2TSc2lI0VuLPCl7SIzllYxq8kLUXPvPGw0Wq_wjR3m4vs_lo8B0vJ3DHyRuEj0Date: Thu, 23 May 2024 13:50:45 GMTExpires: Thu, 23 May 2024 13:50:45 GMTCache-Control: private, max-age=0Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 13:50:48 GMTContent-Type: text/html;charset=utf-8Content-Length: 26Connection: closeX-Cascade: pass
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Thu, 23 May 2024 13:50:48 GMTContent-Length: 0Connection: closeX-Cache: FunctionGeneratedResponse from cloudfrontVia: 1.1 916d412afdd39cf0d9689036f0f43bb4.cloudfront.net (CloudFront)X-Amz-Cf-Pop: AMS58-P6X-Amz-Cf-Id: RZFjgyxVfyVekGhXiDdYPHVqIFTeI0YTebf-Tilix_aNUEv92AnPyw==x-cdn: cloudfrontVary: Origin
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 13:50:50 GMTContent-Type: text/html;charset=utf-8Content-Length: 30Connection: closeX-Cascade: pass
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 13:50:58 GMTContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closex-powered-by: Expressx-content-type-options: nosniffaccess-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitokaccess-control-allow-credentials: trueaccess-control-allow-origin: *x-robots-tag: noindex, nofollowetag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"via: 1.1 googleCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 888584a17eb5c333-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 13:51:14 GMTContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closex-powered-by: Expressx-content-type-options: nosniffaccess-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitokaccess-control-allow-credentials: trueaccess-control-allow-origin: *x-robots-tag: noindex, nofollowetag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"via: 1.1 googleCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8885850119af435b-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 64b49639-6189-4d6f-8d44-3c9d847fb6d8vary: Origindate: Thu, 23 May 2024 13:51:14 GMTx-konductor: N/Ax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 6801e961-cf34-487b-ab9c-71dd474eb94avary: Origindate: Thu, 23 May 2024 13:51:23 GMTx-konductor: N/Ax-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 23 May 2024 13:51:25 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 23 May 2024 13:51:40 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 88858548daee8c57-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: application/xml; charset=UTF-8Content-Length: 127Access-Control-Allow-Origin: *Access-Control-Expose-Headers: Cache-Control, Content-Length, Content-Type, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-TraceX-GUploader-UploadID: ABPtcPqcgAd79KGJ_GwKdzZk01ZK9eZg2J7Df18-aDAyvUYnfXrD-XgM1C1n85EkwuVGc3jybYADate: Thu, 23 May 2024 13:51:28 GMTExpires: Thu, 23 May 2024 13:51:28 GMTCache-Control: private, max-age=0Server: UploadServerAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 13:51:31 GMTContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closex-powered-by: Expressx-content-type-options: nosniffaccess-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitokaccess-control-allow-credentials: trueaccess-control-allow-origin: *x-robots-tag: noindex, nofollowetag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"via: 1.1 googleCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 8885856f59644205-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 13:51:35 GMTContent-Type: application/json; charset=utf-8Content-Length: 2Connection: closex-powered-by: Expressx-content-type-options: nosniffaccess-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitokaccess-control-allow-credentials: trueaccess-control-allow-origin: *x-robots-tag: noindex, nofollowetag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8"via: 1.1 googleCF-Cache-Status: DYNAMICServer: cloudflareCF-RAY: 888585873ede7ca5-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_455.2.dr	String found in binary or memory: Http://bugs.jqueryui.com/ticket/9446
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/checkboxradio/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/controlgroup/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/data-selector/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/disableSelection/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/focusable-selector/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/form-reset-mixin/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.ui.keyCode/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/labels/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/scrollParent/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/tabbable-selector/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://api.jqueryui.com/uniqueId/
Source: chromecache_455.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_319.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12577
Source: chromecache_455.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_319.2.dr	String found in binary or memory: http://ejohn.org/blog/dom-documentfragments/
Source: chromecache_319.2.dr	String found in binary or memory: http://es5.github.com/#x15.2.3.14
Source: chromecache_319.2.dr	String found in binary or memory: http://es5.github.com/#x15.3.4.5
Source: chromecache_299.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_319.2.dr, chromecache_380.2.dr, chromecache_515.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_319.2.dr	String found in binary or memory: http://foo.com
Source: chromecache_354.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_422.2.dr	String found in binary or memory: http://investor.spglobal.com/
Source: chromecache_299.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_455.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/accordion/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/autocomplete/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/button/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/checkboxradio/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/controlgroup/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/datepicker/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/dialog/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/draggable/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/droppable/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/effect/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/menu/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/position/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/progressbar/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/resizable/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/selectable/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/selectmenu/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/slider/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/sortable/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/spinner/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/tabs/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/tooltip/
Source: chromecache_455.2.dr	String found in binary or memory: http://jqueryui.com/widget/
Source: chromecache_455.2.dr	String found in binary or memory: http://jsfiddle.net/JZSMt/3/
Source: chromecache_355.2.dr, chromecache_274.2.dr	String found in binary or memory: http://kjur.github.io/jsrsasign/license/
Source: chromecache_319.2.dr	String found in binary or memory: http://mathiasbynens.be/notes/javascript-encoding
Source: chromecache_319.2.dr	String found in binary or memory: http://modernizr.com/download/#-input-inputtypes-localstorage-postmessage-addtest-prefixed-teststyle
Source: chromecache_319.2.dr	String found in binary or memory: http://mths.be/punycode
Source: chromecache_319.2.dr	String found in binary or memory: http://pajhome.org.uk/crypt/md5
Source: chromecache_422.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_319.2.dr	String found in binary or memory: http://stackoverflow.com/a/22747272/680742
Source: chromecache_319.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc3492#section-3.4
Source: chromecache_523.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_319.2.dr	String found in binary or memory: http://whatever.mycustomercname.com/foobar.html?blah=whatever
Source: chromecache_319.2.dr	String found in binary or memory: http://whattheheadsaid.com/2010/10/a-safer-object-keys-compatibility-implementation
Source: chromecache_354.2.dr, chromecache_348.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_348.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE2.0
Source: chromecache_455.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_319.2.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/states-of-the-type-attribute.html#valid-
Source: chromecache_319.2.dr	String found in binary or memory: http://yepnopejs.com/
Source: chromecache_464.2.dr	String found in binary or memory: https://a.idio.co/
Source: chromecache_421.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_544.2.dr, chromecache_421.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_421.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_413.2.dr, chromecache_544.2.dr, chromecache_421.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_407.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_311.2.dr	String found in binary or memory: https://api.concured.com
Source: chromecache_311.2.dr	String found in binary or memory: https://api.concured.com/v1/beacon/
Source: chromecache_380.2.dr	String found in binary or memory: https://api.linkedin.com/xdoor/widgets/api/proxy.html
Source: chromecache_337.2.dr	String found in binary or memory: https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC0cfaff656108480bbe3e18182c3a3aa
Source: chromecache_403.2.dr	String found in binary or memory: https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC6e11640e82cc49dea832f08f9e560c0
Source: chromecache_430.2.dr	String found in binary or memory: https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCc5d37d8f5a604c6da86dcf9d09f9360
Source: chromecache_342.2.dr	String found in binary or memory: https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCd4419d8913014a3eb2891ff8dbb4507
Source: chromecache_302.2.dr	String found in binary or memory: https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/launch-d1420b44e12f.js
Source: chromecache_311.2.dr	String found in binary or memory: https://assets.concured.com/script/config/$
Source: chromecache_311.2.dr	String found in binary or memory: https://assets.concured.com/style/$
Source: chromecache_372.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=335442
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13393
Source: chromecache_455.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=107380
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_348.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=210934
Source: chromecache_319.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_455.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_455.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_319.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_319.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=695438.
Source: chromecache_422.2.dr	String found in binary or memory: https://careers.spglobal.com/
Source: chromecache_422.2.dr	String found in binary or memory: https://careers.spglobal.com/jobs
Source: chromecache_421.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_422.2.dr	String found in binary or memory: https://ceraweek.com/
Source: chromecache_422.2.dr	String found in binary or memory: https://ceraweek.com/index.html
Source: chromecache_277.2.dr, chromecache_411.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZjAzYWFlODA
Source: chromecache_455.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=313082
Source: chromecache_455.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	String found in binary or memory: https://conversation.api.drift.com
Source: chromecache_366.2.dr, chromecache_475.2.dr	String found in binary or memory: https://cookiepedia.co.uk/giving-consent-to-cookies
Source: chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	String found in binary or memory: https://customer.api.drift.com
Source: chromecache_319.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_348.2.dr	String found in binary or memory: https://developer.mozilla.org/enUS/docs/Web/API/Element/closest#Polyfill
Source: chromecache_348.2.dr	String found in binary or memory: https://developer.mozilla.org/enUS/docs/Web/API/Element/matches#Polyfill
Source: chromecache_499.2.dr, chromecache_486.2.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_319.2.dr, chromecache_455.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_319.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_319.2.dr	String found in binary or memory: https://drafts.csswg.org/selectors/#relational
Source: chromecache_411.2.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=f03aae80-b45c-40b7-8c7a-418b39367
Source: chromecache_511.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_372.2.dr	String found in binary or memory: https://flo.uri.sh/template/20762/v21/static
Source: chromecache_372.2.dr	String found in binary or memory: https://flo.uri.sh/template/20762/v21/static/bundle.css
Source: chromecache_372.2.dr	String found in binary or memory: https://flo.uri.sh/template/20762/v21/static/choices/styles/css/choices.min.css
Source: chromecache_422.2.dr	String found in binary or memory: https://flo.uri.sh/visualisation/15507338/embed?auto=1
Source: chromecache_520.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_520.2.dr	String found in binary or memory: https://fontawesome.com/license
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_519.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/wiki/Undetectables
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/SlexAxton/yepnope.js/
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/SlexAxton/yepnope.js/issues/95
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/joyent/node/issues/1707
Source: chromecache_455.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_455.2.dr	String found in binary or memory: https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe
Source: chromecache_455.2.dr	String found in binary or memory: https://github.com/jquery/jquery/issues/4382
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/157)
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/issues/299)
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_372.2.dr	String found in binary or memory: https://github.com/jshjohnson/Choices#readme
Source: chromecache_413.2.dr	String found in binary or memory: https://github.com/krux/postscribe/blob/master/LICENSE.
Source: chromecache_319.2.dr	String found in binary or memory: https://github.com/whatwg/html/issues/2369
Source: chromecache_544.2.dr	String found in binary or memory: https://google.com
Source: chromecache_544.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#nonce-attributes
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_319.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_277.2.dr, chromecache_411.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid
Source: chromecache_319.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_273.2.dr	String found in binary or memory: https://insight.adsrvr.org/track/up
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/contact-investor-relations/contact-ir/default.aspx
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/corporate-governance/overview/
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/executive-committee/
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/investor-fact-book/
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/investor-presentations/default.aspx
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/investor-relations-overview/
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/merger-information/spglobal-ihsmarkit/
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/news-releases/default.aspx
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/quarterly-earnings/
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/sec-filings-reports/overview/
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/shareholder-services/overview/default.aspx
Source: chromecache_422.2.dr	String found in binary or memory: https://investor.spglobal.com/stock-dividends/stock-quote/
Source: chromecache_319.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_319.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_278.2.dr, chromecache_277.2.dr, chromecache_411.2.dr, chromecache_545.2.dr	String found in binary or memory: https://js.adsrvr.org/universal_pixel.1.1.0.js
Source: chromecache_273.2.dr	String found in binary or memory: https://js.adsrvr.org/up_loader.1.1.0.js
Source: chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	String found in binary or memory: https://js.driftt.com
Source: chromecache_403.2.dr	String found in binary or memory: https://js.driftt.com/include/
Source: chromecache_319.2.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js?onload=captchaCallback
Source: chromecache_319.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_523.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_523.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	String found in binary or memory: https://metrics.api.drift.com
Source: chromecache_355.2.dr, chromecache_274.2.dr	String found in binary or memory: https://npmcdn.com/jsencrypt
Source: chromecache_523.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_421.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_413.2.dr, chromecache_544.2.dr, chromecache_421.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_277.2.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=f03aae80-b45c-40b7-8c7a-418b39367c97&gd
Source: chromecache_380.2.dr	String found in binary or memory: https://platform.linkedin.com/xdoor/extensions/Debug.js
Source: chromecache_380.2.dr	String found in binary or memory: https://platform.linkedin.com/xdoor/extensions/Login.js
Source: chromecache_380.2.dr	String found in binary or memory: https://platform.linkedin.com/xdoor/extensions/Wizard.js
Source: chromecache_380.2.dr	String found in binary or memory: https://platform.linkedin.com/xdoor/widgets/oauth-redirect.html
Source: chromecache_380.2.dr	String found in binary or memory: https://platform.linkedin.com/xdoor/widgets/relay.html
Source: chromecache_311.2.dr	String found in binary or memory: https://plausible.io/js/script.js
Source: chromecache_311.2.dr	String found in binary or memory: https://plausible.io/js/script.local.js
Source: chromecache_422.2.dr	String found in binary or memory: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/cu
Source: chromecache_422.2.dr	String found in binary or memory: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/cus
Source: chromecache_319.2.dr	String found in binary or memory: https://pod-name.marketo.com/lp/mycustomername/fizbuzz.html
Source: chromecache_319.2.dr	String found in binary or memory: https://pod-name.markteo.com/lp/mycustomername/foobar.html?blah=whatever
Source: chromecache_319.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_319.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_422.2.dr	String found in binary or memory: https://press.spglobal.com/
Source: chromecache_422.2.dr	String found in binary or memory: https://press.spglobal.com/2024-05-01-S-P-Global-Announces-Successful-Completion-of-Visible-Alpha-Ac
Source: chromecache_422.2.dr	String found in binary or memory: https://privacyportal.onetrust.com/webform/5cb57702-8ef7-437e-a62b-408fe78cd310/93391c3d-d6c8-45b1-a
Source: chromecache_319.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_319.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_319.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_319.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_319.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_319.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_319.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_372.2.dr	String found in binary or memory: https://public.flourish.studio/resources/v3/embedded.js
Source: chromecache_434.2.dr, chromecache_515.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_422.2.dr	String found in binary or memory: https://secure.ethicspoint.com/domain/media/en/gui/39172/index.html
Source: chromecache_278.2.dr	String found in binary or memory: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr
Source: chromecache_422.2.dr	String found in binary or memory: https://spgi-mkto.spglobal.com/seek-prosper.html?utm_campaign=seekprosper&utm_medium=banner&utm_sour
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/04_16_ArtificialIntelligenceVertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/1920x1020-geopoliticalrisk?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/AutoCreditInsight-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/CERAWeek-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/CommodityInsights-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0416_economyvertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0416_energycommoditiesvertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0424_energy_commodities?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0424_global_trade?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0424_sustainability_banner?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0507_SmartCities_banner?$rectangle_large_2816X
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0507_SmartCities_banner?$rectangle_medium_1408
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0507_SmartCities_banner?$rectangle_small_688X3
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0514_VisibleAlpha?$rectangle_large_2816X1638$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0514_VisibleAlpha?$rectangle_medium_1408X792$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0514_VisibleAlpha?$rectangle_small_688X382$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0515_AARPbanner?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0520_DailyUpdateMay20?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0521_May21Header?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0522_DailyUpdateMay23?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Corp_0524_DailyUpdateMay22?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/FeaturedSPGlobalEvents-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/FindARating-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/MarketIntelligence-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Mobility-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/OverviewRatings-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/PlattsConnect-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Ratings360-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/SPCapitalIQPro-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/SPDowJonesIndices-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/SPGlobalESGScores-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/SPICETheIndexSourceForESGData-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/Sustainable1-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/WebinarReplays-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/ai_1570x890?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/ai_footer_3840x1140?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/aiinsights_1570x890?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0410_theessentialpodcastsquare?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0416_economyvertical_horizontal?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0416_geopoliticalriskvertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0416_sustainability_vertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0417_capitalmarketsbanner?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0417_capitalmarketsbannervertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0417_technologybanner?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0417_technologybannervertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0418_Seek-N-Prosper-Annual-Report?$rectangle_l
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0418_Seek-N-Prosper-Annual-Report?$rectangle_m
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0418_Seek-N-Prosper-Annual-Report?$rectangle_s
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0418_globaltradevertical?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/corp_0502_geopoliticalrisk:horizontal_16-9?$rectang
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/deepdive_30_still-96-?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/genai_1570x890-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/hydrogennewambitions_1570x890?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/languagemodeling_1570x890-1?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/lfvol32024_722x954?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/returnofenergysecurity_header_1570x890?$responsive$
Source: chromecache_422.2.dr	String found in binary or memory: https://spglobal.scene7.com/is/image/spglobalcom/supplychain2024_1570x890?$responsive$
Source: chromecache_413.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_407.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_407.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_273.2.dr	String found in binary or memory: https://tags.clickagy.com/data.js?rnd=62fe5c0e6ad95
Source: chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	String found in binary or memory: https://targeting.api.drift.com
Source: chromecache_413.2.dr, chromecache_544.2.dr, chromecache_421.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_422.2.dr	String found in binary or memory: https://twitter.com/SPGlobal
Source: chromecache_422.2.dr	String found in binary or memory: https://web.archive.org/web/20231221062807/http://www.ratingsdirect.com/"
Source: chromecache_422.2.dr	String found in binary or memory: https://web.archive.org/web/20231221062807/https://www.globalcreditportal.com/"
Source: chromecache_422.2.dr	String found in binary or memory: https://web.archive.org/web/20231221062807/https://www.standardandpoors.com/"
Source: chromecache_422.2.dr	String found in binary or memory: https://web.archive.org/web/20231221062807/https://www.standardandpoors.com/usratingsfees"
Source: chromecache_273.2.dr	String found in binary or memory: https://ws.zoominfo.com
Source: chromecache_417.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_413.2.dr, chromecache_544.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_407.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_407.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_407.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_421.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_407.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_319.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?onload=captchaCallback
Source: chromecache_544.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_421.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_413.2.dr, chromecache_544.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_544.2.dr, chromecache_421.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_407.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_311.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=$
Source: chromecache_422.2.dr	String found in binary or memory: https://www.instagram.com/sp_global/
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/biz/
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/biz/api/recommendation/count?type=PDCT&id=
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/college/alumni-facet-extension
Source: chromecache_422.2.dr	String found in binary or memory: https://www.linkedin.com/company/2934
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/countserv/count/job-apply
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/countserv/count/share
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/alumni
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/cap/recruiter_member
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/company/insider
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/company/profile
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/csap/beacon
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/followmember
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/job/apply
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/jymbii
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/login
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/mail
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/member/full_profile
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/member/public_profile
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/referral
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/settings
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/sfdc/company
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/sfdc/member
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/sfdc/signal
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/share
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/cws/today/today
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/oauth/web-pkce/authorization
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/pages-extensions/FollowCompany.js
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/uas/connect/logout
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/uas/connect/user-signin
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/uas/oauth2/authorize
Source: chromecache_380.2.dr	String found in binary or memory: https://www.linkedin.com/xdoor/widgets/user/session.html
Source: chromecache_422.2.dr	String found in binary or memory: https://www.marketplace.spglobal.com
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/commodityinsights
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/commodityinsights/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/commodityinsights/en/events
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/commodityinsights/en/support/delivery-platforms/platts-connect
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en/
Source: chromecache_366.2.dr, chromecache_422.2.dr, chromecache_475.2.dr	String found in binary or memory: https://www.spglobal.com/en/cookie-notice
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en/enterprise/Legal/privacy.html
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en/enterprise/about/contact-us.html
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en/privacy/privacy-policy-english
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en/search
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en/search?searchquery=
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/en/terms-of-use
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/esg
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/esg/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/esg/events/index
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/esg/solutions/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/esg/solutions/data-intelligence-esg-scores
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/esg/solutions/index
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/marketintelligence
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/marketintelligence/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/marketintelligence/en/events/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/marketintelligence/en/news-insights/latest-news-headlines/genai-investors-t
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/marketintelligence/en/solutions/sp-capital-iq-pro
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/mobility
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/mobility/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/mobility/en/events/index.html?i=Automotive
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/mobility/en/products/autocreditinsight.html
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/ratings
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/ratings/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/ratings/en/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/ratings/en/events/index
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/ratings/en/products-benefits/products/ratings360
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/spdji
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/spdji.html
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/spdji/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/spdji/en
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/spdji/en/events/in-person/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/spdji/en/util/redesign/get-spdji-home-carousel-json.dot
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spglobal.com/zh/spg-wechat-article
Source: chromecache_422.2.dr	String found in binary or memory: https://www.spice-indices.com/
Source: chromecache_422.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCfXvCHeuAzcYIrR8WeHJgSw
Source: chromecache_278.2.dr	String found in binary or memory: https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&ex
Source: chromecache_523.2.dr	String found in binary or memory: https://zenorocha.github.io/clipboard.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50556 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 65451 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50314
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50556
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50560
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50496
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 65453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 50539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50448 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50564 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 65445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.win@39/485@403/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://info.ipreo.com/Privacy-Policy.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7592 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7592 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://info.ipreo.com/Privacy-Policy.html	0%	Virustotal		Browse
http://info.ipreo.com/Privacy-Policy.html	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://jqueryui.com/menu/	0%	URL Reputation	safe
http://api.jqueryui.com/data-selector/	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://jqueryui.com/position/	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	0%	URL Reputation	safe
http://api.jqueryui.com/focusable-selector/	0%	URL Reputation	safe
https://metrics.api.drift.com	0%	URL Reputation	safe
https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js	0%	URL Reputation	safe
https://js.adsrvr.org/up_loader.1.1.0.js	0%	URL Reputation	safe
https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://api.jqueryui.com/size-effect/	0%	URL Reputation	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	0%	URL Reputation	safe
http://api.jqueryui.com/uniqueId/	0%	URL Reputation	safe
http://api.jqueryui.com/checkboxradio/	0%	URL Reputation	safe
https://html.spec.whatwg.org/#nonce-attributes	0%	URL Reputation	safe
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	0%	URL Reputation	safe
http://jqueryui.com/slider/	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://code.google.com/p/chromium/issues/detail?id=313082	0%	URL Reputation	safe
http://underscorejs.org/LICENSE	0%	URL Reputation	safe
https://js.driftt.com/include/	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://customer.api.drift.com	0%	URL Reputation	safe
http://www.robertpenner.com/easing)	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://spglobal.scene7.com/is/image/spglobalcom/Corp_0424_global_trade?$responsive$	0%	Avira URL Cloud	safe
https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&ex	0%	Avira URL Cloud	safe
https://www.linkedin.com	0%	Avira URL Cloud	safe
http://api.jqueryui.com/drop-effect/	0%	URL Reputation	safe
https://1334519-19.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0	0%	Avira URL Cloud	safe
https://play.libsyn.com/assets/libsyn-logo--black.png	0%	Avira URL Cloud	safe
https://conversation.api.drift.com	0%	URL Reputation	safe
https://ws.zoominfo.com/formcomplete-v2/forms	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://platform.twitter.com/widgets.js	0%	URL Reputation	safe
http://jqueryui.com/checkboxradio/	0%	URL Reputation	safe
http://jqueryui.com/widget/	0%	URL Reputation	safe
https://ps.eyeota.net/match/bounce/?uid=6252180897247519748&bid=9gdtmu1	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery-color	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.linkedin.com/biz/api/recommendation/count?type=PDCT&id=	0%	Avira URL Cloud	safe
https://investor.spglobal.com/corporate-governance/overview/	0%	Avira URL Cloud	safe
https://www.linkedin.com	0%	Virustotal		Browse
https://spglobal.scene7.com/is/image/spglobalcom/ai_footer_3840x1140?$responsive$	0%	Avira URL Cloud	safe
https://pdw-adf.userreport.com/cs	0%	Avira URL Cloud	safe
https://js.driftt.com/core/assets/js/1.8afeb691.chunk.js	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery-color	0%	Virustotal		Browse
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&gjid=236941860&_gid=628374559.1716472251&_u=YHBAAEAAAAAAACAEK~&z=1376759657	0%	Avira URL Cloud	safe
https://idsync.rlcdn.com/1000.gif?memo=CJ6oGBIeChoIARCUdRoTNjI1MjE4MDg5NzI0NzUxOTc0OBAAGg0IzJO9sgYSBQjoBxAAQgBKAA	0%	Avira URL Cloud	safe
https://pdw-adf.userreport.com/cs	0%	Virustotal		Browse
https://www.linkedin.com/biz/api/recommendation/count?type=PDCT&id=	0%	Virustotal		Browse
https://www.spglobal.com/commodityinsights/	0%	Avira URL Cloud	safe
https://www.spglobal.com/commodityinsights/	0%	Virustotal		Browse
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Avira URL Cloud	safe
https://www.spglobal.com/mobility/en/products/autocreditinsight.html	0%	Avira URL Cloud	safe
https://api.adrtx.net/thirdparty/click?p=adfo	0%	Avira URL Cloud	safe
https://id5-sync.com/s/10/0.gif?puid=6252180897247519748	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
http://whattheheadsaid.com/2010/10/a-safer-object-keys-compatibility-implementation	0%	Avira URL Cloud	safe
https://www.spglobal.com/en/search	0%	Avira URL Cloud	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Virustotal		Browse
https://id5-sync.com/c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://www.spglobal.com/ratings	0%	Avira URL Cloud	safe
https://load77.exelator.com/pixel.gif	0%	Avira URL Cloud	safe
http://whattheheadsaid.com/2010/10/a-safer-object-keys-compatibility-implementation	0%	Virustotal		Browse
https://bam.nr-data.net/1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtEBAUBRRoTQAkFQlQQGQkNA19bTVMVEU8%3D&rst=12556&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/pages/product-login&ptid=1ba195abfb1ffda3&af=err,xhr,stn,ins&be=649&fe=11856&dc=6414&perf=%7B%22timing%22:%7B%22of%22:1716472281024,%22n%22:0,%22f%22:3,%22dn%22:23,%22dne%22:23,%22c%22:23,%22s%22:23,%22ce%22:336,%22rq%22:336,%22rp%22:649,%22rpe%22:1212,%22di%22:7055,%22ds%22:7055,%22de%22:7063,%22dc%22:12474,%22l%22:12476,%22le%22:12505%7D,%22navigation%22:%7B%7D%7D&fp=3920&fcp=3920	0%	Avira URL Cloud	safe
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&_u=YHDAAEABAAAAACAGK~&z=1332001211	0%	Avira URL Cloud	safe
https://www.spglobal.com/en/search	0%	Virustotal		Browse
https://www.spglobal.com/ratings	0%	Virustotal		Browse
https://spglobal.scene7.com/is/image/spglobalcom/Corp_0521_May21Header?$responsive$	0%	Avira URL Cloud	safe
https://www.linkedin.com/uas/oauth2/authorize	0%	Avira URL Cloud	safe
https://spglobal.scene7.com/is/image/spglobalcom/OverviewRatings-1?$responsive$	0%	Avira URL Cloud	safe
https://load77.exelator.com/pixel.gif	0%	Virustotal		Browse
https://flo.uri.sh/template/20762/v21/static/choices/styles/css/choices.min.css	0%	Avira URL Cloud	safe
https://play.libsyn.com/assets/vendor-c69516f0.js	0%	Avira URL Cloud	safe
https://api.adrtx.net/thirdparty/click?p=adfo	0%	Virustotal		Browse
https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26partner_url%3Dhttps%253A%252F%252Fads.stickyadstv.com%252Fuser-registering%253FdataProviderId%253D721%2526userId%253D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%2526gdpr%253D0%2526gdpr_consent%253D	0%	Avira URL Cloud	safe
https://www.spglobal.com/esg/solutions/data-intelligence-esg-scores	0%	Avira URL Cloud	safe
https://www.linkedin.com/uas/oauth2/authorize	0%	Virustotal		Browse
https://spglobal.scene7.com/is/image/spglobalcom/languagemodeling_1570x890-1?$responsive$	0%	Avira URL Cloud	safe
http://tools.ietf.org/html/rfc3492#section-3.4	0%	Avira URL Cloud	safe
https://www.cloudflare.com/5xx-error-landing	0%	Avira URL Cloud	safe
https://www.linkedin.com/biz/	0%	Avira URL Cloud	safe
https://pixel.onaudience.com/?mapped=6252180897247519748&partner=68	0%	Avira URL Cloud	safe
https://spglobal.scene7.com/is/image/spglobalcom/04_16_ArtificialIntelligenceVertical?$responsive$	0%	Avira URL Cloud	safe
https://investor.spglobal.com/shareholder-services/overview/default.aspx	0%	Avira URL Cloud	safe
https://vfhbo3jsnvrutdkuee1akd0lj.litix.io/	0%	Avira URL Cloud	safe
https://spglobal.scene7.com/is/image/spglobalcom/Mobility-1?$responsive$	0%	Avira URL Cloud	safe
https://1510748-48.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0	0%	Avira URL Cloud	safe
https://www.spglobal.com/en/terms-of-use	0%	Avira URL Cloud	safe
https://github.com/jshjohnson/Choices#readme	0%	Avira URL Cloud	safe
https://www.spglobal.com/spdji/	0%	Avira URL Cloud	safe
https://aorta.clickagy.com/pixel.gif?ch=4&cm=5e07638e-be7e-42f3-942b-3117d96e7e8e&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D	0%	Avira URL Cloud	safe
https://abrtp1.marketo.com/gw1/trw?aid=spglobal&trwv.uid=spglobal-1716472255215-3a36b654&trwv.vc=1&trwsa.sid=spglobal-1716472255217-b61b91f1&trwsb.cpv=2&ctzo=-04:00&uri=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&ma=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&pm=&viewedTypes=&rts=1716472289897	0%	Avira URL Cloud	safe
https://1334519-19.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0	0%	Avira URL Cloud	safe
https://investor.spglobal.com/contact-investor-relations/contact-ir/default.aspx	0%	Avira URL Cloud	safe
https://www.linkedin.com/cws/share	0%	Avira URL Cloud	safe
https://www.spglobal.com/en/cookie-notice	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ihsmarkit.com	20.190.249.200	true	false	unknown
abrtp1.marketo.com	192.28.144.84	true	false	unknown
eu-u.openx.net	34.98.64.218	true	false	unknown
id5-sync.com	162.19.138.83	true	false	unknown
ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	34.195.15.24	true	false	unknown
cdn-cf.vidyard.com	18.239.18.49	true	false	unknown
spl.zeotap.com	104.22.50.98	true	false	unknown
eu-eb2.3lift.com	76.223.111.18	true	false	unknown
platform.twitter.map.fastly.net	146.75.120.157	true	false	unknown
stats.g.doubleclick.net	173.194.76.157	true	false	unknown
cdn.w55c.net	52.59.78.67	true	false	unknown
ih.adscale.de	18.198.150.232	true	false	unknown
mwzeom.zeotap.com	172.67.40.173	true	false	unknown
sync.crwdcntrl.net	52.17.40.72	true	false	unknown
cm.g.doubleclick.net	142.250.185.130	true	false	unknown
sync.1rx.io	46.228.174.117	true	false	unknown
ds-pr-bh.ybp.gysm.yahoodns.net	52.49.44.23	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
ws-assets.zoominfo.com	104.16.117.43	true	false	unknown
sjqe.mkto-test.com	104.17.98.130	true	false	unknown
a.idio.co	54.208.138.231	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	unknown
match.contentexchange.me	46.19.11.36	true	false	unknown
play.libsyn.com	204.16.247.177	true	false	unknown
match.prod.bidr.io	52.48.246.250	true	false	unknown
us-u.openx.net	35.244.159.8	true	false	unknown
uip.semasio.net	77.243.51.121	true	false	unknown
d3i9xyriglxn0r.cloudfront.net	18.65.39.64	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	3.65.80.227	true	false	unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false	unknown
pixel.onaudience.com	15.235.15.221	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
euw-ice.360yield.com	52.208.202.34	true	false	unknown
dsp.adfarm1.adition.com	85.114.159.118	true	false	unknown
redirect.frontend.weborama.fr	35.190.24.218	true	false	unknown
d1ftdm4q83us3q.cloudfront.net	108.156.60.33	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	34.252.112.229	true	false	unknown
a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com	54.196.227.84	true	false	unknown
cs767.wpc.epsiloncdn.net	152.199.22.144	true	false	unknown
td.doubleclick.net	142.250.185.162	true	false	unknown
raw.vidyard.com	52.20.146.137	true	false	unknown
istrp.adform.net	37.157.2.250	true	false	unknown
cdn.cookielaw.org	104.19.177.52	true	false	unknown
s.idio.co	3.162.38.39	true	false	unknown
js.zi-scripts.com	104.18.37.212	true	false	unknown
565-bdo-100.mktoresp.com	192.28.144.124	true	false	unknown
dart.l.doubleclick.net	142.250.185.198	true	false	unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	unknown
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	3.94.218.138	true	false	unknown
hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com	54.159.240.171	true	false	unknown
e1.emxdgt.com	52.29.164.212	true	false	unknown
user-data-eu.bidswitch.net	35.214.149.91	true	false	unknown
adservice.google.com	216.58.206.66	true	false	unknown
cm.adsafety.net	217.79.178.221	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.172.103.101	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
dl7g9llrghqi1.cloudfront.net	18.245.86.77	true	false	unknown
ps.eyeota.net	18.184.216.10	true	false	unknown
insight.adsrvr.org	3.33.220.150	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
html5-player.libsyn.com	204.16.247.184	true	false	unknown
491-vng-790.mktoresp.com	192.28.144.124	true	false	unknown
demdex.net.ssl.sc.omtrdc.net	63.140.62.17	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	108.128.197.68	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
rtb-csync-euw2.smartadserver.com	5.135.209.104	true	false	unknown
s3-eu-west-1.amazonaws.com	52.218.44.24	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
sync.ipredictive.com	54.163.32.160	true	false	unknown
ws.zoominfo.com	104.16.117.43	true	false	unknown
obs.fishrobotflower.com	54.83.110.109	true	false	unknown
urldefense.com	52.71.28.102	true	false	unknown
ad.doubleclick.net	142.250.186.102	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.76.144.165	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
redirect.crownpeak.com	3.220.214.71	true	false	unknown
cdn.concured.com	34.149.2.41	true	false	unknown
adstax-match-proxy.adrtx.net	52.17.118.57	true	false	unknown
cs41.wac.edgecastcdn.net	93.184.220.66	true	false	unknown
syndication.twitter.com	104.244.42.72	true	false	unknown
dsum-sec.casalemedia.com	104.18.36.155	true	false	unknown
1605158521.rsc.cdn77.org	156.146.33.137	true	false	unknown
assets.concured.com	34.120.111.58	true	false	unknown
s.ad.smaato.net	108.156.39.69	true	false	unknown
d1nie5ipy0d64w.cloudfront.net	18.238.243.86	true	false	unknown
adobedc.net.ssl.sc.omtrdc.net	63.140.62.17	true	false	unknown
pug-ams-bc.pubmnet.com	198.47.127.205	true	false	unknown
flo.uri.sh	172.64.144.214	true	false	unknown
load-euw1.exelator.com	54.78.254.47	true	false	unknown
ib.anycast.adnxs.com	37.252.171.21	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
ob.fishrobotflower.com	65.9.86.55	true	false	unknown
d3i42lyttuj6qr.cloudfront.net	52.222.214.118	true	false	unknown
aorta.clickagy.com	34.198.38.143	true	false	unknown
js.idio.co	3.162.38.11	true	false	unknown
uipus.semasio.net	50.57.31.206	true	false	unknown
tags.clickagy.com	unknown	unknown	false	unknown
1510748-48.chat.api.drift.com	unknown	unknown	false	unknown
metrics.api.drift.com	unknown	unknown	false	unknown
spglobal.scene7.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1	false		unknown
https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=3bc6b5a1-dc2d-4c37-9337-988f2e03ceb7&sessionStarted=1716472291.903&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472282236&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login	false		unknown
https://play.libsyn.com/assets/libsyn-logo--black.png	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/setuid?entity=82&code=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=	false		unknown
https://1334519-19.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match/bounce/?uid=6252180897247519748&bid=9gdtmu1	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://js.zi-scripts.com/unified/v1/master/getSubscriptions	false	URL Reputation: safe	unknown
https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97	false		unknown
https://pdw-adf.userreport.com/cs	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://js.driftt.com/core/assets/js/1.8afeb691.chunk.js	false	Avira URL Cloud: safe	unknown
https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&gjid=236941860&_gid=628374559.1716472251&_u=YHBAAEAAAAAAACAEK~&z=1376759657	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/1000.gif?memo=CJ6oGBIeChoIARCUdRoTNjI1MjE4MDg5NzI0NzUxOTc0OBAAGg0IzJO9sgYSBQjoBxAAQgBKAA	false	Avira URL Cloud: safe	unknown
https://api.adrtx.net/thirdparty/click?p=adfo	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://id5-sync.com/s/10/0.gif?puid=6252180897247519748	false	Avira URL Cloud: safe	unknown
https://js.adsrvr.org/up_loader.1.1.0.js	false	URL Reputation: safe	unknown
https://id5-sync.com/c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css	false	URL Reputation: safe	unknown
https://load77.exelator.com/pixel.gif	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bam.nr-data.net/1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtEBAUBRRoTQAkFQlQQGQkNA19bTVMVEU8%3D&rst=12556&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/pages/product-login&ptid=1ba195abfb1ffda3&af=err,xhr,stn,ins&be=649&fe=11856&dc=6414&perf=%7B%22timing%22:%7B%22of%22:1716472281024,%22n%22:0,%22f%22:3,%22dn%22:23,%22dne%22:23,%22c%22:23,%22s%22:23,%22ce%22:336,%22rq%22:336,%22rp%22:649,%22rpe%22:1212,%22di%22:7055,%22ds%22:7055,%22de%22:7063,%22dc%22:12474,%22l%22:12476,%22le%22:12505%7D,%22navigation%22:%7B%7D%7D&fp=3920&fcp=3920	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&_u=YHDAAEABAAAAACAGK~&z=1332001211	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	false	URL Reputation: safe	unknown
https://flo.uri.sh/template/20762/v21/static/choices/styles/css/choices.min.css	false	Avira URL Cloud: safe	unknown
https://play.libsyn.com/assets/vendor-c69516f0.js	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26partner_url%3Dhttps%253A%252F%252Fads.stickyadstv.com%252Fuser-registering%253FdataProviderId%253D721%2526userId%253D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%2526gdpr%253D0%2526gdpr_consent%253D	false	Avira URL Cloud: safe	unknown
https://pixel.onaudience.com/?mapped=6252180897247519748&partner=68	false	Avira URL Cloud: safe	unknown
https://vfhbo3jsnvrutdkuee1akd0lj.litix.io/	false	Avira URL Cloud: safe	unknown
https://1510748-48.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0	false	Avira URL Cloud: safe	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&upid=b2bmdj2&upv=1.1.0&paapi=1	false		unknown
https://flo.uri.sh/visualisation/15507338/embed?auto=1	false		unknown
https://aorta.clickagy.com/pixel.gif?ch=4&cm=5e07638e-be7e-42f3-942b-3117d96e7e8e&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D	false	Avira URL Cloud: safe	unknown
https://abrtp1.marketo.com/gw1/trw?aid=spglobal&trwv.uid=spglobal-1716472255215-3a36b654&trwv.vc=1&trwsa.sid=spglobal-1716472255217-b61b91f1&trwsb.cpv=2&ctzo=-04:00&uri=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&ma=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&pm=&viewedTypes=&rts=1716472289897	false	Avira URL Cloud: safe	unknown
https://1334519-19.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0	false	Avira URL Cloud: safe	unknown
https://aorta.clickagy.com/pixel.gif?clkgypv=jstag&ws=1	false	Avira URL Cloud: safe	unknown
https://ws.zoominfo.com/formcomplete-v2/forms	false	URL Reputation: safe	unknown
https://platform.twitter.com/widgets.js	false	URL Reputation: safe	unknown
https://js.idio.co/1272.js	false	Avira URL Cloud: safe	unknown
http://www.spcapitaliq.com/	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/menu/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com	chromecache_380.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://spglobal.scene7.com/is/image/spglobalcom/Corp_0424_global_trade?$responsive$	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&ex	chromecache_278.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/data-selector/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_407.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery-color	chromecache_455.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://jqueryui.com/position/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/biz/api/recommendation/count?type=PDCT&id=	chromecache_380.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_319.2.dr	false	URL Reputation: safe	unknown
https://investor.spglobal.com/corporate-governance/overview/	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://spglobal.scene7.com/is/image/spglobalcom/ai_footer_3840x1140?$responsive$	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/focusable-selector/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://metrics.api.drift.com	chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://www.spglobal.com/commodityinsights/	chromecache_422.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_319.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_354.2.dr	false	Avira URL Cloud: safe	unknown
https://www.spglobal.com/mobility/en/products/autocreditinsight.html	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
http://whattheheadsaid.com/2010/10/a-safer-object-keys-compatibility-implementation	chromecache_319.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.spglobal.com/en/search	chromecache_422.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.spglobal.com/ratings	chromecache_422.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_523.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/size-effect/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/uas/oauth2/authorize	chromecache_380.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://spglobal.scene7.com/is/image/spglobalcom/Corp_0521_May21Header?$responsive$	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/uniqueId/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
http://api.jqueryui.com/checkboxradio/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/#nonce-attributes	chromecache_319.2.dr	false	URL Reputation: safe	unknown
https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid	chromecache_277.2.dr, chromecache_411.2.dr	false	URL Reputation: safe	unknown
https://spglobal.scene7.com/is/image/spglobalcom/OverviewRatings-1?$responsive$	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
http://jqueryui.com/slider/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_319.2.dr	false	URL Reputation: safe	unknown
https://code.google.com/p/chromium/issues/detail?id=313082	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://www.spglobal.com/esg/solutions/data-intelligence-esg-scores	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://spglobal.scene7.com/is/image/spglobalcom/languagemodeling_1570x890-1?$responsive$	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc3492#section-3.4	chromecache_319.2.dr	false	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_417.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_523.2.dr	false	URL Reputation: safe	unknown
https://js.driftt.com/include/	chromecache_403.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/biz/	chromecache_380.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_499.2.dr, chromecache_486.2.dr	false	URL Reputation: safe	unknown
https://spglobal.scene7.com/is/image/spglobalcom/04_16_ArtificialIntelligenceVertical?$responsive$	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://investor.spglobal.com/shareholder-services/overview/default.aspx	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://customer.api.drift.com	chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://spglobal.scene7.com/is/image/spglobalcom/Mobility-1?$responsive$	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
http://www.robertpenner.com/easing)	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://www.spglobal.com/en/terms-of-use	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jshjohnson/Choices#readme	chromecache_372.2.dr	false	Avira URL Cloud: safe	unknown
https://www.spglobal.com/spdji/	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
https://investor.spglobal.com/contact-investor-relations/contact-ir/default.aspx	chromecache_422.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/drop-effect/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://www.linkedin.com/cws/share	chromecache_380.2.dr	false	Avira URL Cloud: safe	unknown
https://www.spglobal.com/en/cookie-notice	chromecache_366.2.dr, chromecache_422.2.dr, chromecache_475.2.dr	false	Avira URL Cloud: safe	unknown
https://www.linkedin.com/cws/cap/recruiter_member	chromecache_380.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/jquery/jquery/blob/e539bac79e666bba95bba86d690b4e609dca2286/src/selector/escapeSe	chromecache_455.2.dr	false	Avira URL Cloud: safe	unknown
https://conversation.api.drift.com	chromecache_534.2.dr, chromecache_444.2.dr, chromecache_287.2.dr, chromecache_282.2.dr, chromecache_461.2.dr, chromecache_275.2.dr, chromecache_305.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_319.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com/checkboxradio/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
http://jqueryui.com/widget/	chromecache_455.2.dr	false	URL Reputation: safe	unknown
http://ejohn.org/blog/dom-documentfragments/	chromecache_319.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.28.144.124	565-bdo-100.mktoresp.com	United States	15224	OMNITUREUS	false
37.252.171.149	unknown	European Union	29990	ASN-APPNEXUS	false
93.184.220.66	cs41.wac.edgecastcdn.net	European Union	15133	EDGECASTUS	false
54.83.110.109	obs.fishrobotflower.com	United States	14618	AMAZON-AESUS	false
52.17.118.57	adstax-match-proxy.adrtx.net	United States	16509	AMAZON-02US	false
3.218.167.115	unknown	United States	14618	AMAZON-AESUS	false
52.17.40.72	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
3.220.214.71	redirect.crownpeak.com	United States	14618	AMAZON-AESUS	false
18.239.18.21	unknown	United States	16509	AMAZON-02US	false
52.218.100.51	unknown	United States	16509	AMAZON-02US	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
185.89.211.116	unknown	Germany	29990	ASN-APPNEXUS	false
77.243.51.121	uip.semasio.net	Denmark	42697	NETIC-ASDK	false
3.160.212.44	unknown	United States	16509	AMAZON-02US	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States	62713	AS-PUBMATICUS	false
52.48.246.250	match.prod.bidr.io	United States	16509	AMAZON-02US	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
139.162.185.124	unknown	Netherlands	63949	LINODE-APLinodeLLCUS	false
13.248.245.213	unknown	United States	16509	AMAZON-02US	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
142.250.185.198	dart.l.doubleclick.net	United States	15169	GOOGLEUS	false
52.59.78.67	cdn.w55c.net	United States	16509	AMAZON-02US	false
63.140.62.17	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
104.16.118.43	unknown	United States	13335	CLOUDFLARENETUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.89.211.84	unknown	Germany	29990	ASN-APPNEXUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
52.29.164.212	e1.emxdgt.com	United States	16509	AMAZON-02US	false
5.135.209.104	rtb-csync-euw2.smartadserver.com	France	16276	OVHFR	false
54.196.227.84	a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
52.208.202.34	euw-ice.360yield.com	United States	16509	AMAZON-02US	false
172.67.40.173	mwzeom.zeotap.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.34	unknown	United States	15169	GOOGLEUS	false
52.49.45.15	unknown	United States	16509	AMAZON-02US	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
18.239.18.49	cdn-cf.vidyard.com	United States	16509	AMAZON-02US	false
192.28.144.84	abrtp1.marketo.com	United States	15224	OMNITUREUS	false
52.28.144.188	unknown	United States	16509	AMAZON-02US	false
108.128.197.68	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
37.157.2.250	istrp.adform.net	Denmark	198622	ADFORMDK	false
52.212.132.56	unknown	United States	16509	AMAZON-02US	false
18.238.243.86	d1nie5ipy0d64w.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.162	td.doubleclick.net	United States	15169	GOOGLEUS	false
18.198.150.232	ih.adscale.de	United States	16509	AMAZON-02US	false
34.120.111.58	assets.concured.com	United States	15169	GOOGLEUS	false
104.17.98.130	sjqe.mkto-test.com	United States	13335	CLOUDFLARENETUS	false
3.78.151.12	unknown	United States	16509	AMAZON-02US	false
3.65.80.227	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
65.9.86.55	ob.fishrobotflower.com	United States	16509	AMAZON-02US	false
104.19.178.52	unknown	United States	13335	CLOUDFLARENETUS	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
142.251.168.154	unknown	United States	15169	GOOGLEUS	false
54.246.180.244	unknown	United States	16509	AMAZON-02US	false
54.159.240.171	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
54.163.32.160	sync.ipredictive.com	United States	14618	AMAZON-AESUS	false
108.156.60.33	d1ftdm4q83us3q.cloudfront.net	United States	16509	AMAZON-02US	false
3.162.38.11	js.idio.co	United States	16509	AMAZON-02US	false
46.19.11.36	match.contentexchange.me	Slovenia	51790	SIELSI	false
108.156.39.69	s.ad.smaato.net	United States	16509	AMAZON-02US	false
104.22.50.98	spl.zeotap.com	United States	13335	CLOUDFLARENETUS	false
52.54.153.98	unknown	United States	14618	AMAZON-AESUS	false
52.222.214.118	d3i42lyttuj6qr.cloudfront.net	United States	16509	AMAZON-02US	false
52.18.219.127	unknown	United States	16509	AMAZON-02US	false
3.94.218.138	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
46.228.174.117	sync.1rx.io	United Kingdom	56396	TURNGB	false
37.252.171.21	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false
173.194.76.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.252.112.229	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.71.28.102	urldefense.com	United States	14618	AMAZON-AESUS	false
52.49.44.23	ds-pr-bh.ybp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
85.114.159.118	dsp.adfarm1.adition.com	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
18.65.39.64	d3i9xyriglxn0r.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.16.117.43	ws-assets.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.72	syndication.twitter.com	United States	13414	TWITTERUS	false
162.19.138.83	id5-sync.com	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
34.149.2.41	cdn.concured.com	United States	2686	ATGS-MMD-ASUS	false
18.184.216.10	ps.eyeota.net	United States	16509	AMAZON-02US	false
212.102.56.182	unknown	Italy	60068	CDN77GB	false
162.19.138.82	unknown	United States	209	CENTURYLINK-US-LEGACY-QWESTUS	false
156.146.33.137	1605158521.rsc.cdn77.org	United States	3743	ARCEL-2US	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
3.33.220.150	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
142.250.186.38	unknown	United States	15169	GOOGLEUS	false
104.244.42.136	unknown	United States	13414	TWITTERUS	false
217.79.178.221	cm.adsafety.net	Germany	24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
3.162.38.39	s.idio.co	United States	16509	AMAZON-02US	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
52.57.150.20	unknown	United States	16509	AMAZON-02US	false
54.77.98.227	unknown	United States	16509	AMAZON-02US	false
146.75.120.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
23.20.26.217	unknown	United States	14618	AMAZON-AESUS	false
142.250.185.70	unknown	United States	15169	GOOGLEUS	false
142.250.186.102	ad.doubleclick.net	United States	15169	GOOGLEUS	false
20.190.249.200	ihsmarkit.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
15.235.15.221	pixel.onaudience.com	United States	71	HP-INTERNET-ASUS	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
18.172.103.101	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1446520
Start date and time:	2024-05-23 15:49:18 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://info.ipreo.com/Privacy-Policy.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@39/485@403/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://urldefense.com/v3/__http://www.spcapitaliq.com/__;!!GjvTz_vk!S23AgMpOHeRszJTw0uERhApJ206Qy-6sZgONselCccTEnesoxmXELyzjpgIAJ4dUeu42X6YW-6U7TAxHRak42voGpjIk$ Browse: https://urldefense.com/v3/__http://www.spglobal.com__;!!GjvTz_vk!S23AgMpOHeRszJTw0uERhApJ206Qy-6sZgONselCccTEnesoxmXELyzjpgIAJ4dUeu42X6YW-6U7TAxHRak42sA2nCnI$ Browse: https://www.spglobal.com/en Browse: https://www.spglobal.com/marketintelligence/en/pages/product-login

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.163, 142.250.186.78, 142.251.168.84, 34.104.35.123, 2.18.64.4, 2.18.64.19, 2.16.1.225, 2.16.1.146, 13.85.23.86, 93.184.221.240, 192.229.221.95, 13.85.23.206, 2.16.1.185, 2.16.1.224, 20.3.187.198, 172.217.18.104, 151.101.129.181, 151.101.1.181, 151.101.193.181, 151.101.65.181, 142.250.185.238, 142.250.186.74, 142.250.186.170, 216.58.212.138, 142.250.185.138, 142.250.185.106, 216.58.206.74, 172.217.23.106, 172.217.18.10, 172.217.18.106, 216.58.212.170, 142.250.186.42, 142.250.186.106, 142.250.184.202, 142.250.185.74, 172.217.16.202, 142.250.186.138, 88.221.60.75, 142.250.185.174, 23.201.255.149, 23.37.42.173, 37.157.3.20, 37.157.2.229, 37.157.2.230, 37.157.3.26, 37.157.2.228, 23.43.60.225, 2.22.242.97, 2.22.242.122, 104.18.32.174, 172.64.155.82, 37.157.6.233, 37.157.6.254, 37.157.6.232, 37.157.6.243, 37.157.6.237, 2.22.242.91, 23.43.61.193, 37.157.5.133, 37.157.5.132, 37.157.4.28, 37.157.4.29, 37.157.5.84, 20.12.23.50, 69.173.144.165, 69.173.144.138, 69.173.
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, a1967.dscr.akamai.net, uipglob.trafficmanager.net, slscr.update.microsoft.com, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, e10776.b.akamaiedge.net, track-eu.adformnet.akadns.net, wildcard.scene7.com.edgesuite.net, e9126.x.akamaiedge.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, e3120.g.akamaiedge.net, ads.stickyadstv.com.edgesuite.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.stagingciq.com.edgekey.net, e8999.b.akamaiedge.net, a1.adformnet.akadns.net, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, www.google-analytics.com, e9957.e4.akamaiedge.net, www.spglobal.com.edgekey.net, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, cidr1.ads.stickyadstv.com.akadns.net, 2-01-2c3e-0055.cdx.cedexis.net, edgedl.me.gvt1.com, g11v.fwgtm.akadns.net, wac.apr-8315.edgecastdns.net, clients.l.google.com, pixel.rubiconproject.net.akadns.net, t
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.

Input	Output
URL: https://www.spglobal.com/marketintelligence/en/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No submit button for the form is present in the text." ] }
Error Security Controls Triggered It you nave reached this page in error, please contact customer support at customercare@spgloal.com C 2024 GIOjal
URL: https://www.spglobal.com/marketintelligence/en/ Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for login is present in the text." ] }
@ Product Login Explore Global Global Investor Relations Languages About Market uest Fdlow U Who We Serve V Solubons V News & I nse V Events V V S&P Global Market Intelligence delivers unrivaled insights and leading data and technology solutions. GET STARTED Seek & Prosper Your journey, accelerated with our intelligence. DO MORE WITH YOUR DATA > Trusted solutions, data, and expertise that drive multiple workflows across your organization.
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The code is a standard implementation of Google Tag Manager, which is used for managing JavaScript and HTML tags used for tracking and analytics on websites. It does not exhibit any malicious behavior." }
(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-NKVB4WM');
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The code is a standard implementation of Google Tag Manager, which is commonly used for tracking and analytics purposes. There are no signs of malicious activity." }
(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start': new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); })(window,document,'script','dataLayer','GTM-PZNSJJB');
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to New Relic's monitoring and performance tracking. It includes configuration settings for privacy, AJAX requests, and session handling, which are typical for performance monitoring tools. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access attempts." }
(window.NREUM\|\|(NREUM={})).init={privacy:{cookies_enabled:false},ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM\|\|(NREUM={})).loader_config={xpid:"VQ4AVldVDRABVVNXBgMPX1Y=",licenseKey:"a306fc3768",applicationID:"112512892"};;/! For license information please see nr-loader-full-1.260.0.min.js.LICENSE.txt / (()=>{var e,t,r={234:(e,t,r)=>{"use strict";r.d(t,{P_:()=>m,Mt:()=>b,C5:()=>s,DL:()=>w,OP:()=>N,lF:()=>P,Yu:()=>_,Dg:()=>v,CX:()=>c,GE:()=>x,sU:()=>D});var n=r(8632),i=r(9567);const o={beacon:n.ce.beacon,errorBeacon:n.ce.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!a[e])throw new Error("Info for ".concat(e," was never set"));return a[e]}function c(e,t){if(!e)throw new Error("All info objects require an agent identifier!");a[e]=(0,i.D)(t,o);const r=(0,n.ek)(e);r&&(r.info=a[e])}const d=e=>{if(!e\|\|"string"!=typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var u=r(7056),l=r(50);const f="[data-nr-mask]",h=()=>{const e={mask_selector:"",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{feature_flags:[],proxy:{assets:void 0,beacon:void 0},privacy:{cookies_enabled:!0},ajax:{deny_list:void 0,block_internal:!0,enabled:!0,harvestTimeSeconds:10,autoStart:!0},distributed_tracing:{enabled:void 0,exclude_newrelic_header:void 0,cors_use_newrelic_header:void 0,cors_use_tracecontext_headers:void 0,allowed_origins:void 0},session:{expiresMs:u.oD,inactiveMs:u.Hb},ssl:void 0,obfuscate:void 0,jserrors:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},metrics:{enabled:!0,autoStart:!0},page_action:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,long_task:!1,autoStart:!0},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},harvest:{tooManyRequestsDelay:60},session_replay:{autoStart:!0,enabled:!1,harvestTimeSeconds:60,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,inline_stylesheet:!0,mask_all_inputs:!0,get mask_text_selector(){return e.mask_selector},set mask_text_selector(t){d(t)?e.mask_selector="".concat(t,",").concat(f):""===t\|\|null===t?e.mask_selector=f:(0,l.Z)("An invalid session_replay.mask_selector was provided. '' will be used.",t)},get block_class(){return"nr-block"},get ignore_class(){return"nr-ignore"},get mask_text_class(){return"nr-mask"},get block_selector(){return e.block_selector},set block_selector(t){d(t)?e.block_selector+=",".concat(t):""!==t&&(0,l.Z)("An invalid session_replay.block_sele
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code appears to be related to New Relic, a performance monitoring service. It includes configuration details such as beacon URLs, license key, and application ID. There are no indications of malicious behavior in this snippet." }
window.NREUM\|\|(NREUM={});NREUM.info = {"beacon":"bam.nr-data.net","errorBeacon":"bam.nr-data.net","licenseKey":"a306fc3768","applicationID":"112512892","transactionName":"YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ","queueTime":0,"applicationTime":0,"agent":"","atts":""}
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is related to advertisement tracking and does not exhibit any malicious behavior. It loads a script from a known ad tracking domain (adform.net) and does not perform any actions that would be considered harmful or indicative of phishing." }
window._adftrack=Array.isArray(window._adftrack)?window._adftrack:window._adftrack?[window._adftrack]:[];window._adftrack.push({HttpHost:"a1.adform.net",pm:2176321,divider:encodeURIComponent("\|"),pagename:encodeURIComponent("\/marketintelligence\/en\/")});(function(){var a=document.createElement("script");a.type="text/javascript";a.async=!0;a.src="https://s2.adform.net/banners/scripts/st/trackpoint-async.js";var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})();
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 8, "reasons": "The code is obfuscated, which is a common technique used to hide malicious intent. It dynamically creates and appends a script element to the document head with a source URL that is also obfuscated. This behavior is suspicious because it can be used to load external malicious scripts without the user's knowledge." }
window[function(d,e){for(var b="",c=0;c<d.length;c++){var a=d[c].charCodeAt();a!=c;a-=e;a+=61;a%=94;8<e;a+=33;b==b;b+=String.fromCharCode(a)}return b}(atob("YE9WeHVwa2l6UWsh"),6)]="1edd5669f11674524557";var zi=document.createElement("script");zi.type="text/javascript";zi.async=!0;zi.src=function(d,e){for(var b="",c=0;c<d.length;c++){var a=d[c].charCodeAt();b==b;4<e;a-=e;a+=61;a%=94;a+=33;a!=c;b+=String.fromCharCode(a)}return b}(atob("NkJCPkFmW1s4QVpIN1lBMUA3PkJBWjE9O1tIN1lCLzVaOEE\x3d"),44);document.head.appendChild(zi);
URL: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for login is present in the text." ] }
@ Product Login Explore Global Global Investor Relations Languages About Market uest Fdlow U Who We Serve V Solubons V News & I nse V Events V V S&P Global Market Intelligence delivers unrivaled insights and leading data and technology solutions. GET STARTED Seek & Prosper Your journey, accelerated with our intelligence. DO MORE WITH YOUR DATA > Trusted solutions, data, and expertise that drive multiple workflows across your organization.
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is loading an external script from Marketo, a known marketing automation platform. The code initializes the Munchkin tracking functionality, which is used for tracking user interactions on the website. This is considered standard tracking functionality and does not pose a security risk." }
(function(){function b(){!1===c&&(c=!0,Munchkin.init("565-BDO-100"))}var c=!1,a=document.createElement("script");a.type="text/javascript";a.async=!0;a.src="//munchkin.marketo.net/munchkin.js";a.onreadystatechange=function(){"complete"!=this.readyState&&"loaded"!=this.readyState\|\|b()};a.onload=b;document.getElementsByTagName("head")[0].appendChild(a)})();
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code manipulates the DOM by changing the href attribute of certain links based on the presence of a specific class. This behavior is typical for dynamic content updates and does not inherently indicate malicious activity. However, any DOM manipulation can potentially be used for malicious purposes, so a minimal risk score is assigned." }
if ($('.relAsset').length) { $('.menu.submenu li a').each(function () { var aclass = $(this).attr('class'); if (typeof aclass != "undefined" && $(this).hasClass($('.relAsset').attr('id'))) { $(this).attr('href', $('.relAsset').text()); } }); }
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is a snippet for integrating Drift, a customer messaging platform. It initializes the Drift widget, loads the necessary script from a legitimate source (https://js.driftt.com), and sets up various methods for interaction. There are no indications of malicious behavior such as data exfiltration, credential harvesting, or unauthorized access attempts. The code is consistent with legitimate use for customer support and engagement." }
!function(){var a=window.driftt=window.drift=window.driftt\|\|[];if(!a.init){if(a.invoked)return void(window.console&&console.error&&console.error("Drift snippet included twice."));a.invoked=!0;a.methods="identify config track reset debug show ping page hide off on".split(" ");a.factory=function(c){return function(){var b=Array.prototype.slice.call(arguments);return b.unshift(c),a.push(b),a}};a.methods.forEach(function(c){a[c]=a.factory(c)});a.load=function(c){var b=3E5,d=Math.ceil(new Date/b)*b;b= document.createElement("script");b.type="text/javascript";b.async=!0;b.crossorigin="anonymous";b.src="https://js.driftt.com/include/"+d+"/"+c+".js";c=document.getElementsByTagName("script")[0];c.parentNode.insertBefore(b,c)}}}();drift.SNIPPET_VERSION="0.3.1";window.drift_init_options={loadType:"EAGER"};drift.load("n6k2yubr6fw7");
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be a script loader for a third-party service (Marketo). It initializes a function for tracking and campaign management. There are no immediate signs of malicious activity such as data exfiltration, credential harvesting, or unauthorized access. The risk score is low, but as with any third-party script, it should be reviewed in the context of the overall site security." }
(function(a,d,b,f,e,c){a[b]=a[b]\|\|function(){(a[b].q=a[b].q\|\|[]).push(arguments)};a[b].a=e;a[b].e=c;c=d.createElement("script");c.async=!0;c.type="text/javascript";c.src=f+"?aid\x3d"+e;d=d.getElementsByTagName("script")[0];d.parentNode.insertBefore(c,d)})(window,document,"rtp","//abrtp1-cdn.marketo.com/rtp-api/v1/rtp.js","spglobal");rtp("send","view");rtp("get","campaign",!0);
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code initializes a widget by loading an external script from a known domain (cdn.concured.com). The script appears to be related to a legitimate service (Concured) and does not exhibit any obvious malicious behavior. However, as it loads an external script, there is a minimal risk associated with the external content." }
(function (window, document) { if (window.concuredWidget) console.error('The engagement bar was already initialized.'); (window.concuredWidget = { }), (p = ['init']); window.concuredWidget._c = []; p.forEach( (f) => (window.concuredWidget[f] = function () { window.concuredWidget._c.push([f, arguments]); }) ); var b = document.createElement('script'); b.type = 'text/javascript'; b.async = true; b.src = 'https://cdn.concured.com/widget/concured-shim.js'; var before = document.getElementsByTagName('script')[0]; before.parentNode.insertBefore(b, before); })(window, document); concuredWidget.init('19bf0a5e');
URL: https://www.spglobal.com/marketintelligence/en/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The script dynamically loads an external script from 'https://ws.zoominfo.com/pixel/62b46da73ec962008fbce029' and sets the referrer policy to 'unsafe-url'. While the referrer policy could potentially expose referrer information, the primary functionality appears to be related to tracking or advertisement, which is considered no risk." }
(function(){var a=document.createElement("script");a.type="text/javascript";a.async=!0;a.referrerPolicy="unsafe-url";a.src="https://ws.zoominfo.com/pixel/62b46da73ec962008fbce029";var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})();
URL: https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.spglobal.com Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No submit button for login is present in the text." ] }
@ Product Login Explore Global Global Investor Relations Languages About Market uest Fdlow U Who We Serve V Solubons V News & I nse V Events V V S&P Global Market Intelligence delivers unrivaled insights and leading data and technology solutions. GET STARTED Seek & Prosper Your journey, accelerated with our intelligence. DO MORE WITH YOUR DATA > Trusted solutions, data, and expertise that drive multiple workflows across your organization.
URL: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Model: gpt-4o	```json { "riskscore": 1, "reasons": "The code checks for legacy browsers and redirects to an error page if the browser is not supported. This is a common practice to ensure compatibility and does not appear to be malicious. There are no indications of phishing or other malicious activities." }
window.__startTime = new Date().getTime(); (function checkLegacy() { var loc = window.location; function isIE8orBelow() { return document.documentElement.className.indexOf('lt-ie9') > -1; } function isAndroidBefore(version) { var userVersion = navigator.userAgent.toLowerCase().match(/android (\d+(?:\.\d+)+)/); if (userVersion && userVersion.length === 2 && parseFloat(userVersion[1]) < version) { return true; } return false; } function isIosBefore(version) { if (/iP(hone\|od\|ad)/.test(navigator.platform)) { var userVersion = parseInt(navigator.appVersion.match(/OS (\d+)_(\d+)_?(\d+)?/)[1], 10); return userVersion < version; } return false; } // Microsoft Office software validates links internally before sending them to the browser. // Since it identifies itself as an older browser, the not supported page redirect triggers which // causes both the player and an error page to open when the link makes it to the browser // To avoid this we skip the error page redirect if we identify the browser as office function isMSOffice() { return /office/.test(navigator.userAgent.toLowerCase()); } // function isIE10or11() { // return ( // navigator.userAgent.toLowerCase().indexOf('msie 10') > -1 \|\| // !!(navigator.userAgent.match(/Trident/) && !navigator.userAgent.match(/MSIE/)) // ); // } var notSupported = loc.search.indexOf('vylegacy=1') !== -1 \|\| isIE8orBelow() \|\| isAndroidBefore(4.4) \|\| isIosBefore(7); if (notSupported && !isMSOffice()) { window.location = loc.protocol + '//' + loc.hostname + '/error/browser-not-supported'; } // TODO: Once POMO is running we would need to redirect to OUTPOST so we can serve a supported // else if (isIE10or11()) { // window.location = `${loc.protocol}//${loc.hostname}/legacy/${loc.pathname.replace(/^\/?/, '')}${ // loc.search // }`; // } })();
URL: about:blank Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button for login is present in the text." ] }
@ Product Login Explore Global Global Investor Relations Languages About Market uest Fdlow U Who We Serve V Solubons V News & I nse V Events V V S&P Global Market Intelligence delivers unrivaled insights and leading data and technology solutions. GET STARTED Seek & Prosper Your journey, accelerated with our intelligence. DO MORE WITH YOUR DATA > Trusted solutions, data, and expertise that drive multiple workflows across your organization.
URL: about:blank Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No 'Login' or 'Submit' button is present in the text." ] }
@ Product Login S&P Global Explore Global Investor Relations Languages About v %.rtbnsv v EwnbV v S&P Global Market Intelligence delivers unrivaled insights and leading data and technology solutions. GET STARTED Seek & Prosper Your journey, accelerated with our intelligence. DO MORE WITH YOUR DATA > Your Cookie Controls: All Global uses to improve user experience and site performance, offer advertising and enable social media sharing. By clicking Accept Alt", you agr to our use of co-ok For details, please refer to our Cookie Notice
URL: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No 'Login' or 'Submit' button is present in the text." ] }
@ Product Login S&P Global Explore Global Investor Relations Languages About v %.rtbnsv v EwnbV v S&P Global Market Intelligence delivers unrivaled insights and leading data and technology solutions. GET STARTED Seek & Prosper Your journey, accelerated with our intelligence. DO MORE WITH YOUR DATA > Your Cookie Controls: All Global uses ctnkies to improve user experience and site offer tailored advertising and enable media sharing. By clicking "Accept Alt", pu agr to our use of cc-oki. For details, please refer to our Cookie Notice
URL: https://www.spglobal.com/en Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No submit button or login action is mentioned in the text." ] }
Q Search Global Explore Global Support Find Products v Research & Insights v Who We Are v Contact us Geopolitical Risk -theworld is chanking. Geopolitical fragmentation is being fueled by cyber threaFs he ar in Ukraine, US-China relations and more Here, we outline 2024's top geopolitical risks. Risk Global Daily Update Subscribe to the newsletter > S&P Global acquires Visible
URL: https://www.spglobal.com/en Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No 'submit' or 'login' button is present in the text." ] }
Q Search Global Explore Global Support Find Products v Research & Insights v Who We Are v Contact us Geopolitical Risk -theworld is chanking. Geopolitical fragmentation is being fueled by cyberthreaFs he arm Ukraine, US-China relations and more Here, we outline 2024's top geopolitical risks. Risk Global Daily Update Subscribe to the newsletter > Your Cookie Controls: Cookie-settings Accept All S&P Global uses cookies to improve user exEErience and site offer tailored advertising and enable social media sharing. By clicking "Accept All", you agree to our use of ccx)kies. For details, please refer to our Cookie Notice
URL: https://flo.uri.sh/visualisation/15507338/embed?auto=1 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No submit button for login is present in the text." ] }
Q Search Global Explore Global Support Find Products v Research & Insights v Who We Are v Contact us Geopolitical Risk -theworld is chanking. Geopolitical fragmentation is being fueled by cyberthreaFs he arm Ukraine, US-China relations and more Here, we outline 2024's top geopolitical risks. Risk Global Daily Update Subscribe to the newsletter > Your Cookie Controls: Cookie-settings Accept All S&P Global uses cookies to improve user exEErience and site offer tailored advertising and enable social media sharing. By clicking "Accept All", you agree to our use of ccx)kies. For details, please refer to our Cookie Notice
URL: https://flo.uri.sh/visualisation/15507338/embed?auto=1 Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "reasons": [ "No form fields for username or password are present in the text.", "No 'Login' or 'Sign In' button is present in the text." ] }
Q Search Global Explore Global Support Find Products v Research & Insights v Who We Are v Contact us Supply Chain 2024 ENERGY TRANSITION SOCIAL EQUITY Mar 13, 2024 May 16, 2024 Look Forward: Working while caregiving: It's Multidimensional complicated Transition S&P Global teamed up with The global energy system has been in continuous transition for AARP to examine the ARTIFICIAL INTELLIGENCE experiences of family caregivers centuries, but it is the current May 18, 2024 at work. transition that has everyone... The Rise of A1-Powered Smart Cities Smart cities could become even smarter through increased application of A1. Explore more about A1 smart cities and how they can impact people's lives. Your Cookie Controls: Cookie-settings Accept All S&P Global uses cookies to improve user exEErience and site grformance, offer tailored advertising and enable social media sharing. By clicking "Accept All", you agree to our use of For details, please refer to our Cookie Notice
URL: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0% Model: gpt-4o	```json { "phishing_score": 7, "brands": "S&P Global", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "reasons": "The URL 'https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?' is highly suspicious. The domain 'doubleclick.net' is not associated with S&P Global, which is the brand identified in the image. The URL also contains numerous tracking parameters and redirects, which is a common technique used in phishing attacks. The presence of login forms without a CAPTCHA further raises suspicion. Therefore, it is likely a phishing site." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 12:50:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9692227704513927
Encrypted:	false
SSDEEP:	48:8AEdkTIYPHdidAKZdA19ehwiZUklqehiy+3:8APvHhy
MD5:	1785868EBBEEDD9270CC4436D08D8FDA
SHA1:	2BF2DF51EE5C28952BEA705CEECE4D08C7F33E03
SHA-256:	2026A20684727E13C564ECC468D3212487B47A622492762B4AF177166B18E1A2
SHA-512:	6679564B773B633F1E85A964B63A8554A57E1B2D6FA0868266E2F044A01EB960CD178C9FB8E17CE805F6DB2F0BCF09DEE4472E761D18306171A6BB509520D680
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....b.G"....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XDn....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XDn....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XDn....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XDn..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XGn...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............W......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 12:50:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.986166061337705
Encrypted:	false
SSDEEP:	48:89EdkTIYPHdidAKZdA1weh/iZUkAQkqehRy+2:89Pvt9QAy
MD5:	989657481AB89F0A8E4FAB067A424F80
SHA1:	9CE66C6D9E19384F48E753AC3B59A6C8B1BF2E2A
SHA-256:	E5FA7038A0654A7816AA28892630A2E4F7132CD8352818365BC2484E82033EE1
SHA-512:	DE988678A34F4030B4A981023277BCA6E4CE1414C2710B1B1575D25B794BF13315123218C735C7E0A14F194953575CF894794E74CF8463A64781F0E5E3AB87BE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....UB7"....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XDn....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XDn....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XDn....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XDn..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XGn...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............W......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0013426272963
Encrypted:	false
SSDEEP:	48:8xZdkTIYsHdidAKZdA14tseh7sFiZUkmgqeh7sXy+BX:8x4vMnVy
MD5:	42D0F8F2C4329C7DEAEE75923A7E9D56
SHA1:	5541F0D98AE18D3254DC34FD9400962444753350
SHA-256:	D1D576FD3F2920414C1552D4ADE3CFFBF0C114BF735F0D8F213F4D7AA20FE592
SHA-512:	BC175E3CBEECD32FA978DE2CDAA1744E6C57CFA8AC988C1392D34625BE080F7D73AA05F668783344414E578596EBD0C8377EBEAECBA82256EC582FD3C58B2C48
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XDn....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XDn....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XDn....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XDn..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............W......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 12:50:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.987408884351974
Encrypted:	false
SSDEEP:	48:8JEdkTIYPHdidAKZdA1vehDiZUkwqehty+R:8JPvOvy
MD5:	EEB345B27B43315C9AB2550ADE1C02F8
SHA1:	24726C249942FC2DCA23856B4E3E925D59CE4C98
SHA-256:	AD0988BDDD9705C86824A686905BD2420A16AC3EDECF79DD200EB5D2C3E89669
SHA-512:	D89DF14EDDEF77CFF63106E32B370F68C389FE901F2098E09403ADFEDB83F453C9E4CD54F2B51A4A71602220F604CBE752F1CBD508D717F9B4B840BBFCC088A6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......0"....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XDn....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XDn....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XDn....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XDn..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XGn...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............W......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 12:50:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9760449554763855
Encrypted:	false
SSDEEP:	48:8OEdkTIYPHdidAKZdA1hehBiZUk1W1qeh7y+C:8OPv+9by
MD5:	D44682B13145F49D571103775970E3BC
SHA1:	59567E1808AD03C5CB8784B7DF6701B178D03A82
SHA-256:	94DD2608599DC8E0B47FF0181F799A583A5A63626BF7AE269354054249F71D15
SHA-512:	09D3972703E654D5999A1E4EC1A6A0578DBA2BF1AA39ACD6BCB3CD304E183D959E16DA82A88768804F8B9EC20BF82433642126215DAAF22A710102641029A610
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......?"....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XDn....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XDn....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XDn....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XDn..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XGn...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............W......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu May 23 12:50:12 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.984803582269795
Encrypted:	false
SSDEEP:	48:8J6EdkTIYPHdidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbVy+yT+:8J6PvgT/TbxWOvTbVy7T
MD5:	510F06025EA5C95DD484536045483E28
SHA1:	6AAA773CECD3502F76EF9AA832864687E8049625
SHA-256:	CFE5138B9712E4F8B4E943101AEEA74694B1F648C517DCC03D355743492906F3
SHA-512:	E4448255F9C002FEF279434AF07D069B58FE08CC4341F883B56811C224112A3EFA15FA4E40D3C8733D1F294B4C1EA4F49F0B26B8CE538499D2DB93DE44051527
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....a&"....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XDn....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XDn....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XDn....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XDn..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XGn...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............W......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65505)
Category:	downloaded
Size (bytes):	187756
Entropy (8bit):	5.48778764892733
Encrypted:	false
SSDEEP:	3072:OqFDxFBUcNmxVF1HFRr4t8n9ok0uXHW3j8j4ZJT:OqFDxFBUcNmbtRr4t8n9N0bAjI
MD5:	AB10892E1EA462985A81715746B2A483
SHA1:	477A91172D6DA7F5B5F5325BD98122BAFBC07C7D
SHA-256:	215B10747EF3AD5915B08D3F71AAB4DB1422CB87A4F24F76438BDF0C0155B9EF
SHA-512:	77E82AEE2EE16BD87F23C1BC687DFCF42F5A8CE2B043A54D1E7D88A84A3EF5F60EEAB9A4679ED2EBF578E3CEEFBDE7EC098AF12B917905042579A1B298F1402A
Malicious:	false
Reputation:	low
URL:	https://abrtp1-cdn.marketo.com/rtp-api/v1/rtp.js?aid=spglobal
Preview:	/!. TRW.js version 3.24. /.(function(a){var d="%",b={checkPattern:function(e,f){if(f.indexOf(d)==0&&f.lastIndexOf(d)==f.length-1){f=f.substring(1,f.length-1);return e.indexOf(f)!=-1}else{if(f.indexOf(d)==0){f=f.substring(1,f.length);return e.lastIndexOf(f)==e.length-f.length}else{if(f.lastIndexOf(d)==f.length-1){f=f.substring(0,f.length-1);return e.indexOf(f)==0}else{return e==f}}}},compareWithWildcard:function(n,e,f){var l;if(f===undefined\|\|f==null){l=d}else{l=f}var j=e.split(l);if(!this.validateParam(j[j.length-1])){j.pop()}var m=e.indexOf(l)+1==e.length;var h=e.indexOf(l)==0;if(m&&j[j.length-1].lastIndexOf("/")+1==j[j.length-1].length){j[j.length-1]=j[j.length-1].substring(0,j[j.length-1].length-1)}for(var g=0;g<j.length;g++){if(g==0&&!h){if(n.indexOf(j[g])!=0){return false}}if(g+1==j.length&&!m){if(!(n.indexOf(j[g])+j[g].length==n.length)){return false}}var k=n.indexOf(j[g]);if(k==-1){return false}n=n.substring(k+j[g].length)}return true},validateParam:function(e){return(e!==unde

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4617), with no line terminators
Category:	downloaded
Size (bytes):	4617
Entropy (8bit):	5.3388464830266855
Encrypted:	false
SSDEEP:	96:qKMfPsFWBvYEDGbbdIBbaI5UzOjuDvuSrrKT2f6TYTalc8yU:WDvYESbbdIBbIpDvu3PTYTa+8yU
MD5:	274ABBDE1C3DAB41A5F935F7385DB389
SHA1:	A4010EACF3728BC607F81A13B0D6E6203DD54A55
SHA-256:	56A91253A72203F1DEA120378022D8D19C30F36999D50812DC5DEC3759FE915F
SHA-512:	F6855EF807E28EB32F370F1A45E733DE5FD4BB3C4A818ABEA8E490BBC34559861C476557C41F596455ACFF41E0550412F8DDAD772CE82B79CAB6DCC1AEA02CA9
Malicious:	false
Reputation:	low
URL:	https://ws.zoominfo.com/pixel/62b46da73ec962008fbce029/?iszitag=true
Preview:	(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),clearInterval(t)):e++},2e3)}}var l,r,i,d;a\|\|(c={...c,ws:1}),l=window,e=document,r="_initClickagy",t="script",i=c,(d=e.createElement(t)).onload=function(){o()},d.onreadystatechange=function(){"undefined"==typeof d.readyState\|\|d.readyState&&!/loaded\|complete/.test(d.readyState)\|\|o()},d.onerror=function(){console.log("Error loading Clickagy script")},n=e.getElementsByTagName(t)[0],d.src="https://tags.clickagy.com/data.js?rnd=62fe5c0e6ad95",d["async"]=1,n.parentNode.insertBefore(d,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...window[p],fn:null},window[p].fn=functi

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (992)
Category:	downloaded
Size (bytes):	80973
Entropy (8bit):	5.632140025463876
Encrypted:	false
SSDEEP:	1536:IZipJ6vcyXOP7AekTTNMCFpFrbPlXKMF/Xj64oh7mQOgWiuMCzW:t2OP7Aek3NMCFpFHlXKMrEyKWiuC
MD5:	1F2A925FB7F06495A8B0944FBD4B97E6
SHA1:	A4348E0990D2DA973BBF584C0BEC8E2A09AD2AFD
SHA-256:	1784B362191BA7BAECD3B7D51FCCF1C2D01089198F968952085777867BEE6ADD
SHA-512:	EAA6D13C55F04B456A3477F810344D5598F71502192247A31008119E7FB2DCC5D6260088C23D3E8EE2403BDF92EAEA75B954FEB7B6774750824B9BA380961E34
Malicious:	false
Reputation:	low
URL:	https://s2.adform.net/banners/scripts/st/trackpoint-sync.js
Preview:	(function(){var A=window.Adform=window.Adform\|\|{};var aa=Object.prototype.toString,ca=Object.prototype.hasOwnProperty;function F(a,c){if(null!=a)if(a.forEach)a.forEach(c);else for(var b=0;b<a.length;b++)c(a[b],b,a)}function da(a,c,b){return b()?a+"="+c:""}function ja(a,c){null!=c&&""!=c&&a.push(c)}function ka(a){return L(a)&&"[object Array]"==aa.call(a)}function la(a){return L(a)&&"[object String]"==aa.call(a)}function ma(a){return!isNaN(parseFloat(a))&&isFinite(a)}function L(a){return"undefined"!=typeof a}.function na(a){return a=(-1!=a.indexOf("%")?a:encodeURIComponent(a)).replace(/\+/g,"%2B")};var oa=window.document,pa=window.location,Da={setCookie:qa,readCookie:ra,isOptedOut:sa,readCookieSafely:ta,setCookieSafely:ua,eraseCookie:va,setFPCookie:wa,readFPCookie:xa,getQSParam:ya,processFirstPartyCookie:za,redirectBack:Aa,optOutForNumberOfDays:Ba,optOut:Ca};function qa(a,c,b,e,g){var h="";b&&(h=new Date,h.setTime(h.getTime()+864E5*b),h="; expires="+h.toGMTString());try{oa.cookie=a+"="+c

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 327912, version 772.1280
Category:	downloaded
Size (bytes):	327912
Entropy (8bit):	7.99822958053036
Encrypted:	true
SSDEEP:	6144:+DcME9o5A3kwcxZPFsYtuxYiJp1bLRwrY5gWGVmSLJAMt/7pi9GkFnHF262:SE9ou33y3R0qykYmVwMpIjF262
MD5:	9E643129E2DB398EAB0F8D326B12D355
SHA1:	590F994F1E6519A969FD2CE05797B00A9AE22F73
SHA-256:	C6DBEA358C770232D65488985FBEBE3D3F4D75949C9FDCC293C316388545098B
SHA-512:	1AF1E110A6E8004F9DA03C1A26DF63594240CCD158A3F904B53E94323C898D7698CFC1170E1C768E2DBD91D63C76DACCC76C044DB30F55C4D0A999341E0DF2BC
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-resources/resources/fonts/webfonts/fa-sharp-regular-400.woff2
Preview:	wOF2..............f,.............................8.$. .`..T...0..@..X.... ..............y8#Im.........}.....jFB`.....?..O~.._..w..._.............`...aZ.6...r{.>.......^...,..f+..........g....DFF!..X.>.L:..5..J...VP0..Ld..W1eay.I.......w7...^.O:.-\&.j........Tv...I.;.0J...@/...s...+.z...X..a\|B.8..T...9iVu@........C.......K.fO.J ..}-&.!.D.$0y......./.%...... T....O!.j.].%..q~.8.%...Z..K?O.j..)....`...S..v......`...6q)R.T(..%X.%.,...v..v.x.f.#...9.R..9wJ_...o.M.y]q..........A.....+@..U(>..!Gf.;v....2...0]S..d..gKf...9....M..l.......m......@....A....$....r0 8..;[4.V..J..k....,.D.[...N.O..t.$....L.....(.;L....3q..^...U..7.`0(}0`..."AJ....AY.E.x.bGN.x;7....k[.v...z....\..k......O....m.h[.;....X. .......q...u.,.A...!E...n.9.c..vl.5.f3v.E...r.LW:S../]).;.....@.A<....o. .P..GA ....e[.....l.[......8...a.4.:vB.T].aR7.......[.._..... .oY......R..v./0...Y.{.!._5.sO.78&...H...c.gx._..\|X..p..:.B.H.f.d..3.=..(dp...l.mUX4.p.W..E.V..~Tb..!7....D".....M.3

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	938
Entropy (8bit):	5.505771887470305
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WdcfMpNrl/nL6L8BMUNbpbzb2VB6LZY0jf4:si2N1V4NxwZG1idD/LjBfAX6PjBpY
MD5:	37EF0B5D97777BFC3D147F02648EF19E
SHA1:	1E26E6A727F017EC709764CC49A8C2F4C2C87E92
SHA-256:	A2856DA085C1A506155FE161078D3146E63B09D3F1C3736A3FA2EA233502D0D1
SHA-512:	00650996FA4EE0748B2B331BD7D345DBA7D73F41A2429D8459870E1602C17EAA719BB652B28B823C2B37F9BB274F892E7C4635C3E5CCE45585290BF57779F733
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/upb/?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97","https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97","https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=&expires=30&next=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Frubicon"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (469)
Category:	downloaded
Size (bytes):	818
Entropy (8bit):	5.431221965442634
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WdrocERcKJjzdQ4nV/Zacj1JjzqHsddrQb:si2N1V4NxwZG1yER/jzFPnjzqwY
MD5:	AD28283097D74288F593426B2BBB5B82
SHA1:	505227F9551DED52D7277A0CACDDC4AE7252F664
SHA-256:	53493F74A0FBF0132844F1BBF4AE827619FCCB65505A92EDCACB96E2B4474DB5
SHA-512:	32FD6B4751B332D91052D34FCA85130A88362184BBF864150A3CAC925336425E802CA64EE3C986A574D98A5CBA4E30CF69338E49910E9F989BD35421758CDF30
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://x.bidswitch.net/syncd?dsp_id=93&user_group=1&user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch","https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=f03aae80-b45c-40b7-8c7a-418b39367c97&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic"] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17003), with no line terminators
Category:	downloaded
Size (bytes):	17003
Entropy (8bit):	5.252540905926642
Encrypted:	false
SSDEEP:	384:RxFVDGRHhfiYI8Z3xtsH7aK4N9eke+Kt/y6CtVeAkS486a:RAfM94N9ekjKt/y6WeC
MD5:	65E5C965272E021AE33FF8BC39565EF5
SHA1:	C5A2C0CDF9C821B6EE43A1EEB52680FFEEA15557
SHA-256:	B84595CC8461BB6E8376FE94F0DD23D6657172103B03653534089C5992B058A1
SHA-512:	C177A508A3ED03C91567765E51EFB6E39E9DC20200BC6A30C708B7FA339B1DAC17CC46BEBCA5B5267C9CF10EFD24FE054B078352F8460A3E12422A6AD7CC1B90
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/21.b8c41db9.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},"9rSQ":function(e,t,r){"use strict";var n=r("xTJ+");function InterceptorManager(){this.handlers=[]}InterceptorManager.prototype.use=function use(e,t){return this.handlers.push({fulfilled:e,rejected:t}),this.handlers.length-1},InterceptorManager.prototype.eject=function eject(e){this.handlers[e]&&(this.handlers[e]=null)},InterceptorManager.prototype.forEach=function forEach(e){n.forEach(this.handlers,function forEachHandler(t){null!==t&&e(t)})},e.exports=InterceptorManager},CgaS:function(e,t,r){"use strict";var n=r("JEQr"),o=r("xTJ+"),a=r("9rSQ"),s=r("UnBK");function Axios(e){this.defaults=e,this.interceptors={request:new a,response:new a}}Axios.prototype.request=function request(e){

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472275617
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (509)
Category:	downloaded
Size (bytes):	683
Entropy (8bit):	5.174427840984147
Encrypted:	false
SSDEEP:	12:2XnhI1F6EJ2QiKLtY1RJGwvDAjFP52QiDxLrGqZvpzHn+TLJ5s3:2RI1F6EJcIAJGZjFP5cDZSqZRzeTno
MD5:	9A20347481F35C44BD1C5B2E31CD2CC8
SHA1:	1516E95B4FF6FB5083A135000DFC256DC393635B
SHA-256:	CCEB566CB78A1B8C0867C7CCE7E7BA5E4F1266A80EBFC1057CB49FA0176BBDC7
SHA-512:	4E922EAA702131721F0C7FEDD7CBE628745611394039FB66FFDC10E483B694DB65158DBFCDCFB7521E2E04D1247C801C2F615C8C7609627068E61EF0C7731688
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/core/wcm/components/commons/site/clientlibs/utils.min.9a20347481f35c44bd1c5b2e31cd2cc8.js
Preview:	(function(f){window.CMP=window.CMP\|\|{};window.CMP.utils=function(){return{readData:function(c,b){c=c.dataset;var d=[];b=b.charAt(0).toUpperCase()+b.slice(1);b=["is","hook"+b];for(var a in c)if(Object.prototype.hasOwnProperty.call(c,a)){var e=c[a];0===a.indexOf("cmp")&&(a=a.slice(3),a=a.charAt(0).toLowerCase()+a.substring(1),-1===b.indexOf(a)&&(d[a]=e))}return d},setupProperties:function(c,b){var d={},a;for(a in b)if(Object.prototype.hasOwnProperty.call(b,a)){var e=b[a];d[a]=c&&null!=c[a]?e&&"function"===.typeof e.transform?e.transform(c[a]):c[a]:b[a]["default"]}return d}}}();f.dispatchEvent(new CustomEvent("core.wcm.components.commons.site.utils.loaded"))})(window.document);

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 722x954, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	91942
Entropy (8bit):	7.997373084003169
Encrypted:	true
SSDEEP:	1536:JlfkbFt2aP41TKZ03CeULvhfoTGPmPVbdedYQvvy7102oDMNFyWb7jS6XDSbl:XKj2xCxdok8h03Hy7yDayKjS3
MD5:	02BA723727485E18B4DFB4C170E3D5AE
SHA1:	A7A6A2AEC8E1851B7E41B1C1FAD1137516AF7806
SHA-256:	525F09C13450AA0C0C84F39BC231F1D1E2A459C4B48A599FE11FFCE76657BEAD
SHA-512:	3D7E61B1A26BC9D103E17C6C5F02A6610EE235E0B93CA64BC30129F4E81E68FA91474EB71DFBAE8AA88F961892DB931D334DAAF692E3E6D86A237217AFBEF4F3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....p....*....>=..D.!."...hP..gl .[oT...........~...u........u5..N5...?.<.<..?K..=......W..B4..{....w.v..'..........Ip?......y......?.......?....).k................a...k..................n.u.8...C...}.........!........6...........+..........C.....?........._..%>A...g.W.......?.?......+`.k...w..q.f.....G..._.~L.'....a?..[.k............~V......._......D?..../.../........=.....?.....r...E.......o.........I.c.....g......q.....f.......p..v......z..#..z...l.E<Y..Ap...i.V.o......a.{..Sn.U^......c);..x....K.K.}[.#s.YF.....;y..F...UU@..{.....!....\....~j.%......uoU.......s..I.`...t.a..K..P".UR.I.0.gO0........\|[...W.!.S..d..m.........:..P..1..mug....(+.^..D$..(.._o).HAx.'.!.p..M...,.m. ..U.#..>.#...X.V.&{.;.....OVX1....z:=..P.!..[...U..!B~.!F.....HJ,t.Q0M.{..... ..V...].V(...G[.Y.&.p.6X'.$.8:.[..."..;...B!<C..=j1to.X..,..#..{..K......?...4.....gy^h...T..y".......1.<.)b...F.....Uu!...>Q...\|..=....?J.j..i&.....yF..'C.s.....`...e.u......z._

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://a.idio.co/ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.07091976468957428
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1469)
Category:	downloaded
Size (bytes):	154509
Entropy (8bit):	5.02468372861434
Encrypted:	false
SSDEEP:	768:y/ChASKAO6zkopKbYrzpbmFuxripXBeIci54qWAAAJV:IVmFAt
MD5:	35B23854371A1FC50684052B8970E6CC
SHA1:	C261B7758D47773D0B912DE74E1646F8350AC6B2
SHA-256:	26B081C748E8B164CDB86A885434B5FECE4354C4DF5019284255ACA93E9B9916
SHA-512:	F7ED3529E54AF9131C79447F1D6F99C7826868676BE53327597DE6CF904BD16445626AB034FAE803CD383B4A80052A204D161B19CC51BDDC81D632CA9D4A20E1
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/clientlib-base.min.35b23854371a1fc50684052b8970e6cc.css
Preview:	.cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}..cmp-tabs__tab--active{border-color:inherit}..cmp-tabs__tabpanel{display:none}..cmp-tabs__tabpanel--active{display:block}..cmp-image__image{width:100%;height:auto}..cmp-breadcrumb{display:inline-block;list-style:none;padding:0}..cmp-breadcrumb__item{display:inline-block;vertical-align:top}..cmp-search{position:relative}..cmp-search__field{position:relative;height:2rem}..cmp-search__input{padding-left:2rem;padding-right:2rem;height:100%;width:100%}..cmp-search__icon{display:block;position:absolute;left:.5rem;top:.5rem;background-image:url("data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4NCjwhLS0gR2VuZXJhdG9yOiBBZG9iZSBJbGx1c3RyYXRvciAxNi4wLjAsIFNWRyBFeHBvcnQgUGx1Zy1JbiAuIFNWRyBWZXJzaW9uOiA2LjAwIEJ1aWxkIDApICAtLT4NCjwhRE9DVFlQRSBzdmcgUFVCTElDICItLy9XM0MvL0RURCBTVkcgMS4xLy9FTi

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472282236
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52343), with no line terminators
Category:	downloaded
Size (bytes):	52343
Entropy (8bit):	5.33043399683772
Encrypted:	false
SSDEEP:	768:w5Dv5zYoNbyP+FUJcBtopGTaY/zcAcbcVvwxaTLYqj6cw68KK0oZjjQmaLEhU277:4VP+ucJ7jJQzbM
MD5:	B6E556BB3EE9DDDA1170DDFED0457042
SHA1:	95C4A951490ED160CAB559685BED8523C0ECDA67
SHA-256:	151DD1A035D465B5FA50D2666F25F7EB4D5E3C3D3108F1E99B393A02749877CE
SHA-512:	8708FCE9F31A4963FA2736E5E0E8BBC261CB50C38C704B16F543CD9C2F1CAF4DA279CDA98F65F25F0C7B6520621D3B70F37B55CD6C4A0F5F4ADC58D8E1743F2D
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/24.091525a5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n.d(t,"t",function(){return O}),n.d(t,"u",function(){return p}),n.d(t,"r",function(){return v}),n.d(t,"k",function(){return E}),n.d(t,"s",function(){return g}),n.d(t,"e",function(){return j}),n.d(t,"g",function(){return _}),n.d(t,"h",function(){return I}),n.d(t,"f",function(){return C}),n.d(t,"l",function(){return m}),n.d(t,"p",function(){return h}),n.d(t,"c",function(){return T}),n.d(t,"v",function(){return y}),n.d(t,"o",function(){return S}),n.d(t,"i",function(){return R}),n.d(t,"j",function(){return A}),n.d(t,"n",function(){return N}),n.d(t,"d",function(){return x});var r=n("mj2O"),a=n.n(r),c=n("7SM1"),i=n("QtlZ"),o=n("NFvl"),u=n("LVcX"),s=function getSession(){if(!i.a\|\|!i.a.getState)return{};var e=Object(i.b)().session;return void 0

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	68922
Entropy (8bit):	7.995686533753389
Encrypted:	true
SSDEEP:	1536:WhhCMsABt20B0YWNJdFNnF1G5JRfZWFw31YuJd/kGG/+w:WlToRFNnFM5bfY2YuJds95
MD5:	F8EFE40AA8CD4959A3044E7F02F7F648
SHA1:	C32AEEFC475F30175D71B3C9CA59094E0C359B72
SHA-256:	D2F07A5A56B83963521E9EACEC57B126FEAA636C4956D4FA75757A3410423603
SHA-512:	96DBEC8274F57FD14FD3B279620BDBEDB4CF75CE0056169716932E37FE3BA4CC06AD276DD78A50704C1D0F2CF19EFAC9B640D6E958E5DDD3026331E4A23FDB97
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0521_May21Header?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................ ...(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma..................(mdat............B2...DH.A..P..T~+..dh<...U]....]>.....aCO.~..^...`E...+S.s..z.o....bY...6A).R.......fq..(.ht].S..C...&.Y...4..ZS..M.,.."zI-.j.7W....W.b...W[.b..F.%.3..>0R..+}.[\|?....\|..........p,........(_..J.7a.{...X...~......O.Zx.........}:.`...Cnr~U..]92.o.>.Z....b?...#.@.....M<...Ig.......R.....v...S..x.b..K.S.....a...{......?..N.[.xQ./F.z...J..{.eK.....6..H...&.:%C...-..........%....Y.0.r..:7.`..xg.5vE..I...X6..%..i....f...M............._.@Xi.W..=f.'...Rc.I`.<...BYccz.(.x...m}!N]&3...eL..@....R...S.b.Hi=.m.+..45.X.c.D..n$)J...G..@.........~;Z./t.....x.....t;......Y.q.p..9..V..\|.l..i=.......R.g.._2..V4JF{AcR&C%.n....P.g..GdF.. ..y[A...e.....l..F....f.TG.q.........5......Ad

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25600), with no line terminators
Category:	downloaded
Size (bytes):	25600
Entropy (8bit):	5.448672016604878
Encrypted:	false
SSDEEP:	768:RYzFZflJreLbrCS9h7vo/TMNt340KrExPdtS9p:eeLP7vobcSr
MD5:	48BE1563378F7C36BDADC0F2EB616856
SHA1:	2AA42B08FE8CC7AC0DC371D2309A38D5A465247F
SHA-256:	63C035E2F43180086B19EC08F35C8DEEE82B2B804DDFCF92F7F0E6D835957BFE
SHA-512:	6BD0492F48D247C598BB23CD41063A90C95B93AC491F80BB80FD755D004A2275CD04D0D456CDF618D70E344C74B6EA51FBD1EE3AFC62F68A91DA322A0BF9692F
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/43.7ac85d58.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(1===t.length)return t;e=e\|\|1;var r=t.slice(0,e),n=t.slice(e);return Array.prototype.concat.call([],decodeComponents(r),decodeComponents(n))}function decode(t){try{return decodeURIComponent(t)}catch(f){for(var e=t.match(n),r=1;r<e.length;r++)e=(t=decodeComponents(e,r).join("")).match(n);return t}}t.exports=function(t){if("string"!==typeof t)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof t+"`");try{return t=t.replace(/\+/g," "),decodeURIComponent(t)}catch(e){return function customDecodeURIComponent(t){for(var r={"%FE%FF":"\ufffd\ufffd","%FF%FE":"\ufffd\ufffd"},n=f.exec(t);n;){try{r[n[0]]=decodeURIComponent(n[0])}catch(e){var i=decode(n[0]);i!==n[0]&&(r[n[0]]=i)}n=f.exec(t)}r["%C2"]="\ufffd";for(var o=Obj

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 84424, version 1.0
Category:	downloaded
Size (bytes):	84424
Entropy (8bit):	7.99706403705491
Encrypted:	true
SSDEEP:	1536:VgyqtsVG+x67Qg5yFOp0CryUDkz/3ZDwJEPN/jmWIqmOY2CGeZ3E0HVWwOD5MC:yNKA79MFp2hD0BEJEPHIqDCFEEdU3
MD5:	5A1B10B435882A38BD4932A5340A5F84
SHA1:	14B99D9E9783D6F8FC7C4782A7DA4CAEDEFA9ABE
SHA-256:	06358CD1BD3C229247CCE622F8E1FA84AB9AA4BCF1DFC12DC725E34FC110D875
SHA-512:	FA58C7D88A72ADB4ABE314683C1B223C428526B4D9DF8362C07C0DCB6A4432FC66FB1C36EFB6E337A299F1932CA7C8710125DD2B219532536F846012F31E2C29
Malicious:	false
Reputation:	low
URL:	https://public.flourish.studio/fonts/2e63fb0f-c06d-45de-81f1-e0713fd76439/c8f9ef9832211172a93f4e2056e4c44a.woff2
Preview:	wOF2......I...........I\........................?FFTM..Z...t..".`..&.....s.....X..p.....6.$.... ..k..}..I[....D....}U'.BUu.1.R........1l...`.M..U.~.....M...<.7.T.9.:........U..1..$.I....D..Xk.6!..()I.IE...$c....[..4.....4...{}.Ot...ZQ.a:v.S.o>E.T.L.F.Y......L.).u..d.........V$I..S.tISV..IH..\G8L2Hc..j%..MUi.T`b.Lj..D...(.8.].y7.jS....\|.M.=. .x;.+....c.XP4..T.......H...a-.;..\O..b.Uo.v.]..].....k.qv..D..D@b.....IL(.....F..)z.d~...I........!..y..>.a.....T.:/........o..}[.^....7QR.0.N.(......I.JA.PLB.%.w3=..RPa..{.!sH0.Z.U.tI8......BH.L.....I..=....\.W.L\.9h!.'.q!.un.....$.."..ZAG.%.ez..i[....1. ...#........Z...Z...}w{^T.W.z...n...6{.....U...5#.......#.`Mp.Wh.1n.f.'.@T...o..y.~@._.:`.....Q......9...^x.t..f.#.V+K..@.y.....>.N..jS]Q-U../i.....d......nq..V..,....AQQ.B...W1..#)+P...}..-..U..T......xl.%{.S..!............e..T....lD.U.-....jv%........}....Y.?..O7.L.T....Y....\?.8}.._%..G.IZa..J.E.Wb............X..`V7).`.n..a3......0/.#.U.Wi ...d.&Z....

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47358), with no line terminators
Category:	downloaded
Size (bytes):	47358
Entropy (8bit):	5.255490031239481
Encrypted:	false
SSDEEP:	768:QHLc09BEYZldc0ydPmDLy9IlyaJkhtgcHB5qEeaLE0P8lBSAfZ:QHLcvccq0NBEh
MD5:	2D79B64B95D2AA829A460E0D02CCA148
SHA1:	112031F4E0EB04F10227A437E3A52570C5348680
SHA-256:	257CBDCB36FEB3EF9BC1C5BDB9C777AF5AE08F0834ECE8A4CE5D74FBFEB7EA0D
SHA-512:	C114D93BFEDDA3536658D0E4BBE3D3AC4F8B30AE8E9259CA29A5517E79E0140ED93BDE608C17F04107E6E3B64E9780394D214E665C057652F4631F1112698CF1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/3.2a4c7561.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e};t.renderViewDefault=function renderViewDefault(e){return o.default.createElement("div",e)},t.renderTrackHorizontalDefault=function renderTrackHorizontalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,left:2,borderRadius:3});return o.default.createElement("div",n({style:i},r))},t.renderTrackVerticalDefault=function renderTrackVerticalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,top:2,borderRadius:3});return o.default.createElement("div",n({style

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92674
Entropy (8bit):	5.288414419714851
Encrypted:	false
SSDEEP:	1536:aituX55DPfb/wFG26UtHnbTcCAC0dn4Bs9qatj9N+jpT:Z+hwFGme4nT
MD5:	16D7AE86E21434A32157D3226AC9BB77
SHA1:	6EAA4577EFA2568AA7752B00AA42523BDA14CA95
SHA-256:	6C9C6406C9BD9814CF84974221433003377B67F071EC5411FDDBCBA4EC109BCA
SHA-512:	818A9CBFACFBC15F382F286E9C5B3476C4F508B30F4DAD880309C586C8725C52CA43266E3B04912A9E0423D93DA15997F3EAE563542767EDA63321E1BCEC1DEB
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/14.e24a6190.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){function Action(t,r){return e.call(this)\|\|this}return n.a(Action,e),Action.prototype.schedule=function(e,t){return void 0===t&&(t=0),this},Action}(r("LR82").a);r.d(t,"a",function(){return i});var i=function(e){function AsyncAction(t,r){var n=e.call(this,t,r)\|\|this;return n.scheduler=t,n.work=r,n.pending=!1,n}return n.a(AsyncAction,e),AsyncAction.prototype.schedule=function(e,t){if(void 0===t&&(t=0),this.closed)return this;this.state=e;var r=this.id,n=this.scheduler;return null!=r&&(this.id=this.recycleAsyncId(n,r,t)),this.pending=!0,this.delay=t,this.id=this.id\|\|this.requestAsyncId(n,this.id,t),this},AsyncAction.prototype.requestAsyncId=function(e,t,r){return void 0===r&&(r=0),setInterval(e.flush.bind(e,this),r)},AsyncAction.prototype.re

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3950)
Category:	downloaded
Size (bytes):	107841
Entropy (8bit):	4.9769318738884
Encrypted:	false
SSDEEP:	768:Y7aCuEA6cz64zt+Yfh+cpxkpfUw/tLYCmZc+EBL9F:SaCuEA6wzoQ+cpxkp/BIJEBD
MD5:	F2A74727D38C5D61C0DE7F62F51B7574
SHA1:	6E30D81D2F5A334AA48779817F971326BC7DAE88
SHA-256:	7EDFD7AEFCDC7457254783AABEBF0C06A6FA65F58CE2FC5B1D4111A51753266B
SHA-512:	333142A38C6A1F22687ABAF526548DA0504BAD193419F57525915007B043AAF9A5B0CB774D32FD1A8AF20DA3726D587ACD6CF20487F2E95413F262C0B3419D3A
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/main-9c07bee87619db3865ec02655fc94ea3.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],[./!************************************************!\. !* ../node_modules/core-js/modules/_export.js !. \************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(t,n,e){var v=e(/! ./_global /2),h=e(/! ./_core /12),g=e(/! ./_hide /10),m=e(/! ./_redefine /14),y=e(/! ./_ctx /15),_="prototype",x=function(t,n,e){var r,o,i,u=t&x.F,s=t&x.G,c=t&x.S,a=t&x.P,f=t&x.B,l=s?v:c?v[n]\|\|(v[n]={}):(v[n]\|\|{})[_],p=s?h:h[n]\|\|(h[n]={}),d=p[_]\|\|(p[_]={});for(r in e=s?n:e)o=((i=!u&&l&&void 0!==l[r])?l:e)[r],i=f&&i?y(o,v):a&&"function"==typeof o?y(Function.call,o):o,l&&m(l,r,o,t&x.U),p[r]!=o&&g(p,r,i),a&&d[r]!=o&&(d[r]=o)};v.core=h,x.F=1,x.G=2,x.S=4,x.P=8,x.B=16,x.W=32,x.U=64,x.R=128,t.exports=x},,./!*************************************************!\. !*** ../node_modules/core-js/modules/_global.js *

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "LTSH", 28 names, Macintosh, Copyright (c) Laurenz Brunner. www.lineto.com, 2004. All rights reserved.Akkurat ProRegularAkkur
Category:	downloaded
Size (bytes):	141068
Entropy (8bit):	5.927276701071066
Encrypted:	false
SSDEEP:	3072:EMzeY39pkt2s5ePVjWlUast3d/5Ls3sJNam6UB:EMaY3UeVjm0a3GNam6U
MD5:	F8489304CCE9249B94A83C5095A22182
SHA1:	0BDA8497DCB59C58F6254CD5B7AD99D1CB24E876
SHA-256:	3C8FCF7E66C35B262A8BB74E96E8EA54C6CB7F652C7DFA5209330BD3BEF8A410
SHA-512:	3712E524369B7797E471A26116B491914496F7F47B133BF86C922E1D97B7A5E1BA55B8517B74C4826BA5CE517967DEA0B7E2515D74E7E0A1EB23AD8AD0D66155
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-resources/resources/fonts/AkkuratPro.ttf
Preview:	........... LTSH..f.........OS/2X6Y........`VDMX.f..........cmap3.'M..(\...Pcvt ...J../D...,fpgm.Y.7..,....sgasp._....&.....glyf..i...1h....hdmx...........head.....,...6hhea.H.....d...$hmtx.K5.........kern..8..LX..t.loca.&.6../p....maxp.#.)....... nameW.....<..cZpost......$....^prep4\|..... ...#.......B..5._.<...........Q.......>.....e...............................e.........................h...........................&.......................2..................@. J........LL .@. .....9.7.... ........... ". ...L.X.............{.-...2.6......._.d.N.].d.+...5...O.\.T.6.7...A...A...A...d...F...A.M...K.....Z...K.0.....<...Q...U./.C./.....7...A.&.U...F.&.X.....0.0.0.t.0.G.0.7.0...0.A.0.;.0.2.0.7.0.1.0.j.0.g...-...i...<...(...U.m.....d.z.5...d.q.d.K.d...5...d.#.d.......d. .d.p.d...d...5.s.d...5...d.{.-.......P.C...^. .H...6...d.+.7.b.....7.....A.!......./.1.S.]...6.S.6.'.5.n.....2.K.]...W.....!.].#.Z.n.].I.]...6.S.].S.6...]...2.....F.U.......&...........5.].7...d.].....K.m...m...z.5.q.d

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3724)
Category:	downloaded
Size (bytes):	5151
Entropy (8bit):	5.345664738797114
Encrypted:	false
SSDEEP:	96:1tHyJZwhUp1EBbnXVJyepDeuA3euA9XAkp:wwhUp1ID9Hp
MD5:	54B7D661AC97B31C6F9B4DE4D4470DD4
SHA1:	1C57532144A16B6649F19665E3D76EB741177304
SHA-256:	DA4C2AC370D34B1AAEFA58856952D59862C582FDC5F69D03DEA9B10F9AC72690
SHA-512:	7EB9FAB5D149D17744EEBF147F6B37647ABB3387C7197A546E85958E93907C36415B912DB1FBA8660835EE65D647400A5033022ABA331B3BD933B5152FE18A97
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/36-9d6f75d156bae8060d5447373f28572d.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[36],{1493:./!****************************************************************************!\. !* ../player/components/media/video/hlsJsVideo/hlsJsVideo.tsx + 1 modules !. \****************************************************************************/./! exports provided: default /./! all exports used /./! ModuleConcatenation bailout: Cannot concat with ../player/components/media/video/Video.tsx /./! ModuleConcatenation bailout: Cannot concat with ../player/components/utils/customHooks/useMux.ts /./! ModuleConcatenation bailout: Cannot concat with ../player/components/utils/customHooks/useStoreSelector.ts /./! ModuleConcatenation bailout: Cannot concat with ../player/components/utils/errorBoundary/logError.ts (<- Module is referenced from these modules with unsupported syntax: ./shell/middlewares/chunk-loader.js (referenced with cjs require)) /./! ModuleConcatenation bailout: Cannot concat with ../player/state/

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57440)
Category:	downloaded
Size (bytes):	261912
Entropy (8bit):	5.309869753471018
Encrypted:	false
SSDEEP:	1536:YGhpIvFN0FJ2HAE6ImWK3yi/WbHPDAhFKYWE82HRVz//9dcVq9UINXVTGPMFPKH/:/hpIdYpRyNHPDOFHWEr1hTGPMFoyJo
MD5:	8310C18AE8A2FCF58A6950E521584BFB
SHA1:	537CE0C25D1171462F5CDD6656748FE3AB9C30ED
SHA-256:	FB7EF21E8B62876F72C3417AA3DFE66F842B393DBEED4559C6AD33F56F126E37
SHA-512:	D3420AB888277C18F98C8C36850A3E69F65F4BFDB5EF7A38A40F410CF0A77B3C4E330BC7BE3BF6F6CE1ED6973D37B09522B6A30176AE4DECDC6913EE33EBF27F
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/vendors~player-pomo-701ee626bc6396c34baa5fbf11fe3f98.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[31],{1047:./!*******************************************************!\. !* ../node_modules/react/cjs/react.production.min.js !. \*******************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){"use strict";./* @license React v16.12.0. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /var s=n(/! object-assign */434),r="function"==typeof Symbol&&Symbol.for,f=r?Symbol.for("react.element"):60103,c=r?Symbol.for("react.portal"):60106,o=r?Symbol.for("react.fragment"):60107,i=r?Symbol.for("react.strict_mode"):60108,a=r?Symbol.for("react.profiler"):60114,u=r?Symbol.for("react.provider"):60109,l=r?Symbol.for("react.context"):60110,d=r?Sy

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x844, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	71352
Entropy (8bit):	7.9973376005044345
Encrypted:	true
SSDEEP:	1536:BUcqwxHo+GTUdSM+yk0SDxXR9ev95f5KgY+GiIY1CO03:N7H0wMIm1zev95f5o+GiZU
MD5:	4D5B89EDEF9EB5727DC7A1400BAA9E62
SHA1:	FCA3831C5D39D3DF2DB0C2931D361F9A7D3F81C9
SHA-256:	356D687F249FA388C69D7C4E3F69A57AC8A6A9DE21A431E3EB012951FB33A7BA
SHA-512:	F74DA4ABFA2ACF4EE406E6A213C3EAB3E77115B036362A48BFED5AD409907094E94B0788DFA62214860BC685520210295F2AC3E175754EAC31035FECBBB5604A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ...........L.>m4.H."..#R+)...gno.4...~.l...U...O..c.;....N........&y..S./....{.Tu.../...W.u..Q\..].=S.K../....W....w.....Ro.......{~Q.O./..;...k......- }...B?5..K......B~...........Q..^....)U..C.....2...~.g...<....Cfq.R.!z..y.....h.TnT..%..}.9..V..5...m..J.s,..)d..:..b.GL.p......\|.. ".t.T&.r..^.....s.t....Ks.7...9.pi....1........Wj.l~..'....k...8....."..3\|!_!]....a+0K.....J....J..J[.].=IR...]A_.8......Rp.....LB......K.w....c.@...N....T.W.L\|&..M......[..[di.gi.x_.....i\..^n..'..b8]P........5.. y.A.X..\|...\\|c...3.)&..'E......w@.Tx..kA...=,{Z;.........#.D.b...q]..H.....4.A..(G,b."....WrC.~.-(...]sZ...TI...c.Kt..cw..V.l..N;.q.$ZQ".uc../.tM.^Q.X.O,...Xd.]'.......Z..'<.wol......\|....11"....G.m.x.l.:7.R.(,....!DV.}....5.&...V/.:.N.h.Z..]..4J.._.;.>.....{...m:.^..,.g]..U.p.pV.D(!.FW..ai..............Q.@..%..P.9...n@.x.!....4D.o.@b..,?.'.a.`^..Z..!../A..*o4.T...o.SK.H...........9......h.h.Be....."....D....k.O.;.n..w..).Fz5h[...

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	49098
Entropy (8bit):	7.993668472962707
Encrypted:	true
SSDEEP:	768:aDbGYnXLRCcxaOI1O1UEK20i+rkP476YZx+jMY+i4whzLjzVrxff1X89C7qPY76D:bSX9CcxnI1O1/Ko+rb6UkjfFpjzDffDK
MD5:	085C9733615442E9C84FA86B39471430
SHA1:	0EFBE54724B768FAB4EF488EE762D12EEF85AF2C
SHA-256:	5CB29845263D0C607AA3FC062602B6B95CED3263AF5ABC1B38EE867209B91192
SHA-512:	BCCFA94248DDC579A0660503596D76B1F214638000AD865EC2C1508DF17CEE591E3525820A1F55D00FD80D0B9047570F8B73147E60E54D64E840FB4940B91025
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/corp_0417_capitalmarketsbannervertical?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......7........pixi............av1C........colrnclx...........ipma...................mdat.....f.i......2.... ...A@..A.t.g..H.....h.w....p.f.......Wl.f....]....##.."1.=#.....9:.qHX4\...t..c..`.A>..8V.z...Y..BW...tJ.e,5...w......y^....E1p]m\.Uv2.0.x.w....}...M`P..'Zh\t.\|....3d..L...g.Pz.M~[.!.N.W...."@$<. ..u.Dg...]...........G7)..&.0$.X.5i#..s..X.h......ev.....^...^w.!8 .fQ].....R...n.P.i;...&e.r..Bl.Yh)'..g-..\|8p........>z.p_Q1..9J.(....(7..e.....oW9....H0..O<.......Qz.2....Q...0....y.....k...f..'3H...."..k....Z..............wj..".@:..w....z7.q8.$.._.k..._O ..H.C@C.o.C8..]aR.....6v.ieb.X.X~..G~z..0a^.I._.O.D}..!.....L..5...3A.Uj{.F.....f.....O,.....3..................mR.L.....U.'LT.:.T.j......~.K.....m.\|..q(.....R.2.i.i^...E<S...J..z..^5/.>)Dk~.....56...?.

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32753)
Category:	downloaded
Size (bytes):	323261
Entropy (8bit):	5.3454281721593775
Encrypted:	false
SSDEEP:	6144:YDIxs1gIOQ0i3hI0zhl/7XWf2AcCKs45mlIpmu02u:YzxjelsM
MD5:	B542E87284D6620B9C962DBBB4A2C882
SHA1:	C5A1D99D3A305D12E3E6C7B4DD6B84FD45562C26
SHA-256:	FF1F077130F14059CD44FE86032C0D7C97CA0A3553A1A767B5532427F18DA378
SHA-512:	60A5AF93923D5295370FD5F41C3C8F33FE7CE0392A83174EE417B5DB4F9E7F6773EA177536F3FA9F0C169843330F2E34211A19CB5E34794E6CA9EA302F4786B3
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/launch-d1420b44e12f.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/launch-d1420b44e12f.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-05-18T15:57:01Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"EN482459dfb2c64a6fb7c3d0e82b3ab638",stage:"production"},dataElements:{megaMenuHeaderName:{forceLowerCase:!0,modulePath:"gcoe-adobe-client-data-layer/src/lib/dataElements/datalayerComputedState.js",settings:{path:"eventinfo.megaMenuHeaderName"}},"xdm.navClick":{modulePath:"adobe-alloy/dist/lib/dataElements/xdmObject/index.js",settings:{data:{web:{webInteraction:{URL:"%destinationURL%",name:"custom link",type:"other",linkClicks:{value:1}}},_experience:{analytics:{event1to100:{event7:{value:1}},customDimensions:{eVars:{eVar1:"%pageName%",eVar2:"%pageUrl%",eVar3:"%division%",eVar4:"%pageLanguage%",eVar5:"%previousPageName%",eVar6:"%pageDomain%",eVar7:"%siteSection%",eVar8:"%si

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	142080
Entropy (8bit):	7.998640102762661
Encrypted:	true
SSDEEP:	3072:ZfJAu2aOXL3A+zvRvbLBwHYaqEMXL8t65CxOdnWWC:ZCu2aK3PpjLyHaLOxanWWC
MD5:	E11AA695D7B900126E112779FB617E41
SHA1:	416FB979FD5656673AB121944F6F02D694A4C413
SHA-256:	FD1FDBE0FE6229D00D59B4B4CF0CAD22051C522BAB567FBF70DAD01FBF5CC4A0
SHA-512:	D485490D2D0D837BA55ACCAC8D4F166835A5B81CFF3E925CBCD45EAA1F9CD0342BEC2442A73B74F1E3BFDF4C0E6563E7B7FC59F155EE3C2F301A241B51241AD3
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0520_DailyUpdateMay20?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............)....(iinf..........infe........av01Color....jiprp...Kipco....ispe...........V....pixi............av1C........colrnclx...........ipma.................).mdat.....g.......2.... ...A@.Y..X.h.a.k"@......".R.C5.....q..W.aA...<#d:.Oj..Du._X.....qgz.....N......<?~.c).I........... {...05.M.g.....g..C.p..E#\O..>pmV.8j.>.....n...Z.:bQ=.>gGJ..7.....SJ..Ze.,.#.......SQ..../...y..{.l...n..qe..(;..$..../`l...8.....V.......V .!o.Q.O....v. .~..&........>d..<M..$...\.9.^;.D8..........-.u..g.....2..w...........V)....D\{.8F....e....r....s...Hfl5Y.Q.[$.......,......0..q...QvQ5[z.c..i.s...H.m...e..VO..}..Kc...-.Q...$.!.....<.2 .t1..C..?I1.ll ..n..3<..6.AH...<..)...f..%K..`Q.I..].k.#.Pvg.Z...O.m..%.}.Ug...E..5GQ2.p(...f.*G...i1Z3..i=..&9.e..h...D"-...Or..........2I...\|...#u.... 0Ih..f..7.c'.3....tXm.b.....Q....O.no.$!{.4:>.{I...Y....C.].x7...l..WZK.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=3bc6b5a1-dc2d-4c37-9337-988f2e03ceb7&sessionStarted=1716472291.903&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472282236&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	1271
Entropy (8bit):	5.184130085081704
Encrypted:	false
SSDEEP:	24:2Q+Bvk+oX/IP2iJyep9Mf9MWIMyMZ2iJRcM2n3k2RRnDbLMWhTtMXy99MJVOfMsX:P/1op9M1MTMyMIjM23pbD/MUtMXy99M0
MD5:	0A6AFF292F5CC42142779CDE92054524
SHA1:	7A4B1CB962793F47ED138A8DF2D5E4D49E73335A
SHA-256:	C250924012FDC9EA9516B30650895201CD167DBD49C9D148924F30881ABFA393
SHA-512:	A9934DC7FFF0FA59069A815C3CF795148E9A36759017037DEF66E6A228D650139FD364A004DA7A8F0706E4B28E7AA1F63A8B5F7A3BD0270369EAE9AF82D64403
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/core/wcm/components/commons/site/clientlibs/container.min.0a6aff292f5cc42142779cde92054524.js
Preview:	(function(){window.CQ=window.CQ\|\|{};window.CQ.CoreComponents=window.CQ.CoreComponents\|\|{};window.CQ.CoreComponents.container=window.CQ.CoreComponents.container\|\|{};window.CQ.CoreComponents.container.utils={};window.CQ.CoreComponents.container.utils={removeUrlHash:function(){history.replaceState(void 0,void 0," ")},updateUrlHash:function(a,b,c){a&&a._elements&&a._elements[b]&&a._elements[b][c]&&a._elements[b][c].id&&history.replaceState(void 0,void 0,"#"+a._elements[b][c].id)},getDeepLinkItemIdx:function(a,.b,c){if(window.location.hash){var d=window.location.hash.substring(1);if(d&&document.getElementById(d)&&a&&a._config&&a._config.element&&a._elements[b]&&a._config.element.querySelector("[id\x3d'"+d+"']"))for(var e=0;e<a._elements[b].length;e++){var g=a._elements[b][e],f=!1;a._elements[c]&&(f=(f=a._elements[c][e])&&f.querySelector("[id\x3d'"+d+"']"));if(g.id===d\|\|f)return e}}return-1},getDeepLinkItem:function(a,b,c){c=window.CQ.CoreComponents.container.utils.getDeepLinkItemIdx(a,b,c);

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	199
Entropy (8bit):	5.002894421530047
Encrypted:	false
SSDEEP:	6:YAngYMfYzGEY9fPUKHnZ0N0diwXQzvvwo85ha8:Y3JgzGpPxZ0NkpgTrohN
MD5:	5CD3254F79A2DFA73939946E89B9EA33
SHA1:	F16368875265B0BA8A5BDC54CD43164239AD3117
SHA-256:	3E7149D5D5048FB886C87414DD973765FD0074D27263FED34D46E55BF45AA2E8
SHA-512:	F47B5E865976FEA30B54FD1F5DFEA16F06FAAF3E03029E3A4774388B2C1596BE06ED7D70933505ACF1B7C3C43D2332C1930C691DFCFD5A565C052E1F1577C87B
Malicious:	false
Reputation:	low
URL:	https://js.zi-scripts.com/unified/v1/master/getSubscriptions
Preview:	{"err":false,"subscriptions":{"fc":{"projectKey":"e8a59e45996cead00c71c0093304a0"},"ws":{"websiteId":"62b46da73ec962008fbce029"}},"_zitok":"ac746a0716b51e6738171716472254","_vtok":"OC40Ni4xMjMuMTc1"}

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	90612
Entropy (8bit):	5.567122389016753
Encrypted:	false
SSDEEP:	1536:JbHaL6w1uJDjO+X2DZw43hR648auYsti9gwL:JwlINgtruYstWN
MD5:	8DCD3B672C0C47891A05C8FC0EBCD99A
SHA1:	4B2B7326C99E499ACAAF395D52F693184E7E369B
SHA-256:	1C4E800B5926F2EF991E77F9E390513D28DF0C187EB107FCD12FE09D80AC0ADF
SHA-512:	169DD998BA4E7B556504E68204C198F5CAB33D44E967C94BA8F8C061403107CA58950E60C216B8A79CFC38D6F725A1B066EEC2E374E59E42D281DF7B3A060C11
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/8.c896b87e.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP"),i=n.n(o),c=function Attachment(e){var t=e.fill,n=void 0===t?a.a.composerIconColor:t,o=e.height,c=void 0===o?16:o,s=e.width,u=void 0===s?18:s;return i.a.createElement(r.a,{className:"drift-default-icon drift-default-icon--back-arrow",width:u,height:c,viewBox:"0 0 16 18"},i.a.createElement("path",{fill:n,fillRule:"evenodd",d:"M8.078 16a.71.71 0 0 1-.513-.222.784.784 0 0 1 0-1.075l7.53-7.879c.562-.587.871-1.368.871-2.199 0-.83-.31-1.611-.87-2.197a2.883 2.883 0 0 0-4.204 0l-8.735 9.139c-.493.516-.73 1.012-.703 1.476.026.452.298.801.46.968.27.284.563.402.892.358.413-.054.888-.35 1.375-.86l6.854-7.172a.703.703 0 0 1 1.026 0 .784.784 0 0 1 0 1.074l-6.853 7.172c-.728.761-1.475 1.196-2.222 1.293-.783.102-1.509-.172-2.1-.79-.528-.553-.841-1.2

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&google_push&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	34948
Entropy (8bit):	4.716634553202734
Encrypted:	false
SSDEEP:	768:lanBagJmPwJGhRagJmPwJBJlVagJmPwJCUFagJmPwJBJQ7iObAjDeor9ae1hyKGL:4BagJmPwJGhRagJmPwJBJlVagJmPwJCf
MD5:	3BF94B2503B59B5845342D97EE58AFD7
SHA1:	AB97A02C1DAEABF8D619DA7362C8A46EDCE4E7F5
SHA-256:	18D560306B21AFF6897DFCC8D32C8CE023CC8F24413B5B60632EE04154D60F39
SHA-512:	E7075439DEB7951B9C3E4F4EC0B2CF8C22D9AFB7954A5110679E5AF028E70EF1790758F4B9E7F5F97D374C0106AA7E4D262A09703BF4C32F5D340E1902B87505
Malicious:	false
Reputation:	low
URL:	https://cdn.concured.com/widget/concured-shim.js
Preview:	// Set the concured namespace.window.concured = window.concured \|\| {};..// Concured Config.concured.config = async function () {. let config = null;. try {. const configUrl = `https://assets.concured.com/script/config/${concured.name ? `${concured.name}/` : ''}${concured.id}.json`;. const client = await fetch(configUrl, {. method: 'GET',. headers: {. Accept: 'application/json',. },. });. const data = await client.text();. config = JSON.parse(data);. } catch (error) {. console.log(error);. }. return config;.};..// Plausible Telemetry.window.plausible = window.plausible. \|\| function () { (window.plausible.q = window.plausible.q \|\| []).push(arguments); };.// Google Analytics Telemetry.window.dataLayer = window.dataLayer \|\| [];.window.gtag = window.gtag. \|\| function gtag() { dataLayer.push(arguments); };.// Beacon Telemetry.window.beacon = window.beacon \|\| {};.// Concured Telemetry.concured.telemetry = {. init() {. try {. const host =

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	80
Entropy (8bit):	4.33221219626569
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyI:x2pHD5YEl5k9zyI
MD5:	1AE6B27EBA211F4CFCD99B904DA88BB7
SHA1:	53CA38F083C4A21F2EDA633EC304CB4582EDEDA2
SHA-256:	961635B4E9661208EC118D285B3AC1DBF9F3CC96CDDC97F30E55CD2C6566448C
SHA-512:	7DD325AB05B1A419614C2C39224C11E1388F09BCA5EA0F56811E6842B4FB243BCB53AA2BDDE00A94FBC324222B47924152C183337EB390F58C59AC80E89593B6
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87462
Entropy (8bit):	5.262148110388299
Encrypted:	false
SSDEEP:	1536:/KRUXRa8Dgwxcy2jpBNwch96SLk8Ek2BSrBGS1ia/eEk4aV2EXi8SMpQ47GKV:/u1zNwcv9qBy1HOg8SMpQ47GKV
MD5:	E6C2415C0ACE414E5153670314CE99A9
SHA1:	5A9EEAC34D86E92E5660E0F4F87204F1ED0C8FF6
SHA-256:	D8F9AFBF492E4C139E9D2BCB9BA6EF7C14921EB509FB703BC7A3F911B774EFF8
SHA-512:	DE027062931EDD07B01842EFF24FC15FDBDCAA1AF245DCD133155FABA9E0C965F0A34DC6144CE3B149BC43B4597073C792CB6DABBFC6168C63095523923BCF77
Malicious:	false
Reputation:	low
URL:	https://rtp-static.marketo.com/rtp/libs/jquery/3.7.0/jquery.min.js
Preview:	/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75961
Entropy (8bit):	5.284364477342943
Encrypted:	false
SSDEEP:	768:QsOblXdRFlP6SupyNG6jtspnJWuUTzHUBDnBIuqoci+4cW/mK5NtUO6PnUZHBO8n:QDvFlP6Supyqpcu23O/ziSO87QRi8k
MD5:	6D77A76055D81227033363AF2F18CAF8
SHA1:	B1B94517954F8F8889A0822886DEA6F5AD7C931F
SHA-256:	19473EEBFB0672867A4438E2A015DE79FDED34B9F5AE5598BADE57EB01CF0563
SHA-512:	8E576150D0CB1FCB21DA5EC65C73EE2CB2E48A5F762C3926243471CAE4D0334F4D5B464A08C189A223E8E56D47C28323EFA4A053405D06BF35776C5154762FC7
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/20.8c21ea18.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(this,arguments)}var o=n("QS52"),r=(n("c58o"),n("h7FZ"));function addLeadingSlash(e){return"/"===e.charAt(0)?e:"/"+e}function stripBasename(e,t){return function hasBasename(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function stripTrailingSlash(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function createPath(e){var t=e.pathname,n=e.search,o=e.hash,r=t\|\|"/";return n&&"?"!==n&&(r+="?"===n.charAt(0)?n:"?"+n),o&&"#"!==o&&(r+="#"===o.charAt(0)?o:"#"+o),r}function createLocation(e,t,n,r){var i;"string"===typeof e?(i=function parsePath(e){var t=e\|\|"/",n="",o="",r=t.indexOf("#");-1!==r&&(o=t.substr(r),t=t.substr(0,r));var i=t.indexOf("?");return-1!==i&&(

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5261
Entropy (8bit):	4.966187914366954
Encrypted:	false
SSDEEP:	96:npyIc40w0auhispuVKG96AyLCNB5+jdjljJjeW5h4aF:FLr+ispq6vLGB5qFNJtiI
MD5:	26586782F0130B700CF89381F72A0574
SHA1:	B8A93C604E1E34DFEE7D45EC5503EEF93CB5DA3A
SHA-256:	F8D43DA6FE0AA8678D5569B5FEFFB6F6FFC0F389A69161B2903C4E45A7B30C40
SHA-512:	35A3F746130C13D10D76E127076D3DEE5EAEFDEC14D334F7768A4F22CF8B7ED391C05168813C3226E064470A8DAB2C26660FFD3230BB97416F6C94507718776B
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"1b11452b-62cc-4fad-8149-9b39c40329a4","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018e8a70-11da-7081-adfe-9d6a02a2db4e","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","sg","bv","bw","sh","by","sj","bz","sl","sn","so","ca","sr","ss","cc","st","cd","cf","sv","cg","sx","ch","sy","ci","sz","ck","cl","cm","cn","co","tc","cr","td","cu","tf","tg","cv","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","dj","tz","dm","

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAm9BKWLvuQg7hIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (480)
Category:	downloaded
Size (bytes):	587007
Entropy (8bit):	5.073321679842812
Encrypted:	false
SSDEEP:	12288:fIIWchPEB0VQEWUkZe4fFrcJTsI8eyPKmHpIgLt5g5SyYJXe:fvPrVQxUkZe4fFrcJTsI8eyPKmHpIgLy
MD5:	9ECDCFF8963EB1B6A536F59DFAE48A9F
SHA1:	49046D56D3B10BAA1125559EC9B24344D87A5240
SHA-256:	73372651C533D2264E2BE483FEEE4C78C043A17359E8ECB68EC62A76D209EDED
SHA-512:	0A586AE42D627B3644081A9F96C6AAC83B613C72DAF98CA4515A201D260DEF6F8D0E6A60EA1D264364058C4D647A3399E8A492D905A392214B24E75EEF428DB7
Malicious:	false
Reputation:	low
URL:	https://app-sjqe.marketo.com/js/forms2/js/forms2.js
Preview:	(function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){.var lookup = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';..;(function (exports) {..'use strict';.. var Arr = (typeof Uint8Array !== 'undefined'). ? Uint8Array. : Array...var PLUS = '+'.charCodeAt(0)..var SLASH = '/'.charCodeAt(0)..var NUMBER = '0'.charCodeAt(0)..var LOWER = 'a'.charCodeAt(0)..var UPPER = 'A'.charCodeAt(0)..var PLUS_URL_SAFE = '-'.charCodeAt(0)..var SLASH_URL_SAFE = '_'.charCodeAt(0)...function decode (elt) {...var code = elt.charCodeAt(0)...if (code === PLUS \|\|..

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	136208
Entropy (8bit):	7.99831941624998
Encrypted:	true
SSDEEP:	3072:F5a4Kaz6RqrO7Z+CTDKALPXEx/tXcUj8+nhL9NFs:VKaVqM4KALPUoUjTbs
MD5:	574ED469DFFDCEA6D0D801E9CDFA441D
SHA1:	317FEC84D15BC395654051215AF8B7465F530357
SHA-256:	BF7A4401B46D704C5A6D3CFB17C3DE94983E793BB896A496ED5DF27F4EBEB458
SHA-512:	8E100300C32B49FC1769420C91F4F704D4F7873A2D210367355607256692C9CD40A02795635C44117096EF5F0F44CDFF80BC599CB2A4308CED5E883074A09A45
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/hydrogennewambitions_1570x890?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....jg.......2... ...A@.U..6r...>K.....}I..U.,.E.".....I_.S/g.c...[8......!.j..XV....&.9.D.Mep}../.~..........ss{.......B.G..A..[.&..~..s.G....k.{.YQ.R.R.\...b....h..A. ............I<.)2........E.v.3.2..k$7 .6l.bl..C...g..........Lp....... ..D.(...<..&.e..(<....b..j.....}]%.t}...%!I.)_...w.@h.mV`..p..${.?..xh.x%[...h"x./....X..]0.......d.7.%+...C..W.~Y.~h.1A.u..........A.9..5.w.C.z....Z........A"..D.n..g.,\...h.y.`..j..1..}.0....p.."..k.U......E.....V.........1..O.D.=\pWC.;.....S>Db...U...e..w2...F.l.{........>.?..=.\|.......u.S..l....N.h..p.Nm.A...:..C<_]t.].7.V.vc~.V.Jz,..z.g..h]m......3u#>.\|..4.N....L.....x[.ee......\|..uX...P.6(.\|.QR...qNP\|&FX..#\|....kxr.)...y.cZ.....O...Y..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94897
Entropy (8bit):	5.313075200713624
Encrypted:	false
SSDEEP:	768:QlKHUAjOZ0yeI11yGbqtOZ8uH/CUU6Yn/ATdTGBNx+Jy/t58u9wVXVKGHZKA+3aA:Ql0xCVG5t3wVaTIDDAwQPOeH5cBe1+2X
MD5:	BD6DAA27D04BECD4A59ECC467A315864
SHA1:	91B6EB6B917C004BE057115EC5271AF703F81DD5
SHA-256:	84E192256D25D76F53FF70F5D839A429F7C5156196F48809C8B2E3099989976C
SHA-512:	5EF10155CBA467BA81327123742D745003E58A87F4F7FF849E2814275FCDD3A5F77894344744FFF3B604296BC803CE8E09EAFAF31DE833E945C1E0A1365C6135
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/16.968cf6f5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n("pqMu"),g=n("PjZB"),m=n("gG69"),E=n("0lfv"),j=n("3DW5"),I=n("uIJS"),C=n("LvsC"),h=n("qytN"),_=n("7jL2"),y=n("K7i0"),A=n("xwTo"),S=n("g6eD"),T=n("7BJg");function _createSuper2(e){return function(){var t,n=Object(_.a)(e);if(function isNativeReflectConstruct(){if("undefined"===typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(_.a)(this).constructor;t=Reflect.construct(n,arguments,a)}else t=n.apply(this,arguments);return Object(h.a)(this,t)}}var x=100,k=new(function(e){Object(C.a)(AgentMessageEventBuffer,e);var t=_createSuper2(AgentMessageEventBuffer);func

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31339), with no line terminators
Category:	downloaded
Size (bytes):	31339
Entropy (8bit):	5.400276740986088
Encrypted:	false
SSDEEP:	192:KaHMD5DU8gZDYLY/j/KA5YotDREoqNF/DA0YttKREtqIpCMk2UOZhWUgeyDjAtLN:K9Ds0YEz5zR+h
MD5:	1E97F00F07B87F701D0BF06259F954E4
SHA1:	0FCEDFBE2C5B8AD22E9D69905A0317D81F4B7380
SHA-256:	FF8F406B684C6674DBD3705D3F6D2CD10B5EEDBC2C67A7773F235D69EF122D04
SHA-512:	7E73388B5152C2DBAC871D2C2EC20EFD3AE71836601D4E885F649C6024C0587A96E96959286B0C6A019FBACBD43BA07A22E39B6865D88957F0AB0D85922ACDE6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/8.ab226b4a.chunk.css
Preview:	.drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.drift-widget-avatar.drift-widget-avatar--small{width:28px;height:28px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-avatar.drift-widget-avatar--medium{width:46px;height:46px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-landingpage-layout .drift-widget-avatar.drift-widget-avatar--small{width:42px;height:42px}@font-face{font-family:Brandon;font-style:normal;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Regular.woff)}@font-face{font-family:Brandon;font-weight:700;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Bold.woff)}@font-face{font-family:Lato;font-style:normal;font-weight:400;font-display:swap;src:url(https://js.driftt.com/deploy/ass

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682), with no line terminators
Category:	downloaded
Size (bytes):	682
Entropy (8bit):	5.615442168857908
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHjoTpdKEwTiUMGT2IWaEuY1GVMYBW9PO8MiI:hMiRO9Du8G9P+1Gnz8s
MD5:	E7FE9551DCD2D51B34E09453211986F9
SHA1:	0C1FA9CE5B24A104000A94F3A33AA08513B881F5
SHA-256:	53882D4137D8E872009D660A93FBC925B59A468B91CDAEDED5C20AE20CE01F6E
SHA-512:	D9281930E8ED59898D7840D8129AF6AA2331B3EF7D750F504F7FA6C6322320D569F53ED8926F2613C1717651ADC0BA276F432EE159982DA70430557BEAB1CBEE
Malicious:	false
Reputation:	low
URL:	https://11756258.fls.doubleclick.net/activityi;dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=*;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F"/></body></html>

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	7.076450021487825
Encrypted:	false
SSDEEP:	12:6v/7mJPfyh1ZortU5yfrhlVHZuDwUS8IV3+tLuUCEXfksz:F1Kha/frrO0B83tSEfZz
MD5:	0BBE1E4917388054C4C1B1194C069665
SHA1:	6BF026252B448E7306487B143E9E7FD76DCB627C
SHA-256:	12F1573458A16D43FEBA40780D9D0372E955E1D7228208A04B94772C35B94552
SHA-512:	AB80ACD1EE682352DC740F82DCA24643193BD41C05FBD7D9F74AE44767300EF46ADC0323966E467551E40EB84E671F7FD45222DBBDD6395EDE3458D3AEA20974
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/content/dam/spglobal/global-assets/en/images/general/spg_favicon_wht_192x192.png
Preview:	.PNG........IHDR.............e..5...5PLTE..........................@@@.....%..?.Ol<<<..+..-..............(..,..1....................................===.....................555999;;;>>>???AAA...BBB......CCC.. ..".....#..%..)..!..'..+..,GGG..-..&..-...../..,..2..4..5..<..>..@.!E.Fd.Mj.Pm.Qn.Uq.....................................................cIDATx...Ev.@.E.#+...P.affff../!+.2.-.w.=z..].2........................d.X...qt..m...o.6...&Z.n.'......Kt...3.3.......u..D...j.....,.g.#......^..7.d.s...._CQ..?A.. .J..X....U.../.?...H...j...g..-..p...U...`D@}CS....-.(..F...j....F...j....F...j....F...j....F...j....F...j....F...j....F......N.X9.....Y.r....kh.......v.:>{.o...,s..qGf............w.\.b5.....IEND.B`.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94361
Entropy (8bit):	5.26893388562501
Encrypted:	false
SSDEEP:	768:FT3+kw9UO7GpSeOqRlCFYRKW16y13BUNxekUG/6GUX5+M6lhrLfyZ6sMOqLIdPVK:Fai9tUNeGDM6lhrLo6szIG/2xICI4Lf
MD5:	3078DEFF8BAEBB3A457DCB7148270388
SHA1:	46B6E956DE36B0A1CA0E30B112D57BE2D193531A
SHA-256:	E8E915D83A5B62BE615DE95E65CD5182010C57D855708CD90A102EC00A7678AD
SHA-512:	910D69EF17B72C6D852C525CC6782B49F2518128FC5FB5AFCF3E9242F8EA714C5DCBEF6004A25916DEF7C55543E8A48CCF4F30F73E93CE1906BC1FBFA63CE1C5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/25.6f7efac1.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r.a.mark(function _callee(){var e,t,n,a,c;return r.a.wrap(function _callee$(r){for(;;)switch(r.prev=r.next){case 0:if(e=Object(o.b)(),t=Object(l.a)(!1,["embed","configuration","theme","soundNotificationEnabled"],e),n=Object(l.a)(!1,["embed","configuration","theme","notificationOnFirstVisitOnlyEnabled"],e),a=Object(u.c)(e),c=Object(s.a)(e)\|\|null,!t){r.next=8;break}return r.next=8,Object(i.a)({topic:"play-host-notification",message:{chatOpen:a,notificationOnFirstVisitOnly:n,activeConversationId:c}});case 8:case"end":return r.stop()}},_callee)}));return function playSoundNotification(){return e.apply(this,arguments)}}()},"76KI":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var a=n("QtlZ"),r=n("LVcX"),c=function hasGate(e){re

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	788
Entropy (8bit):	4.97617939902622
Encrypted:	false
SSDEEP:	12:jFNj9WTDGeGDe7/zZ6vMFNoFWVeq7/zZ2vMFNyIFFWtNjN9emNjN77/zZaK:5NJWPWe/NjNYWn/NHNhFFW/jNnjN//N1
MD5:	0553278F90B44682926B9A853FDDE078
SHA1:	B74F9FE14294A81D40E20A8A0AD586F22409C5B4
SHA-256:	D4B4DE2301A649E0995BD67C0D6503B3730A3D6AD0256D6CB06511497F2440C7
SHA-512:	7BFC6F623567C4C26DEA1A4974D23204B3C287F263E1C7E19345C69A066362751DFD132DD367806A2772752421D3F6796122FEEA620C1D38120986C6DAC30A9C
Malicious:	false
Reputation:	low
URL:	https://public.flourish.studio/fonts/2e63fb0f-c06d-45de-81f1-e0713fd76439/stylesheet.css?family=Akkurat+light
Preview:	@font-face {. font-family: 'Akkurat light';. src: url('c8f9ef9832211172a93f4e2056e4c44a.woff2') format('woff2'),. url('c8f9ef9832211172a93f4e2056e4c44a.woff') format('woff');. font-weight: 300;. font-style: normal;. font-display: swap;.}..@font-face {. font-family: 'Akkurat Bold';. src: url('55ccb788e66f3932fc50a629830c9f97.woff2') format('woff2'),. url('55ccb788e66f3932fc50a629830c9f97.woff') format('woff');. font-weight: bold;. font-style: normal;. font-display: swap;.}..@font-face {. font-family: 'Akkurat regular';. src: url('8a4ce7ab1b8f58166e9910c35607ea5e.woff2') format('woff2'),. url('8a4ce7ab1b8f58166e9910c35607ea5e.woff') format('woff');. font-weight: normal;. font-style: normal;. font-display: swap;.}..

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	79140
Entropy (8bit):	7.996764779613316
Encrypted:	true
SSDEEP:	1536:O/rE+lbWPCeVzjevcgLWH4ceJtpj8/sNUu1eAlppq3rSVEwsZEiMsYEBhhX343F5:aE0OF0WH4ceJLEsNUu3grZ1MsYKvnQ5
MD5:	BB1AA3BA4EA8A9BB7BB1F56A6C295550
SHA1:	AC78A5C0024FCD9A68F027C644AE837B33D66033
SHA-256:	0406877D1BFDF2A72FB71F4C493027EA1611C4B42B9A0CB0CF19CBE539EDCDB5
SHA-512:	924EF46D35D3FA1A92AA8EC76CC80F96CAFBEA95342956B4F2E8587388EEC0A07915F6EAFC4B79B382EF6DB70477747F8B4AAB759EED2E9773F208CF312B89AB
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/corp_0418_globaltradevertical?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............4....(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................4.mdat.....&.y......2.... ...A@.....1L..hVc..._P._>....7Y.....(....]Q........g....$.f..]4..1j.k.:"s.2......#.....O.?......$..U%.aM.ZL+...&.W.XW.j"3.D._.Rv5&.B56...z\|J'.....5J..k#....x=..l............B.i2.i...S....n8..d....x.Z..d.>...S....zWf.X1...^%4.3.(...sPRR\|...5E. /j..g!..:...$..L.Vg5...:..l.g'DZ..B.)X.jb..#z~...x.b...>.f..:.D.>.....F.....=f_/9Y..&.....f...C.....C.:8....}B3.....W.u.;v.i_.....p$`.v>..zJ..i.^"..U^.a.v..0K.4=.`...Y&.:%........h..C..V:.$.@....7.K.9.n.H.oO..L.{.q.}.n....;.....6<...\|../.O..F.T}\.l..c.t......Oe.T#...[..V..*..3...&M....P...w.=.....jJ..P.....+^.......%.8..D....s.._{.Xa6....S.7_.F.]...@C..H4.b..(....#Ca..O`.P?Pk_h.....O...U1t%..L1~M..._C.F...I}..{.N'.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.9707136787344055
Encrypted:	false
SSDEEP:	3:YGKcX/Yi6+4YJmQmdfYn:YGKmAN4Izwn
MD5:	EE782B1213A79574B604AEE632794EFC
SHA1:	E9212AE5228A57B389A6F023389024A94D2AA0EC
SHA-256:	25B4E974DC91D718D1B66BF120388C20DA6DFD3A886EC8401AF1C269DD169A44
SHA-512:	8A63A679038BC2F78D50E70D0E1E9A8DD7CFD1C593C29760CC0549C57162BF11643B4A5EA23FE7C1048C21D15D938D915E453780962168A7B24F2D82A9582340
Malicious:	false
Reputation:	low
URL:	https://abrtp1.marketo.com/gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472282776
Preview:	{"code":200,"body":{"segments":[]},"content":""}

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 327824, version 772.1280
Category:	downloaded
Size (bytes):	327824
Entropy (8bit):	7.997665630678108
Encrypted:	true
SSDEEP:	6144:4lcIeP9PVXx3aB+DC6C218KicG3gnhCkUR5zv/Jh4rYP7tHz:46H9t11C6R2K/WgnhCkUL/bIgtHz
MD5:	E0F1F10202002BF91422FD3768C2D744
SHA1:	EC47D73D219D2ADB2971F85450FD1824D38A2DB3
SHA-256:	BDB9CA4674E16A180AD38BA1B55EA1224A38677E604F5C5E560B85194970B85A
SHA-512:	5B0830861447D3E25D58CBD3FC65155ECAF6624B6CFC5AA5FB9115330681F3BF141AB2E749226924DFEA45DF7ABAEE3A899965C581A9A9B8F0C4FD5A4857612F
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-resources/resources/fonts/webfonts/fa-solid-900.woff2
Preview:	wOF2...................E.........................8.$. .`..T...0..X..X..d. ...t,..8..\|.~8"E.............PUU....j?.._~.?../.........;. Lf..fw8]n...7Td......{.......T...Z.(..Z.. ...y...k....g.....8A=..k"..Uy.yQ...33.q........o...U..;...........x../.BDlb..v.H.......\|mV......./kr.U?.Y.VL.$......\|..J~..Dl.so@HU....C...Uo...d.T...?N....W...]....mu.,..nC..3.aOf'....8.s...9...s.Z...#.;v.\|<Y9.....ux..L.........p{..t:..$...G(....tB..(.. ....1 ...c@D.......6.i.q>........U....Xu.........ifgg.w.$.`D<...e.Y.b.!^C...O...v..s.......y.o......$...Z..E.........D.t.....O...r3.U..EPD..jA8.k..~...a)...M=u......U..G...kw.2.}....+,.B8z..Q.....X..GH...DhK!$...}...I..C..1....\|E.f...Y.~U._.s.....}..j.{#.7"..@.F...7..{.}o.s...A..i..d......'(....F.`#..........;... e=.rf.../..\|.....U..%.K......e3./..*..?~......to.)...p......A/c..j....H"v...~..i...B.12..d.YPa......W..H.....Q..wEW.!@...M.u...s....#.2T.......B..h.i.{.iwg.v.....$$.em{....6j5..L.eL..w...[.W..!...Cf.h

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41495), with no line terminators
Category:	downloaded
Size (bytes):	41495
Entropy (8bit):	5.438627830156958
Encrypted:	false
SSDEEP:	384:LOxuPE9oBCBfonCRG8C+zNBwk88ivNcdRtg1jQjzJufN+kDY9IlFCFdtuhiWWVER:KiOmIw5O/w1DYqFCFdIiWpIBHtQFEW
MD5:	45C74D3FA24B8A401396BA502D4FAE48
SHA1:	E518CAF8A83C45DBC3D08E9BC7C50E47DAADAA5D
SHA-256:	A6971E3E82C3EB656242D1C3E6E2EDA988E6092F887AEB066F6594337A76A875
SHA-512:	7C2B6576AA2EB3E9D412561A88EEBD16BE772C04F7B8691C313AFE97AD7B01CD49CB4573C9832FC9E77DFF134CDAD6454C8665EF25428A694230C523440B79E5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/17.3c8edd3c.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",VISITOR_PRESENCE:"visitor_presence"}),o=Object.freeze({CHAT:"chat",USER:"user",ORG_PUBLIC:"live",LIVE:"live"}),a=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence"})},"+Zvl":function(e,t,n){"use strict";var r=n("QtlZ"),o=n("ILQF"),a=n("H/qh"),c=["__DRIFT_WIDGET_RECEIVE_CHANNEL","REPLACE_STATE"];t.a=function actionSyncMiddleware(){return function(e){return function(t){return t._foreignDispatch\|\|Object(a.a)(t.type,c)\|\|r.a&&r.a.name&&Object(o.a)({topic:"".concat(r.a.name,":action-dispatch"),message:{action:t}}),e(t)}}}},"0lfv":function(e,t,n){"use strict";n.d(t,"j",function(){return T}),n.d(t,"q",function(){return N}),n.d(t,"g",function(){return forceFocus}),n.d(t,"r",function(){return j}),n.d(t,"s",function(){return I}),n.d(t,"e"

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20426), with no line terminators
Category:	downloaded
Size (bytes):	20426
Entropy (8bit):	5.3336107801143555
Encrypted:	false
SSDEEP:	192:QrYSlzX09IrLtW9rCvasGXEnbXpkzaD8l9mJsQ8pVqBWxMzVVQd7V6tvQ4xS:QrbXxv3MEnKz08Fbqv7Qv2o
MD5:	14BF45603D57315E67D3B3088E7CB089
SHA1:	5618819A2910F2047AC694356A7346EE0382184E
SHA-256:	46C69925BB2ECFED2C316964BFB2FDA2B14A356AE9C9E0C01BE8888CF3B61F47
SHA-512:	6F3B12B7A983FE24338EFB84E9A10336E618FE7487F49CD878FF5E31CCFE4BBBF0151E7000705918B43194CACAC524932CE445DB5553CA051090925568462DBF
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/28.9cf73a22.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;function useReflowFrameClassName(){var e="";if(!f){var t=Object(l.f)(i.a.parse(document.location.search));e=(null===t\|\|void 0===t?void 0:t.isXSScreenSize)?"widget--xs":"",f=!0}var n=Object(u.useState)(e),s=Object(r.a)(n,2),p=s[0],d=s[1],b=Object(u.useState)(void 0),v=Object(r.a)(b,2),g=v[0],h=v[1];return Object(u.useEffect)(function(){Object(c.c)({topic:"CONDUCTOR:reflowFrame",handler:function handler(e){var t=e.data;d(function(){return t.isXSScreenSize?"widget--xs":""}),a.a.dispatch(Object(o.f)(t.isXSScreenSize)),t.clientInnerHeight&&h(function(){return t.clientInnerHeight})}})},[]),{reflowFrameCX:p,clientInnerHeight:g}}},"2uLe":function(e,t,n){"use strict";var r=n("mj2O"),a=n.n(r),c=n("7SM1"),o=n("s8DI"),s=n("8ZCy"),i=n("VkHq"),u=n("ILQF"

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=*;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	212989
Entropy (8bit):	7.999084527043387
Encrypted:	true
SSDEEP:	6144:RpaOihMQvOgFYgBHCBF11/R7GE8WZFpgR:OdhAgFYg5atN8WZFo
MD5:	F329BBAECBB2AF190F4DA500EC32ED5A
SHA1:	11F18EF2008FFF159CE64A9BC2153C988F036527
SHA-256:	0695DA4CEF4071399C6FE8D62E5F30855A56ADDC6EC6D13516337A36499BC999
SHA-512:	EE153757DDA9FB13BCED0A503E829C36D3056B5AA017EC486439B241DEE9F87D35B4A6A47C25919AAE66D93304BCC359C7429615E1A25571310A15F1D591D366
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/genai_1570x890-1?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....jg.......2.... ...A@..Pj.0....elgp.5.!.\.s.k.....x8...!.G..q-.ZV.S..h.".u}...[....).M.R.t...w..H......^V..`).....\FBQMGqc.6 \..EA..v...g!..v.....7l)W.~...Z..e I..?..].._.g...,.O.....`....2.8.I.......C......Vh.I...Y....ji.&#...$...%.SQ..}.Z.,..U...L.o.L.i.Z...;....XI...>?]'........-j.9....F....j=...2..U......,C..._...aS4N.,....+05.:d.V]S..Fp,........^...]..<`..u..L....s..C.B..j...... .]..rT..H.}O...@..A,..E...D.vo ..it......vZ"F.t.&.._...B.Z...m.h.1.1#drl.I.kR0. .g[V$..U.Y...}...,mo..+.........Mn.F..)..a..7..tvs..##.j(...'F..."h.Y.w8..a....YG7e>pi...A.2.+S'.#...~...rF.h......."..PCG.e...g...b..J.V4..].. .s..4tN..@^......Jk.6....TWBq....W.o..G...rN.....u.b..`..df..."..

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	1813
Entropy (8bit):	5.395128906931337
Encrypted:	false
SSDEEP:	24:2N101LOFfXN/k8sSONSZ0S6jQ89+lqSzk0V466OBWV4GJVW2YVjqa1TvHerO14Cf:WXNNtgcu+4oJBcNbFC71Tx1T3KOMo
MD5:	0A201F8F160F362CC4F8B50C1BD47F23
SHA1:	DB65E16E78BA0186D64BB889D166269C868CF227
SHA-256:	5E806B0ECA887E5743602EBA2E8FBD5FD2ECD90868888F3CD9FDF20179682B94
SHA-512:	D0F51DDBC2FDA4EC859D5467EF0561FE795E620B9CF79092D8A5E2D04EF12170D70E8C8749F69F471BE1F3DE172EE42FC955AC4D6ABB346A073F2F941B862E40
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/core/wcm/components/commons/site/clientlibs/imageDynamicMedia.min.0a201f8f160f362cc4f8b50c1bd47f23.js
Preview:	(function(l){window.CMP=window.CMP\|\|{};window.CMP.image=window.CMP.image\|\|{};window.CMP.image.dynamicMedia=function(){function g(b,a){for(var c=b.length,d=0;d<c-1&&b[d]<a;)d++;return void 0!==b[d]?b[d].toString():a}var f={},m=window.devicePixelRatio\|\|1,h=function(b){var a=new XMLHttpRequest;b=b.split("{.width}")[0]+"?req\x3dset,json";a.open("GET",b,!1);a.onload=function(){if(200<=a.status&&400>a.status){var c=new RegExp(/^{[\s\S]}$/gmi),d=(new RegExp(/^(?:\/\jsonp\\/)?\s([^()]+)$([\s\S]+),\s"[0-9]"$;?$/gmi)).exec(a.responseText),.e;d&&(d=d[2],c.test(d)&&(e=JSON.parse(d)));if(e&&e.set.relation&&0<e.set.relation.length)for(c=0;c<e.set.relation.length;c++)f[parseInt(e.set.relation[c].userdata.SmartCropWidth)]=":"+e.set.relation[c].userdata.SmartCropDef}};a.send();return f},k=function(b,a){for(var c=b.offsetWidth;20>c&&a&&!b._autoWidth;)c=a.offsetWidth,a=a.parentNode;return c};return{getAutoSmartCrops:h,getSrcSet:function(b,a){if(0<Object.keys(a).length){var c=[];for(var d in f)c.p

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68076
Entropy (8bit):	5.253482511347538
Encrypted:	false
SSDEEP:	1536:bx5P+lx5LhQk+9dSwgx+DFF3rUMFWgqKh20zK5wd:bnmz5LhQk+9d6xwWP0u5+
MD5:	49CE5445DDCF5D24EF3BADC4EB1A11DD
SHA1:	DBE8CF782A53824BAC569AA3EA42992DD21064D6
SHA-256:	D70FA5DC6C8BFE9D7824BE31E669528533D0879A2B1600A7DF68B880F4D44296
SHA-512:	A720C00082E803A92EF54A1829BC845B187CD4544F5B202BC98F234A4FC9401EE76B21F8CB21E4C93F88B8DD8AA63D93A03DFF5A39570DA19EB6D105FFEC6683
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/26.04e7f30b.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:function(){return Date.now()};function throwIfEmpty(e){if(!e)throw new Error("name must be non-empty")}if(i&&i.mark)r=function mark(e){throwIfEmpty(e),i.mark("start "+e)},o=function stop(e){throwIfEmpty(e),i.mark("end "+e),i.measure(e,"start "+e,"end "+e);var t=i.getEntriesByName(e);return t[t.length-1]},function getEntries(){return i.getEntriesByType("measure")},function clear(){i.clearMarks(),i.clearMeasures()};else{var s={},c=[];r=function mark(e){throwIfEmpty(e);var t=a();s["$"+e]=t},o=function stop(e){throwIfEmpty(e);var t=a(),n=s["$"+e];if(!n)throw new Error("no known mark: "+e);var r={startTime:n,name:e,duration:t-n,entryType:"measure"};return function insertSorted(e,t){for(var n,r=0,o=e.length;r<o;)e[n=r+o>>>1].startTime<t.startTi

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829)
Category:	downloaded
Size (bytes):	976
Entropy (8bit):	5.7897059725980204
Encrypted:	false
SSDEEP:	24:dWO7ct/BeWOJyc4BQez00u7CdogQjx6dir2DfGpC/r:UOot/BJOJn+Qez0fCdTQjxB2DegT
MD5:	1A05AFCA6BF3C53D1F07FBAFA2E1584D
SHA1:	9C5F6B7B04C3927C812206AD920A4B81FA21A5BF
SHA-256:	CEC2C17AB021890B5158DF33140126C63B85E49D6E718D62767CE714CFE5A051
SHA-512:	F161C962BAA9ED3353BC7CFE5E6BB51D8A960193F85C077D8CD97D3F135D63D8033E6C7DEE29FAE82FD950716E9490E49F975CC64E41422F0030A08AC9349223
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC0cfaff656108480bbe3e18182c3a3aa3-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC0cfaff656108480bbe3e18182c3a3aa3-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC0cfaff656108480bbe3e18182c3a3aa3-source.min.js', "<script>\n\nwindow[(function(_AUD,_P6){var _U8='';for(var _6R=0;_6R<_AUD.length;_6R++){var _xH=_AUD[_6R].charCodeAt();_xH!=_6R;_xH-=_P6;_xH+=61;_xH%=94;_P6>8;_xH+=33;_U8==_U8;_U8+=String.fromCharCode(_xH)}return _U8})(atob('YE9WeHVwa2l6UWsh'), 6)] = '1edd5669f11674524557';var zi = document.createElement('script');(zi.type = 'text/javascript'),(zi.async = true),(zi.src = (function(_WvM,_yk){var _h4='';for(var _6x=0;_6x<_WvM.length;_6x++){var _9t=_WvM[_6x].charCodeAt();_h4==_h4;_yk>4;_9t-=_yk;_9t+=61;_9t%=94;_9t+=33;_9t!=_6x;_h4+=String.fromCharCode(_9t)}return _h4})(atob('NkJCPkFmW1s4QVpIN1lBMUA3PkJBWjE9O1tIN1lCLzVaOEE='), 44));document.head.appendChild(zi);\n\n</script>");

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 86464, version 1.0
Category:	downloaded
Size (bytes):	86464
Entropy (8bit):	7.997342612772978
Encrypted:	true
SSDEEP:	1536:CZKkfvSB8ra7Z+5TxJHq3hJOXRbVvtuo7xrxmo3U0dB3quAmYx27g3nHOOdlVKv1:CZT6BWSZ+5PK3h8ftuo7z3x7PYx2aHOv
MD5:	DFAABCC1795B04652BAA97815CF65EA5
SHA1:	7E86395AC006424F7102D25AEBBA0491B8ACD380
SHA-256:	097610878F440E15AD9A65F3351FEB92AE64509B25C8068EE0E47D64DE4468D7
SHA-512:	049B14D2C21CA669319B8D1407802062A552F6611D317B07B99455F515F671B55C7E0A3A4D1F06C715A62C478583792E495754C0CF694EA7D401F3FE81E4E20E
Malicious:	false
Reputation:	low
URL:	https://public.flourish.studio/fonts/2e63fb0f-c06d-45de-81f1-e0713fd76439/55ccb788e66f3932fc50a629830c9f97.woff2
Preview:	wOF2......Q........0..QW........................?FFTM..Z...6..".`..&..J..s..............6.$.... ..k..}..Y[...c......J[U.....4.\.....S..w:.8.H.5r..n07.b..z..]sq.a.........u2..L..K....J...P..C..m.Mh..)W.z0D.NC...&.#5...D:\.^.S..bCq..\.j..../.......~.r^U..%.m.2.m..8^.i.Z.....2_.".x2k...DHB...p...=.........kw....fy^.e.rJ..k)n....$...;.6...{<o.q.F.4C...##2..zU.......E...}/=.B.....e...\.]N.1...w......CIp.........~..e.Q>R..$&:1#c...M...^...I..V.\|WoG@.RDci...Q..l.....K9L...s>..=......\|.X..5..N.N..3P._.'.^......8.h.#..`...x+....k.5..^u0.$...+....MU.J.h.b........&Hf.R1..UDYE...L.{Q..S........0.G{......n.... ..U..%y..".....Q.q...L...<..m...LM...({$..O.........R. \|... ....>F.n..r.<......@..@z.N.w..F$\.x....T.....d.."nw...f..+V.9..c..J..X..V.M.1..g..:.Y=....=+.. ..~~......-.'p&....cN..#X(.S.!.....S%M.).m.........h"..d.h.3#..O....z.u.@..,9A..k..K.6..<..e....NU.mp...[.......W_..{.e\|....q...?..6*R'h..o.0...?'k.m;..'...r...@.E...6..wD.."....Lg.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x726, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	140780
Entropy (8bit):	7.997926423709465
Encrypted:	true
SSDEEP:	3072:MJAC4PjvkpBIgQvlqkUkHUBfpu+6aL8rafJ3M0CHwGLdmn1FsNW:krysbIgQvlvi7fL8MJ3MlBxZW
MD5:	5721C3C275B56CFF9ED35293BE667F26
SHA1:	0E6AB88DD28417643814AFD2A4413636BA06E727
SHA-256:	6CB2259EF41CCA617637972F044DD55E241F78B5B977A18886B429C8819828B1
SHA-512:	163F959A884A089DAF0CDBAD8B6361652CE60845C13FEFFAA9B8E0A702E6F78CED3D7E08B196D74EB5638DDB000D083E15D0507A4DD7159EB777017576B20F87
Malicious:	false
Reputation:	low
Preview:	RIFF.%..WEBPVP8 .%...........>i,.G$"!.'.]x...ejw....?..1../.>uQ....\|.G........07..G..2P..zk..q...7.>d\|..W.>...u.o.....8.........'.S.>c.L...K.G]...........[.......>.........}..2.7..yzr..9..'....a...C.?.....?.........{,...;...?.t.U..}J..zY...t.o.........?.>d.s.?...~..'......1..e.....C.G.............W............?..............._...........~.?......_......'.?..(?.............._......~..3.k.....>..H.^e.h...~..{..k&..P.U.2.......\..7...g..L..W...fw..I.S...lvp..=.V.\...;l......._Q~M.6&N.H.Q.......k.o^\|>m... .....{O.L.Vx.;<.....].]B6.. .."..~..i.;-O.v,..,y.f.?.6.-..H.4...UW.\|X.....Q..6........s..,.@.......!.V.E...Y..(i{F.Dw..tg.nwk........A.....D\|\|..........B..O.3.....>b..'..gx.....b...U'.%..!.&F.....ls.GL.9.+.......Jj...S.M....:g...m....$.[@2CBB...o....x>..]..g...C.t..e.X.S..,X......\|0....d...Z...z.{x.d....m.2..A._...k........p.M...Sp.avX.......?.MD...g..w..&{jo.h0..2...A.+...R.o.\....b.}.y9<Q.....-......;\.8V.zp..sg..f..4t....K...Q1...=..^.1./.&\|C

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (972)
Category:	downloaded
Size (bytes):	1119
Entropy (8bit):	5.206020441117815
Encrypted:	false
SSDEEP:	24:dWdADct/BeWdAwvcRaQvAPPfo7u4nmiIbRtyRWfr:UdAQt/BJdAScR1APPQXnmHbvywz
MD5:	75AA9C482B6E88D331E652AC53ADA151
SHA1:	18E7D63E7B62F572633881E9917E51BDE7214001
SHA-256:	1E502CB1D8618820EF5D9D5C552062EE05A8AAFE454DEEB460C142B2E7F01250
SHA-512:	5A533DD44F154D68639024FFABB420CCAC7DFAB60B325DB9E5E88CE94D98077AFB203FD4B35E9F9F45B83EBEB9560D9952C4EEA63CFDEB01CFD9A08C3AE110B9
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCd4419d8913014a3eb2891ff8dbb45077-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCd4419d8913014a3eb2891ff8dbb45077-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCd4419d8913014a3eb2891ff8dbb45077-source.min.js', "<script type=\"text/javascript\">\n(function() {\n var didInit = false;\n var divisionId;\n var stage = _satellite.environment.stage;\n if(stage == \"development\")\n {\n divisionId = '818-LPP-338';\n }\n else if(stage == \"production\")\n {\n divisionId = '491-VNG-790';\n }\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init(divisionId);\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match/bounce/?uid=6252180897247519748&bid=9gdtmu1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	131784
Entropy (8bit):	7.998333669284892
Encrypted:	true
SSDEEP:	3072:dSTfrbnWy/RkyULfSiUgJseBu1EAvy5QTHlAZIVqgSWl1XrFE:dSTHR6CGHu1EbmHlAZIwGe
MD5:	CFA1C50887519333573DF2B8A140B58B
SHA1:	D633551FD8AA8D525F9621A7672570B76D22C044
SHA-256:	B8EFFE641B8014334AE6D9FFC97D2EB164FFD92FD6841B980588B30B523E68CC
SHA-512:	02516ECC044C5E4613D0BDD121E69B9C711A870A1FC7A93F15285FBD4EA0A359368F8EECA830F1B373817D5EDB1240D4CCF131151750A43D62EC7061A7381389
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/ai_1570x890?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....jg.......2.... ...A@.<$@6x.YH...w..uq..k.....KiH.`~.@..O.....gh..ZA.&....p.........F.\f..i...g>XL#sa......pv.Y..>......Z......D..$.........p;.(X.N.[....L`L3..4.G.\..j.37...X+vd..e...t...?....2...B.oJs.\V.X..>Y.k./.T$0.......p8^.j.Oa.G@.f.\a....%L*..Z3.g.P-kE..Umg...G....8.o/..6h....._?......m..Y../Y....\|`...-n.....P...._.....m..}...5F....2fl$...8.&..ic.C.#a....7....\|.B.\VZ.....H..o\.{Z.........<.~.%.S..(......:..@3U....-..6P#.5T..Y.H..q-.~..J."....Q.\|"H.....D0a...8.....'....._.]e....Z.h.k.42......M.RGj.Bsb <.?..P.....I.?.8..t...d}.wXP.;.5....Z.........?h..f...#....X.;`'..7#..\.L...)g.I..q:.......<.r...t.....h=S...h..9.:u.M......IuXi....d...l.a..g.....zMp.n%

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36801), with no line terminators
Category:	downloaded
Size (bytes):	36801
Entropy (8bit):	5.504920528987669
Encrypted:	false
SSDEEP:	768:EyQroEvTXje7m20ucYooX4hfKZEttukVb5ksqzzDl62N8lEg/:yBXje7lFooIjttukVWsq7l6jl
MD5:	55E11E01D3474D5BC19D85EFAA1648CE
SHA1:	0B720748BA7CB2B6044D3A968EF77F4DF174DEE3
SHA-256:	F39119C613A7B1189E7F4AB5A887D2F0D02D6E049CA73DB5A05561526F46AED3
SHA-512:	408F6ECC421362BFE5E98DA6966DDE2711226A42F390CC19DD8824E6575CAD08BDF6107970017C277D4B453ABCDF03C46B22709A01F0023F42FE23D56D100487
Malicious:	false
Reputation:	low
URL:	https://tags.clickagy.com/data.js?rnd=62fe5c0e6ad95
Preview:	!function(t){var e={};function i(a){if(e[a])return e[a].exports;var n=e[a]={i:a,l:!1,exports:{}};return t[a].call(n.exports,n,n.exports,i),n.l=!0,n.exports}i.m=t,i.c=e,i.d=function(t,e,a){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var a=Object.create(null);if(i.r(a),Object.defineProperty(a,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var n in t)i.d(a,n,function(e){return t[e]}.bind(null,n));return a},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},i.p="",i(i.s=1)}([function(t){t.exports=JSON.parse('{"debug":false,"url":{"domain":"clickagy.com","aorta":

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/29729?id=6252180897247519748
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7904)
Category:	downloaded
Size (bytes):	490265
Entropy (8bit):	5.371963923972484
Encrypted:	false
SSDEEP:	12288:Odaaw58ah3dDYXSY56BwB6PVMX8wBLk/2:zdUXwVp9/2
MD5:	17D7AF55B5A2AE92F285B08FBD27ACD5
SHA1:	7EF67A1347425363896B584C61374B396A28A363
SHA-256:	DB59A44C9800F968A359F3228C5BB6C0FFA33BE2571FF5F38A4E842B6C24CE38
SHA-512:	175BE6755F9B4C8C84ED6B29CE9D6FC1679345FA665FFBE52853ADA0394501EB281E87EFF4995049462300525D4A6B76E6CF54EEE6FDBF992384E46A54E8F939
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/clientlib-base.min.17d7af55b5a2ae92f285b08fbd27acd5.js
Preview:	/******************************************************************************. Copyright 2018 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ****************************************************************************/../. * Element.matches(). * https://developer.mozilla.org/enUS/docs/Web/API/Element/matches#Polyfill. */.if (!Element.prototype.matches) {. Element.prototype.matches = Element.prototype.msMatchesSelector \|\| Element.prototype.webkitMatchesSelector;.}..//

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x726, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	145794
Entropy (8bit):	7.998642301157661
Encrypted:	true
SSDEEP:	3072:HuDEC1G8H1QjZNMPpavvRROHk57nRQOGQoofBQJU5ulEtt5xT7uRGWq4fESkhV6f:HuDESGi6NyavvR8wTR7VFBQuMyt/T7Cp
MD5:	C4DEF06875B0DE91E0DC71BAE757B859
SHA1:	3310F01B7D811ED16913ADBF65CC8B1FC64BAF50
SHA-256:	5E8351C95A205ED926B4D92C3212B3EA6C0DBA1C6C5531C133B8B5A943CE031B
SHA-512:	71E3A475CF7BEB3C3CB367785F20BB7D8493123C7829B3A86F27F378DDA3E31CFECA5F5487FF7E270CA8FFB50BCA8A92B32A3596A50E604F8ED20E1407141FEE
Malicious:	false
Reputation:	low
Preview:	RIFFz9..WEBPVP8 n9...........>m..F.".....X...im.....z.G-3~I.n...7..\.].g.i....'...w...m.\|lO"...~P>]._....@.....Y..o.r=J..O.\|..{..@.(...._..M.....}.\|?.w.O..........?.?._.}u.../.............Y.........O...........~..u......{...o....?.O].....+.0...+}f?LxS/m/TC_..yN;.#.n:S]..hO.A.-....J}j.].(...8T.Gw.'."...aQ.q[%.\|.."..U1.).e1c.R.....(...)..BE......H.}.M..c+.......9l.....?b.......3/`._....g.:4-;.#?.YxL/.....h3{9x.............Wg..qw.....3p....Z..\.hj...._Y.6$< .x.$...I.....Y...E9..(...x.R.S.D.m)1L.... Z8.v.I..T.#!.ji.`.....{..).9...zR..I.[...C,]<2[..j..f.E..X3R.{.k..$\|c(.t.;...Z....$.1.....$.K(....... .F;.O.S..0.A..2s]]o..l..Y,...0...q.Y.&... .#?.<.......Y......U.xy.&.....wl...nR.....H...T,.........O.__.2..s..j......<....%+..q...'...{.z._H..\.(..8......=Xet..)E.........Ge-..S.....'.m...Hb..mn.^y4.=.<...W....&...0b8.v...k~.i7...0.......N.I..%.-.~......+@.l+$.f@].\|..zgje.)i).JOXw.A..8.?v.T$.SC.....m..~ u"x.j.......\..y.hf.~....O..H0.}.s..=

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	22013
Entropy (8bit):	7.986832151134407
Encrypted:	false
SSDEEP:	384:SqUh0FFEO1oFJw7pdDxrzBVUZxPArq8KM/cymOfng4LSXgMEE:Sh0LSwJM4AMzmOPgwTMEE
MD5:	619CFC75473BCD032EAF59B96E3298F5
SHA1:	7F7BF8856D2CE9B14EAC3627D4AA346486106A3E
SHA-256:	B3F294EE0F1E7BD20272111757AB31129729DACE447C0C153653C36F468E5232
SHA-512:	CF472B4D5596F3F50216F293BF88FD3BCCB1414AA4B1910B35DF3469C22C0D93A88C2D69351A275665788F6D7C956A694833EFF4B7D344835F690028E231FEBF
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0514_VisibleAlpha?$rectangle_large_2816X1638$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............T....(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................T.mdat.....'......2... ...A@.3......u...d...P3..m..h\..N.~...3So.O.\|.2C.s....d.8Mm..^....3.c>0..-3.....D.....}.!.M.:..x./.0:. ..'"'j.v.......XoY(.hB%n....w./.0.B,.."^CU."..3B.c,....1V...Rx+..hn.....(.a ]z..N./.2=.;I.Q_<....F.?b...x....v.P7.=...S......6.c0C...D.K.G..@.OU..S...J....^..........`.;.(l^&...>.L../W...[.d1T...._...4..n.@...L......i3"..).B$...jT.:W..C...}. .@.sL.%.E.^.&..p..T....sf.)..4.'......0......,.Yslx.V^>.....^......h.........X.F...)f...MS..z...Cwp..u/A_.x.>...( <..NJ.z.@...*n...I...>Z.Q-...Zz....e...l......v%...6..;..p.x..Neq.Z3<08...%%m.U.0..g-.K..=.x......(.Cv....i..3......%Id.fq[...JF..=.."...l..f.@..f.E.x]+j.2_.\"t.t$.Q1..@..C..s^c./..N...

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	3.9707136787344055
Encrypted:	false
SSDEEP:	3:YGKcX/Yi6+4YJmQmdfYn:YGKmAN4Izwn
MD5:	EE782B1213A79574B604AEE632794EFC
SHA1:	E9212AE5228A57B389A6F023389024A94D2AA0EC
SHA-256:	25B4E974DC91D718D1B66BF120388C20DA6DFD3A886EC8401AF1C269DD169A44
SHA-512:	8A63A679038BC2F78D50E70D0E1E9A8DD7CFD1C593C29760CC0549C57162BF11643B4A5EA23FE7C1048C21D15D938D915E453780962168A7B24F2D82A9582340
Malicious:	false
Reputation:	low
URL:	https://abrtp1.marketo.com/gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472293515
Preview:	{"code":200,"body":{"segments":[]},"content":""}

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	47030
Entropy (8bit):	7.995488259137766
Encrypted:	true
SSDEEP:	768:lnai7zArWqvjSPNP/ilRF0UR8YH7thf1d9SnzM5FVDpMcaXpWaCxPiKdyGAe3:rz2rSFP/Yr8YbthfhSc/lhtPNF3
MD5:	C1FE9688E95618F496C1A1A06D9D5E9F
SHA1:	BBB36275FF781FF5C5DFC22A7E2900B7BB5C8069
SHA-256:	0A1A897126937743D4B1ADCB81703844F04DE8012D2ED09F2B902AFC49EFCB8C
SHA-512:	B5D9A33C29BDA49649A616AE7CCF3E274DAEC0C934B80211CAD692647A4143C5F8D45EC17414B93A09F4BC34296D43D82A1DDCD43B010ADE561C5FFC6C0C4BC1
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/returnofenergysecurity_header_1570x890?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....jg.......2...DH.A..P.Xw....o"...\Y.{(.....o.Ki...+f.....%.qp%.F..x.L...N.=x;.5...$.....?....2. m!.?...o3M..dD.\|..Y."'..Mp;`.<2.\..z)..r~...x...3.sF .\|..^E.br..q........d.D..b...Gi>._.c..C..'`.i.&..S..+O...$f-=......~....n.5...d.....o.]\|...t...P...]...{.......Y.nM.R..........'s..3.&./.@...rs.n .0B..(..j.v....5... 4.. Z&..).....Q...(..z..A..<..o..X.NZP.8..,.E..Q...>=Y5O AY..e.7>.v..........dRR.<.....[.jd...9.....^.U.44...><!}...u...C&..V;......F..Y...-...U.h...YY.. ...mT...`.S...)f...r~...=z.O.&.V.....uQ.e.,..PV...!.2-I..-.Z-XA.B.o..!..X...`..]MK.-......b._.$c..0.a\=7..]..AWP#D..\|...P.+....A..4...0.S.a/.t...\|..;...b2.v.....$.)....f.._.. ..Z\|".........[...]u.<...SO

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65388)
Category:	downloaded
Size (bytes):	98188
Entropy (8bit):	5.131041151798821
Encrypted:	false
SSDEEP:	768:V8f3SpfU9uhPqY5sPJ38UGxws2DiQhFBEW7Q6Dca8Dse6bQzCCcI4PlOlDnr4B9B:iHh8dwbJEkYqIkZ9RnTP3IgiuCPfrXPM
MD5:	8F2B34D3E653811854C45045D3AE3C44
SHA1:	5C7AD1E37D8CD30ABA20081B37558D9BAAFAA620
SHA-256:	8D73C14B6A47616BE306B418ED2ED14A2F4EAA26F5DEB1789D41ED48176193BF
SHA-512:	09B00896DC3951618B4F64B8F6FAED64DE4EFBF24E8733E7DFFA81BF6D5F2E02D5440FF1DB073BA6EDFAD70DB6A347410406E5CEA4B30C101FD3ABF5824DAD0A
Malicious:	false
Reputation:	low
URL:	https://www.stagingciq.com/css/bootstrap.min.css
Preview:	/!. Bootstrap v3.0.3 (http://getbootstrap.com). * Copyright 2013 Twitter, Inc.. * Licensed under http://www.apache.org/licenses/LICENSE-2.0. /../! normalize.css v2.1.3 \| MIT License \| git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden],template{display:none}html{font-family:sans-serif;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body{margin:0}a{background:transparent}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{margin:.67em 0;font-size:2em}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{height:0;-moz-box-sizing:content-box;box-sizing:content-box}mark{color:#000;background:#ff0}code,kbd,pre,samp{font-family:monospace,serif;font-size:1em}pre{white-space:pre-wrap}q{quotes:"\201C" "\201D" "\2018" "\2019"}small{font-size:80%}sub,sup{position:relative;font-size:75%;l

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (998)
Category:	downloaded
Size (bytes):	81812
Entropy (8bit):	5.630611294359096
Encrypted:	false
SSDEEP:	1536:FlIIcoq6OP7AMkBNNMnFpFu696MBdSqLlRsOdswnbvJKJvSoCTxP:nFrOP7AMkPNMnFpFZ96MdOmJKJvSJ
MD5:	1C188EABF1F0749A0CFFB2C108473370
SHA1:	1333F32DE6536DE193C47D36F7EF680C0277DC7E
SHA-256:	8DDC6CBDB63A791BFC33F40D4B0A250A18E85E0AE93F72389EBDA9242BEF010D
SHA-512:	FCD4F584BCB52C7A21D3A5CE49EEFDAFEF9BC2FA22EF5F3DCB51F9BDA7DF51AA737233FFE29067CCD981E52CE8067BF53D94032C907DA00A354D62F2905137EB
Malicious:	false
Reputation:	low
URL:	https://s2.adform.net/banners/scripts/st/trackpoint-async.js
Preview:	(function(){var A=window.Adform=window.Adform\|\|{};var aa=Object.prototype.toString,ca=Object.prototype.hasOwnProperty;function G(a,c){if(null!=a)if(a.forEach)a.forEach(c);else for(var b=0;b<a.length;b++)c(a[b],b,a)}function da(a,c,b){return b()?a+"="+c:""}function ea(a,c){null!=c&&""!=c&&a.push(c)}function ja(a){return L(a)&&"[object Array]"==aa.call(a)}function ka(a){return L(a)&&"[object Object]"==aa.call(a)}function la(a){return L(a)&&"[object String]"==aa.call(a)}function ma(a){return!isNaN(parseFloat(a))&&isFinite(a)}.function L(a){return"undefined"!=typeof a}function na(a){return a=(-1!=a.indexOf("%")?a:encodeURIComponent(a)).replace(/\+/g,"%2B")};var oa=window.document,pa=window.location,Da={setCookie:qa,readCookie:ra,isOptedOut:sa,readCookieSafely:ta,setCookieSafely:ua,eraseCookie:va,setFPCookie:wa,readFPCookie:xa,getQSParam:ya,processFirstPartyCookie:za,redirectBack:Aa,optOutForNumberOfDays:Ba,optOut:Ca};function qa(a,c,b,e,f){var h="";b&&(h=new Date,h.setTime(h.getTime()+864E

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.902174814211728
Encrypted:	false
SSDEEP:	3:mMKdXwMWMRMWn:mvbWQMW
MD5:	77D289321F90913B4264BD5B41AC1FD2
SHA1:	3DDACC6583B535C6B58FD416AA8D834ABBD10B0C
SHA-256:	FC66B792BEFFAE8A7134D8E25CC45501DC4805F6B4F637564E3FB47CFB728ECE
SHA-512:	9D273BA077C74F380D2069F3BC7BF9C0A63FD9F1728958D3B96AB7B050B4AB6B4432CE5F685BF6F1AC629B461C65891649E2CB61B7FF3052C5F51F62562C8385
Malicious:	false
Reputation:	low
Preview:	GET /v2/visitors

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 999x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	89810
Entropy (8bit):	7.9980295045606535
Encrypted:	true
SSDEEP:	1536:+Sh1pvmqrDGw4NEVJ7AISCcBtCNUQ9ujNj3mP7+w4IhRFlMJRUYACOA5s5CQs:+ShrvjrDGw4eD7XcT4ap3mPYGlgR3A7c
MD5:	48C29684F98CDD68928082A8F16A1459
SHA1:	74982E1EBC6D0156774FA0AF4D0E3C7AFAF27964
SHA-256:	B171322510BC8455446959F982748AB63EE3C8A449E9442EA0BF6DAB71933636
SHA-512:	376D36C3E3B2F716B766D8E5BB2D554341B18C23F79E0AC71ED5E3DFC66856583C427CB8DB6EBDD2959CCA23A2C4E30EB1BBB0FC32A46C5F75D9C38A9D914DB2
Malicious:	false
Reputation:	low
Preview:	RIFF.^..WEBPVP8 .^...........>m6.H.#".$.Y....gn..d....RX7x..V.$...M..........b......W.....O.w....M.zhy....?.g.sO..O..C......$......o.L...aP7.?>.9.....>.........s7.^..o....j.........?...{..R.......................#......O......z.....)....^OIo.B..y....<..~..UUUUN-.N.ghn.d..d.<..d.[.h.g.m7.Pi.f.93.[....t.0..`3.R.._....R..Q;.#...s.%....4M..@..0K.6.j....3..o......X'..:{....Nwzlu\|..\|....JM.tx.;C.j....NQb..h..?Q?..3..(."a..Ro.l.A.eCX.z...;...O(x..o......`....r........-......c..<...X..'lPk.M.{o.....g.sl.;:.n..K.`.N..J,..;..$....^...k`S.....~m.X2.p....d&.'X ..;......Z....X.e..k.&..b...A.D...l..t.[...X..z.:.&..AK.]{..KGx.[a.....H+..8...A.`.-63.A.S../otf...(+m.Z..6K.+....."5.._J...C....'.._.Z........p../..<.J...2(......$ ...-:..QtL.F`..u.....l..Z.. .~..`....6.w.I.h..........=\|N/.x...t..CR}.`...~...l.Zl.. S..T...Es..e+C.K.........5D....H......~.V..P[.VQ'......vZ....":....[..5.,.}B.=E.w.$R...M..2.....2z.@...J..}ml..(Lo....B..,....#.[w.&sX

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x380, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	56806
Entropy (8bit):	7.9961904684057785
Encrypted:	true
SSDEEP:	1536:NKqYInNFapiGdK+L6B+N8NOE4JwQ/GIc6GBv8uTQXFcWQhWTPq91ghg:MqvjzGMk6QN8NOEFQ/Hc660uTQVcvWTE
MD5:	5D93D02891AD7D091ADBBCC03EA8CE9C
SHA1:	8E944A9325315089907FDDB4BF864F191B92C159
SHA-256:	9747338D0FCC1ED62DA1322FBFE9CD12F933271F70395288825FC9E47F156999
SHA-512:	D699ED8556210F0470527A485F71764A4B4AECA65EDBA9EF876E39CBBE9A14447F6FD75B5AA62C876A0710A9AF82D5B612113BACA5482396EF78E54D4BD0082F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ...........\|.>m0.F$#"#+..8...M..x...A...rg.n..>..O=.J~.lU4..\^..#....V.1..._a.1....~...O.....{..O./...........b....z...............?...."....w...C.[...f./.\|.\|.........{.......c...omo...........(................?....../.V........x".......z..../.}B..........?..r..!.^..c.Z.S.._.\-......YW+.})w...$N.I....~..)dI$9...^N....q#)..j......1J;...ay-?...V.%....R....3.K..'.._;...;....F;...".....(.w....i..L..?..<..&.......Q..g....2.a.x..4....[...g1.z...v?(\|v._..r.R......).<.nH8...f..0..lQ..M...v.7...kP..Da.o.D.w..G..T.....ox....X.........k.L...OD.Wt.i..XA.i.NX..QzF.........!.....7..v.i..g..GU.n..N5.gB.....9.i..l.....]..Z..g.v.sJ..f..r.1...?-NJ..i$..pJ.".-!...(YS...wQ../...e...}.K.,._.D............2..M.?..2.).6......<..f.......SO...$.4.X..y.H..[P..R....(.2.~..B..W..\s...0T.qU.1.[..$..5.=...uE...5)....7....].=.J..l.H...........wy....qt'..u'.t...8.......>..r.%..v7.w@...P.p...(.c.L.N...]\|..kQ...`...)..m..._K....Q.#.8...<.g.q....1.}.z..

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	291410
Entropy (8bit):	7.999199776689213
Encrypted:	true
SSDEEP:	6144:rJCs85dCjlcCHDQiAZK9XsXKazW6PMxZZUF3qFuT55ftu95UV9JuC6jvZkB:tCVdelVAZKdsXKD6Ux7VsTXf9V9JuzZi
MD5:	CB2FAA8F6D783AEA3BF1A35E653978D0
SHA1:	65ADE6DA2FB948004DAA1BC811E2C29A2596F0D1
SHA-256:	5AD9A3889F528E7F45582037E302D4A12BE08B2CB8024DD79B930CF732B4EC13
SHA-512:	4AE3A3969B4C1223A6EDFB34136FD68F04C5EB66DDFAFD3D352B77B32A4C1534AD0D00A54B3FAA9BFBB2DF6515EB1315083902DD7036B679515F782E8862E176
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/supplychain2024_1570x890?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............q8...(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................q@mdat.....jg.......2.... ...A@..6..R+:..@'N.B...7.H.....)J..l(....A.....Tp_.t}]....x.......^`U~TI[..[....h..BFO..........1BaRD.]..H...._....k^.....!..........................._Sm........eBJ..e8.....2......\|6U....Y2IG....Ps.A.Jg'.S....u.6....].....M8........\|.I"/2.......r...5.j-O..p.4}1.j.:K-....gob3.z...C.K,kS@...qH.&...5BD....\|..=..$@...".... .F..v.......j=..nO.....{..n.0..`).....YU2.H......Ul....`.}.x...V...`V;R.hv..%<'.....sr...h.c..:@.M1.-$.Y.![...E..:....d.l.H.H....6..h.@^.I..&.`{D...........eVv..0v...t."....^E=Y#..t.._I.Nu..V.~I.}w\..xE..l..7B#....k...L...9..o...._P`....K......X.u...{..>#..B.E.!K}.F..v.@.....X7......&......m. .N....e.*O...P.C.t.....Q5m....T.'.c.D.[.....u:..5.u..;.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	178237
Entropy (8bit):	7.998924076310636
Encrypted:	true
SSDEEP:	3072:8OWA+xHIk2nyLeM/ifS7qF1lGQlCTPT5vkb8qSGaI9eZIpE+nCLPu0tFON4jg7wf:8q+lIk2y8bflrlCTPT5Q7a5+pEJztG4B
MD5:	98347E19E1ECAF0DBEE89C5C46E36F65
SHA1:	FD3760EA28DA9B86121C6C4B020A60B562691E36
SHA-256:	6136DE7ACA65310517103FBF920560533654453A6BBF8B4909D3A27C0E5391F2
SHA-512:	278F73EACD24B771DDC3609FD5EB983A5FEFB5C0041811263D1BC989AA32E09BE47E090A896BDC02F92B7FA39D82F815EC4B1563A8F67ABE983B4E3724070F08
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0416_economyvertical?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................#...(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma..................+mdat............B2.... ...A@..A.l..v.i.....J]...3..z..LH...9.....u.].^...~....H.a...>.s..m.C....T.U.)D.....n_....sa/.....p...i.......Jb]f..j?...O..w8\..4..H...K.n!..3$.8.......p!.b_N.~.8I{.$...:..{F X..7q..I....:..0....r.r9.m..QK..}..~B.e.H...m..h@....?...Q..[.V..."A0h..QRd..G.V...t".4. .?g.{.-.O.........p..Z.......u.S\|{..?.8.^.&?r.F..D.j. .gQ.......S......c..6............3....]!..f..T2.!$...f...;.qL.h.."...#.x.+..z9.@.B....JO...k..m?..R..\|V.?.M..-._.',I...hT......}j.Er..~j...L.l:.V.#.B....,>z...W.^..4l.k..i...]F.......~..9./.M......f...Qv...$W.%.z..R7..s.(.......v.r.....CpX...`.....z'`.s..Z.\|.K.....v.5;=.l...A.....,..V.E.N..:Sha..ZA.....Gmy.f..x...V..._..(..>...45.r..$g.\|j.....jLVM<EE...

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	263759
Entropy (8bit):	7.999271193034125
Encrypted:	true
SSDEEP:	6144:SLoAYFr/+6TQZrbHUXKkkQN1TwpwrX0+rIz34az5F:SLnYd+/cakky1T46E+qV5F
MD5:	BCE8FEEC8514A4954651646AA58BD64A
SHA1:	30D54F1BAC590ED9FBA00AFCD190FF2027518A70
SHA-256:	B88571A01C247496161D1920E9EFE16491C3E07D0314A556DCFC587DB8B2E9CB
SHA-512:	CD02991F01F5930EC4C9907B045E3E7DD7876A1DD1E0E653982DFE41F32CEE7B350E87E5E69AF99ED9639FB968D5DE7EFC80DD09E893A1DE79B6096178A6A475
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/corp_0502_geopoliticalrisk:horizontal_16-9?$rectangle_large_2816X1638$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................5...(iinf..........infe........av01Color....jiprp...Kipco....ispe...........3....pixi............av1C........colrnclx...........ipma..................=mdat.....k.e.....2.... ...A@.....(k.s.7....UE.h`,...S.....Z;P.<J..J.xq...u.(l..6.......5...x...!._O.H......./..^ :..`.P..h....x.w...m.....JJ....G...n....z......p......P..K.. u^..x..$./T.c..5....,b.hI7.71.%.46..FW....'\.H.&....;4,...$p_..T..`..fI..s...r/............<........+y.pP....z!..2.........6i}..W...........$R....P..'.ZC.>.O.~.E..k.lUUW....z../E.Q..#.....p:\.!.0H/..}...R.=L......t.f%...+.H..)R..8.6...C.f.Z?....9X. b.H..\\..;,...V.by...jvb..I;....FgY.....Q...':.%..EM.......@R.... S.V..&..j.Ah.q.Kr...X\|.X...h... .6..K%.N..;k../..a.z.N.4Cxno....].N.7..D!.e...)......Al0.....j...p.S[.pk.&.E...7SL\7.4..:..}......3..1.5o..a.O{..C%.0.n=.$'..h.N.m!?#.8~..K.w.,J.@B'.&'o......4.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x440, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	30028
Entropy (8bit):	7.993733864308761
Encrypted:	true
SSDEEP:	768:r28Gz8sZITgT3aUIn0FgPBpB4dncu2DozHpOEoAPrR:r2RQPcT2EEBpBqncu2DAOEjrR
MD5:	498F2C0B59C1C4652A1C7117D612DA10
SHA1:	7D9264E5E95427EC0EC084CA4C6F25DE7AAC6DAD
SHA-256:	3ACC12F8634F595DF4034402348CBEA76FB0ACF34E4716069A4896BF6B6D2AC9
SHA-512:	E0113962D881D4231FFCF0DBC23D58695C8E7EDC7C857F427C9B503AB5806327B1158E07F9905FB37F48D1929A43BD7736363A7D233D62304932E642B9F4B81E
Malicious:	false
Reputation:	low
Preview:	RIFFDu..WEBPVP8 8u...........>]..G#...#.y(p..gKE.=.....&..j.@-....O/..7[.7u........./.{.........;..._=.~....~...o.k...H.D>.L...y.._.I...o......./.{M.......}..S.....+?........o...>...w......}.=...........................G...{....N......................._.Q.@i..XqJ......T.0.......xQ.P..<...0'F..d..&={R~...3.of).f]S2ul..j.o..I...) &M..._.......>.0...gh....&FJW.i.8..Jv.......:.E=t.#..Tk...w.$.q.O...c..t8.u..OS?.z.d.MR.kS.\|l.\.6..O..y..,Y9S...p.aJ..\|..~...U$.g}..... ......6.(iH... ..A...$.E......R......\|:.CA.j...62H*.Z ...."2..U......d...(.R..#@...7y.v.........U...].\.[......_.uC..Y..s....&...!.oT^..7.h.....~...nI..J%.i.4......x.........W.s.x.}c.N...6z...9.X&VZ........Ys...._.M!....nz.Z.[m+.O.dw....'...A..q)..(.......9B^.zR..@ge.y.u.......D.J._.B+.....dd.j...9.~....-I.U..z.=.._.myV....g...=.....T2....`;.5.ZM3.....)W.h..........Wq.a....V1\..E....4...7d...!.....'....ux..:......!N.b.C.&...3...7lT.W.Q.5..O..6._G.?3@R~.....Cy..&Q.J\|.

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	5.1572281590340445
Encrypted:	false
SSDEEP:	3:758vjmeUfeYFGWgOFFd609GWgOFFduCNPJaZGLL7GuFt6ZQ10AYNTFkyVKdvn:l872fRwWwYsIauLpYl+v
MD5:	8318AB0804EDE00082C9380DD35EE0F9
SHA1:	4E51666D012D5C96A99F16B0FBB794398082D951
SHA-256:	B6320E221B61F50FDFEE02E86288ACA6B426795DD014C5ADD80FCEF7632AC6F8
SHA-512:	4A541C141E1153CBAB86534015D3F42E48D742726D5B0B9A7AF13DE8DDBCD4114855CFD8BBDF5CD239F5D0C256E9F92293EBDDB91A92FB301FC94224B57B314D
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/stylesheets/6-0717fdb4ed99352542d9c348ee42305b.css
Preview:	._1l-KU{position:absolute;top:-1px;left:-1px;height:calc(100% + 2px);width:calc(100% + 2px);cursor:pointer;background:black}._1l-KU._3OgU3{cursor:none}._1l-KU._3-9KU{display:none}..

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	143827
Entropy (8bit):	5.2728269936890255
Encrypted:	false
SSDEEP:	1536:gj5y7+PGFku519ng56kBBBMPEdGga95jg55VcCmBY1WcDguSSlHtRIzL7B:w5AVBg56kBKRCmBYcwlHtmH7B
MD5:	F8DB3B2FF42A5B333288934251941231
SHA1:	6347ACB24BAB719A7E9201B2B19F99894B374CE9
SHA-256:	829E843D32553B83D83E032EBB6A83F17E6DE8AB7C6E7CC63EBF791ACFDC9A36
SHA-512:	953B9129FFB1FDE39E783B3B312AA95EBEA14A7FAFC675FDC18EFA41AEEE6C61CD98DDCB0233DDC0C93A55D51D5B945C6F27E50A1C610B5C059C6A363A0C3464
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any web site, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.\n\nBecause we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	98492
Entropy (8bit):	7.997743084407139
Encrypted:	true
SSDEEP:	1536:jHyW+7YlN7ndOhJu0KVTPelF5FsrkRLa/XWXcR7Qz80XNBwBDE76YOfEOo/s:DyWNHndOJF3sMeXecR7h0904Js
MD5:	73EFC2D4A801782AE4266C435ADEBB72
SHA1:	BC3AF77525B50ED03D57BBCAA8B124286FACB2E0
SHA-256:	826B4E58A3C4E70442DFDC36BE13C913772B0A25317F54DA08E571BA382F0DAC
SHA-512:	6271906ABD9C8C1AACD555405A4C0DA38C0B68F576F26B76DB7B7AADD144BA8253E1AEE43F9D0F31070875AD759A06C4658112DB09165DE4271916B6BF11BCAB
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0522_DailyUpdateMay23?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....&.i......2.... ...A@.....N.....%......g..R.6.{.......D.V.R4.Q...1..%4<[..w}...P@8o..5Z..I..s.\|.G?.2.~.M.mQ..Rn....L-.....Ss.Kf7dn....E<.%o..'....;0..vn.g.mD....\|~...7....d..if.e...ZB..o.G....v...x.x.S.(.......c..U.~E2.[...........^..f......W..."..j..0...(.z-..>2.{C.m....E.e.S5.._..j...R....@.h.X..~K..O.......81z.I.........;]l.^......%J..0..u.6V/.7uZ.._.../.p...()O........2......l.....b..a.........nNP`E.1E....]+.....6..&%.+..y...).}w..y>...^{.......OtRR..k.%....8MW}Y.{.[.f.5.0..C.....M~...L..Q...E.....O/[&A...m'..:.8.Z7.~9dx,EbB..\8i..7h.R/..<.4........O-.%u...&5......z.m.\A..%..0M.N..>..pC...~c.....pcd.:.\....PwP.#.B..E..k...:f.{n.d;^.^t=.3Id..c.tci.h\|.?...h...X.F.9n.

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15200), with no line terminators
Category:	downloaded
Size (bytes):	15200
Entropy (8bit):	5.059000389893936
Encrypted:	false
SSDEEP:	192:0HoHrLMipwjLW+paqqUi8oZ691YDuGNSSDrdGKJUjBDNf3XlIfL2olDo3IEDwX4S:VrLMipwjveUi8obJlJUjdbol0YE8X4S
MD5:	3005F66B68E577AF1DC37FAC16AA04D4
SHA1:	D54A725EB33BCEC2B7CC178B9646BFFDA0F953F0
SHA-256:	7E9C4F7067E9A4775D2E8CEE2E91B5A1CE51863EDB0AA148BE8BEB8D86CD1E86
SHA-512:	7275ACBB21A2F8208156E1AF6CAA5D8E773540A8C13F69580A7BEA1A15F1F1D26B6A2C3FA8D5792FCF0C7F02A1F2CC0B5538627127CC6BDF6CFE8151C95C30C4
Malicious:	false
Reputation:	low
URL:	https://js.idio.co/1272.js
Preview:	/* 2024-03-28 /function deferUntil(a,b){var c=arguments.length>2&&void 0!==arguments[2]?arguments[2]:10;a()?b():c>0&&setTimeout(function(){deferUntil(a,b,c-1)},500)}function setWithExpiry(a,b,c){var d={value:b,expiry:Date.now()+1e3c};localStorage.setItem(a,JSON.stringify(d))}function getWithExpiry(a){var b=localStorage.getItem(a);if(!b)return null;var c=JSON.parse(b);return Date.now()>c.expiry?(localStorage.removeItem(a),null):c.value}function formatDate2(a){var b=a.substring(0,10).split("-"),c=new Date(b[0],b[1]-1,b[2]),d=new Array("JAN","FEB","MAR","APR","MAY","JUN","JUL","AUG","SEP","OCT","NOV","DEC"),e=c.getDate(),f=c.getFullYear(),g=c.getMonth();return d[g]+" "+e+", "+f}function RelatedPostsWidget(a){var b=' {{#content}} <div class="item idio-recommendation" style="height: 177.94px;"> <a href="{{link_url}}"> <div class="radate_info"> <span class="info-title">{{metadata.tags.article.content_type}}</span>

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.107.100", baseline, precision 8, 1280x720, components 1
Category:	downloaded
Size (bytes):	111700
Entropy (8bit):	7.972625041982117
Encrypted:	false
SSDEEP:	1536:8daTZd1z/aiKsFGBZ9QDui1wq8dn53zPAr08UfosDsD49t/or/Vx+nzsCa6WGuVy:BLz/aM4B0a96coEa49yRx+zsTGu8UcPJ
MD5:	CCF2308A14B197CA486BF2E5AB282EF6
SHA1:	77FD1A066777E8978DC58EBE14BA8A7636D96ECA
SHA-256:	162C70A9F5906440F603D19898D81A574F724B23C8CE8CFE6F3E9314D89CA54B
SHA-512:	F7B23D45E3643BC7BF728B0EA7E5EFD6345AE5E60AD0D158AC77A4F9D2E7268A6FABF0C803ECF8E411D0003951C5D0F82868086F8CC46408CE54D4D3EDB319F3
Malicious:	false
Reputation:	low
URL:	https://cdn.vidyard.com/thumbnails/jWqYTL70JBGZA_wGoN5WzA/7e5d6d1b3cdaa7e4a5d1d9.jpg
Preview:	......JFIF..............Lavc57.107.100...C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=..............................................S..........................."2.!1ABQRaq#3b..$Cr........4S....%.Dcs....T..&5..Ed..t........?..9...p.x..V.N1...L..-.......X...w.6.\|.c{......Eh.!@vQ...h...ol.6-...v.)....\.7.x.....C.....ofi9qne^..o[a..a...WO...}..A!e....tq.C.1m.....\.k4[K>.>O?'!..k...X.^.rV...{H...c.....E.t.($..Z.QZ..G.8.y...QV..._...3x.>.......`."..>.{1p.G_6...S.?.y.....u....U.uC%i...l.......Z......q.\|}.~..w..\..:I..!De...._.EA...h..g...c.u..T....e.x.........&.....jKP.v!...^.G^......I.H.JO4jt+............S...,.X...<..S...UH"I.1+q...R.w..H.<........xHy.5.Z[....c.a.,{]N...}..H..G?v.7.D.fa.Ygt.q..O...Qz..+.S.0.>.xD9. <..V..fCO......r.[.>58.4.mb.. ..U..)G.....1V .6.-..UWv......eh-..a.....4...~U...N..@].2,...`.......a5"@.`.>..P..}.[&....Njpi.Z._..}$.p....B...Kx..3.j&..F.I.H.......7-!&.v$c......nN....+...e.W.%..[.j.6..'...^......"V....tN.9...

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://s3-eu-west-1.amazonaws.com/adality-cdn-content/pixel.gif
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (64798)
Category:	downloaded
Size (bytes):	918211
Entropy (8bit):	5.545026322504997
Encrypted:	false
SSDEEP:	24576:+svlQ6BIELDBsmx5rxZoo46CrfeVxi9s97GU04OQ4:+s9PHDBs45rq/rmu9s97ZO9
MD5:	41B241F829D0F5CA648192192850ED76
SHA1:	DCF0E184D89F7C5A1D6FCFED163DBF9E812BA34C
SHA-256:	9161F9B6E6D03F7EABAD77EDB73C4260B49FFA87F34C61A4B2A595F39FD304DB
SHA-512:	7BFD77572AC93F8D4CED1648446B13383DC2CE14807D393270516477C8513CCF17A65964C40708204DF1B1ED03EF349CD68418963FB28F430DF6A7955C2BC2D7
Malicious:	false
Reputation:	low
URL:	https://flo.uri.sh/visualisation/15507338/embed?auto=1
Preview:	<!DOCTYPE html><html><head>...<meta charset="utf-8">...<meta name="viewport" content="width=device-width, initial-scale=1">...<link rel="stylesheet" href="https://flo.uri.sh/template/20762/v21/static/choices/styles/css/choices.min.css">...<link rel="stylesheet" type="text/css" href="https://flo.uri.sh/template/20762/v21/static/bundle.css">...<style id="choices-styles"></style>..<title>AI Banking Chart 2</title></head>.. translateZ(0) is a workaround fix for an old bug that resurfaced in Chromium v.89 that causes visualisations embedded...in story slides to become invisible when they are scrolled out of view. See https://bugs.chromium.org/p/chromium/issues/detail?id=335442 -->..<body style="transform: translateZ(0);">..<script>window.Flourish = {"static_prefix":"https://flo.uri.sh/template/20762/v21/static","environment":"live","is_read_only":true};</script><script>var template=function(t){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://cm.adsafety.net/?_cmsrc=adformx&idt=100&did=6252180897247519748
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/ct=y/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 110932, version 772.1280
Category:	downloaded
Size (bytes):	110932
Entropy (8bit):	7.989681495417978
Encrypted:	false
SSDEEP:	3072:82PWC7zr1vmK5RbyGh4vlpvQKxMS7PpZW:8eLr4Kfh4vlvZ7e
MD5:	F022FCA674F561D3F3F9F187A7FA3222
SHA1:	9DC6A6750E7D1B22FE3AE3FAB7BD13ED1452915F
SHA-256:	063B9237E402C98DFB77A66E5DE0D02D953640FC8FE44911808C2FDCB80DF26E
SHA-512:	07F73990F6EAB6F5FB92EBED9F3478E4BE91A9160A3786D681B5E967951D8D586A341AECA58587479C0368048522422E4A9DAC0C763D4610ED8285D5D305EEC2
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-resources/resources/fonts/webfonts/fa-brands-400.woff2
Preview:	wOF2.......T.......8.............................8.$. .`..d..L....h.. . ..kq.........eD.I...UU............../.cw@,.q=..O.......=.#NXE.v.%....(...=.Ju.+.`.E..N....`.7].i...............\..p ..Mr.......I{.q !..7..RI..'...3j..3..O....Q....C8.o..hF0.,[..N....I...&.....c>.~.......}@.."..y......K.B~U.u.zU..g..{&.....?...0.YI.F..`.(.0....5`H...e]]1..O.O.un...Q=.~....#..O2..gh)?.^.2g...@.e..@..6..m........(.$..9..XN.;.).g)cE..Y.+.q..M...q.8g..9...t.]...H..Uf.......B<}J,.w......)F(].:WH[.y\|%...0......2~f..Y.#2.Fd....#.j8Y.to.d.....p....]..Q2.jD$.s6..9.....Vd.+..1...4{..W..=...4{E.Q.0g.[.[.$W.3.1.p.!.g.?....k.J..@.[2...R.@<$.X..M.L#Q\.?..MDW=..C.Y.8..h.Il..L.."....L.:.....L...a.......Vy[.e...FQ2.8]..Y......G\|......[g'e ....p,...N......9?..G.o.h....7Ap...[.PRh...;..?.r.L.ht....l:qd...u-G].(WN.j........\Q..V.7...UdE ...K....).t[m!ME..Y.7]...j.......+xzR[..L..<-s..nS...1.0.L.cN....N..........u..ba)..:.hK......CO...XF;ht...9...dy.C.w8.:.dT..c..(Q8..0.+...

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35552), with no line terminators
Category:	downloaded
Size (bytes):	35552
Entropy (8bit):	5.272922801597397
Encrypted:	false
SSDEEP:	384:zeUUsSi7WTPK47rBtSTECq0XBkpurOMiQvNvvFJcXkryfGvWzo2t8YnO676kg5+n:pYichBgol0XadAvFgOvHzUW7S
MD5:	C6F58DD3D60F07462254B842DD4F9CA1
SHA1:	62C507FC6CC05F9732BCD5C593F3D8D0E0A3D7E2
SHA-256:	2A8A441D8086F20A64563EDC759ABA1DE84D932E34FF77B8BB0279A730CDB428
SHA-512:	21BF35D36D4859188BF32B21F84B71975B72503C72F5B64D7AB98CEFB58045F3F991960CAF9E8BCC95CDC284C6758DB639B4087750206450076263677CA4513B
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/9.4a3e9801.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2:return function(n,r){return t.call(e,n,r)};case 3:return function(n,r,o){return t.call(e,n,r,o)}}return function(){return t.apply(e,arguments)}}},"/GqU":function(t,e,n){var r=n("RK3t"),o=n("HYAF");t.exports=function(t){return r(o(t))}},"07d7":function(t,e,n){var r=n("busE"),o=n("sEFX"),i=Object.prototype;o!==i.toString&&r(i,"toString",o,{unsafe:!0})},"0BK2":function(t,e){t.exports={}},"0Dky":function(t,e){t.exports=function(t){try{return!!t()}catch(e){return!0}}},"0GbY":function(t,e,n){var r=n("Qo9l"),o=n("2oRo"),i=function aFunction(t){return"function"==typeof t?t:void 0};t.exports=function(t,e){return arguments.length<2?i(r[t])\|\|i(o[t]):r[t]&&r[t][e]\|\|o[t]&&o[t][e]}},"0eef":function(t,e,n){"use strict";var r={}.propertyIsEnumerable,

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	5.001227981035365
Encrypted:	false
SSDEEP:	3:InjZoS5NCkuSb9inuSb9inuSb9inuWfQDthbKiKy+pYk1GUpYk1GUpYkn:8ZoS3uSb99Sb99Sb99WfQV9rC
MD5:	EC686AB7E6E5E80DA994E7EF324D0591
SHA1:	0D215B6E14BCE02429523C2E0312A58428434373
SHA-256:	AB7ADE487C566F7F3C5F9EBF9A367CB90FC2BC9B37B30DC37A04854764A1D92F
SHA-512:	B466D04E1E872FB517322F8C1412BC5CDC969D682468F9B7FDA5736EED5AA51D6E5016CFA8828C95C8BE5C8B7D50DA10841588AA8311D2FB6C70748BA94DF7F9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAlKBlYKzf_1NxIFDZFhlU4SBQ1nZ7P-EgUNlJCS-hIFDZSQkvoSBQ2UkJL6EhcJriRYCAcKtnISBQ2RYZVOEgUNZ2ez_hIeCZpK-PXnds2_EgUNlJCS-hIFDZSQkvoSBQ2UkJL6?alt=proto
Preview:	Ci0KBw2RYZVOGgAKBw1nZ7P+GgAKBw2UkJL6GgAKBw2UkJL6GgAKBw2UkJL6GgAKEgoHDZFhlU4aAAoHDWdns/4aAAobCgcNlJCS+hoACgcNlJCS+hoACgcNlJCS+hoA

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1270, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	106974
Entropy (8bit):	7.997785372608694
Encrypted:	true
SSDEEP:	1536:Yp3JKtf5lLKa6obpb2DDeBmzE1ub7A5RvIAAA4MvFSg+uZSgKQ78guRDAIvq9kWh:UEhPb8WTR7iAbAg+xkuRDdqOW+2e6Y6
MD5:	0383A66FC1A7C8D1EE853AC4A8CAE368
SHA1:	A1C5239367911F09A37249BCE998E4A715956960
SHA-256:	B89B9C00A991E3A2DADC55F4F01819137A20971F15A891734B6923ED3F6E3AE3
SHA-512:	E9BD6A0755325316FBBAC7E62BE628B5D1E4179DA15412E98A7A4E55D5E055A0474F425C0E4971D8535F2616140F9ACC70C8844B3A3DD858A5AB780498213F50
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8 ............>U.F...)..z.0..gn......H.o..........$?..g...ya....M.....1.{..G...........6..7.....O}~.?../..9.n..x....O`....?....'.../^.k?.u....3...G.?.o..b.U............[....a..?...tx...?...'..P..XO[..^.~w......[.....?......_....A.................=Q.g.C................?.m...........\|..w.....O...?.{.?.?.?..........!~......?........q.+...O..]?......%...................G.../........[......./....o>........o........?...7...................G......._.........@....2._.E.b.D.FS.o..U=..........A/......_.....Y.._./..Q{.0.......lro.$.HP...S./.H.8..p.Zmxo............o.@...9A..%._\...R.......[.Y....5%.rh.C!.E+)_..b..!...#..1.a............Me./..x_..5.]./..u.z..j....$.....lcm...,.....J.A.R....4&W.QVJ.+...kG..:..Rg.>~3..j.,.*h...z.d .+{...<...W...9l.....K.q.....G...8J..........'k.s..z..m..Q.f...Q.N.../.&B.ru.C!.J\/g....@?. T...a....../.tL[).8.....e......q..<.V..y..~....E.ECo.....W..-..G.^-Q....v..c..Y\|.)GU..L....}~..yVR.._r....\|.oya.R...~.....

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	262828
Entropy (8bit):	7.999141988792897
Encrypted:	true
SSDEEP:	6144:gfAvKzVpbrwhbfQEzDPzbacBIdyXJto+juxt7iJhR/r2WRCLR:gfRp/2ICzbfSdybgtWZ/r2Wkl
MD5:	DF6FF0E0759A0B8F0116E82F42025B36
SHA1:	35364894F74FD0D774B04610881B0B01C8C20D77
SHA-256:	422BC90D792C0B0401DB4944EC5D6CD4D62586DAA19C749167724D5C90A4F8B5
SHA-512:	4F554E922023CC7E1879DB20155CC662195311CAE1EE3C155B37A6DC7ADD26F5E0A34A577295DAE280519F80EE93615EDA0D3FD09E3F6C0279EBFB5596FD8189
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0507_SmartCities_banner?$rectangle_large_2816X1638$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe...........V....pixi............av1C........colrnclx...........ipma...................mdat.....g.......2.... ...A@..5't\|.R.A.).....hKr....o9P<..b..J......zZ..o.p.:......hj.7..o.,.^.....)p...~....).,......P..{....(.}..K)./.q..aZ.D....Ip..Q.....g.k.N0.$..........._.=H.Y...........NF\..f..+.}.T.^n.{./7 ..>2{.csK...C...E..)...[......6....&...m.~.3......w)gt...Ir.WRo5b...(.R\|y=....x..fela\|=...V.z....G...^.....k8Nl}tYP..wx.o\...}..W..V.I.A..J{...n5QS...n.4.^...`...i.XY5...>OY.qE.6........X/...7}..C~...?.'.%..`......w.Di_.,..N.....j)Nr....k....\|.....^.ish.H3.z..Ed..\|....%.u...E#..".Z.....&..9:.._J...q\|. ..>.w....$........q....;XU...ol..........le..m.b3.7)<L..aId.3f{0iLV._W..z.DM..e...N..Z.^.Z...Y.........O_.....3......zy.i....2.Q...1./.....J.{o...sK]...\.{.,.....J'..h..

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (41554)
Category:	downloaded
Size (bytes):	522702
Entropy (8bit):	5.507958867357637
Encrypted:	false
SSDEEP:	6144:rf/nmCvsFfkhN2biY5vr26nzzztVcenuaQcCNvmsgALAq3:ro9khN2biY5a6zzhluaQcamsPAq3
MD5:	41ED38ACC18E15E349D590C71BC3BE1C
SHA1:	B73FF9B23344F606F5CDD196CDF900C66145FD26
SHA-256:	02B1438C94E2B3B762885842A4B977F9A62F9F2445568DE47940CB3D5B04B36D
SHA-512:	1E4526E83CEAAC98EE95D0D81F8F462A1EE5A3248A2BBD47EA34A4E75B6898FB442D2B83F1B6A5A3265FF2F825BFBCB861CF90E0267389F1B2709F7B0F2EF468
Malicious:	false
Reputation:	low
URL:	https://platform.linkedin.com/in.js
Preview:	/* xdoor-frontend: v0.2.183 (Mon, 20 May 2024 19:50:55 GMT) */.(function() {..var PAYLOAD = {"ENV":{"widget":{"alumni_url":"https://www.linkedin.com/cws/alumni","followmember_url":"https://www.linkedin.com/cws/followmember","settings_url":"https://www.linkedin.com/cws/settings","share_url":"https://www.linkedin.com/cws/share","share_counter_url":"https://www.linkedin.com/countserv/count/share","company_url":"https://www.linkedin.com/cws/company/profile","member_profile_url":"https://www.linkedin.com/cws/member/public_profile","full_member_profile_url":"https://www.linkedin.com/cws/member/full_profile","referral_center_url":"https://www.linkedin.com/cws/referral","apply_url":"https://www.linkedin.com/cws/job/apply","mail_url":"https://www.linkedin.com/cws/mail","apply_counter_url":"https://www.linkedin.com/countserv/count/job-apply","company_insider_url":"https://www.linkedin.com/cws/company/insider","sfdc_member_url":"https://www.linkedin.com/cws/sfdc/member","sfdc_company_url":"https:

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://ads.stickyadstv.com/user-registering?dataProviderId=189&userId=6252180897247519748
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.042153318256762
Encrypted:	false
SSDEEP:	3:xPX38/ZoS5NCkuSb9inuSb9inuSb9inuSqat5T/+DthbKikVYGW+pYk1GUpYk1GC:xPn8/ZoS3uSb99Sb99Sb99SqaqyW9rC
MD5:	A7A3A8C6992B4C6A51ED03DC94DB87AB
SHA1:	2255EDDDD03B8E0B689FE8E827ABD9ED77B4B219
SHA-256:	72211A604A6C053BF9A0FC9D2664884CEAC130460A01B61DF11756FBE4B66839
SHA-512:	4090E0D872FF29071F6D561ACCA82217F8AC73CC167B91E001D8144872659A254094A4290F0F087D0675F494201EDC4BA3AB3041F7011822850F8C4C11A744F6
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwkipqzQrT2brBIFDZFhlU4SBQ1nZ7P-EgUNlJCS-hIFDZSQkvoSBQ2UkJL6EgUNpZM2JBIeCe1msuEQf_x2EgUNkWGVThIFDWdns_4SBQ2lkzYkEh4Jmkr49ed2zb8SBQ2UkJL6EgUNlJCS-hIFDZSQkvo=?alt=proto
Preview:	CjYKBw2RYZVOGgAKBw1nZ7P+GgAKBw2UkJL6GgAKBw2UkJL6GgAKBw2UkJL6GgAKBw2lkzYkGgAKGwoHDZFhlU4aAAoHDWdns/4aAAoHDaWTNiQaAAobCgcNlJCS+hoACgcNlJCS+hoACgcNlJCS+hoA

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307513966750114
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcun9LuJ4vV/:T8wAD5ABwXw+krfflyxzx2n9D/
MD5:	0B240EFAA8D49BE60806096CA5B0CA04
SHA1:	6C0B504ACE45134621201B82F0F53D77B0354678
SHA-256:	6A2F825BEB3B540A044CDB0515177C34497AA2CE92E335BF1498FA42BB5BAF88
SHA-512:	C63A6F81AC9B7B99506BDF7433F2B1A25D1F023C6277046D89A7F1F82E1DA937B89DF2F8B519534F717BD87C2F186E7CE9E5D0106103667B0FDA87C81FC40A56
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	452757
Entropy (8bit):	5.357829356102245
Encrypted:	false
SSDEEP:	6144:4WpRmnYxRgUE7qLCp1RyoSQW2Hm5uO74sjGGHYyGedkQEs:4W+YxRgUE7qsWj74tyG2h
MD5:	3AB7906A4D12B7D35C62BAC882D39D74
SHA1:	5D034541D6A9A05B0719C3605880FCFC9229E4B4
SHA-256:	15DE250A16CE58A10F84BEBAB59B9005CE36DF4EC8E87C3BB1ACC92726CFA971
SHA-512:	3A8346339679F82647E763E70E91113366828BA07023578BDB8EF29A0EFAD62707330B7973BB7245C58B8D4FF4029F2D879F8CD3171E4F3612841E0BC8C7CD85
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202403.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1045x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	177028
Entropy (8bit):	7.99897203373551
Encrypted:	true
SSDEEP:	3072:YssNBDRHATLK+cqJxdg64pvp/G2s9EBgPbTskGpUyTnpHxrkLW8N0pTRo9r4DaTA:49shxDrr9YETskcjKyp9uCajA
MD5:	5DFE409C1AAAE63742E51E748395B478
SHA1:	6548E52153C5CC8048D8D5B364966C53F36A12DF
SHA-256:	3122690ACC3D92084FEDB55B23A8422118D06C703133D7F6DE1D0BE69B7115A4
SHA-512:	4E0525D92DD9B816A619161225FEF1C2E2B9FCA1D3DB403A9F73D9E14434F3E9881F2D270289D8AD304047CA1704DCF86BC73A503573D5B088750D98EE9B04A0
Malicious:	false
Reputation:	low
Preview:	RIFF\|...WEBPVP8 p....[.......>m0.F.#!..v.I0..gn....:q..`..Iz3..}...~..O.~.>......=......X\|..^r........o...[..........5.........%...m...7.....>Y......h.......?......g\|?..m....._._......{...y.\|W......-....?....E.{...........1...k...o._.?.?......O........._...~....3.O...o......................t4(..0>.rc......,+t4og..=.../.;K.i\|.K.6.\.}_...I.....~L@T..3.P........+..I.(T2.......8[.a.d?W..dXV..k....dXWo...WIg.......;".i...L@.....8....!...;6..o....@.....C{?W...V.h.....dXV.h...._...a....7..-.V.^ .9..D.p..+-Ib.."...0>...s@.T.................tb.0..O.A.....Pf.W..._....p..=....gF...;"..f7.`...........P...W..dXV.M.$.......P..].b...l.I.../.;1P@..-.E...j..{$/.VL@..O.L..O......8...... vE.n........y...az....3.......-K..<.{.=..."...ptg./.A.........UNy2....@..oCF.~...O.0E.......;"..a.Y.....#.k...q....^..A.c..X.!O..S.?......fZC...'t.~ .>...!Hc`...U2..:@T.+...O.G.q.........hi.1..,+t42[.w.{3 }..r..V..S.T.......0.u"{.'.....]k..;...t..*].O..6......../..u{....]......yx....

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://adservice.google.com/ddm/fls/z/dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=*;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=Zk9J0cMGPKkzOkJE-hOvl2TE
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	33457
Entropy (8bit):	7.992568249699383
Encrypted:	true
SSDEEP:	384:bkhq1Wktk/+nzq3VukA9xammi6NOm2L4sADHSlAhtrvHwHh1bdpSv30eQDaRPuHn:b5C+nHksRvuOvADHSAZ4Hh1byv3aGuKE
MD5:	2560BF9FF293BBC0CFB120A78561141F
SHA1:	D959587E23E440E3F82043BB82DEE868B160450B
SHA-256:	C99A1BD52A52FC5DC114BCC8C4BEE16DFE826FE230E1D82DF826D974811E1AB1
SHA-512:	C0965D9BB0549EE5B2C1C87163C1554E4D2A068D75E78297E9BB1993D427E35C7F17B0603F1035783B507E68C3A7AB22E1BB11899E3D46AF91CCAD5246A05628
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0416_energycommoditiesvertical?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......O........pixi............av1C........colrnclx...........ipma...................mdat......t.....B2.... ...A@.X}..d...f...P9.. .&.c......lC..M.K.b..'.es.M.........V.y+?.W...\P~+......q7..=.0`%r....q.y.>...k...<...p;.`..RN.C.w.u..A...n..@..S...>...<...5.rX.o8l......,..~ A.S.(......={~S.~..[($.c.........i........!.]B\...[e..Y.Pb&.5O?.k&.TDZ.>F..A.?:."...=rRRm...P.....p.v...IP...!...cY..{5...?t......1.....g..u.+;...K'.}......f.QN..(.J\|p>..L....w'W....Y.. ..EZ.$.....S.i.b....].5.(...E..(n....Z..m..."x....\....r..vw'.5............f...'.....,.}.Vr.8.....ubr....n....[.W..n*........f.....\..\]`..=.)...P.4.$......x....1c...2..v.a...x..m&....(.Np......k...vFcK........6U..&.....9o..s...G]X......U...;.t.ji.I..bi....>..'.8-~..7^.H......t........F^o..D......=.U.#......&

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=29685749-a200-4e71-bbe5-055ace8a158d&sessionStarted=1716472271.413&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472259218&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1103x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	44964
Entropy (8bit):	7.994398444825419
Encrypted:	true
SSDEEP:	768:4Cx3/eCu/eUGyC2XM2SwsJgZEFbRW3J963FyknEBJ78DbJGBgNo:4Cx3/eC8eiC282SfuEFlW3J83FyknEr9
MD5:	807FE230555096196C444F40C56A7C9E
SHA1:	6A6E783D601BD6583AB566197BE211862FB614EE
SHA-256:	0D8AAD6AAEC0283B114C53975A3662D8F8DE8C8E87C31D268CEF4F8A4A2B06B5
SHA-512:	DEAFCFC2F737D7405F72E2F7EEBD256A430500AAFDCB93F01DD9C160A0CFE76C188ECD240D923FC25D61A9FA6C001AB9EEBBEEFB95778836F0064059EA32B638
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....+...*O...>a0.H$#1.....0..gn.l...a...L.d...W....n...a..?#/.=R.....wF.Ox..w..>..........c..6..?......#.W.......~\|.........g....._...?..s.....0...+...3.I...W....k.c...o....N.K.?.?......+.~.......4.................g....K..................:zY.....=................?...D.....>...m..\|=..W.I)..vYP.%4.{..k%..F.:.7Q...u..8 .=X.GU.......>..p..;....a&...>..2..H3L.IL....c.e.2.....J..2...'(..NO0...i.83.$.!.)...n..m....]....zx.Enm.x+......N.rf...\|=..........Jj.0.}g..c._"D[...2.\|f....}.V.H..&.{....E.$...4..o?./.5.O..r.g.M...}.o}.....uc..X.GQ8.0$....p(...;A+guQis.(......M..6n".d).... .7G..s.g.'q..^...>..FS.0q..~}......j..r.~.^.9....&...@...s.:#....(.....:.."J`H..6.=.l......>".;......;E..Gjm.y..oVW..a.....U4.#Y....ZJj.e.w.kC...u..._{..L?.....f.g.U9wp.P.../.L.....&...+<..9./....w .<.1..j .B.Ji..e..g......$2.s....d.~&tZY......"I..GGF.[3....}.~.}..b..p$....q......9.o.....9.:.c....._..9(..g.v/..a&.^..\|..L.g"I...G'...HnY).u.gQ..}.Lk..E.d.

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 438 x 174, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9618
Entropy (8bit):	7.893366341721919
Encrypted:	false
SSDEEP:	192:BCxh9W+W9kw35RliYrURGuNoWIbbvP1L2CeaLG85LVw7NPRHod:im+0JiQUnObvPRHN5Zkcd
MD5:	12B458E4016BEC31D6409C5B0A1A4B28
SHA1:	31DD65322BAA509E5742D25A98FF4EEDE2264F96
SHA-256:	9EA17AD369F55E997FC67A9AABF98B35D1110662152667F3AA867CCBC31289ED
SHA-512:	A40E2B85344453A6E37DF0F2EB22ED7FEDAE61605F9F22CFB597D06FE3FB134862C5B8864397DF403DAF4A5B183EB1838467041C98582F49F5244F7C1783CEAC
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/5cb57702-8ef7-437e-a62b-408fe78cd310/6363e1f2-8f9e-4538-82e0-901d90e0cf02/splogo.png
Preview:	.PNG........IHDR.............Z.(2.. .IDATx...y..u...Wu..I&..&. !.I.9....D`.@....xr(...s... ..."w.UYQ<P.WAAv..+!..$......~.\|.3...oUW..y?..<..........\|?_.................................................................................................................................................................................>....8e.OBDd..#p.`.DR2.}..;.x.`....03...l..>..............$..........DD..(...HCQ`.....h...~.....P...e.1.}."".PC.;.m...`.`....0..xv.OBDDDDDDDDDDDDDdX..l.(.l.l ..y...Q..lQ.w..nIj.. .....<........5m\|;cZ...(.>.7l..m..P($r^%.t.\>.}.7.......<R.....#..(.........P...P...A.....(..2.\|.T&..pPS...)...80...I...M>...;.....f...<.v..\(...9.},.'...Q.8.kbf6...!].c..\|<\|...6.z....Y..Y....]<.~..}%......8......~/.......9.=.`.-.gMW..;..sW....A..9.R......og..q.hn.f...l..G..$.t{.D&.\|...,k.v....}..~.7...X<. N.P..........n.r......;...[.u..C....1..{.\|?..Y.T.{..yh..{.^......:.:.......&.^..... ...&..._CGW..}..k.V....oB..Fq..i.}.H..IspW.(`....(x..*.\{.P.....

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8586), with no line terminators
Category:	downloaded
Size (bytes):	8586
Entropy (8bit):	4.980754057922192
Encrypted:	false
SSDEEP:	192:j/c/K/iNadyZ8MUB+lE9Y8MUB+dFVJkEE+Zg23nIXs:ZdyZ8MUB+lE9Y8MUB+Dks13nJ
MD5:	E7107BC29CCB3C6D928F0F8F10A0F22D
SHA1:	7F4B6237B2D74DE5F5A83C77841070A797BA4276
SHA-256:	7849BA1748F8188749DF28E9D59CA4E570A8495684353D8DF4715FA70A81E787
SHA-512:	38A7259987C29A4DC349AC812656318F45BE7D8E34D0C9B39AE7AF13DDADCFA0CCBD624440A09F3C0FB08CD0B9C8014DBE14B29304821072CABAB0AB703ABCB5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css
Preview:	.drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);-moz-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);opacity:1}.drift-widget-close-button--align-right{margin-left:-14px}.drift-widget-close-button--align-left{margin-left:4px}.drift-widget-message-close-button svg{display:table-cell;text-align:center}.drift-widget-message-close-button svg path{fill:#fff}.drift-widget-message-close-button:hover{background:#414141}@media (max-width:367px),(min-device-width:320px) and (max-device-width:480px) and (-webkit-min-device-pixel-ratio:2),(min-width:369px) and (max-width:380px){.drift-widget-message-close-button{opacity:1}}.drift-widget

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?google_gid=CAESEFiSCCEpK_XY_hBYWTauXJE&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	154396
Entropy (8bit):	7.99868581634
Encrypted:	true
SSDEEP:	3072:zojSzfLQvhHGm5VL4f37Vbnxr8m1+9lbZ7cGq:bLchHpF4f/8hfSp
MD5:	3A6C7E20023E7A1779AF546420D80DB6
SHA1:	F349A2398BD52BF70695291CD019774A8D050858
SHA-256:	5DDDCDA36EDBE207C81C5831A1500322EFFADF85B3F1836977410FB99D9000B5
SHA-512:	2AA6B5C34C14C9030C24DE6B530C68B205ED27027622E2C42F9A0B4DE5811C1B04ADFBA05245DE5E85AD66576378014D987A5809FF318B5E297C1867249E885E
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/languagemodeling_1570x890-1?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............Z....(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................Z.mdat.....jg.......2... ...A@..2..8.h...miV?.2=...amY..C....2..........m..7..v%n...@......,.[7;....J.~.w.I..)...=w.d...G.C>.x...6K.+bAJ+..._.Y.WM....i9...Q.=z8....2..0.ciQ.....Q.P.Y.n.....1..%..T....g...NH............;....j..>....B.n.El~r.@.\.......{}.;.?...%.Y....../..6#m.o.=......q..lU>..P.#..$.D.......{\........+.2"L..Z...Q.. 8.....v.o...!.....o.#/a.aoL...H....E..x..?d....h..._A.3...~p.K....s.ZKna...[+.... .2<.r.\|q...?/.B))y3.....k...^..X.`...h.....g..ay..".M.G.)W...Yw6m.[...H........37+.... IT.L.....U.r.Q,.8..f....K....=M..]......`.`.1kt.....N...7.YW.#.{.^.G!...6..h.RP...`..........r.E"p`.r.V.....3:....X.#...i...p..9.}.~!...>.d..S+.H$F.l..b..,..a.....A..R ...

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	46572
Entropy (8bit):	7.993711326790753
Encrypted:	true
SSDEEP:	768:jb1PhjJjtOmMF/1wMqUKNYvi92gkgPVUmvOO/001LCsqoJ9dRD7aTFgYji5CtjFU:jb1fmF9wMqKXHMvOOJOsqO96pgY7tjFU
MD5:	C18E5CECBCA2BDEA386B17D6D60CDE10
SHA1:	3AC91A947EEB29B1F1AAC33C073C30E1946B44BD
SHA-256:	7B1C35726FD131490C956162D247A10788B411149FA966592E9DB6DD309AEBDA
SHA-512:	CAC4A88A010C5D0A0CCD6C13E454C18D7690D1D97B94BF344AA759D1241CAC866EA069E5EDAC9BA49613D31E315FC8F8CE1E323C0EE5B7E8DFC90FE49D4EB479
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/ai_footer_3840x1140?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe...........\|....pixi............av1C........colrnclx...........ipma...................mdat.....'......2.... ...A@.+N....\|.E.k.e..q0.."Zv..[./....j./].e._.}.Q..:.T.Y2p.....fN..........%C8.+.geC.h<...}8HlFE..D....y=...O... .o..C}..........j..b.vlD..A.s..M...P^..z.2a.zi.....y.....8..C..a....A.......j.D[,M......Y.Sg,y...kP..]~.@..\|.vZ ...../X..Y...l.h.s..........u.rl}C.^...If6w..4.......doBq+0....pv..`..9..u.....S.`.^t.J.N...=...D ......1c.8O.(t..-..3.m]'......V.AU.. hL.X.j...~LE8....-d..".x..A<dVB.8.]C.4+...T/[4..f..6...CBZj.<.&s..}.............v.l..........Y@......._..U..vu?..7...q..3+.,.....u.D.6F`#..~/.v6+>M5..W...'.[....@V...:...lo.f.n... .....;1..$..=.Q..S....h..5.......p.rY....f... .7-..i.,.9..5M.p.3P6..9a.(ag%UV..r.\.......j,...B}....)m..V.G...

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3114), with no line terminators
Category:	downloaded
Size (bytes):	3114
Entropy (8bit):	5.256224332537812
Encrypted:	false
SSDEEP:	48:lD58u5a2nLPHMXC9Y1/65EyUV1GZW1nttv+r3SKlTaob8wfsJ3pFWaUGA9oUOkio:A2DHMSS1/LltCRiwYMoUX
MD5:	B5201FF04DA30312910B71E1DA072DD2
SHA1:	84B0303592849AE0E16C33F9EA4776B22D6F326F
SHA-256:	9373A860524D692CE81C1F8F266B511CD597A7F1DBB9FB674C57A303101C21BB
SHA-512:	5F3C0F76106D54056FCB06A8B41C5D390AD6E410C0290E8B0F24985259ED526433395FF87F9E2658C0DCFFD41B4FA33172A169B6C675F9FD0D1A00EE6461DBE5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/39.f1d268f5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),h=function forceComposerFocus(){if(Object(m.a)()){var e=document.querySelector("textarea.drift-widget-input:focus");e&&setTimeout(function(){var t=e.value;e.value=" ",e.value=t},50)}},v=a("SkRI"),O=a("Cpup"),w=a("HSQL");l.a.name="chat";var j=Object(f.lazy)(Object(r.a)(n.a.mark(function _callee(){return n.a.wrap(function _callee$(e){for(;;)switch(e.prev=e.next){case 0:return e.abrupt("return",Object(v.a)(function(){return Promise.all([a.e(0),a.e(3),a.e(1),a.e(28)]).then(a.bind(null,"SrLZ"))}));case 1:case"end":return e.stop()}},_callee)})));t.default=function ChatPage(){return Object(f.useEffect)(function(){Object(o.a)({name:"chat",syncWith:"controller",store:l.a}),Object(u.c)({topic:"CONDUCTOR:action-from-plugin",handler:function handl

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12155)
Category:	downloaded
Size (bytes):	12157
Entropy (8bit):	5.2815440011561945
Encrypted:	false
SSDEEP:	192:LtmBhIzAKFdDQ9bsBKfsFod33leAVTwUZChR79B7rSN7eTVqAd+ha4h+sWVO/nqD:L4Bhn6dDQVsBGli79B7eCxqAKaCFwD
MD5:	A60A4E2650F94DA6F243B9518761B381
SHA1:	6BC78CE4D63E46228B0259083536E67CAA439488
SHA-256:	424CE4E99E7476FCA8E9D27D6C15B60466AB7CF1C7D7C896E1C63F7CD6A818C8
SHA-512:	33237324492FC9F8377D79992036E2A53E2D2203E0019C2986FFE6EF0DF82BCE7DFF8E216479C5A52C7F598A0C9B6E0CB3B957E4EFEAD13A1ACA2A059D236F15
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const l=["debug","info","warn","error"];let s=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let f=null,o={},p={},m={},v={};function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";i(e)}function r(e,t){n(t),function t(e,n){let i=f.detectionEventType;let o=h(e,n,f.triggerElements);let r=[];let d=h(e,n,f.cssSelectors);p[n]=p[n]\|\|[];v[n]=v[n]\|\|[];m[n]=m[n]\|\|[];for(var a of d)a&&a.tagName&&"INPUT"===a.tagName&&v[n].push(a);s.debug(`triggers ["${n}"] `,o);s.debug(`validInputs ["${n}"] `,d);o.forEach(e=>{p[n].push(e),r.push(e[i]),m[n].push(e[i])});for(let n=0;n<o.length;n++)o[n][i]=function(){try{s.debug("Detect event: ",i,"on elemen

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	104552
Entropy (8bit):	5.441374546647054
Encrypted:	false
SSDEEP:	1536:vKb5yn+wKS9qh9TkkMaaphKigl5/6xkIYt1ylXZtBYNsA40XZa98N8CGWYeeBWSH:v+2+kly5/30CNxN4jDpyar
MD5:	3C9C30D0E63C3D3DC2FD839943291974
SHA1:	2616125D9D6FF7D59C0FF054116872EBD63C5011
SHA-256:	59833F2424AFFC6FE923994053EE6B31984D60773F0044A601633A7D2B781B6E
SHA-512:	CFF639C985F141A811571131FB6E0839E7B8F12C3C1620E77E6C668D60D87225DB8FD6607D1A032CB557EE22A595036D41B0AC66BD27F0EC87C57227F91728A3
Malicious:	false
Reputation:	low
URL:	https://ob.fishrobotflower.com/i/6d462c1fd1fbf4524156773cc7d41d65.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,o=i.location,c=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1332)
Category:	downloaded
Size (bytes):	1479
Entropy (8bit):	5.196543917316199
Encrypted:	false
SSDEEP:	24:dWADsuct/BeWADsPoR/7A2Zvgszbm2QlKYiD1xoyQKsurQNJ9Ibm9lRWxp0gw1fK:UyMt/BJyQo1J/zy2QlK5xozZ3m+lwxKe
MD5:	E6799A0B5399CF2A6476E95F74D153D0
SHA1:	D1B2771C2A20DE4149FEC7115135E4F8D023BC38
SHA-256:	1A2CE71FE60CB6DC33B9FD3D0F05AD60D2C555DA502AC151B7355D50EFA9DDCC
SHA-512:	DA378C143BC338B6EB8738B01A490DCDD7CD473296355ADD629A98C68000DBC6AA6A16914048C5CC6B2E099327F90EEB01FF4D5A9219C55E32CFEE3DA035AE52
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC6e11640e82cc49dea832f08f9e560c02-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC6e11640e82cc49dea832f08f9e560c02-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RC6e11640e82cc49dea832f08f9e560c02-source.min.js', "\n\n Start of Async Drift Code -->\n<script>\n\"use strict\";\n \n!function() {\n var t = window.driftt = window.drift = window.driftt \|\| [];\n if (!t.init) {\n if (t.invoked) return void (window.console && console.error && console.error(\"Drift snippet included twice.\"));\n t.invoked = !0, t.methods = [ \"identify\", \"config\", \"track\", \"reset\", \"debug\", \"show\", \"ping\", \"page\", \"hide\", \"off\", \"on\" ],\n t.factory = function(e) {\n return function() {\n var n = Array.prototype.slice.call(arguments);\n return n.unshift(e), t.push(n), t;\n };\n }, t.methods.forEach(function(e) {\n t[e] = t.factory(e);\n }), t.load = function(t) {\

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23047), with no line terminators
Category:	downloaded
Size (bytes):	23047
Entropy (8bit):	4.899706224722838
Encrypted:	false
SSDEEP:	384:iPAR8vuRQoCNbGxWN8rKQzjod/Uax+Sg5I+13JszMCyXeBJ1lUd5OrRlEzPpCBgu:8JNX
MD5:	C89C0F4CC3C0F0F2BD846508A3CD504C
SHA1:	A21C0E5F774CD85D9B03C760E92D86617E751BDC
SHA-256:	143A1EE63C9FE87791CDE6209D3716BF432EDE02FC23ECBD064EDFE1CC02BCA9
SHA-512:	D8828A0BD5E8C31D7F1A9AD5FB66F59DD109C737ACEC14048C9BEC38443C20A4C47552909C8A175565C0B13C3E5E90B00762E61A9C0DBACBA5C80D98C0D39B15
Malicious:	false
Reputation:	low
URL:	https://rtp-static.marketo.com/rtp/libs/jquery-ui-insightera-custom-1.9.6.css
Preview:	.insightera .ui-helper-hidden{display:none}.insightera .ui-helper-hidden-accessible{position:absolute}.insightera .ui-helper-reset{border:0;font-size:100%;line-height:1.3;list-style:none;margin:0;outline:0;padding:0;text-decoration:none}.insightera .ui-helper-clearfix:after{clear:both;content:".";display:block;height:0;visibility:hidden}* html .ui-helper-clearfix{height:1%}.insightera .ui-helper-zfix,.ui-widget-overlay{height:100%;left:0;top:0;width:100%;position:absolute}.insightera .ui-helper-clearfix{display:block}.insightera .ui-helper-zfix{opacity:0}.insightera .ui-state-disabled{cursor:default!important}.insightera .ui-icon{background-repeat:no-repeat;display:block;overflow:hidden;text-indent:-99999px}.insightera{overflow:hidden;padding:.2em;position:absolute;width:300px;min-width:50px}.insightera.ui-dialog{z-index:9999!important;position:fixed;box-sizing:content-box}.insightera.ui-dialog:focus-visible{outline:0}.insightera-center-middle{top:50%!important;left:50%!important;trans

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10430)
Category:	downloaded
Size (bytes):	256578
Entropy (8bit):	5.569558925249624
Encrypted:	false
SSDEEP:	3072:d5FzUAIFhsPUE3RdNIt798Kc9PO4gvaJQssmcsSdes:d5FEs3NIt798Kc9PO4gvEMsEv
MD5:	804B3B01E0B621FE1ABC1CE66D282E79
SHA1:	EC2C0B24CCCEA90D990DAEA90189C9BB4B5B6DE1
SHA-256:	7918C6FDF8900483F1A663E55EDC09D59BAF90D928ADCA8093EA22AB5ED08866
SHA-512:	CCDEAB8DB9C2CD695DBC601A31F4BCA480B34955F7D116709E76AF0DEB4E7D5D1D9B0593A04727A637F2D0A080B0D4B76E9CD31D035FC0C42D1237CED4BC15E6
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/player-pomo-0d1c572c6bf350fa8c24158eff8e885f.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{1152:./!*******************************************************************!\. !* ../player/components/fullscreenWrapper/FullscreenWrapper.scss !. \*******************************************************************/./! no static exports found /./! exports used: fullscreenWrapper /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){e.exports={fullscreenWrapper:"_29Gjr"}},1153:./!************************************************!\. !* ../player/components/spinner/Spinner.scss !. \***********************************************/./! no static exports found /./! exports used: show, spinner /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){e.exports={spinner:"giifV",spin:"_3pWeg",highlight:"_1Nluf",show:"_20Z54"}},1154:./!******************************************!\. !* ../player/components/icon/Icon.scss !. \**********

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 960x540, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	54698
Entropy (8bit):	7.996531263867366
Encrypted:	true
SSDEEP:	1536:JNJvfnQHqL6Oz2buJKVqHShsDmXGsMzVdE4lu:1n+q+42buJKWbm2sMzVdVc
MD5:	E14D6C5443AA0DD2EE9B341044A6B6FE
SHA1:	EE3D96B5824EFA8DE7E3B6CEE18947A16B1CB347
SHA-256:	11176FEFFC8E42CE01CAC72D5FBE8808E1F916CF9D687C49A81B3FC13E870215
SHA-512:	C498E600EA547F4F9509328CF7E3B92956747CDFD5CA98DBD1C23AD2830670C37D07D8026962DD00B89ECB774692C5B5C27815E4DF0604254FB1060FC2E90BDF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....ph.......>Q&.E..!.YmX8......^..flfp.....C.......=.G2......T.Ce.^.\|....3udoH`....K....9.7....w=.....>..A.../...?.........C.6.....{......_AO.?..{......_....3.................._..........H.D.o.7.e(..p..W>.'...$.En.\|.E=V.l+x......\.)c...S.<%U?DL?&....E.....]..=m. .K..k.`<..l.c..`..(A.iID..RQ)(..N>.s_......^...g........B"x!....9.).Ew8....m9.......h^...$.. 3....2..r.f...%....0.E...A...xG..w.....t....B...uw...h...`....ID...=;.>..v).0.I.j(...,..o}#.[bg....&t..cr....P\.g..!..........;...f.^q.r}^<l..c6i.M...CT..a.D..VT.f..{q)...Ab. <...5...(:'.{...9.D.n.P..oEz}@.q....)&..D..?n.t...._X.V..::e.N.;....`.7._.".=QA.....WF+.05...u.\m...f....#...+.....L..<...FR..)..e`e.......$.mEc.L.X.....`'.....I.i.7.{b.....'g&t.W...O.&.l7.....*....v..>..=U.,.....r-..d5.F.".p.y..f..t.y.^.-y.YKp...!4.l....F.g......zN$..Q..]h........G.....l.:]...'.....ll.......S......Q...)(..I.$Y1d{G8..t..%....j&k.L...m.?....U..&..3.u._.l........D7.z.dPm.0k..

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	4.557768118179261
Encrypted:	false
SSDEEP:	24:YEFz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEdkVgMNwsMyVr/mIp
MD5:	AD809A6B9AFDA5DDE3EFF67031431B4B
SHA1:	060E8CBE024196552636C951D6CDF83AEE97F55B
SHA-256:	8EC44A4B321F5115D8760F193298585D8B28A26DD3190D0A3690B9E09A489A94
SHA-512:	D36BDEF3595ECF8BD520C5292C2F14390D768958A26D8A2D5252D27C18EA1F3A7FCE522FE250027C98A2F0A56DC853A48396309F9A2816404CFE95DF9BAFBB0F
Malicious:	false
Reputation:	low
URL:	https://syndication.twitter.com/settings?session_id=394edb16d9da2cff3adda4f9a379805c1d7ddc11
Preview:	{"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://eu-u.openx.net/w/1.0/sd?cc=1&id=537113484&val=6252180897247519748
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	895
Entropy (8bit):	5.48802719377132
Encrypted:	false
SSDEEP:	12:XqJmW/m26qvfNV4NbxTHQuqJmrtr1WUL8BMUNbpbzb2VBrcfMpNrl/nLmsMlKVVh:si2N1V4NxwZG1QBfAXrdD/LFUOVyY
MD5:	938CFBD8EFA2EFC38E86BCC354B6A35C
SHA1:	8EA0F2A75302BF4CFBBAE3D7075635635F67368C
SHA-256:	176741A5312059520B253BA21C6AEB5E237CF48CB2878CF4D6F56E4A4BB83148
SHA-512:	6FDE3C5A6808849F3F619DC96C6F66ED5A12C827AA3C80E7DE5F402735DB909CFD1F753D0CC5A891A4D5B55712EF1BF4558EEA2863F49B3D7E901919620AFEEC
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&upid=b2bmdj2&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( ["https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97","https://ib.adnxs.com/getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97","https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expiration=1719064287&gdpr=0&gdpr_consent="] );. })(this);. </script>. </div>.</body>.</html>

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (487)
Category:	downloaded
Size (bytes):	488
Entropy (8bit):	4.841686487844174
Encrypted:	false
SSDEEP:	12:ZorFgHDWrwAfu1eEkLsFtdJdG8nGELUD4LxZr8a65wARn:pDWJfurG8Goa4UR
MD5:	2775054C068B37509E0798448F7FD32C
SHA1:	8CCB907373C30EB3B98D5A24EC92141A938F09F5
SHA-256:	484EF4268F1D679C1AE88C06FC2388D39AFC441465732617E5E2CDC2E3D418E2
SHA-512:	5423F06453EA452614E21391C098D252DDB65ABC958C02664D9B6F1BD3BAD858B396B053C57AA714391C8953F849FAC3B6ECB9AA0C4F74F4FB81C1242B485EB4
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/universal_pixel.1.1.0.js
Preview:	var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute("src", t), document.body.appendChild(i) } this.init = function (t) { if (this.sslOnly = "https:" == location.protocol, void 0 !== t && null != t && 0 != t.length) for (var e = t.length, i = this.mapIndex = 0; i < e; i++)n(t[i]) } };.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42410)
Category:	downloaded
Size (bytes):	384682
Entropy (8bit):	5.592431311392488
Encrypted:	false
SSDEEP:	6144:fyu2tdhGXXgzIumhH8QjGv1j/dXQNkKRGLvMym:qu2tmyIuMHSzLvMym
MD5:	A04FA561873E9C52D7FB26B49790FAFA
SHA1:	8CCF355425B2DDBA7C284B773079DFFFC620C428
SHA-256:	20FE36BD1E904023B61ED178D114DCE77B1AB35460DD07A11DAB08E80545994B
SHA-512:	CDDBB3FE6F8AD694D56CC2C468949A9BD6CDFE3B25C4821BF614E64B693BC43DB96B6B5C53C8AB6735E7840819CD59AB5B6323F095526395BD93A1C1D5A3A25F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PZNSJJB
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"79",. . "macros":[{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"category"},{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__jsm","vtp_javascript":["template","(function(){return function(b){try{var g=[{name:\"EMAIL\",regex:\/[^\\\/]{4}(@\|%40)(?!example\\.com)[^\\\/]{4}\/gi,group:\"\"},{name:\"SELF-EMAIL\",regex:\/[^\\\/]{4}(@\|%40)(?=example\\.com)[^\\\/]{4}\/gi,group:\"\"},{name:\"TEL\",regex:\/((tel=)\|(telephone=)\|(phone=)\|(mobile=)\|(phoneno=)\|(phonenumber=)\|(mob=))[\\d\\+\\s][^\u0026\\\/\\?]+\/gi,group:\"$1\"},{name:\"NAME\",regex:\/((firstname=)\|(lastname=)\|(surname=)\|(socialsecurityno=)\|(socialsecuritynumber=)\|(social=)\|(memberid=)\|(userid=)\|(user

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x1025, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	59166
Entropy (8bit):	7.9961073785616765
Encrypted:	true
SSDEEP:	1536:W4KHiYfupp5KQGzZoCeh1Smeirk5jGr5UfHtBe5xHS:WBixfqZ1eh1brkYFKts5M
MD5:	DD3DDF083CDF6F28BBBF06DFFE95C042
SHA1:	3E00BF191DF65118ED7A392299C0CE8FC0F5814F
SHA-256:	7A137A33026832FD469BB9D274C1E7EA2B6EEC3D6CA9AA36C15A2260FD22AEB8
SHA-512:	EA6FB38F414ACBEE1DABD0BE95280939B45ED6E6DF1DBE44443125D121E1FF14E6335C7E5D9EE3FB3BAD6076EA4BD44AFA07940CF4651866A806676E9B96F0CB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....p........>m6.I$"...s91...eK-....Zi..?@.......>.._.9G..r......^}?.W.....{....y..H.<{..........@.;.........o6>...'..i.....OZ.?........)...........O.....^........q...../.oW.....^?...>b...............W._...U....}.=..........a.........\.@/.o...v'%...<!4...;....m...a.4....................:.u.....^E.w,H.GQ.$..?3t.XM5.S.r._'..?.....+3#.G..<l].H5..O.S.j)T....#_.rHr...\kL....T..q.<......9v.q...C.P.KQ...4.....#d{..:q..J." ...-5.8.!.....`..N....)...+P..8.....4X.<...T...e.T....r#me...P7v..M.o..X:..6E...`........B..d[....HqX.X..`....S\.....".i.>........lN..m@...SN..;....P..Q.MW.1O....o.j..;;.\.k%p..yut..+n.....Q.."(G..N..N........h.@:..Rj..R.....s.)e.Q.A...Vtg..C.5.c>..,..`v..IB...r.J.%.kI.L,g.U.6.s.J...O.}......5.Yz{...M.....l.>.]du...j.{...}...C.L....}D.?.F0.(...279NZ.I...\| ..E...Yk........-"...\|..$...wjE#...6.1.8...<.....O.M........3.n..7....?.#.\Fq...t.Oo...X..s......#...?..%{b.@..n..........>~f...F[ycmE..;...K.....(

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5630
Entropy (8bit):	5.1601297646825
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdN5rR79PaQxJbBoq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdN5r59ieJBo5
MD5:	F7572368426E85525604F5BECCA6B159
SHA1:	7D1B12DF095CBA24592DEB16ECA8E49D993EE676
SHA-256:	17DB3A57FDAB66942DAD887FA5575783E5C2B8BCBC6A12E44D3D4EA887D46C56
SHA-512:	DD3CD5F1D6F93BADAF861870AE079A8E8B7494BCFADC76D8C8C3A1BCB6443B5BE56A217E8DE5D1CC16ACC1566C537484066800B3008C89E972BF9A01CD5C41D9
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://pdw-adf.userreport.com/cs
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	555
Entropy (8bit):	5.233169054630219
Encrypted:	false
SSDEEP:	12:dkK9dg5qEaqoZFeGKlEQPIhIIFaTjfPa9:dtg5qEaqEFlKlEfhIbTjC9
MD5:	86CEEDF9EB4D61CF7AC0C7A0DD3D8833
SHA1:	253F927C02C7C5D2F1C87F067A340263E547D8F9
SHA-256:	9EAFA33FAE950C52C87BAA6E1B2570D4739A8E269CE6D1ABCA8AED9F395FE503
SHA-512:	044DEFC1A2693B67A62FFC0F42AA87D8DA1C0D840FF7A34A747214E83212F5E91C28BC0211501C3B219373E6D7CE2E4F012C02B2F90A02B81920E8E2BE72617F
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.spglobal.com/content/dam/spglobal/global-assets/en/images/podcasts/corporate/the-essential-podcast/corp_0410_theessentialpodcastsquare.PNG" on this server.<P>.Reference #18.44b31402.1716472289.986384d3.<P>https://errors.edgesuite.net/18.44b31402.1716472289.986384d3</P>.</BODY>.</HTML>.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F?
Preview:	<html></html>

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1822)
Category:	downloaded
Size (bytes):	205211
Entropy (8bit):	5.52944726532025
Encrypted:	false
SSDEEP:	3072:LOAcXJ6OtrXgKaIu5ESR8HYyZM3QDWCzIeJaHmWdXQNmtKIAKpp2WMJQO1H:/GrXgFIu5lq8Qjcq0ndXQNkKRzJQa
MD5:	3F252592D037292156866A5B2E167382
SHA1:	E00988E07A02628D070F6D61A68D1D7A574B3D81
SHA-256:	4712AB4710788E716720D6F45B627882C2257CD1D4F06819D82677286A850005
SHA-512:	A9A9D4D82A49687905A02CAD7CCE46193C318C30CD214AE8D9E1B0EECC778F59DCEC219ECACF606E1BF4EB11142931A2A96DEAFC486A7776200A8B0D805B74EE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=DC-11756258&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"32":true,"19":"dataLayer","31":"US-NY","7":true,"23":"google.tagmanager.debugui2.queue","10":"DC-11756258","37":"__TAGGY_INSTALLED","16":"ChAI8NK7sgYQ4p7u/6PnwfZBEiQAZcCKwAfBOHG9yjIQ4QxhpX2qKt0wzZC/wFnaApHZeQSzrKoaAl1a","30":"US","1":"1","9":"DC-11756258","38":"cct.google","14":"45k0","35":"DC","3":"www.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (7700)
Category:	downloaded
Size (bytes):	787755
Entropy (8bit):	4.383143859819407
Encrypted:	false
SSDEEP:	1536:s9KviNS2gPjPaPjPNXpGl1pcoEeaTPXQKOQKu18+5vyq:BvqSXPjPaPjPzGlLcqw5vyq
MD5:	40FFF888A6685E9081EFEB4285BAAAB5
SHA1:	8719A0A753B8DF83FD62443B56FD90D1A30A89C9
SHA-256:	4D4CCB3F13B72F8D4B6AFE0DE9F3797300809C2911A97A152405A4B36043CC4A
SHA-512:	116365BE346B4E9B9B19E501A9FA2548AD3CF067CB52AC09B61327B3623C77B54C0BDA20591AB9973AE02977F31A631B0F946AEE536939C41620377281602F93
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/en
Preview:	<!DOCTYPE HTML>.<html lang="en">. <head>. <meta charset="UTF-8"/>. <script>.. var _rollbarConfig = {. accessToken: "4b67105e5046468aa40a0673e3219199",. captureUncaught: false,. captureUnhandledRejections: false,. payload: {. environment: "prod",. client: {. javascript: {. code_version: '1.0.0',. }. }. }. };. // Rollbar Snippet. !function(r){var e={};function o(n){if(e[n])return e[n].exports;var t=e[n]={i:n,l:!1,exports:{}};return r[n].call(t.exports,t,t.exports,o),t.l=!0,t.exports}o.m=r,o.c=e,o.d=function(r,e,n){o.o(r,e)\|\|Object.defineProperty(r,e,{enumerable:!0,get:n})},o.r=function(r){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(r,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(r,"__esModule",{value:!0})},o.t=function(r,e){if(1&e&&(r=o(r)),8&e)return r;if(4&e&&"object"==typeof r&&r&&r.__esModule)return r;var n=Object

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17065), with no line terminators
Category:	downloaded
Size (bytes):	17065
Entropy (8bit):	5.1089101567430735
Encrypted:	false
SSDEEP:	384:FtDuCrl6xOIVoCM6qbSjbCMTYozln0/s4MXcK/qtQCZ69CmC4yVs:FtDuCrl6x1OCM1SjbCMTYoz10/s4mcKF
MD5:	E28EBC3391B56E8F01EA063DC089E9D3
SHA1:	D0EB0EDDB70199DB3533F492E7F2E22BE890A1FA
SHA-256:	AFBD41E7209FA3AEF6F53C7A5713AA542A7BE54C432FEC2D690E0DFACCD528D1
SHA-512:	A2ED47575F06F20F3C53845F527E5CEF910A85AAB2CC8F07EFD761239C2255920A154CDF432E170207BE23841458D22BFA96C47CD4ECA590BC71A948B8F98F46
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/19.6f85b843.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototypeOf\|\|function _setPrototypeOf(t,e){return t.__proto__=e,t})(t,e)}r.d(e,"a",function(){return _setPrototypeOf})},"4+fu":function(t,e,r){"use strict";function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}r.d(e,"a",function(){return _assertThisInitialized})},"5aO3":function(t,e,r){"use strict";function _arrayLikeToArray(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}r.d(e,"a",function(){return _arrayLikeToArray})},"7Ru6":function(t,e){t.exports=function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://server.seadform.net/serving/cookie/sync/?uid=6252180897247519748&stamp=WUJpUGly6RsDvP-67D9Y4w2
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17941), with no line terminators
Category:	downloaded
Size (bytes):	17941
Entropy (8bit):	5.422366189872378
Encrypted:	false
SSDEEP:	384:OY5u8lxYMeIAgoXgzJIeY1stTc2HNWT7AhmvXrRxUoJRGEt/4k0:V5ugkcXNW9NXR/4h
MD5:	18A7B0F60655900C0010A35D07B9DA0F
SHA1:	B3785495D2E4BFEA4C70E3693711B6161FC0CE65
SHA-256:	BF6806D8C92E228249230195772AFE2E68791D52763B782BE9AA2855FAB3B641
SHA-512:	018050189287FA11994950A415284DC28FB54DFCC02AF548BEA22F5CA9BDEA4D167F4EE5CF24A8EBC03A71A161D2DB9EA31D4306EFEC432DFD861FDBCF7D7C47
Malicious:	false
Reputation:	low
URL:	https://rtp-static.marketo.com/rtp/libs/ga-integration-2.0.5.js
Preview:	(function(S){var j="trwsa.sid",p="campaign",h="Insightera-CTA",D="industry",u="Industry",a="ISegment: ",x="ICampaign: ",U="segment",d="Segment",Z="Organization",P="it.pcmp",ad="(not set)",k="RTP-Campaigns",aa="RTP-Segments",al="Clicks",l="RTP-Remarketing",O="RTP Remarketing",R="Industry",aj="Group",F="Category",w="ABM List",am="Segmented Audience",I="Campaign Clicked",q="eVar",n="event",M="prop",ae=null,af=null,X={gwtPrefix:"",aid:null,ap:"/ga",cmpn:"/cmpn",indr:"/indr",sgm:"/sgm",racs:{},eGaSgmPush:false,eGaIndrPush:false,eGaCmpPush:false,eGaOrgPush:false,eSIndrPush:false,eSOrgPush:false,eSSgmPush:false,eSCtaPush:false,gaIndrSlot:null,gaOrgSlot:null,gaOrgScope:2,gaIndrScope:1,newV:false,newS:false,sOrgCC:21,sIndCC:20,sCmpCE:20,sSgmCE:21,sSgmOrgTV:20,sSgmIndTV:21,sCmpOrgTV:22,sCmpIndTV:23,eGA:false,eSC:false,eUA:false,eUAOrgPush:false,eUAIndrPush:false,eUASizePush:false,eUARevenuePush:false,eUAaBMPush:false,eUASgmPush:false,eUACtaPush:false,eUARcmdPush:false,uaOrgIndex:null,uaIndrIndex

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65459)
Category:	downloaded
Size (bytes):	93404
Entropy (8bit):	5.272955586307548
Encrypted:	false
SSDEEP:	1536:smjNfHyV7U2QJ556In3URZzwOgIxAiSO3uns4QO93+rF4:smJfk7UJFnwH30+rF4
MD5:	04729D4A31AAD3DBB4FEB482CE6E12CF
SHA1:	0090B4DB742AA76DE3DDAEAD5008497055DFA8E3
SHA-256:	564ECF0BEB87293DA75979358C8A86057197DB1D6A472CF1E3AC7818197FDFFE
SHA-512:	D094EE91C6CCB4C31165E9CEB7A0520A8696388AC84934DD858C6458A88456DD723C9B66F749A29C8023AEF815AFD326C34194BAFC1D9C9155494B4170E6DD2C
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-full-1.260.0.min.js
Preview:	/! For license information please see nr-full-1.260.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.260.0.PROD"]=self["webpackChunk:NRBA-1.260.0.PROD"]\|\|[]).push([[63],{2573:(e,t,i)=>{i.d(t,{o:()=>c});var s=i(4247),r=i(1117),n=i(6291),a=i(8310),o=i(7056);class c extends r.w{constructor(e,t,i){super(i),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvesting=!1,this.harvest=new n.M(this.sharedContext),(0,a.L)(this.unload.bind(this)),this.sharedContext?.ee.on(o.wO.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(e,t){this.timeoutHandle\|\|(null==e&&(e=this.interval),this.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7444), with no line terminators
Category:	downloaded
Size (bytes):	7444
Entropy (8bit):	5.450543523465844
Encrypted:	false
SSDEEP:	192:k3HhRrcnQl57tFgXjC5gkwI9lY7tRkjG6kEy:k3HhmnSzgTC5gkwNHkeEy
MD5:	B7CFB0FBE72E142D4FA500AB60F6153F
SHA1:	BF316B678396D813BF919E7B2F85A72253334D6C
SHA-256:	A0C572E8C052EBD8704A91B8048EBA5669ACC847FC6034F766EB48988C2BB5DD
SHA-512:	41709D7FEE22AF6050C5BFF300FC90CADFC5E48557436F9C1714185C9E2C4635CC3F4832D8A220C33D4E0154B0A3C3C314668F6A7BC8B1B4AB9806593FBBC4A2
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/runtime~main-7cfe5b991f8998b11779881f5769bbe9.js
Preview:	!function(o){function e(e){for(var a,c,d=e[0],n=e[1],r=e[2],t=0,f=[];t<d.length;t++)c=d[t],Object.prototype.hasOwnProperty.call(i,c)&&i[c]&&f.push(i[c][0]),i[c]=0;for(a in n)Object.prototype.hasOwnProperty.call(n,a)&&(o[a]=n[a]);for(p&&p(e);f.length;)f.shift()();return b.push.apply(b,r\|\|[]),s()}function s(){for(var e,a=0;a<b.length;a++){for(var c=b[a],d=!0,n=1;n<c.length;n++){var r=c[n];0!==i[r]&&(d=!1)}d&&(b.splice(a--,1),e=u(u.s=c[0]))}return e}var c={},l={22:0},i={22:0},b=[];function u(e){if(c[e])return c[e].exports;var a=c[e]={i:e,l:!1,exports:{}};return o[e].call(a.exports,a,a.exports,u),a.l=!0,a.exports}u.e=function(b){var e=[];l[b]?e.push(l[b]):0!==l[b]&&{5:1,6:1,9:1,11:1,14:1,18:1,19:1,23:1,24:1,25:1,33:1}[b]&&e.push(l[b]=new Promise(function(e,c){for(var a="stylesheets/"+({0:"vendors~access-code~player~polyfills~unreleased",1:"vendors~access-code~player~unreleased~whitelisted-embed",2:"vendors~access-code~player-pomo~whitelisted-embed",3:"vendors~access-code~player~unreleased"

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63529), with no line terminators
Category:	downloaded
Size (bytes):	63529
Entropy (8bit):	5.281778375193074
Encrypted:	false
SSDEEP:	768:A1yEnyxQEWJZDb4aJ0hHUaHFLPrW+p0B3zmE7ceIU1xeAGxM9:sJ1ENL4cFMr9
MD5:	02F09379C544BEFA413D22EB57ED41DE
SHA1:	156FF3FBF28D890EB0F79754E436AC3A66B3DE24
SHA-256:	E555F4B34B579E6528D6BBD4819620A634C0759B41DFA99520B7CA5AA5117B11
SHA-512:	C2252DE8C217909D15CBA15F47631751B69FE56DD167716A5BE05A4104DDFE28332764EBFDCFFF0DF2614DC9187E2C70B199B5EAC49D45F7A6DA7FF2F3E4AB8E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/18.9c1bd1fb.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e};function _possibleConstructorReturn(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!==typeof t&&"function"!==typeof t?e:t}var d=function(e){function Router(){var t,n;!function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Router);for(var r=arguments.length,o=Array(r),i=0;i<r;i++)o[i]=arguments[i];return t=n=_possibleConstructorReturn(this,e.call.apply(e,[this].concat(o))),n.state={match:n.computeMatch(n.props.history.location.pathname)},_possibleConstructorReturn(n,t)}return function _inherits(e,t){if("functio

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x533, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19050
Entropy (8bit):	7.988793767067021
Encrypted:	false
SSDEEP:	384:oKUQ1pTxoe+1RKNG49pzM9ERsWbZ0p3eHmCEHYROJ3ywI1vWw:oJQfT01Rh4/4e1K2fOcVNWw
MD5:	7E683651310ADEEAA2836A62DF52E57B
SHA1:	205E20D8A6E166424A13165DDBB00BCF1AC1FD17
SHA-256:	9A66F95898C7E5EAF4DD664BE9815BECA73885E0649E26514D30BB1230820517
SHA-512:	09381AD2DF632CAC80AD6789EC57359E59BD18629EBDDF18BBA848EA6C2FD6F652E7D21E2DA196C40C4A8B523F1379063FC51CDBC6B97539B9219F52283AC6F1
Malicious:	false
Reputation:	low
Preview:	RIFFbJ..WEBPVP8 VJ...........>m6.I$".........gns.8..d%6... ..V.E..i&...^.....@.3l..U.\|u....?...t..'7i..._....5.O.S...`u.?........m....e.....O..y......p].. ..w.Lw.'..... ..Y.r.%.M>....ZXz.....oR,...;.&;..."...".{.P.".Y.3....3.......v.t?gM-d..l3d.....=.n."h..1"..3d.[q.$\.u%..x..nLJ.....i..INP.x.[...M...!.o..".{.Ln..pQ.0..d.%..}.Y...."e..b4..#`c.@%...3..._3"!..q$..!/g`.dZd....r...y_..}..<p..e.W..l.....$....j.y.p.]........'.t2.......$...H.=$.@..{........r....X..J.G3.....f.c...$\.t.X.p<.H..}.Y..}.oR.J.e.x.4k....;.....:........7t.><..!+!.=..mK....#.........Z.....b..d..OCd..N.C.x.......,-!1...i.2.pe..].5..0:V.....">......v%V._...%.8i....i.#......!!.G.6H.^..f ..Y..O.,SX....^.0..&....C.0.~K(\N....Da.~.-.K..Hh...+C..I..B..].E.m5..`....h...F....RAF..'G.........'g..:..o.."..)`....S..........,&..#:2v....,.f......E.._..<T...............m.:C..'.$..^g#J8....Fn...~ktLV..U.0.\...0..K.N....K.}....+T..E[.k.....H......c.z.p..[..>........F.4.-4..7.

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (446)
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	5.413018578329561
Encrypted:	false
SSDEEP:	12:jvgexW7HRgXGct/BexW7HRgXLLr9eQmVlEpRWKfTLuvW89n:dWaWct/BeWab1YERWK/SW8V
MD5:	301220FC5F3BAE9D416B9E9ADD3BAC0B
SHA1:	930BBA2F2C6412F0FF1D2D64D6BDDE2A2B942776
SHA-256:	26E843151F3B4B0ABEB0007E0E18CD540F22C9A8078679934075FA6556EA12B2
SHA-512:	BCEADA63C446AC6B37FB2D887CFA8DCD68EF4A70FFC2948A852B8D2A2F45ABFC26F1CCA0EAAD103C1ECCDFD38C43F4DBC32787ED040CBA1889D6B6691D96FCD1
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCc5d37d8f5a604c6da86dcf9d09f93600-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCc5d37d8f5a604c6da86dcf9d09f93600-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/b6239048e5c3/31f1d5f33126/76c1dc25079b/RCc5d37d8f5a604c6da86dcf9d09f93600-source.min.js', " Idio Analytics Tracking Code -->\n<script type=\"text/javascript\">\n !function(d,s){var ia=d.createElement(s);ia.async=1,s=d.getElementsByTagName(s)[0],ia.src='//js.idio.co/1272.js',s.parentNode.insertBefore(ia,s)}(document,'script');\n</script>\n / Idio Analytics Tracking Code -->");

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	91778
Entropy (8bit):	5.364585885685617
Encrypted:	false
SSDEEP:	1536:Yr2vti37/JBJgPtR91PVBdDi5/WOxpUjexdwUrCxO3N5YTRHRRZnv3w7oWOhXS:rvM7/JBJgfBuCbRx/v3y
MD5:	006455BD44ED289DDCC403D0ECD96AB0
SHA1:	CC139B8D109B66DA8B07B411527DE7FA97298CCF
SHA-256:	2B1A4915E59E76E65870B9B2FE38250746FD0EAA301B836516E71BC7C6DD8AE4
SHA-512:	9B43F9052BC96EA5E6C4D10247FDAC3C7244162AE6A8DB3FA1A9FD85ECCC8E5BCC38DDEE850830F2A0E04D2B677A453A14BEC09C12E5FF5891E6C12353C2A03B
Malicious:	false
Reputation:	low
URL:	https://ws-assets.zoominfo.com/formcomplete.js
Preview:	!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)r.d(n,o,function(e){return t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="/",r(r.s=9)}([function(t,e,r){t.exports=r(11)},function(t,e){function r(t,e,r,n,o,i,a){try{var s=t[i]

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38752)
Category:	downloaded
Size (bytes):	93065
Entropy (8bit):	5.182415079046025
Encrypted:	false
SSDEEP:	1536:gOZ0ptDYb251aRoM7dxBKikcHpOPM9BW7PJGu8ryMUsFg4/:gpxFmxDIPwRu4/
MD5:	824BEB891744DB98CCBD3A456E59E0F7
SHA1:	57082A005D743EC4A7F928A928BD7BD561078C7C
SHA-256:	173460E89E6A7244218BADAE2016F65C48A3EAE9D400802273EECA18B07336F1
SHA-512:	6C19E304AF16AE43504A44EB60C542526D0D8F635E4F57AB557E93999AD608BE99C25354898EF4826DEFE63F8BA72E4D09C5EAC445EFBDE4587534CA202958E2
Malicious:	false
Reputation:	low
URL:	https://platform.twitter.com/widgets.js
Preview:	Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|(window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.loaded&&window.twttr.widgets.load&&window.twttr.widgets.load(),window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.init\|\|function(t){function e(e){for(var n,i,o=e[0],s=e[1],a=0,c=[];a<o.length;a++)i=o[a],r[i]&&c.push(r[i][0]),r[i]=0;for(n in s)Object.prototype.hasOwnProperty.call(s,n)&&(t[n]=s[n]);for(u&&u(e);c.length;)c.shift()()}var n={},r={0:0};function i(e){if(n[e])return n[e].exports;var r=n[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.e=function(t){var e=[],n=r[t];if(0!==n)if(n)e.push(n[2]);else{var o=new Promise(function(e,i){n=r[t]=[e,i]});e.push(n[2]=o);var s,a=document.getElementsByTagName("head")[0],u=document.createElement("script");u.charset="utf-8",u.timeout=120,i.nc&&u.setAttribute("nonce",i.nc),u.src=function(t){return i.p+"js/"+({1:"dm_button

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	788
Entropy (8bit):	4.97617939902622
Encrypted:	false
SSDEEP:	12:jFNj9WTDGeGDe7/zZ6vMFNoFWVeq7/zZ2vMFNyIFFWtNjN9emNjN77/zZaK:5NJWPWe/NjNYWn/NHNhFFW/jNnjN//N1
MD5:	0553278F90B44682926B9A853FDDE078
SHA1:	B74F9FE14294A81D40E20A8A0AD586F22409C5B4
SHA-256:	D4B4DE2301A649E0995BD67C0D6503B3730A3D6AD0256D6CB06511497F2440C7
SHA-512:	7BFC6F623567C4C26DEA1A4974D23204B3C287F263E1C7E19345C69A066362751DFD132DD367806A2772752421D3F6796122FEEA620C1D38120986C6DAC30A9C
Malicious:	false
Reputation:	low
URL:	https://public.flourish.studio/fonts/2e63fb0f-c06d-45de-81f1-e0713fd76439/stylesheet.css?family=Akkurat+Bold
Preview:	@font-face {. font-family: 'Akkurat light';. src: url('c8f9ef9832211172a93f4e2056e4c44a.woff2') format('woff2'),. url('c8f9ef9832211172a93f4e2056e4c44a.woff') format('woff');. font-weight: 300;. font-style: normal;. font-display: swap;.}..@font-face {. font-family: 'Akkurat Bold';. src: url('55ccb788e66f3932fc50a629830c9f97.woff2') format('woff2'),. url('55ccb788e66f3932fc50a629830c9f97.woff') format('woff');. font-weight: bold;. font-style: normal;. font-display: swap;.}..@font-face {. font-family: 'Akkurat regular';. src: url('8a4ce7ab1b8f58166e9910c35607ea5e.woff2') format('woff2'),. url('8a4ce7ab1b8f58166e9910c35607ea5e.woff') format('woff');. font-weight: normal;. font-style: normal;. font-display: swap;.}..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	225885
Entropy (8bit):	5.3173551453637815
Encrypted:	false
SSDEEP:	3072:XmqIrl5phQk+VC2xILRcP2QBYfoSjqkxtxFC2b8L0UzvrG:gS2qVkxtxFo0qzG
MD5:	7C4C8A7061350329F108E3F92F2B6ACC
SHA1:	0F0D8E0A440597DF3010506D70D893AC1E7BB2C8
SHA-256:	7B54A059CCB33E9823AF3F640E25038D5F5D816EDF8DFF3454F1904C91326B56
SHA-512:	4D936542CC92722E774ACF4FBD5FE08F7E462779FB59161ECF162DED20DBA66051BF00B441343E6F9B1F3ABBA34344E1E1D4232A31B26772615069DAFA0E1058
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/include/1716472500000/px2iwrcmfxwz.js
Preview:	!function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};function __webpack_require__(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}__webpack_require__.e=function requireEnsure(e){var t=[],r=n[e];if(0!==r)if(r)t.push(r[2]);else{var o=new Promise(function(t,o){r=n[e]=[t,o]});t.push(r[2]=o);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,__webpack_require__.nc&&a.setAttribute("nonce",__webpack_require__.nc),a.src=function jsonpScriptSrc(e){return __webpack_require__.p+"assets/"+({}[e]\|\|e)+"."+{1:"37afe153",2:"2a722653",3:"ee35dea2"}[e]+".chunk.js"}(e);var s=new Error;i=function(t){a.onerror=a.onload=null,clearTimeout(c);var r=n[e];if(0!==r){if(r){var o=t&&("load"===t.type?"missing"

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 829x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	228324
Entropy (8bit):	7.999223532452306
Encrypted:	true
SSDEEP:	6144:nYttfDiW8fh9tm3q2Z7XMGWB7rai6cD+uBk25fvudUKSPK69M65:YPfetY7XMB3ai6C77iiK45
MD5:	284F2CFBE9796B13689DC052F2536192
SHA1:	9D8564C02FABFD33068D4C1E7B57CED591E89CA9
SHA-256:	3AA1A18E4EE37D73D40C265CBA1C38639BEF4063C455F9CA05406892D16AA27B
SHA-512:	28EA62149F7FE0D4808BF0935261590C880122B147C83B63ACD3DC2E4904B36027D7F505BBE362A5A9AE91A9554BB1AAF4903C41401C040C9E797B1CE70AA21F
Malicious:	false
Reputation:	low
Preview:	RIFF.{..WEBPVP8 .{..0....=...>m..F."..,\....dl...=9....K...Q....<....M......S..}~N.u......}.>...?._......_..q.....4.....s.o.W...w._..f..}m~......v.....{...._.....{.~....e....................>....?..x.....O.....\|.._.^..e............_...~G...G...>..>.............O.../X~i......./.....O\|[~7.....w....?...............~..?.~........../...........w.?....i.i.........?{............ .......A..........._....... .7...z.<.\|.\=.S.Jw..m...K..-.....~.N.......^..5..mx.J.....{......y....."oZ.H.g.G6b.%.....HY..!_...f_C=..Z..w......./.~..#8..,[9y.dk.=H.....ox.T....@.#...Q9.j.Y.u..1:....^...S..97.P..c:.E.8_...c..l....2.s...nN.Oy.P...p..U....+d.C..a..P,...)k..v.].....=R42..0..9........x..`...K......g.#.{.. .g.KL....S[..k...e.jRw.....Q'....`4.C.3..-.k.Z0.0..!..}......h"@#Zqg.s.{K....W...........@b<$@.@tfhX.u..c8=.p.o..:S....g.Y... ..@.8y...M...Zz.9,.bG..<.....#.PH.v..D..~..n.L....o..w#....G.&..%[.yE.d.p.P....?f.........8.-.....3.......etdz.=V..;f...c..

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://load77.exelator.com/pixel.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 18 tables, 1st "LTSH", 28 names, Macintosh, Copyright (c) Laurenz Brunner. www.lineto.com, 2004. All rights reserved.Akkurat ProBoldAkkurat
Category:	downloaded
Size (bytes):	129628
Entropy (8bit):	5.931579451005328
Encrypted:	false
SSDEEP:	3072:0r9z1qQAeFQ4eukvoIbtK8HtZmYeT8m++Uz:0r9RfJFMqwXfeC+M
MD5:	F514E9835294938812EC2B49FBBE29BD
SHA1:	DD3FD2B071D40EB374EC44D75AE8B76D4CC14BD1
SHA-256:	59654DEFF3F357FA4D68B611521A8A99A638D5AABE7D9223AE772E67CC064E04
SHA-512:	A16BFA8DB5EE9A30B279C35AA1A3DA3909B7A71DBD14F449D73690362221EEF9F638938DA40DA5996D133B2C1FE4D2C6DEAAA4F6693DDA080C54A9E4628936AF
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-resources/resources/fonts/AkkuratPro-Bold.ttf
Preview:	........... LTSH.6.3........OS/2Xb\........`VDMX...u........cmap2.(J..(\...Pcvt ....../....&fpgm.Y.7..,....sgasp._.....H....glyf]C~...10...8hdmx.<.h........head.....,...6hhea.O.....d...$hmtx"..........kernx.t{..!h..r.loca.u..../8....maxp........... name<nd)...H..c.post...........^prepG.5.... ...........B'r.._.<...........Q.......I.....{...............................{.............................................?.......2.......................2..................@. J........LL . . .....9.7.... ........... ". ...L.X.............x.....$.p.......R.S.P.N.6...g.....,...E.s.J.8.'...=...7...7.!.S...<...?...2.L.v...R...?.:.....-...B...H.H.A.H.....(...7.$.F...<.%.F.....:.(.:.t.:.<.:.+.:...:.2.:.2.:./.:.-.:.%.A.^.A.^.......Z...-... ...F.......S.t.(...S.t.S.L.S......S.).S.......S.&.S.n.S...S....p.S......S.x...1.....?.b...h...[...p...g...k.h.....k.....2.K.......2.#.Y.N....Y..-..{...'.&.O.N...L.(...A.N...K.u.N.O.N.:..Y.N.Y.*...N...$.....N.F...................,.{.-...U.{.....<.........t.(

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	51223
Entropy (8bit):	7.995338834831768
Encrypted:	true
SSDEEP:	768:5A07Yd5i+f3PnCV3f/NlbVA8T+vH8ppiXlwwtKiWDE6Kl43JahxG/+2MBV84oAHE:5oi+f3Pnk1ZurXKSWpv3JaeW2MBVvt+
MD5:	2AFE67EEC5B349373EDCECFDB6899997
SHA1:	F73C866DC4FCE177CB2FC38AC98EBC2A2EFC2F7A
SHA-256:	8E0941978E69C65FB643AB97B70ED22733AB12C6A110F3BB5E5C78FB2AF51F8B
SHA-512:	F508E64FFD73FBC507DD38A09200BEB1CE2462F276A92A6906563E8E57D0AA8A88B02138280CDB1710612465FCDB202393FDC303DE1659B2D3CBC9989672BC6E
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/corp_0418_Seek-N-Prosper-Annual-Report?$rectangle_large_2816X1638$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma...................mdat.....&{.o.....2.......1@.X?\|\Y.3..^yT..X.)....Zl....>...dM.{..h+.......".]TC.G.6q(F.2.N)5..E.n..^..Q"....K...7.LlP.K.+.^....P....v.J.>.S...k9j.f$.(;e.<.....4.}.p.}.X.qU.e..$.w...("zYe...W.V...E....?.a......HAl.Ax7.[....,...8s....`.C..R(=.E....6...#..\|(`...}...`..8WX.B.........g.t......M.C...E+....m].abY..$..r5...d......../....[...b../..R.0$....Y....[ig5.I..{....~.{..2....p.l..$.j.GB"C.....q6u....b.......$b..V.T.uH...f?..ipg_..4.m.).... !%.V.@>.e.vX.........$X.....G....p.}HGo.H..Y.?.C.O.S.ee...z:.Z.....t..^.Md....._.F...Z......tF.....v..e\|.....4.UlW..;...M.s.0 pcU>.Z/..v.....X......k.. ..fl...+o(z.f[.'..=..T.tB.........K[y..T0;U+Z".d.L..9#..A..#.[....wL{.........5...9T)

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	127
Entropy (8bit):	4.8845699999998375
Encrypted:	false
SSDEEP:	3:vFWWMNCmXyKgCC6beXqZj++auHcAbWWUAVMAB5TQBWRaWWU9KgqLn:TM3i0b9Zj7lHcLWtpTQgRdWBg6n
MD5:	6A9927369A243C4B4361B4C488649F02
SHA1:	6CF22A7F474695A7B02C4F8E6BBE35B2441C8EB2
SHA-256:	BDE9C2949E64D059C18D8F93566A64DAFC6D2E8E259A70322FB804831DFD0B5B
SHA-512:	0C73ECD0294C6ABDAD930DE5EF3F3595C8857E9D1FD3579A79B9C79BF0E7A75CB67EA54D22B7263163D48565BD4093915E97FD473E8357AA4F936C63BFEBAD0D
Malicious:	false
Reputation:	low
URL:	https://assets.concured.com/script/config/spglobal/19bf0a5e.json
Preview:	<?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	77270
Entropy (8bit):	5.073484561684221
Encrypted:	false
SSDEEP:	1536:9HkRkA29OPwgawJg5tjgW8UBLhCNezX6UV+3llXRmykFnlgaw2g5FjVeRwG:9HkeA29OPwgawJg5tjgW8eLhCNezX6Uz
MD5:	A68C2FB80B60B658147FE5545656BDCF
SHA1:	E834187066025965A6FDC07348A0258F1A0395D1
SHA-256:	944E67E8081E060E9F97666E26827DF249AB58E791802C5EA92BE4AAA2D9DF12
SHA-512:	8672C8FF8B3B34698315365258FE551F4F5F0D5C18EDBB6A70A669443D442D8CF2E8FA7DA304426A2250F0451FBB64BF9A650838A40D3D71A0A843586880E28E
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-global.min.a68c2fb80b60b658147fe5545656bdcf.css
Preview:	/* ! tailwindcss v3.4.3 \| MIT License \| https://tailwindcss.com /,:after,:before{border:0 solid;box-sizing:border-box}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-tap-highlight-color:transparent}body{line-height:inherit;margin:0}hr{border-top-width:1px;color:inherit;height:0}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-size:1em;font-variation-settings:normal}small{font-size:80%}sub,sup{font-size:75%;line-

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://a.idio.co/ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.5839695299827767
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=75129f8f-dcd4-4652-af2c-8e054b6e6926&sessionStarted=1716472284.101&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472275617&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://a.idio.co/ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289421&z=0.8996201111484932
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/33302?id=6252180897247519748
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?
Preview:	<html></html>

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	69
Entropy (8bit):	4.057426088150192
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HopHW4OE9HsuXU9WyRHfHyY:YGKed2pHD5YEl5k9zyY
MD5:	B04CD3F8043EF04F417D4B0E4BCBBC03
SHA1:	88F259A4AE3045409B3657E7D7A791D321BA9DCE
SHA-256:	59E58524340CD7AD353BE010374B124C242FDDE10A0ED41047FE2FD4BB9E5A2E
SHA-512:	A285C493B939D2A165D80F87FC830F5D02AFCC7A8EA1C5CAF9CAA87ABD286F1C98598FFD83023044BDB23D344C60EEF6A6C4BFEDEDD42A4297A0AC09E22FA5B2
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783), with no line terminators
Category:	downloaded
Size (bytes):	2783
Entropy (8bit):	5.030747095760829
Encrypted:	false
SSDEEP:	24:Y1AJ3Hkp/yDWTkk3VyBWTikgCyOHFC5fkIhz0s6X06kCvfkaz046X06vCufkrz0y:YWJUVZnLKB4zxi/8x9A5ApRbSR/k
MD5:	87532C4DB85F1429FA6D759BC3332F36
SHA1:	4E576E680C9843DAE6FBBFBAEA10822B3B70158D
SHA-256:	E40B6EAE9D66C60B9C750DA70DA6B2BC5D35C2AE9689CC1E9547E300FAC4A3BA
SHA-512:	CC961007D9F014C4CD2086C977315B26128EF627F707316FE672F3CBE9688BCEAC40B3D24CD4DCC1D390D5A390208004DD3213A23AE293C5C422DE5F89D192E1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/39.eeb001f3.chunk.css
Preview:	.drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animation:bounce 1s infinite;-moz-animation:bounce 1s infinite;-o-animation:bounce 1s infinite;animation:bounce 1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(2){-webkit-animation:bounce 1s .1s infinite;-moz-animation:bounce 1s .1s infinite;-o-animation:bounce 1s .1s infinite;animation:bounce 1s .1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(3){-webkit-animation:bounce 1s .2s infinite;-moz-animation:bounce 1s .2s infinite;-o-animation:bounce 1s .2s infinite;animation:bounce 1s .2s infinite}.drift-widget-loader-balls--small{width:16px}@-webkit-keyframes bounce{0%,25%,50%,75%,to{-webkit-transform:translateY(0);transform:translateY(0)}40%{-webkit-transf

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	dropped
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	71278
Entropy (8bit):	7.996885575733898
Encrypted:	true
SSDEEP:	1536:N3mJPk1OCvQZGKIHzEb+O+CkJFi/gYDqLUNxVdb2SqCJuDyAaGxl:tEMI5YKIshkioYDqQsC0vaGxl
MD5:	5E1F41289B0934A214E841BD4452857C
SHA1:	E1FF0D4B9986AA4E96B5659C80AEB1185FD38DBE
SHA-256:	67DF6C699834D10066BB6A1D6130F9F9CAB5D5AEAEFB3EF2CD050BE40C2416CF
SHA-512:	F5F8E8F7704220826C2B2A0DB7231B1C87F8CB01004BACB3B0E1D6A7A2D9424AA9D10851D39613101EB7FEC35B83D5AC4962376130562E5F4056131177203C99
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0515_AARPbanner?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................T...(iinf..........infe........av01Color....jiprp...Kipco....ispe...........L....pixi............av1C........colrnclx...........ipma..................\mdat.....g.......2... ...A@.X.J.d...n..1......^.y..6... R8.H.r0......).y-...,..n.U).Q.8..KO.c2.s.....+.@......Al......q.v.\R.9.E..../..pd...........f.k..Y.Z........t.........^.xO..pJEm.2.lv......55...`..GR.q.....?.)K.....l.hU./<.R._E.9+f.-..................$...&......w....X6....i....:z..t......F.8.....W..e.9f...x.7..-%DL..........P.j.d.......>..K,s....YK .n.~.s..}...T(...pdmG..+.y.~....r.'(j5m#...&7..[)..N.jK...i;u.R.}..Ar.X.O....r.\|..X...f........R..Jic....,.u..=.^.p.......n.H."...4.T.+.B.N.......R.u..6k.h}.3.}....J.1.N..A......+K.......E.X......?....K...%H...lF^. ?...T...w.n..JMF...^..z@.6_.#km......^..CH......i.C/.0...).#.oj.+........?4.K.....P..X5.5...o.P.UQ.

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	4.557768118179261
Encrypted:	false
SSDEEP:	24:YEFz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEdkVgMNwsMyVr/mIp
MD5:	AD809A6B9AFDA5DDE3EFF67031431B4B
SHA1:	060E8CBE024196552636C951D6CDF83AEE97F55B
SHA-256:	8EC44A4B321F5115D8760F193298585D8B28A26DD3190D0A3690B9E09A489A94
SHA-512:	D36BDEF3595ECF8BD520C5292C2F14390D768958A26D8A2D5252D27C18EA1F3A7FCE522FE250027C98A2F0A56DC853A48396309F9A2816404CFE95DF9BAFBB0F
Malicious:	false
Reputation:	low
URL:	https://syndication.twitter.com/settings?session_id=2e62094c07b0bcd5863083a35b7577a11a1fc9a9
Preview:	{"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1004)
Category:	downloaded
Size (bytes):	534017
Entropy (8bit):	5.0671792318878035
Encrypted:	false
SSDEEP:	12288:1XemHFgymkplyHCcmMXM9EQx/W/EEwKvQRgPrVhDdRlv:dlyHCcmMXM9EQx/W/EEwKbhhDdRlv
MD5:	85C4E68263C6DE164E4BAD3FB60222A5
SHA1:	5FF3942357B6792582F67574D1530BC5D502D40D
SHA-256:	B122E173FB310C409D02C56E57EEA40F1EA470FED839599C902B085D8FDB0129
SHA-512:	54D99F9D0ED2732677F4824193391F199A2D8C4BE903171FB2F413B94ED68923377E42816D69610160B9CC499281F36F6E9532FFDF15C49D36036A040EE152B1
Malicious:	false
Reputation:	low
URL:	https://rtp-static.marketo.com/rtp/libs/jqueryui/1.13.2/jquery-custom-ui.min.js
Preview:	/! jQuery UI - v1.13.2 - 2022-07-14. http://jqueryui.com.* Includes: widget.js, position.js, data.js, disable-selection.js, effect.js, effects/effect-blind.js, effects/effect-bounce.js, effects/effect-clip.js, effects/effect-drop.js, effects/effect-explode.js, effects/effect-fade.js, effects/effect-fold.js, effects/effect-highlight.js, effects/effect-puff.js, effects/effect-pulsate.js, effects/effect-scale.js, effects/effect-shake.js, effects/effect-size.js, effects/effect-slide.js, effects/effect-transfer.js, focusable.js, form-reset-mixin.js, jquery-patch.js, keycode.js, labels.js, scroll-parent.js, tabbable.js, unique-id.js, widgets/accordion.js, widgets/autocomplete.js, widgets/button.js, widgets/checkboxradio.js, widgets/controlgroup.js, widgets/datepicker.js, widgets/dialog.js, widgets/draggable.js, widgets/droppable.js, widgets/menu.js, widgets/mouse.js, widgets/progressbar.js, widgets/resizable.js, widgets/selectable.js, widgets/selectmenu.js, widgets/slider.js, widgets/sorta

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13063), with no line terminators
Category:	downloaded
Size (bytes):	13063
Entropy (8bit):	5.5914712509986515
Encrypted:	false
SSDEEP:	192:z1FrNYuBWyiwkaCRykTCfWU94NDjQj8+24i6gHueo1CNCfWd9PYEN4Ywi1wl:z3KyW0CRy3T9gjQjywZCNSWrkYwv
MD5:	455157CB49065FB85FED54901DDAEB0E
SHA1:	248D056B36813AE68A2179DF92860E07CECD7A34
SHA-256:	7641F066C35D0CA15D4897BFE49D640ED4C143FF8F04030C2020CBB2ACFA7B0B
SHA-512:	290DF8FB129D5A33135E6332C0EE89BAD8225CAF1FB13872D06AFB277C867718E7C5F970E10A25D55FB9B6A2BB27AD48267F16C1DD62BBD78590F4E99890ECF3
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/29.31d09948.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},EfWO:function(t,u,e){"use strict";var r=e("q3/s"),s=e("s+nu");function Url(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}u.parse=urlParse,u.resolve=function urlResolve(t,u){return urlParse(t,!1,!0).resolve(u)},u.resolveObject=function urlResolveObject(t,u){return t?urlParse(t,!1,!0).resolveObject(u):u},u.format=function urlFormat(t){s.isString(t)&&(t=urlParse(t));return t instanceof Url?t.format():Url.prototype.format.call(t)},u.Url=Url;var n=/^([a-z0-9.+-]+:)/i,h=/:[0-9]$/,o=/^(\/\/?(?!\/)[^\?\s])(\?[^\s]*)?$/,a=["{","}","\|","\

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42303), with no line terminators
Category:	downloaded
Size (bytes):	42303
Entropy (8bit):	5.5394844461462025
Encrypted:	false
SSDEEP:	768:vMLuGHfSFpQ2XXjSclq4MtXj1zJ8RuThQWyvzo5zi1qtzuzDFWOTeTrnmAXF2M6P:vMLuQKnQ2XzSclq4MtXj1zJivWydSKAI
MD5:	0E97E121C5A0DAC9AD93673CB16476CE
SHA1:	57B3EA92C61E221595049CB1B106CEEC8A633A76
SHA-256:	B4462397994A8D85F86B378683C079B2E42A531E3C8B4DF082BD08B1C69E0034
SHA-512:	5C628E584DE860E325D070561186E5C28B00DE88014D3B4BDC7E021F16D989E804DD4D6ACA1A757C67F06ED282115C267B8E8C7FB48126884BDD9FC42E5A4223
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-global.min.0e97e121c5a0dac9ad93673cb16476ce.js
Preview:	(()=>{var e={8244:(e,t,o)=>{"use strict";o(3257);var n={init:function(e){var t=e.querySelector(".dropdownContainer"),o=e.querySelector(".chevronIcon"),n=e.querySelector(".drop-down-component_buttonContainer");document.addEventListener("click",function(e,t,o,n){return function(e){null!=t&&t.contains(e.target)\|\|null!=o&&o.contains(e.target)\|\|null!=n&&n.contains(e.target)\|\|(t.classList.add("hidden"),o.classList.remove("fa-chevron-up"),o.classList.add("fa-chevron-down"))}}(0,t,o,n)),null==n\|\|n.addEventListener("click",(function(){return function(e,t,o){null==t\|\|t.classList.toggle("hidden"),null==o\|\|o.classList.toggle("fa-chevron-down"),null==o\|\|o.classList.toggle("fa-chevron-up")}(0,t,o)}))}};Array.from(document.getElementsByClassName("drop-down-component")).forEach((function(e){n.init(e)}))},4580:(e,t,o)=>{"use strict";o(3585);var n,r,a=o(1454),i=(n=function(e,t){var o,n,r,i=document.createElement("iframe"),l=a.libsyncPodcastPlayerAttributes;i.src="".concat(null==t?void 0:t.podcastUrl),i.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27881), with no line terminators
Category:	downloaded
Size (bytes):	27881
Entropy (8bit):	5.145230894059144
Encrypted:	false
SSDEEP:	768:WYQPNzPHhXrmg831enXU/a1inBnYEBCGpKz8fsn/HU:XozPBXagHuxr4gj
MD5:	366DC41E5E2B72C8C3E73FBE8DDBFCAE
SHA1:	948A6F96C4C07136203336E7B23B81E8F3A96E81
SHA-256:	FF723B42C25B0C400F858C493F97601BC01923532B5F1AC40036D7D1A79636DF
SHA-512:	7C6726403E6075527F5EE2EB531E664BA14B10D1F605AA3571C0B1871FE519E05097A83667B6A8EEEC04B2379C1363B0A20693D5875E98AEAFE4BA1516692C5B
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/32.1bf39f41.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[32],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a]))for(i=0,o=(n=e?flatt(t[a]):t[a]).length;i<o;)s[s.length]=n[i],i+=1;else s[s.length]=t[a];a+=1}return s}}},"3fZ3":function(e,t,n){var r=n("utat");e.exports=function(e,t,n){return void 0===n?r(e,t,!1):r(e,n,!1!==t)}},"3kqR":function(e,t,n){"use strict";var r=n("8s1R"),o=n("p9qs"),i=Object(r.a)(function forEachObjIndexed(e,t){for(var n=Object(o.a)(t),r=0;r<n.length;){var i=n[r];e(t[i],i,t),r+=1}return t});t.a=i},"42TE":function(e,t,n){"use strict";var r=n("Jn/H"),o=Object(r.a)(function not(e){return!e});t.a=o},"4Vr+":function(e,t,n){"use strict";var r=n("8s1R"),o=Object(r.a)(function pickBy(e,t){var n={};for(var r in t)e(t[r],r,t)&&(n[r]=t[r]);return n});t.a=o},"4Zd6":function(e,t,n){"use strict";var r=n("8s1R"),o=n("U/ZD"),i=n("pQZd")

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	83545
Entropy (8bit):	7.997293765485249
Encrypted:	true
SSDEEP:	1536:C/AK0B7UX0+MryS2D8pA2TY2XOn6lCobjOW5T0zyRooQnnbnUoBz:IdQ7Uk+SUCxEg9bHO02Yo5nnbUoF
MD5:	A488CA1ECB86CF549C44EDCFDD626250
SHA1:	2580A4EE00511889465A10996F8D4B0A39FA9569
SHA-256:	8929EA632EB40980218CCDFBAFF4B18DBAD308FE31ABFEF827232055C5BCA8C1
SHA-512:	24F81C03527E5984B0AAB0C9C6399C2CBCE31577CACD7BCB217E1BEBDFA667291F3881C4CC35467A7E4C84660633EF2F3CDD5869E763A1782FB76661FE04A730
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/Corp_0524_DailyUpdateMay22?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............E?...(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................EGmdat............B2.... ...A@..E-.\|k[.D.....8=bRr.w9S.=.GzO..L.s.}.....YjS..9......3....UZ......?<^...k^..7..(........w.SZ.&.<.z.....@j.....b.,KF.?.b......j..x..O.g......7...}........7.fq,Q.^n.....Z......2..L.v%..N...G.....`.....6.L>^..~...M...:%p.8.?..L..M.e.8....~........Q..q..Ry.....$..>f.B.....]........E=.V..........7.#C.....Tv.%OH..`yN.SFk* ......zN.6?d..:..&..XQ-b.<+ZIS.R).b.Y........j..SA...b.....e.Q.1...E....v.....i....)o.......K.F/.....}.(.(.........8.....yr.<.c.u.x...j...j...y.U21.(.w.y...v"Uz@.b.....uV.i.i...r...a...T.L..2....:.[..........DSv...A.l.z..+..J!.T.F...aaE}..zR.....T.D.A.0M../.t.R.bOw....U.........E(.L.6....C. ...X`..!...RP.."9....d.\..h_...Z..'.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2175)
Category:	downloaded
Size (bytes):	2176
Entropy (8bit):	5.2770338428738075
Encrypted:	false
SSDEEP:	48:H6c+SGi2x3tehPey0PoyKNSS34dECAz0pUIQiVeoX1nw1LGqh67aWIHimf:HF+SGi2x3AhPeVPF9S3eRs/FIX1wFxf1
MD5:	46727094AD49ED02B04A5F128B993736
SHA1:	940503BDB80C0DBCC2E3BC6346A1797A3015C5E7
SHA-256:	DD21ACBDDBFA634E9870ED1B19093B0EB7BBE8636D4DE590E2AADB23EAD5CB3E
SHA-512:	4AC837078E63796DD12B6A69C1CB1CF1C021299B7CD54A6E42A194A0F195A6FA9B024BFEEBB1C1523356CEA3C6E1084F20B5A9064F56094E99F8BA3BF456F765
Malicious:	false
Reputation:	low
URL:	https://s.idio.co/ia.js
Preview:	!function(t,o,r){"use strict";function e(t,e){var n=new c(t),o=n.get()\|\|["xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(t){var e=16Math.random()\|0;return("x"==t?e:3&e\|8).toString(16)})];return n.set(o[0],e),o}for(var n,i=r.hostname,a=[""];n=i.indexOf(".",n)+1;)a.push(";domain=."+i.substr(n));function c(t){this.name=t,this.pattern=RegExp("(^\|;)\\s"+t+"=([^;])","g")}var s=c.prototype;s.get=function(){for(var t,e=[];t=this.pattern.exec(o.cookie);)t[2]&&e.push(t[2]);return e.sort(),e.length?e:null},s.set=function(t,e){for(var n=a.length;n;)o.cookie=this.name+"=;expires="+new Date(0).toGMTString()+a[--n]+";path=/"+("https:"===r.protocol?";secure":"");for(n=a.length;n;)o.cookie=this.name+"="+t+";expires="+new Date(+new Date+36e5e).toGMTString()+a[--n]+";path=/"+("https:"===r.protocol?";secure":""),this.get()&&(n=0)};var u=decodeURIComponent,x=encodeURIComponent;function p(t,e){var n,o=[];for(n in t)"_"!==n&&t.hasOwnProperty(n)&&(o=o.concat(e(n)));return o}function f(t,e)

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74516
Entropy (8bit):	5.5053500854644115
Encrypted:	false
SSDEEP:	768:EcFJ9zcCD9GYCeGEefERG9VCsBlZLVQrOrsFJ5IPQ7bbmE3lslJZ0RVxUqjStV1I:Zr19Gd5J9VbQrOrs3N3MV7Wb
MD5:	8105BBC539C669095D01380DA7335B29
SHA1:	48D03E45009F626FDAE2255B9950495D0FD115CA
SHA-256:	363B74D37035ED413C5795139FA5096CDAA92EFB77D369F72A583537099DDA96
SHA-512:	6977D95328FB2DF95AFA3AD0DF10A1DC6105105982243767DC7025F0694EB85C3E1EBE7A44900EBC178419FF25766CE8A1DF37740B2AC3FA27059FF3B46C36FB
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/1.8afeb691.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"),r=n("TbSn"),i=n("ERkP"),c=n("0lfv");function useGetConversationRatingMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.l)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.l)(n))return n}}}return null},[e])}function useGetConversationRatedMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.f)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.f)(n))return n}}}return null},[e])}},"1b8i":function(e,t,n){"use strict";var a=n("s8DI"),r=n("da4L"),i=n("ERkP");t.a=function useTimedMessages(e,t){var n=Object(i.useState)(function(){return e}),c=Object(a.a)(n,2),o=c[0

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 984x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	88520
Entropy (8bit):	7.9974471995777
Encrypted:	true
SSDEEP:	1536:SiI7RhDZ8+gyZ/hN361aYbXgu653Xt5VePLp26CUKIZwyBodVusGNNv5iq9m16nw:crDu+gyZ/hN36F96DfePLplNoTusGNvw
MD5:	161B0FADB31259E86E007F32BAB3D24C
SHA1:	3218C1E688D7EF4D77319C80702CDBA9A4BF2D68
SHA-256:	DB2E599BBDA0D1665FD1860B3B35033485FE6C3A00953424A22B5251EB204BED
SHA-512:	19EF8F20518F357BE4BE3EB88792B37369C47364CA022F2F323AE5B9EAC0461D00798620237582D84A706791AB2DC30E5D705D3F1C3AF6E0FD8CB9A06ACE0520
Malicious:	false
Reputation:	low
Preview:	RIFF.Y..WEBPVP8 .Y..0........>m2.G."..$...p..cn-$...s9..~.....6..=?...?...m..W.?0/.^.\|.g.....$.?.I.../.>.........W..Q...c........c`..y.....M?.~.........Y...;....h.b.o.O...?...._.......>..N.o..?.z....w...g...^.?{.d..z.........C...W._J.Zo).....&...s.....Y}..+.?.}."....?....../..._.>..../...=.?,.Y.;.......\|..O...}C.................._..h._.O...._..........W............../...Q.a...e......./...zX.....$lq....Je...C......J.c.S?} _d.c...K..i....r...u.H..>f.i...w7...J.s\)..^)Q.\..j.....Z......$a..x)aYc....m..w.j.U,3...G.09...Q.=..G..0\..EFWdP..e.0...G.S(......F...b;..F...r...g.,F.\?..K.;.-...#.,)d.-8..u.I..q.~.u.1.........u........$lr$8.{.Q.6nN.}.G......qr.8.<......#c.-....o..~#..$a....).@]..4.....68......5..b..B..s.)..i.....#cdk.T.JF.[..u.H..!..._......0...wi.pG...J^..R..(.@].P\?{.#iaj.Q...1..m...m...Xk6o....-\8..,W...]#..#ii..0......I.._xKn...~..s..........0.o.I.G........).=.#.....gs......xb0...,..~..!...`=u}........./;..`...h..X...cs\|.J^=.T:.!.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.9707136787344055
Encrypted:	false
SSDEEP:	3:YGKcX/Yi6+4YJmQmdfYn:YGKmAN4Izwn
MD5:	EE782B1213A79574B604AEE632794EFC
SHA1:	E9212AE5228A57B389A6F023389024A94D2AA0EC
SHA-256:	25B4E974DC91D718D1B66BF120388C20DA6DFD3A886EC8401AF1C269DD169A44
SHA-512:	8A63A679038BC2F78D50E70D0E1E9A8DD7CFD1C593C29760CC0549C57162BF11643B4A5EA23FE7C1048C21D15D938D915E453780962168A7B24F2D82A9582340
Malicious:	false
Reputation:	low
Preview:	{"code":200,"body":{"segments":[]},"content":""}

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x726, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	282398
Entropy (8bit):	7.999320859996761
Encrypted:	true
SSDEEP:	6144:8gtqYjvjAti6cTPLm2IpN38JS8KUOrVoEI3wct:80rA41LIpN3p8geZ3w6
MD5:	83E0402C613195D7E0212E1F9967509D
SHA1:	ABBA6DAA717C26BCAB79CC1BDEDCB9A7771A16B4
SHA-256:	E03085A3F68E8CEC12A76E157D8E5438732C4BB7EADD41493F2F8EDF15950A22
SHA-512:	14ACDF86E34558D9792BDEF0D23702AD0A2FE17B57A7FAB19683E43425FA14D4125A54D0AE7047387B3EEEB3E3C66414EF2CA43C450420A2FCFF887523CB7DED
Malicious:	false
Reputation:	low
Preview:	RIFF.O..WEBPVP8 .O..p........>]$.E#.!#...hp..cl.k..(K?.#...W.R1>r..=..%..._E?..~.....4.<...T_c.+Eo:.%.??....;......\|....q...C....W..\|...zc.a...K......w....._>oP......?....../...^i.W.?..........K._....._.....{....'........O.....?p.%...W..... ...:.[............;....^./._....p_a...........>..../........K.'.O..........i.{.......O.......h.....?......D........._........_.....o.?.?........e.......?.....?......S................................kP.H......L.f&~.l....o .\......k...DgEl.!...9..7..~E.-&S...z.S..O.....udX%.u....htl......;...%'..so.Y%........_.e.)...W.c.O4\|.....R.?....9e........v..~;c.....`.*[R.S .~..E.P......O..o..M.UUR.r.`YJ.T....8......o..L/.s....-.mg...^D..J..G...p..="..tU...M.z...I?J...G.Y...d.h..".x....j]=....D.#.v.G.&...".^...u.L.p..6].Q.....PRH..jA^,......#...b..>..c;...Y.......'..lGO.<....J1...z.VR.vq.....=...GTw.....P4i....".i\|7.......=.p.\..cRp.\1..J<...Q....i7.>..A)...PSh..q3\|7}.Z........k...wH.x.....>>.#..i..g...HMB...J.q...g.C1..V..[.v..

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 823x1280, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	65254
Entropy (8bit):	7.99712477468991
Encrypted:	true
SSDEEP:	1536:T1mMC/X9cJebtMwBxp99hjM4UiyXITYLWljs2eci4Ywuq:T1uvGQzP8EOWljve74Y9q
MD5:	43A26F954BC850F70DF96AD7FEE767DC
SHA1:	A522B564410138366D8976EEC7E8F6BEE5BE6892
SHA-256:	2CB07005AAFD8D28E21BBC2D4F1228BB1023A0297099E16E045D562DC2447FF3
SHA-512:	5A92732EA95AD178062CEAF88751371BA9C6ECBDA6B91E6154FD64B1E9B3D617D5A65E26BB503D75C01A23B3479AB433FDE73ED8C9E13089423C0FC6AE62321A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........7...>m6.H."..#..9...en..h..z;......s..i..OV...}....>.N}.}6.Bn3..>'P/.;Rh..{Q...f....{=.z...A........._.....?....]......E.._.....z..p...............>.?......9...o.../h.0....] .Q.........p....._.......w.3.+....?...........U.g._.?....w.S...~........p?SoS......%.....~.~..O.O....`?.?.............................?.\|E.............q.E...S.o........{?....q..!m..<..H.#...6.4R/.}y.....mnR....b1..B..e.....^7....H.jU.1..~...E./t.z..< )y.9.P...bZ.....~Km.7$5j..v9H.i....j.h~.C.6Na.pnz..@....*`.!.M..f.^..:..k.i...g)...qy..(..L\.....c[.).I...~.X......6q..0..G....w...4R.'...S..4k.4.kV'.z..D!rp....v.......4R1.#O.6..K.qy...k...+gx...X....h.O.u.....LM.V.F.cE".....i...I.p.h._X C.C...u...v..g... U.._...g.O6.4R/.}{...^t/9#..H`.....=........&.>x.HD.i.. .o..W.>.........O..a.c.6v.%....-...r.u...M...lo..W.)....5y..md.59...b.2]...]uc(a}..d0}....T..<../4R/..i...:.../'...H..D..nn.7..."...l.m.Y...T4j}.5.C...{ @.n../.EL...'K.C9.;.P.~...V...

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/5386?id=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	18209
Entropy (8bit):	7.984286697156798
Encrypted:	false
SSDEEP:	384:EzJ5p6dbo7DKy/C+mYmgjrBpnBlUXixm1PaATK6BUOYch05svDXcYdc:EzJXC+mSBpnvUXqmoBgUOX6KDdc
MD5:	10543CAA5FBD336DB93144DFAF1CA48B
SHA1:	DF963F5AA69998E0EFB2EADE19559E0DC68CECA2
SHA-256:	F55D506A9E1F027910DCBBD97ACFFF8B6696D2944CB66A88E12B29E807FA8367
SHA-512:	42AE32C1682484A9D880B78BDF22FCEC71C999FB8231753CF21BFB4D26A17749E31EBDB862DF6B949A70E0B17B18B37BFD32E5ADBC7227ED60E47873E9690ED9
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/deepdive_30_still-96-?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............F....(iinf..........infe........av01Color....jiprp...Kipco....ispe................pixi............av1C........colrnclx...........ipma.................F.mdat.....jg.).....2.... ...A@.X?\|{.....oXT:.s..m......G!{.'.x..... .{..(.u.....6...[..".s ...( ..^3...;...$..iiX.gB...Fv..!rX'..9.lM.:v........i.h@.phH.Inpv3.u.9....7aM..q^.@.....3..=...S...,.........`iw...........$..!{B.......?....,}w......56..k.#.{,.E.i/..+l.h..O.. ....v.......M...w)..(.}...r..?}....#e..,zP......m.0D..w..$.Z.F...f;.$...B.b..-.....K.6...H.....]..`y......S.#....YMG....=...hh..locx.O.Z.%..9.S.R......].."......}[a<g\|..z.,.,...qV;..X...4....o..X,.A.F.M.3.#..u.KK.2.l6..W.....1).c.P)c&O....:....\|...3.z..vf....}..Q. .....n.P......97......p6.^.r.j}\....ZA...=...NM.3.9'V...?.....@...}..0I......j..geP.T.hU..W!...t.u.&-.Z..(.!q.a.'9....SC.jC...q.$..^..N.vW.C$..&...x.&{5..7..

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7555), with no line terminators
Category:	downloaded
Size (bytes):	7555
Entropy (8bit):	4.968086769227201
Encrypted:	false
SSDEEP:	192:+vkz1/kwiMULuOsvzo2qKFOb2/gh75uG2m5vnbsW4RZYH8SP:kYG75X5vnbsW4Rc
MD5:	189AEFFD571884559DABABA22C66D75A
SHA1:	7B8BC38FB8A289535FC0C369E16F241D604828FB
SHA-256:	DD09E3BA26066ABE27C4DAD57C8E0C8A63FE23A0BC87E63BCAB94F25E9096459
SHA-512:	1B1BC05A69CB53E252ED017D28AA0709A08C39715A6656D2D9EFF029EDEC8EBDE28B20FFC1C033A769BA66430ABD79B9A8E4F9A4B3E0D9524C939EC25B4B7DE2
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/3.07aa08a5.chunk.css
Preview:	.emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#fff}.emoji-mart .emoji-mart-emoji{padding:6px}.emoji-mart-bar{border:0 solid #d9d9d9}.emoji-mart-bar:first-child{border-bottom-width:1px;border-top-left-radius:5px;border-top-right-radius:5px}.emoji-mart-bar:last-child{border-top-width:1px;border-bottom-left-radius:5px;border-bottom-right-radius:5px}.emoji-mart-anchors{display:flex;flex-direction:row;justify-content:space-between;padding:0 6px;line-height:0}.emoji-mart-anchor{position:relative;display:block;flex:1 1 auto;color:#858585;text-align:center;padding:12px 4px;overflow:hidden;transition:color .1s ease-out;margin:0;box-shadow:none;background:none;border:none}.emoji-mart-anchor:focus{outline:0}.emoji-mart-anchor-selected,.emoji-mart-anchor:focus,.emoji-mart-anchor:hover{color:#464

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	143827
Entropy (8bit):	5.2728269936890255
Encrypted:	false
SSDEEP:	1536:gj5y7+PGFku519ng56kBBBMPEdGga95jg55VcCmBY1WcDguSSlHtRIzL7B:w5AVBg56kBKRCmBYcwlHtmH7B
MD5:	F8DB3B2FF42A5B333288934251941231
SHA1:	6347ACB24BAB719A7E9201B2B19F99894B374CE9
SHA-256:	829E843D32553B83D83E032EBB6A83F17E6DE8AB7C6E7CC63EBF791ACFDC9A36
SHA-512:	953B9129FFB1FDE39E783B3B312AA95EBEA14A7FAFC675FDC18EFA41AEEE6C61CD98DDCB0233DDC0C93A55D51D5B945C6F27E50A1C610B5C059C6A363A0C3464
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/1b11452b-62cc-4fad-8149-9b39c40329a4/018e8a70-0f3b-7e64-9425-2236b00a879c/en.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any web site, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.\n\nBecause we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9636)
Category:	downloaded
Size (bytes):	13363
Entropy (8bit):	5.3266945472443785
Encrypted:	false
SSDEEP:	192:v1Cye56aQcdiwbRY1aSKGWn72mxkfMHmp09ZxBYQDMWyr3Ohu9HS3bT:vO7IaSxW7Fufhp2EOyF9HsbT
MD5:	6C7813E0FB4740B3AAD5810A27FB7626
SHA1:	1A28AC2FC44BD165FE8812A9F7FDC01A725A0D3B
SHA-256:	2321420A8E4992E78CB9071D6E5026BE909FDEA201CB628B84262639B7017DC5
SHA-512:	C54F9D82C1AFFBFE09D0770B8BAD6B36E5777C600E404760485F307F20AB540D9F27BC44449A166FEDC4D091F0FFCCA6917E53D2C7DABD743A20BFA93D7AF784
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/6-0717fdb4ed99352542d9c348ee42305b.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[6],{1299:./!*************************************************!\. !* ../player/components/media/video/Video.scss !. \*************************************************/./! no static exports found /./! exports used: hideCursor, hideVideo, video /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,c){e.exports={video:"_1l-KU",hideCursor:"_3OgU3",hideVideo:"_3-9KU"}},907:./!*******************************************************!\. !* ../player/components/utils/customHooks/useMux.ts !. \******************************************************/./! exports provided: getExperimentName, default /./! exports used: default /function(e,t,c){"use strict";var b=c(/! react /366),s=c(/! react-redux /370),l=c(/! ../../utils/customHooks/useStoreSelector /368),n=c(/! mux-embed /1300),j=c.n(n),n=c(/! hls.js */906),f=c.n(n);t.a=function(t,c){var n=Object(l.a)("visitorId"),r=Object(l.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23865), with no line terminators
Category:	downloaded
Size (bytes):	23865
Entropy (8bit):	5.17066773670714
Encrypted:	false
SSDEEP:	384:dEiPYBr8tDTHrmZjlvbbPal9pGh6rk4scHWeqBEcpAODhBwXTzWDg8GUeAwkO06o:OigBgtnQvbbPkGh6Q4scQEcpAODySDig
MD5:	4049F38C00ADD1738DC4806148FF8829
SHA1:	0A631D2CCDE970A13F60E147A5B5AEACB6A1B2E0
SHA-256:	C501DE88FBB90A445F1754A529BC772E7047071BF653C8C3F0330F7BB736D140
SHA-512:	8ADA588F646C3D9456EA5C8F28C994078B6D2F88527E998C3329F53BD915403283F498E31A9532B7488DC23C74F0CB60AFC93F47891D9E73CF6FB96085A97EC1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/11.639238ba.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._items["-0"]=!0),!1):null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?t in e._items[c]\|\|(n&&(e._items[c][t]=!0),!1):(n&&(e._items[c]={},e._items[c][t]=!0),!1);case"boolean":if(c in e._items){var a=t?1:0;return!!e._items[c][a]\|\|(n&&(e._items[c][a]=!0),!1)}return n&&(e._items[c]=t?[!1,!0]:[!0,!1]),!1;case"function":return null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?!!Object(u.a)(t,e._items[c])\|\|(n&&e._items[c].push(t),!1):(n&&(e._items[c]=[t]),!1);case"undefined":return!!e._items[c]\|\|(n&&(e._items[c]=!0),!1);case"object":if(null===t)return!!e._items.null\|\|(n&&(e._items.null=!0),!1);default:return(c

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45155), with no line terminators
Category:	downloaded
Size (bytes):	45155
Entropy (8bit):	4.971403313857988
Encrypted:	false
SSDEEP:	768:J0pH3w4JWZdsTvfjsdPlyYVMSxOc9EHV5d2VLuqaUnkdaBK1At:um4oMSxOdVunkda9t
MD5:	4896EB2B1D334FA2AAFB779F16734B3D
SHA1:	3AE0164D43AE1EF7E5910D19AC17F21FCCC14AB6
SHA-256:	8413E4B3F44F5A6D663015CAB7C79C3DC57B92FFCF06673BD3067C6F05C205D9
SHA-512:	2A45647B241558A22F9D827E48E8D563850EC568243AD1B535A14EBE3267FBA134051D2D3A1083EFF2E4872F74EB8D7BD9EFB45775F86AAACE9AFBC249D0AEE8
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/1.196b564b.chunk.css
Preview:	.drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-height:114px;left:-16px;width:-webkit-calc(100% + 32px);width:-moz-calc(100% + 32px);width:calc(100% + 32px);opacity:0;visibility:hidden;overflow:hidden;-webkit-transition:opacity .2s ease;-o-transition:opacity .2s ease;-moz-transition:opacity .2s ease;transition:opacity .2s ease;border-bottom:1px solid #eff3f5}.drift-widget-composer-emoji-picker>.emoji-mart{width:100%!important;padding-top:8px;-webkit-border-radius:6px 6px 0 0;-moz-border-radius:6px 6px 0 0;border-radius:6px 6px 0 0;border-color:#eff3f5;border-bottom:none;border-left:none;border-right:none}.drift-widget-composer-emoji-picker .emoji-mart-search input{appearance:searchfield;-moz-appearance:searchfield;-webkit-appearance:searchfield;-webkit-box-sizing:border-box;-moz-box

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.8868421881310122
Encrypted:	false
SSDEEP:	3:HE9vZ6n:SMn
MD5:	0C5DAD92482D9A7C7C253510F5082465
SHA1:	534B458F99B4D0BB90C2CF2C4BB3703EF44A52BF
SHA-256:	5DBAF0A4FF0F8AC8C1B67550EEE84390B089604FFAF71183E417636C7E183AC5
SHA-512:	3B889A1DB2E3D3184886111A1B20FC54E6F14B006DB29B1D92741AF5C0A5B8299E78CDF6939437915F2B350E0BFC781BB8E96D4119172FF0CD2CB178487D71E0
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/16.22abfce0.chunk.css
Preview:	body{margin:0;padding:0}

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36995), with no line terminators
Category:	downloaded
Size (bytes):	36995
Entropy (8bit):	5.200154539819763
Encrypted:	false
SSDEEP:	384:h90Wjj74oB5Tf1JcNvDIweEzpg3pmAX7XODXWcWLfN5HS8IWpMvyfA+g/v:h90yj74A4pDNpM7XGWRfN51IOfA+2v
MD5:	7B7E39FCA61E2FC0B605DB6B496695F1
SHA1:	97C264DC630C80461F73675041D50ECD9760D0C5
SHA-256:	23AAEB229C57F3DA16FF1786D890F81DD548CCEC78081B918C3B7AAA70827BA2
SHA-512:	FD74C8B2A82CC3A9E76BB7279D3D639315EF4C638CCCE9C8D1EDFD674266D123D44037551630E498579BCA3A1F0848954146CA7D80B41DAFF6B1EDD26D17842B
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/37.b6614199.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__?r.c.enable():console.warn("[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle."));var n=Object(i.a)(),s=n.getScope();s&&s.update(t.initialScope);var a=new e(t);n.bindClient(a)}},"5g57":function(e,t,n){"use strict";n.d(t,"a",function(){return v}),n.d(t,"b",function(){return addGlobalEventProcessor});var r=n("WwEg"),i=n("jm9a"),s=n("nfbA"),a=n("uIJS"),o=n("wQh9"),c=n("26VM"),u=n("xqFT"),_=n("bTzN"),d=n("zgdO"),l=n("Iwrg"),p=n("2nP+"),f=n("Te+l"),v=function(){function Scope(){Object(a.a)(this,Scope),this._notifyingListeners=!1,this._scopeListeners=[],this._eventProcessors=[],this._breadcrumbs=[],this._attachments=[],this._user={},this._tags={},this._extra={},this._contexts={},this._sdkProcessingMetadata={}}r

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65261)
Category:	downloaded
Size (bytes):	448142
Entropy (8bit):	5.41933535393878
Encrypted:	false
SSDEEP:	3072:SRavDwCXo5mghrn8mv0PQtoGKI5rME7fgafD6YMzfP4TSpim6X02qLn5v:/DwCZ/mvZtoSf7fgVYMzfj56X02qLn5v
MD5:	2DE23C389B76132B75BAFC40964F14AB
SHA1:	F9F78C75C17CCD755D54896F0D3B469FBDC02248
SHA-256:	151CC27F854B082CE9BE45C1D62DE5BE344363BF5085935669353AD902709A4A
SHA-512:	8F1989594FEE55AEEB64B670DDB324AB2FE5C3E7AA0D6D6D55E1AAEDD96CF2B158CAF297D8C4352D4CB46E6A557B9E236B058EA276A68310E5E932F4F2DEC634
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/7-3b17bdd35f1834729bf3956d98183551.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[7],{1300:./!*******************************************!\. !* ../node_modules/mux-embed/dist/mux.js !. \*******************************************/./! no static exports found /./! exports used: default /./! ModuleConcatenation bailout: Module is not an ECMAScript module */function(t,e,r){t.exports=function(r){function i(t){if(n[t])return n[t].exports;var e=n[t]={i:t,l:!1,exports:{}};return r[t].call(e.exports,e,e.exports,i),e.l=!0,e.exports}var n={};return i.m=r,i.c=n,i.d=function(t,e,r){i.o(t,e)\|\|Object.defineProperty(t,e,{configurable:!1,enumerable:!0,get:r})},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},i.p="",i(i.s=16)}([function(e,t,r){!function(t){t="undefined"!=typeof window?window:void 0!==t?t:"undefined"!=typeof self?self:{};e.exports=t}.call(t,r(6))},function(t,e){function

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	870
Entropy (8bit):	4.557768118179261
Encrypted:	false
SSDEEP:	24:YEFz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEdkVgMNwsMyVr/mIp
MD5:	AD809A6B9AFDA5DDE3EFF67031431B4B
SHA1:	060E8CBE024196552636C951D6CDF83AEE97F55B
SHA-256:	8EC44A4B321F5115D8760F193298585D8B28A26DD3190D0A3690B9E09A489A94
SHA-512:	D36BDEF3595ECF8BD520C5292C2F14390D768958A26D8A2D5252D27C18EA1F3A7FCE522FE250027C98A2F0A56DC853A48396309F9A2816404CFE95DF9BAFBB0F
Malicious:	false
Reputation:	low
Preview:	{"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 438 x 174, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	9618
Entropy (8bit):	7.893366341721919
Encrypted:	false
SSDEEP:	192:BCxh9W+W9kw35RliYrURGuNoWIbbvP1L2CeaLG85LVw7NPRHod:im+0JiQUnObvPRHN5Zkcd
MD5:	12B458E4016BEC31D6409C5B0A1A4B28
SHA1:	31DD65322BAA509E5742D25A98FF4EEDE2264F96
SHA-256:	9EA17AD369F55E997FC67A9AABF98B35D1110662152667F3AA867CCBC31289ED
SHA-512:	A40E2B85344453A6E37DF0F2EB22ED7FEDAE61605F9F22CFB597D06FE3FB134862C5B8864397DF403DAF4A5B183EB1838467041C98582F49F5244F7C1783CEAC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............Z.(2.. .IDATx...y..u...Wu..I&..&. !.I.9....D`.@....xr(...s... ..."w.UYQ<P.WAAv..+!..$......~.\|.3...oUW..y?..<..........\|?_.................................................................................................................................................................................>....8e.OBDd..#p.`.DR2.}..;.x.`....03...l..>..............$..........DD..(...HCQ`.....h...~.....P...e.1.}."".PC.;.m...`.`....0..xv.OBDDDDDDDDDDDDDdX..l.(.l.l ..y...Q..lQ.w..nIj.. .....<........5m\|;cZ...(.>.7l..m..P($r^%.t.\>.}.7.......<R.....#..(.........P...P...A.....(..2.\|.T&..pPS...)...80...I...M>...;.....f...<.v..\(...9.},.'...Q.8.kbf6...!].c..\|<\|...6.z....Y..Y....]<.~..}%......8......~/.......9.=.`.-.gMW..;..sW....A..9.R......og..q.hn.f...l..G..$.t{.D&.\|...,k.v....}..~.7...X<. N.P..........n.r......;...[.u..C....1..{.\|?..Y.T.{..yh..{.^......:.:.......&.^..... ...&..._CGW..}..k.V....oB..Fq..i.}.H..IspW.(`....(x..*.\{.P.....

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (606)
Category:	downloaded
Size (bytes):	11133
Entropy (8bit):	5.520280429902031
Encrypted:	false
SSDEEP:	192:aCrC821ch80emIm9Db2M4GqZQ0M7jLQn2RC6yQEU+9my8M8iJAP3A/pFd0Pa9Sl4:aC2VzmX2TGeQj7Ha2RahU+9my8M8iJ3/
MD5:	EA7826F34518D7C2295738F39C7640FA
SHA1:	0095729B4BC2A580E4CE033993DAFE498DB87DF5
SHA-256:	68CC280CE370C6F1F51A4FC5950103FC38DF80A429552C549ADD04EBD8BD3A23
SHA-512:	E371BB3BAB334509BAA629DE564D37EBC7CA3CDDF059E33FE394A90856394AB318B26133D10BF9D3E47D83449F3C8242724C7850F58DC94A8F834666ACECD321
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/163/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: 163 r896. */. (function(l){if(!l.MunchkinTracker){var h=l.document,p=h.location,C=encodeURIComponent,y=!1,q=null,t=null,D=!1,v=null,E=[],u=function(b,a,c,d){try{var e=function(){try{c.apply(this,arguments)}catch(a){}};b.addEventListener?b.addEventListener(a,e,d\|\|!1):b.attachEvent&&b.attachEvent("on"+a,e);E.push([b,a,e,d])}catch(f){}},U=function(b,a,c,d){try{b.removeEventListener?b.removeEventListener(a,c,d\|\|!1):b.detachEvent&&b.detachEvent("on"+a,c)}catch(e){}},e=function(b){return"undefined"!==typeof b&&null!==.b},F=function(b,a){return b.className.match(RegExp("(\\s\|^)"+a+"(\\s\|$)"))},V=e(l.XMLHttpRequest)&&e((new l.XMLHttpRequest).withCredentials),s=function(b){var a=null,c;if(e(b))if(0===b.length)a="";else try{a=decodeURIComponent(b)}catch(d){c=b.indexOf("?");if(-1!==c)t

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 722x954, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	134590
Entropy (8bit):	7.998426694680835
Encrypted:	true
SSDEEP:	3072:XKj2xCxdok8h03Hy7yDayKjSG62KNnNxdgCrYB:ajtfouXyuL0SG3+NxrA
MD5:	26736A0DAF17D0DBF48472CBFFC990FB
SHA1:	51B08F555AC82403F44C8D64309F30B8EACE439A
SHA-256:	BA8CA13B8F12634D7AAB1F657D98689854C1E53893F69DBD319F42BA730584CE
SHA-512:	1E9F19B7EC1E951926C7340E933D8E50E081CE114C5D2918F71C2B9942137955E79450B0D9899AD9C92F31F997DF0E684DEFADFB2E891477C4708D5F0DCF3571
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/lfvol32024_722x954?$responsive$
Preview:	RIFF....WEBPVP8 ....p....*....>=..D.!."...hP..gl .[oT...........~...u........u5..N5...?.<.<..?K..=......W..B4..{....w.v..'..........Ip?......y......?.......?....).k................a...k..................n.u.8...C...}.........!........6...........+..........C.....?........._..%>A...g.W.......?.?......+`.k...w..q.f.....G..._.~L.'....a?..[.k............~V......._......D?..../.../........=.....?.....r...E.......o.........I.c.....g......q.....f.......p..v......z..#..z...l.E<Y..Ap...i.V.o......a.{..Sn.U^......c);..x....K.K.}[.#s.YF.....;y..F...UU@..{.....!....\....~j.%......uoU.......s..I.`...t.a..K..P".UR.I.0.gO0........\|[...W.!.S..d..m.........:..P..1..mug....(+.^..D$..(.._o).HAx.'.!.p..M...,.m. ..U.#..>.#...X.V.&{.;.....OVX1....z:=..P.!..[...U..!B~.!F.....HJ,t.Q0M.{..... ..V...].V(...G[.Y.&.p.6X'.$.8:.[..."..;...B!<C..=j1to.X..,..#..{..K......?...4.....gy^h...T..y".......1.<.)b...F.....Uu!...>Q...\|..=....?J.j..i&.....yF..'C.s.....`...e.u......z._

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	30
Entropy (8bit):	4.2817276788697365
Encrypted:	false
SSDEEP:	3:mMKdX2HA6g:mvXt
MD5:	2ADA5B65E851E1DADACAAE18E2954C52
SHA1:	E3BFAC7C70E8029D22AD10939B5F48E124096786
SHA-256:	BA8128845E60BC38DB50F24AA93A5DD6A153C168E5D405F301A96A44926FF883
SHA-512:	FFFF6DB6B85A7E567E8523EFC87FB223AB7D3C99D6A25E1613D1FE309D21DCA688E0E47178025B57D7B9677D7FF64C3F90C3D03BC7BEA0BA4C34F766E9C04839
Malicious:	false
Reputation:	low
Preview:	GET /v2/player_loads

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x726, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	39494
Entropy (8bit):	7.993202420575579
Encrypted:	true
SSDEEP:	768:yrk8Sk60S3qi5O0gNxxXSNfly14L2M54kE4A2l9K6Oa/J:yrvSk6N6i5O0Kmfl2455lmYA6L/J
MD5:	494F51E686F54B3B0B19880CD9EECC06
SHA1:	908284D3BE28FE06B9742CA54C842B5F2C9843EB
SHA-256:	B21D0105CA9BECD5D4F09ED149C3324497AAD60FA5A219FBD9376E488CBC2361
SHA-512:	8E53602A12E6247DC41639581EE469691D85E04CCF51561861C62349C2165532FC48591E7A5358F754E6D93F883C750A3BFA43027BBA494DFF3D3AC70BA6D41D
Malicious:	false
Reputation:	low
Preview:	RIFF>...WEBPVP8 2....&.......>i4.H$#).....0..gnn........P.W....Bw..g...E.G.M.t.5....?.y9.s.N...[..?............>m...?....;...y..w......^..X.....+...E......O..v.R?..E......f.............S..?...\|......?....O...ZK....o.E...e...?.....v...<7..f.y....%.HC.....v@Nsl.l;..n".\.p..)...>]....."..n..3.:..y....;Q.......w/.7...K....m.L...T5.P'...T....v.XV....B...'..@...J..{1......U..0=...`...D..N...h...C.n]3....7z..X...o[.....7>P..m..~..<.SC...:...L..6......`......F.`....7.g......N3o.d..:.v.v..a.j:a..V..:.q....\|jl8~...}.x.$...iz.f.t.m).N.F.....:@P.\|._...;..)..Q..T..t.R8!Jw...)...C.\|]..I......+./...\|[.l.o.#..`...c...`6.>&.....F..o..EU...^D.nM}.;.#..7.I..^8r...]..S.$.'....2.=9...k..pn.J.Fn.#.y.............Z...9.....Av..6.. ..t.}..+......j.[.q1Q.@.+.......9.U.W....=...&.......d...u.O{..]r]....M..\|....!.a....0....H....St..._.8...6.>...G{..t.._a.a..37)...i....#..(....x......]:.Rj.(.b...A.......&........1[`..?....E...pR....E./#.....yB"..+.YrF.h...#..]...#

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11284)
Category:	downloaded
Size (bytes):	11285
Entropy (8bit):	5.264100454508251
Encrypted:	false
SSDEEP:	192:931jG8xpzU+1FfH/E1ex41jz4U3ri3e/m6A3JO04HYx3TbfzOhw8SCWqgiZLNt7R:NpG8xyYE1ex41wU3ri3e/m6A5F4GrBLm
MD5:	ECDE30237F344BEC70493A65E68B08FB
SHA1:	582088B47083868CEC09F2C06138E6270048336A
SHA-256:	3D0DF97101EBFF40852DC13159438DD879D123E377203ED81D72B17905FBA8B7
SHA-512:	EA11534D95D2F9935BCF4B506DB27EC81E6B8FB4097E51177A165B40D82B182445CD8DBCBD8D4499B35F2A9CC675CEE6D7BE942272930EDE8A0FB4F302454C5E
Malicious:	false
Reputation:	low
URL:	https://public.flourish.studio/resources/v3/embedded.js
Preview:	!function(){"use strict";var e,t,i=!1;function n(e){if(i&&window.top!==window.self){var t=window;"srcdoc"===t.location.pathname&&(t=t.parent);var n,o=(n={},window._Flourish_template_id&&(n.template_id=window._Flourish_template_id),window.Flourish&&window.Flourish.app&&window.Flourish.app.loaded_template_id&&(n.template_id=window.Flourish.app.loaded_template_id),window._Flourish_visualisation_id&&(n.visualisation_id=window._Flourish_visualisation_id),window.Flourish&&window.Flourish.app&&window.Flourish.app.loaded_visualisation&&(n.visualisation_id=window.Flourish.app.loaded_visualisation.id),window.Flourish&&window.Flourish.app&&window.Flourish.app.story&&(n.story_id=window.Flourish.app.story.id,n.slide_count=window.Flourish.app.story.slides.length),window.Flourish&&window.Flourish.app&&window.Flourish.app.current_slide&&(n.slide_index=window.Flourish.app.current_slide.index+1),n),r={sender:"Flourish",method:"customerAnalytics"};for(var a in o)o.hasOwnProperty(a)&&(r[a]=o[a]);for(var a

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	870
Entropy (8bit):	4.557768118179261
Encrypted:	false
SSDEEP:	24:YEFz7kZPZ+sDZbfIup6GvDF7DZmZ+51DZd/nm7UZX:YEdkVgMNwsMyVr/mIp
MD5:	AD809A6B9AFDA5DDE3EFF67031431B4B
SHA1:	060E8CBE024196552636C951D6CDF83AEE97F55B
SHA-256:	8EC44A4B321F5115D8760F193298585D8B28A26DD3190D0A3690B9E09A489A94
SHA-512:	D36BDEF3595ECF8BD520C5292C2F14390D768958A26D8A2D5252D27C18EA1F3A7FCE522FE250027C98A2F0A56DC853A48396309F9A2816404CFE95DF9BAFBB0F
Malicious:	false
Reputation:	low
Preview:	{"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","version":null},"tfw_fosnr_soft_interventions_enabled":{"bucket":"on","version":null},"tfw_mixed_media_15897":{"bucket":"treatment","version":null},"tfw_experiments_cookie_expiration":{"bucket":1209600,"version":null},"tfw_show_birdwatch_pivots_enabled":{"bucket":"on","version":null},"tfw_duplicate_scribes_to_settings":{"bucket":"on","version":null},"tfw_use_profile_image_shape_enabled":{"bucket":"on","version":null},"tfw_video_hls_dynamic_manifests_15082":{"bucket":"true_bitrate","version":null},"tfw_legacy_timeline_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_frontend":{"bucket":"on","version":null}}}

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	498
Entropy (8bit):	5.267555923625444
Encrypted:	false
SSDEEP:	12:dkK9dg5qEaqoZFeGKldIGQ+mvBKFG5F5jfzG5t:dtg5qEaqEFlKldIGQ+8BeUDjzUt
MD5:	036FD93EB26F01BBD8D13A2A141BC7D6
SHA1:	EE4FC37F73C78D73E222C64628903DD6AAE2E764
SHA-256:	04B2034FCEECAA38F45BD7D4B55D86B64360EB84DAA9D47AA629C7965ED0297D
SHA-512:	27D20776F921D4107D9CC5BB915BF988FDEFE0BB782C40A360A4A01ACDD9AF1131A953D3BEF4FA8DA0DEB9E9D0B7366C4193AD376BDD85E6A7CE36C950B5AAA6
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.spglobal.com/content/dam/spglobal/global-assets/en/images/general/spg_favicon_wht_192x192.png" on this server.<P>.Reference #18.44b31402.1716472270.98629207.<P>https://errors.edgesuite.net/18.44b31402.1716472270.98629207</P>.</BODY>.</HTML>.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	325775
Entropy (8bit):	5.3696653981241
Encrypted:	false
SSDEEP:	3072:eiYgqrQ99nhVk+KqzsV6ruCzlihcqn8Q+DCe9Dk9jwfh2yQsZ+gFW1WgcQPLTLat:BYgqE99jzJrpq8Q+v9Aj37B3cQPLTet
MD5:	2E5DBEA86B1C602CFA431AEE76E0CFEA
SHA1:	033FA73FE1D7FCFA1D9E9FF9BEB738A188A15A3F
SHA-256:	E0E40BA87E5910E109352D80D74040D3301F5A8F125C14B61647D39D6A75B6F4
SHA-512:	0B67C3D55AECF2CFAEC8990B014EFFC110458E47A1284DDF3053AB5405449F1434C5D8749A162B0677EBF39B4140228FD025D4C68C890CBBA32F25C3D08BB774
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-web-comp/clientlib-reactbase.min.2e5dbea86b1c602cfa431aee76e0cfea.js
Preview:	(()=>{var e,t={4321:e=>{var t;window,t=function(){return function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=6)}([function(e,t){var n;n=fun

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15387), with no line terminators
Category:	downloaded
Size (bytes):	15387
Entropy (8bit):	5.345565623960609
Encrypted:	false
SSDEEP:	192:ebUAsQWfVA1RsJiRsCS1XXe3euvUkJZJqul9B5U2e2qSSflggnIBOdveS3:8ZRsQRsCwYeuMkFBa2e2VOGBOdt
MD5:	361A8136F5C21C5C88C363CC5BC9C409
SHA1:	ED4B22F9E198A077E636B8F41A6A353E9E4D96F4
SHA-256:	944486577BEEC716ED9F7CCD93857E6F620400921339A6A28425C9F0F1042E7A
SHA-512:	9E2EE1834D825EBDDD9D585C97C1CFBC3EF02245ABF07BFFDA696517509DA90DA496947BF0C67CD1D9A369A4EE0AE6D57F9F5C4043570C05818DCB1AE0D1CBFE
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/27.530d2daf.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),o=n.n(c);t.a=function FillerElement(){return o.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex:0})}},"3y+j":function(e,t,n){},"BA/U":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var c=function onKeyDownSubmit(e){var t=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1];return function(n){(function isEnter(e){return"Enter"===e.key\|\|13===e.keyCode}(n)\|\|t&&function isSpace(e){return"Space"===e.key\|\|32===e.keyCode}(n))&&(n.preventDefault(),e())}}},BY8A:function(e,t,n){"use strict";var c=n("s8DI"),o=n("QtlZ"),a=n("Hvhg"),i=n("ERkP"),r=n.n(i),s=n("rTkt");n("zoZM");t.a=function ThemeStyleSheets(){var e=Object(i.useState)(!1),t=Object(c.a)(e,2),n=t[0],l=t[1],d=Object(a.b)(Object(o.b)());return Object(i.useEffect)(function(){n\|\|(Object(s.a)(d),Object(s.b)(d),l(!0))},[d,n]),r.a.createElement("div",{className:"drift

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.925410635240724
Encrypted:	false
SSDEEP:	3:YAPRe1Kyn:YAPU
MD5:	E14FDCEC0992A480EC965CE10C0E45E6
SHA1:	AD26C5CB7FAAEC70B9C38836410164FDD0CB143A
SHA-256:	E2D4644E397E8A723F389E039DC8D0659F61B965963C59B90BED4A1D0FB9EB4F
SHA-512:	DD3F19920D7E8570B9D480C83FED051F89BBCE4F3EDB542533AFE9B48DB0517DF180E8BA778FB5B4CC9D93128B879CC0C4432D45693920BBB368C6CA91D78787
Malicious:	false
Reputation:	low
Preview:	{"error":"Failed to authenticate"}

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1251
Entropy (8bit):	5.43076853772861
Encrypted:	false
SSDEEP:	24:md7pIgWcbMdRKLmOeQSfmFtHXRWYxRWZgRK+uKF69FxPg6F/ysbVFyIF/IFKe+C+:a7phWzRK4ZcVwYxwTlLxg6FKWrSuCMrT
MD5:	CB731CC5C2BD9F31D6BFEB19F3C8B1FF
SHA1:	16ACA1C951A03EDD875B99BB8D04F01FA19104AF
SHA-256:	5206536707C84BAA892D3C3231B351985EE828CB8B9C0BD8DB42CD3363995FC4
SHA-512:	61A3C5029F6AA6D1EA60711B5BFBE4DF989F8EFB1999919B017C5391A537F5D9245E72184298A8DDA85CFCB92ECACAEA34ADC6C485B04C72AB9CF0AB33B0D976
Malicious:	false
Reputation:	low
URL:	https://munchkin.marketo.net/munchkin.js
Preview:	/. Copyright (c) 2007-2023, Marketo, Inc. All rights reserved.. * See https://developers.marketo.com/MunchkinLicense.pdf for license terms. * Marketo marketing automation web activity tracking script. * Version: prod r908. */. (function(b){if(!b.Munchkin){var c=b.document,e=[],k,l={fallback:"163"},g=[],m=function(){if(!k){for(;0<e.length;){var f=e.shift();b.MunchkinTracker[f[0]].apply(b.MunchkinTracker,f[1])}k=!0}},n=function(f){var a=c.createElement("script"),b=c.getElementsByTagName("base")[0]\|\|c.getElementsByTagName("script")[0];a.type="text/javascript";a.async=!0;a.src=f;a.onreadystatechange=function(){"complete"!==this.readyState&&"loaded"!==this.readyState\|\|m()};a.onload=m;b.parentNode.insertBefore(a,b)},h={CLICK_LINK:"CLICK_LINK",.VISIT_WEB_PAGE:"visitWebPage",init:function(b){var a;a=l[b];if(!a&&0<g.length){a=b;var c=0,d;if(0!==a.length)for(d=0;d<a.length;d+=1)c+=a.charCodeAt(d);a=g[c%g.length]}a\|\|(a=l.fallback);e.push(["init",arguments]);"150"===a?n("//munchkin-cdn.marketo.

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:WZoS5NCkY:WZoS3Y
MD5:	58BA862F4F223BF617BDF4E1F6ECBD47
SHA1:	0F722DC4446E8FBA1FC395741CB2CF725EA7B0F3
SHA-256:	AD2BA51BB117868D0DA2112FE745D2CEA14E98B46A0A5E8827977ECAFFC33214
SHA-512:	487BBC9B6F040F342F5A93AF42349BF61E8F9256555B407BBB3750DE3B37E258B19731EA7792383F2D16144048618F4C22796B2658484A98B72251AB3ED173C4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmuJFgIBwq2chIFDZFhlU4SBQ1nZ7P-?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw1nZ7P+GgA=

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://id5-sync.com/c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	3.9707136787344055
Encrypted:	false
SSDEEP:	3:YGKcX/Yi6+4YJmQmdfYn:YGKmAN4Izwn
MD5:	EE782B1213A79574B604AEE632794EFC
SHA1:	E9212AE5228A57B389A6F023389024A94D2AA0EC
SHA-256:	25B4E974DC91D718D1B66BF120388C20DA6DFD3A886EC8401AF1C269DD169A44
SHA-512:	8A63A679038BC2F78D50E70D0E1E9A8DD7CFD1C593C29760CC0549C57162BF11643B4A5EA23FE7C1048C21D15D938D915E453780962168A7B24F2D82A9582340
Malicious:	false
Reputation:	low
Preview:	{"code":200,"body":{"segments":[]},"content":""}

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9184), with no line terminators
Category:	downloaded
Size (bytes):	9184
Entropy (8bit):	5.344602062628433
Encrypted:	false
SSDEEP:	192:eV5B3ZdCgbdPGDVGTtxRNsYtECxrFELiIh77WL4vL4yaNhB:eT7dCgbdP0OUYtECVFELiIh77vkJhB
MD5:	5C7228FC2640A4DFCE48217428980FE3
SHA1:	47B8626B6D4C40864EF5204C89A73EF43319C4D3
SHA-256:	C3EA3A972768896D2A84D6EB36D3F5919478AD9C091477C22A5362EB6D53AEE4
SHA-512:	3F6923B0C688794E15A9A62049D341070C6BEAFD9A9FA899B8C3D30B413263C681C1D5CB37977071190390020585B3616BBF51B7A3A8DF2A462107ABF79D0A10
Malicious:	false
Reputation:	low
URL:	https://js.zi-scripts.com/zi-tag.js
Preview:	if(!window.zitag){window.zitag={}}window.zitag.SCHEDULE_BACKEND_URL=window.ZITagEnv==="dev"?"https://schedule-staging.zoominfo.com/zischedule.js":"https://schedule.zoominfo.com/zischedule.js";window.zitag.FORMCOMPLETE_BACKEND_URL=window.ZITagEnv==="dev"?"https://ws-assets-staging.zoominfo.com/formcomplete.js":"https://ws-assets.zoominfo.com/formcomplete.js";window.zitag.ZI_TAG_BACKEND_URL=window.ZITagEnv==="dev"?"https://js-staging.zi-scripts.com/unified/v1/master/":"https://js.zi-scripts.com/unified/v1/master/";window.zitag.ZI_WS_BACKEND_URL=window.ZITagEnv==="dev"?"https://wss.zoominfo.com/pixel/":"https://ws.zoominfo.com/pixel/";window.zitag.isScheduleScriptAlreadyLoaded=()=>{if(window.zischedule)return true;else return false};window.zitag.isChatScriptAlreadyLoaded=()=>{if(window.insentCompanyDomain&&window.insentProjectName&&window.insentProjectKey)return true;else return false};window.zitag.isFormCompleteScriptAlreadyLoaded=()=>{if(window._zi_fc&&(window._zi_fc.formId\|\|window._zi_

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=39&external_user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expiration=1719064287&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80320
Entropy (8bit):	5.195107905701226
Encrypted:	false
SSDEEP:	1536:YdCWn9/x0pUFOiVmVG/TRima9ouMDFew2:K9/5OymVD39ou82
MD5:	0CDFF83B84A49CC1F4703065F11602AB
SHA1:	CC17D96CF085A955A797855B38633DC1DC0DC553
SHA-256:	8D300B9AB92D40783CAB239D68A9BC35DFAB6480CADD8CB5FF8AED97B0ECCF41
SHA-512:	ABC57900B89D5593855125BA1C985701C99599162B635C0CF195109A5D3212F57683624FDBB422D7567F4F03A959A611FE74526C6585D3B1D78326BC678F53BF
Malicious:	false
Reputation:	low
URL:	https://cdn.rollbar.com/rollbarjs/refs/tags/v2.26.2/rollbar.min.js
Preview:	!function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)r.d(n,o,function(e){return t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=6)}([function(t,e,r){"use strict";var n=r(11),o={};function i(t,e){return e===s(t)}function s

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://hemsync.clickagy.com/external/hasHashes?clkgypv=jstag&cb=null
Preview:	[]

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64864)
Category:	downloaded
Size (bytes):	104243
Entropy (8bit):	5.297831661848465
Encrypted:	false
SSDEEP:	1536:yNhGavt4iVBUAIQWS2DCIodhR6ws66u0e9UAE0gt:yNhGarr0mRvzgt
MD5:	11DF02F08174858ED0023B3E9ECB0B66
SHA1:	EB3952C06FE050AF2673CB273F71AFE8EDD092BC
SHA-256:	531EF41FD8AF67FFD35E10F2147A4B9F27AA5E04B1AF9CBC41E016D0BF296371
SHA-512:	0DFFE950CAF8B0D19E9CDE53C0A65BD7493A1F06FEE034B729889B97C1645F688F3A6562706AAE6E6DD5E12D36BE96849D9F3C07F46C2F341D229C36EC71F502
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/vendors~access-code~player-pomo~whitelisted-embed-61d05a035333aec4c9f4860e28e0b0c5.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{1063:./!***************************************************************!\. !* ../node_modules/react-dom/cjs/react-dom.production.min.js !. \***************************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(e,t,n){"use strict";./* @license React v16.7.0. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /var l=n(/! react /579),v=n(/! object-assign /434),r=n(/! scheduler */1064);function z(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function(e,t,n,r,l,i,a,o){var u,c;if(!e)throw(e=void 0)===t?e=Error("Minified e

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107348
Entropy (8bit):	5.264039514215191
Encrypted:	false
SSDEEP:	1536:ReqhZjvnk1z3vrsja9cxEf6+6Glby/XJ42qbVTE4wLyPe9VAs:R1hZjKJ1y/Z4rbrwLPVAs
MD5:	114785899CEB423273FCC17AAAD202E9
SHA1:	CE53389286218FE6D7CE1EB86208074C024ACCA5
SHA-256:	C8C302716CF94980A0D77E614D9FB6C430F166B5EF7C42B7C382771955E52BA6
SHA-512:	6E357A327420598542BFFEDF8F03F7F4C327469CDC6CC52B39C0B542DA4EF09C6739F46161C8D2796BFA05193D94B47420308CF4F2A50A2F0DF73EE9712544A4
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/50.de3b5864.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(checkDCE)}catch(e){console.error(e)}}(),e.exports=n("w/UT")},"w/UT":function(n,r,a){"use strict";var i=a("ERkP"),o=a("maj8"),u=a("jiMj");function x(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function ba(e,t,n,r,l,a,i,o){if(!e){if(e=void 0,void 0===t)e=Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,l,a,i,o],c=0;(e=Error(t.replace(/%s/g,function(){return u[c++]}))).name="Invariant Violation"}throw e.framesToPop=1,e}}(!1,"Minified React error #"+e+"; visit %s for the full message or use the non-minified dev

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x854, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	125140
Entropy (8bit):	7.998394870068074
Encrypted:	true
SSDEEP:	3072:mRtB4miIMYndToHPnO76YlPf4cAnXWyjzAWkRCFwg/hnubEI:m3B4eDToHPXsATX1j0WQw/hngEI
MD5:	0FFFAEFC44DFA1480A970D3CA1A5597B
SHA1:	6891A4E9CA9CF00B79C5A0C84F607B6F8809C948
SHA-256:	76CF306B19F00997E496F31FB92C86978FCB215DF32F9280A52AE5EA266C4C3B
SHA-512:	61CF3E80CEDE9804A5AEAA11F548E0CE102E24CDA4569F08B86C87DE7975334710F9C0F32BCC1EEEED3C49D580468B11CD1D200880FC76DD3747399EF46B32B5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....0......V.>m4.H.".$%UY...gk.....?.q..g...p4...8j.<....?..G.......-............k........3i7................_0....S..........&._..._.g......@.......s..........?y..........o._...._...........R..f..e....@.y...C...<n.....O.W........}..........?n.n..7...2.L....&...2..SQ..=I.).Xm..........bB...._....6.OB.el$)...l.Qt._.....j...4.....E..8=.4w[7..>hU!..>.Ir~....F"Q.......Ca.le...Y.g:.rY.'..z2....y.kQ16:...r....k.R...@.....a...w......)X. YQ]b..a....\..$..e.+..}.fJ.S.d_..c._h.dk....3......p..?K:....y..B).$\. Zk+O..C.Z.N...d..Y.$.y......w..tr.ZS=...y.r3q......E.;cl>.zz.f.#.B.{...>......@.."..1..]9av.\|.5...H...L..\....M\.[.....rl...{..]:$...$.....k....E......a....g.n....`.%2...thY-=.T....N...`.. .>.h..4..q.ZQ.g......Eu.:.x.........a......W....H.)....v,..g..9.....y..]..h..).S...........a..<.Z........P'I...5.s.)..}<0Az............5..4Kf./U...$.I.a.M....H..[pO.{.gzqq.G....`......^.#N8.9H.....6.....@>..&....2._..J6....

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5566), with no line terminators
Category:	downloaded
Size (bytes):	5566
Entropy (8bit):	4.978599126019473
Encrypted:	false
SSDEEP:	48:lKDtx5ejcnWGSIKv9YsMsEk5vgycVFyRdcwTkIHhJb/Ate5mI4ujkvT2WmaDAKib:OeoBS1NNdcw/bh8IuyHaDhet
MD5:	AC45B0ABE30007C417750608D660CF6B
SHA1:	A5F0EFD2EAA32DCA94DD8B10F9C6BDFC61B32352
SHA-256:	AEBF010CF3503DB862EB22610BC84F1D2F0B174BAC152F1E654E73FE9EAD91EE
SHA-512:	ACB6A1617E698F537205CCB92238C23825AA47326BAA52048CA7CDC9CCB5470D4E629EF6DF9F6062ADF0BFA73C47EAA9A585D64BFC5777B0DEF9D54BB8262BC1
Malicious:	false
Reputation:	low
URL:	https://flo.uri.sh/template/20762/v21/static/choices/styles/css/choices.min.css
Preview:	.choices{position:relative;margin-bottom:24px;font-size:16px}.choices:focus{outline:none}.choices:last-child{margin-bottom:0}.choices.is-disabled .choices__inner,.choices.is-disabled .choices__input{background-color:#eaeaea;cursor:not-allowed;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.choices.is-disabled .choices__item{cursor:not-allowed}.choices[data-type=select-one]{cursor:pointer}.choices[data-type=select-one] .choices__inner{padding-bottom:7.5px}.choices[data-type=select-one] .choices__input{display:block;width:100%;padding:10px;border-bottom:1px solid #ddd;background-color:#fff;margin:0}.choices[data-type=select-one] .choices__button{background-image:url(../../icons/cross-inverse.svg);padding:0;background-size:8px;position:absolute;top:50%;right:0;margin-top:-10px;margin-right:25px;height:20px;width:20px;border-radius:10em;opacity:.5}.choices[data-type=select-one] .choices__button:focus,.choices[data-type=select-one] .choices__butto

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (56043)
Category:	downloaded
Size (bytes):	327164
Entropy (8bit):	5.5061054495525745
Encrypted:	false
SSDEEP:	3072:zcLShNRXSBeNN9dDon/kyvRweEXMV6AxBUjqN3Lj1TKid0bGpLsev6nsRs2hW/:W8N9+/k4fMqz9GCNvmszU
MD5:	81267302EFDFB3E4524A22631A8FC99E
SHA1:	EFB274E7D019D5F3CDBEE88D317F46FE45BC91EE
SHA-256:	70C00445D6632039ED99AF760731DAF3BF60EB12061863EE61E2CD7276A54D18
SHA-512:	D378A12E5465E2DEFBBB794D1F5CA287D8A9B31E16482F782DC6C53D9F6CB4600B8B2ADCAAC0CCF963AA06B42569C8119E16987F59FB052B4AB1254784ED5EF0
Malicious:	false
Reputation:	low
URL:	https://platform.twitter.com/widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.spglobal.com
Preview:	<!DOCTYPE HTML>.<meta chartset="utf-8">.<title>Twitter Widget Iframe</title>.<body>.<script type="text/javascript">!function(){Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|function(e){var t={};function r(n){if(t[n])return t[n].exports;var i=t[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)r.d(n,i,function(t){return e[t]}.bind(null,i));return n},r.n=function(e){var t=e&&e.__esModule?functi

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11808), with no line terminators
Category:	downloaded
Size (bytes):	11808
Entropy (8bit):	5.094303402754285
Encrypted:	false
SSDEEP:	192:ZCm/w6kClAgsaFtPrjPFXg5db/oC3AigvNBN6sXIWhBqUkx8Elo9VEMbu3V38Cgg:ZCVClAgsqTj+5db/ki/W4bloXERl38C1
MD5:	C65DB597E762D33246CFBEC56B886523
SHA1:	DE968F5D5A9EBA6F17C47BEECBBAD50430C806C3
SHA-256:	DF3B4F7EE9B54DC67162D74792E3906D8888A0A83068B490FB6830CC6954D5C4
SHA-512:	36B33E0BDFA05937FB86CB2C5E6980CDBAEA9AD08533E50A71B75D8191D068C560957590265220ACEC17E838A3C3E3D1E0314A31F3D5DE5E2910705631B1CC08
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/42.f634da7c.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){return applyMiddleware}),n.d(t,"d",function(){return compose});var r=n("hE+J"),o=function randomString(){return Math.random().toString(36).substring(7).split("").join(".")},i={INIT:"@@redux/INIT"+o(),REPLACE:"@@redux/REPLACE"+o(),PROBE_UNKNOWN_ACTION:function PROBE_UNKNOWN_ACTION(){return"@@redux/PROBE_UNKNOWN_ACTION"+o()}};function isPlainObject(e){if("object"!==typeof e\|\|null===e)return!1;for(var t=e;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function createStore(e,t,n){var o;if("function"===typeof t&&"function"===typeof n\|\|"function"===typeof n&&"function"===typeof arguments[3])throw new Error("It looks like you are passing several store enhancers to createStore(). This is not suppor

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc57.107.100", baseline, precision 8, 1280x720, components 1
Category:	dropped
Size (bytes):	111700
Entropy (8bit):	7.972625041982117
Encrypted:	false
SSDEEP:	1536:8daTZd1z/aiKsFGBZ9QDui1wq8dn53zPAr08UfosDsD49t/or/Vx+nzsCa6WGuVy:BLz/aM4B0a96coEa49yRx+zsTGu8UcPJ
MD5:	CCF2308A14B197CA486BF2E5AB282EF6
SHA1:	77FD1A066777E8978DC58EBE14BA8A7636D96ECA
SHA-256:	162C70A9F5906440F603D19898D81A574F724B23C8CE8CFE6F3E9314D89CA54B
SHA-512:	F7B23D45E3643BC7BF728B0EA7E5EFD6345AE5E60AD0D158AC77A4F9D2E7268A6FABF0C803ECF8E411D0003951C5D0F82868086F8CC46408CE54D4D3EDB319F3
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Lavc57.107.100...C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=..............................................S..........................."2.!1ABQRaq#3b..$Cr........4S....%.Dcs....T..&5..Ed..t........?..9...p.x..V.N1...L..-.......X...w.6.\|.c{......Eh.!@vQ...h...ol.6-...v.)....\.7.x.....C.....ofi9qne^..o[a..a...WO...}..A!e....tq.C.1m.....\.k4[K>.>O?'!..k...X.^.rV...{H...c.....E.t.($..Z.QZ..G.8.y...QV..._...3x.>.......`."..>.{1p.G_6...S.?.y.....u....U.uC%i...l.......Z......q.\|}.~..w..\..:I..!De...._.EA...h..g...c.u..T....e.x.........&.....jKP.v!...^.G^......I.H.JO4jt+............S...,.X...<..S...UH"I.1+q...R.w..H.<........xHy.5.Z[....c.a.,{]N...}..H..G?v.7.D.fa.Ygt.q..O...Qz..+.S.0.>.xD9. <..V..fCO......r.[.>58.4.mb.. ..U..)G.....1V .6.-..UWv......eh-..a.....4...~U...N..@].2,...`.......a5"@.`.>..P..}.[&....Njpi.Z._..}$.p....B...Kx..3.j&..F.I.H.......7-!&.v$c......nN....+...e.W.%..[.j.6..'...^......"V....tN.9...

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1408x819, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	286896
Entropy (8bit):	7.999407372756962
Encrypted:	true
SSDEEP:	6144:oYdYtEdpRtRDPwxAZiXMVGHmenWyjsRAQMDqMc8UUnkdvV:oYR3tJV4YGHdWyYRADD7LUWkdvV
MD5:	D9A00142DDDD4496F41ABA16E9FC90ED
SHA1:	A514D588AA8A50398DB602DDCA2E43537B878C6A
SHA-256:	F5B1C92FB7E0317A2C60294B594857FC6C3FA3C4A80AA3E982EDC11B0649D008
SHA-512:	E0EAF5F5F1FBDEAB49ED51FB3336F1DA2E819BE1119C21312F151AB940C1133A2CF7CCABD0CEF583034CEA3E528AB8FB0AF939E1798FACB86C0FB4E9EBB9F009
Malicious:	false
Reputation:	low
Preview:	RIFF.`..WEBPVP8 .`...5.....3.>a&.E."!.,6X@...7l...a.)...V.L...............'.?...........>.-......R.?...G.o....M...h...........O.....\|G.......o..p_.}?....g.....o....r?...................y.....S.S.G............g...[.O......i_......k................u............1............?.zZ............;...............Z....{..._............_....y..........K........{...>..z..}..._U.......p....?l.....9......zT...s.?.?...........w....J.N]..R.c..._~s...:P.Q....+.^B._.`...B^...p.....6C.........G.=#..t.,...Q......#.'....`...k..:........P.5..3..n..........<./I....M.[../..F!%n...Kj..........yB.o...Z.V...n..)......u.;.s;)9..k..Q..Xd..]K...d..:S..S..v..c.5wx..$.....M....{..$j..s..S...s...C..{.e....... ....j@...b.....MS.......]Y..$./.o..A....S..6/.=....z.\.._..s-j.mI.x...8a>.sMm.,....`..t..4.[a.i....=.{.t^...Ud......3.S4....<W.:......XB....1..+..b.g7}N.E.m..FC........,O$.8.'d..R..M...o.....i...~T~8a.r........=.M..^Nq:\.>.....6AYD.y0.n..c%..4.-sk8..iu..W.-.

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	11634
Entropy (8bit):	5.358512230735211
Encrypted:	false
SSDEEP:	192:a/KWbqXV6uyErbqGIwYjc1Yk/MoBqNf6uyCrbqGIwYpa1Gf:kaHq904Zq9r
MD5:	4F81B7EC203EFAEC023F045AD6B337EF
SHA1:	13681AEEC8BF31DF45D7EE3B78BF64B47BD06F7C
SHA-256:	C0C4DC54F76B3ED86C0FFE83FF98F7D2B0CD8C3DE92BCA47159B3DD8D948B78A
SHA-512:	B5B059C36FFD5C8DA53644F6498A8C067FDD117DFFA4FD5D392CC3C0347455CE5EAED49F834AA386016757C32C57AB9D58B7410344D6E450FF0D2C9BBD5F4D47
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Open+Sans:wght@400;600&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62818)
Category:	downloaded
Size (bytes):	173874
Entropy (8bit):	4.870487362174848
Encrypted:	false
SSDEEP:	1536:LMVMWMiMTMpQryvH2Ro2b7G3YxEILTi8DpUFuzMVzpZvCjCJ0TL/DTBKkmLQ7:oHkb7G3wEwF9UFuzMhqjCKLPYkmLQ7
MD5:	422A6FA3877F6945823723ACC4BE83F9
SHA1:	45814A387D15112B78A12FE820F1BB17242C6A97
SHA-256:	91D681772CA987A6CF2C43B521E05F4254603998C1D7931B53C29947AB69E627
SHA-512:	4D8BD06B6C8A5A3DCBAF0AB175196A89317A3C47D7B65E1E2864AD22BB7CE1006B506946F7D4618167D51B685C7B92373D7FED0E04C4103BB414D08B8E0EE4AE
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-fontawesome.min.422a6fa3877f6945823723acc4be83f9.css
Preview:	/!. Font Awesome Pro 6.4.2 by @fontawesome - https://fontawesome.com. * License - https://fontawesome.com/license (Commercial License). * Copyright 2023 Fonticons, Inc.. */.fa{font-family:var(--fa-style-family,"Font Awesome 6 Pro");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-classic,.fa-duotone,.fa-light,.fa-regular,.fa-sharp,.fa-sharp-solid,.fa-solid,.fa-thin,.fab,.fad,.fal,.far,.fas,.fasl,.fasr,.fass,.fat{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-light,.fa-regular,.fa-solid,.fa-thin,.fal,.far,.fas,.fat{font-family:Font Awesome\ 6 Pro}.fa-brands,.fab{font-family:Font Awesome\ 6 Brands}.fa-classic.fa-duotone,.fa-duotone,.fad{font-family:Font Awesome\ 6 Duotone}.fa-sharp,.fasl,.fasr,.fass{font-family:Font Awesome\ 6 Sharp}.fa-sharp,.fass{font-weight:900}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{fon

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://a.idio.co/ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289418&z=0.25825000654887664
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	35412
Entropy (8bit):	5.286920864611428
Encrypted:	false
SSDEEP:	768:Y1CFCetAUWHSfPAV2wC4LESx+VK6Iku3ifyA/gqoyEVlnn8N:lLfPPwC4LEScIj3ifyQgqoBVln8N
MD5:	904D3C2F1E821AB45124D66DE422B409
SHA1:	2424BC1F5832981BBF55847D0BA2EEB6E84BF02D
SHA-256:	5E303E88B8398F416F84591973B2DC5DF6D02746F782FC367368E3F6FBFAE6AD
SHA-512:	5816931F8EBBD789DACED1B0F3BE8E6C878EA2991F9FC66249C010203804A19C92851A65885CCC1B9AD1FF5CD85B4416586B332DE6DB38809912E53A0A5916FF
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/core/wcm/components/commons/datalayer/v1/clientlibs/core.wcm.components.commons.datalayer.v1.min.904d3c2f1e821ab45124d66de422b409.js
Preview:	if(!Element.prototype.matches)Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector;if(!Element.prototype.closest)Element.prototype.closest=function(s){var el=this;if(!document.documentElement.contains(el))return null;do{if(el.matches(s))return el;el=el.parentElement\|\|el.parentNode}while(el!==null&&el.nodeType===1);return null};.if(!Array.prototype.find)Object.defineProperty(Array.prototype,"find",{value:function(predicate){if(this==null)throw TypeError('"this" is null or not defined');var o=Object(this);var len=o.length>>>0;if(typeof predicate!=="function")throw TypeError("predicate must be a function");var thisArg=arguments[1];var k=0;while(k<len){var kValue=o[k];if(predicate.call(thisArg,kValue,k,o))return kValue;k++}return undefined},configurable:true,writable:true});"use strict";.function _slicedToArray(t,e){return _arrayWithHoles(t)\|\|_iterableToArrayLimit(t,e)\|\|_unsupportedIterableToArray(t,e)\|\|_nonIterableRest()}function _nonItera

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12697)
Category:	downloaded
Size (bytes):	176909
Entropy (8bit):	5.670539900132179
Encrypted:	false
SSDEEP:	1536:4eZn8jKi2PMchXPtNPU9ArHMMXpU827UdETqTJkM9YEZXP4/0YhLu3U2oivtNooz:1nfXUThMuEZg/0Ygui8/MU3kt
MD5:	31343D85B6963C3A49261A11A5509DFD
SHA1:	CCB5C03CC4A5B62E9B4BFEAD92021326FA21FE00
SHA-256:	DB45014D7E05B90961D5E6B56B7CAF2BCD222F51BF20B118FD65AD921E895DCC
SHA-512:	A0E4DDA632C9DAE8E5BDA1F0A5699839B4C6FE2B472042324E2272BC66872DB8AA2B4B17823BC41A302364C51C14E5D4B38D484B2AA46A9AF1D68CE58D68691E
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/js/vendors~player~player-pomo~unreleased-ab12c5410a30202855ccd359eb0e7f98.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[4],{1069:./!*****************************************!\. !* ../node_modules/lodash/_baseTrim.js !. \*****************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(t,n,r){var e=r(/! ./_trimmedEndIndex /1070),i=/^\s+/;t.exports=function(t){return t&&t.slice(0,e(t)+1).replace(i,"")}},1070:./!*************************************************!\. !* ../node_modules/lodash/_trimmedEndIndex.js !. \************************************************/./! no static exports found /./! all exports used /./! ModuleConcatenation bailout: Module is not an ECMAScript module /function(t,n){var r=/\s/;t.exports=function(t){for(var n=t.length;n--&&r.test(t.charAt(n)););return n}},1071:./!*******************************************!\. !* ../node_modules/lodash/_getRawTag.js !. \************************

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 395444, version 772.1280
Category:	downloaded
Size (bytes):	395444
Entropy (8bit):	7.997878073119641
Encrypted:	true
SSDEEP:	12288:YbzB8MYMJOSvwoCZYPP9cdtNjcD5HMDRA:e37oSdWYPlKNjctsG
MD5:	F3100CA1D6B8939D47FE7E23A831BCD3
SHA1:	7E9675560E6F9836855EFA46CFF0738CB02D51BC
SHA-256:	B85C4D4BCB7BE039D30281D940426203622394A85D4CD2B43048B57A924A7D51
SHA-512:	B0FCDAD92EC9F88F58B5E075A09CF84DF99AABBAE5A9B307D544EC9D8DEB5A705922BCBD081CF6AC8E7277FAF615208A67A96C692D950FF5170B07BF9E39F73A
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/etc.clientlibs/sp-aem-platform/clientlibs/platform-app/clientlib-resources/resources/fonts/webfonts/fa-regular-400.woff2
Preview:	wOF2...................f.........................8.$. .`..T...0..D..X..\|. ........~p........).=<g..6......PUUU5!!.CU....G?../~.....O...?..........;. Lf..fw8]n...7......4.......,h.........1..!w.. .......&...XA.0.'i...bZ.(I.0....+./..XELZ.......2.%....v]Q....!$...e.9..... ..P...!..nP.v:.Y...<...Ox..)2..#.!#M2..<...?...{...$$S.......e.3S.2..9..lR.o...U.3Q..B....u.......D\\|z...L..'...!.....0..;.p8.e..<.G.I.+."...(Q.).....S.2m..$.2e%.A.e.>....g...i.5..M}.7.;.0.0+i.+.b.,KJX...i?.SL.%v.]N.]...G..az.9".....:..G....T,...%:r.s.!.0w..W..2....._.B.).....A....u....."!.....!K.E.I.a...m..U.....].....].......5..y...sK......>..3...... ..0.u.7d.a....p.r.].Ip..;}.V..T.7..KJ....z...1":.....n........V..9....'aEn..c.,..g..~_......:.B.H.f.d.n..........aW.(..B8.(.q..+.q..........s#..m).....S....iF).M_m.j.1....DF.uM..9gp.=wp_3.....c......a...q..]......A...(.H)....@......\|...w'h.....C..l.>.J.RddU...H.R...".TD......Q.(~..G....a.,...i....0..4l....O......B.X.v..p5

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 105, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5304
Entropy (8bit):	7.940340088246116
Encrypted:	false
SSDEEP:	96:YMA53Jw7utv73ztH6EMJ+XX4nl7HwBvA/fqBndxS+45kLxoPzZsUX:YPqQ7srCIHwBKgR450m7Zs0
MD5:	B100BF7786CE0A889474BA4987AE634F
SHA1:	5D15E4FD13CF7712702A72E1E31283CC8A01D2F8
SHA-256:	3DDA230D4167A684F0A4D0D65D085DD576D2A114558828E242B63844CC04D1AF
SHA-512:	13BFE5A77C132149898DAA59226E562710AD24FB5E4D946C80BB66F927E3B1837041A30895AEBD8059687EB54B1ED7AE1B570575CCF270AE8622F45A05752353
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/content/dam/sandp.png
Preview:	.PNG........IHDR.......i.............PLTE.............&..(........"..... ..B.....8N.............0.Tc........bq..........J\.DW.x..n{...............9.3I.}..Sc.[j.ft.$>.q}l?......IDATx..].z.:...w ..4........nl..).$+.}.\|..N#Y.J....k4.........s...9j...5.w...;GM.&..Q.\|...s4j.Q.F..5j.Q.F..5j.Q.F..5j.Q.F..5j.Q.F.......t...G..tg.+f..{0..+a......4.....0..?arx........gv...[.Fir\\|.6..}.......=..;.v..7..<.. .........o]...."..........i\.?F..[.....y...H.o...(..8[t,"..k^.?...g....t...l..'....H...W..N..m.'b.v..G...$A.....C.?k.q.....bl\\|.K..#.Tr...A....%..F.H.......RI........._H.A0.+....M...X..45,.?.W.....#.........H......H*f...M<....oU.r#.`.?X..>..{E..6.}.....Q......FQjhU....Q<1...'.z.$.I8Mp..v\|.I.\|]0..p'..D.F..z.\.3..=.\|p.7gx..;...$............f].]$R.}..!.....`Lr.Q..f.H......[D...J...f....W~.=....G.@1%. .....X...??.d$..$.]v.."....q}..f.....T....p........G.;9B=..\u...)..$s..T...Q...D!..P.3.p%..'/J.D..F..l6..N..~.(.wG...._.{..h.......-x.u.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5261
Entropy (8bit):	4.966187914366954
Encrypted:	false
SSDEEP:	96:npyIc40w0auhispuVKG96AyLCNB5+jdjljJjeW5h4aF:FLr+ispq6vLGB5qFNJtiI
MD5:	26586782F0130B700CF89381F72A0574
SHA1:	B8A93C604E1E34DFEE7D45EC5503EEF93CB5DA3A
SHA-256:	F8D43DA6FE0AA8678D5569B5FEFFB6F6FFC0F389A69161B2903C4E45A7B30C40
SHA-512:	35A3F746130C13D10D76E127076D3DEE5EAEFDEC14D334F7768A4F22CF8B7ED391C05168813C3226E064470A8DAB2C26660FFD3230BB97416F6C94507718776B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/1b11452b-62cc-4fad-8149-9b39c40329a4/1b11452b-62cc-4fad-8149-9b39c40329a4.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"1b11452b-62cc-4fad-8149-9b39c40329a4","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018e8a70-11da-7081-adfe-9d6a02a2db4e","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","sb","br","sc","sd","bs","bt","sg","bv","bw","sh","by","sj","bz","sl","sn","so","ca","sr","ss","cc","st","cd","cf","sv","cg","sx","ch","sy","ci","sz","ck","cl","cm","cn","co","tc","cr","td","cu","tf","tg","cv","cw","th","cx","tj","tk","tl","tm","tn","to","tr","tt","tv","dj","tz","dm","

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ad.360yield.com/ul_cb/match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1657
Entropy (8bit):	4.8670024272903785
Encrypted:	false
SSDEEP:	24:ehVP+rpLv9D6a/wYWJuu3kAd+i2r5DgHJPWSzPWQ3I00wmg+Yj/E7j/hFrFj/hFS:e7gLvfI8uDY8J9zDx0MHa/p+
MD5:	B49AA2D66A0B1EB8FC849605ABB0528E
SHA1:	3B11BBC7138BF650276D03FED8E7B7081112FAA0
SHA-256:	26E173D46B50B2A8C8D380A69BB31615C1E4398EA30EBBB70FFA4132D9210CDB
SHA-512:	1F79A05811F2E08006EAC92C2692F877ECFA820B7C2E1A8110EE1D20A0937EA04AF2A5302ED2A20B77CD5B0B3E124AB4CCA55CFF9E3C9CB9897BFB6BD2BFF8BD
Malicious:	false
Reputation:	low
URL:	https://flo.uri.sh/template/20762/v21/static/bundle.css
Preview:	html,.body {. height: 100%;. margin: 0;. margin-left: auto;. margin-right: auto;. transition: background-color 0.5s ease;. overflow: hidden;. font-family: sans-serif;.}..fl-controls-container {. vertical-align: middle;. margin-right: 0.75rem;. margin-bottom: 0.5rem;.}.select {. display: none;.}.input {. font-family: inherit;.}..flourish-popup {. pointer-events: none;.}..flourish-popup h1 {. font-size: inherit;. margin: 0;.}..flourish-popup h2 {. font-size: inherit;. font-weight: normal;. margin: 0;.}..flourish-popup h2 .name {. font-weight: bold;.}.#series-filter {. float: right;. width: 200px;. margin: 1em;. font-size: 13px;. height: 1.1em;.}.@media (max-width: 500px) {. #series-filter {. width: calc(100% - 2em);. float: none;. }.}.#graphic {. display: block;.}..bg rect {. transition: fill 0.5s ease;.}.rect.selection {. fill-opacity: 0.1;. fill: orange !important;.}..x-highlighter,..data-elements .series .line,..tick {. pointer-events: none;.}..dat

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23897), with no line terminators
Category:	downloaded
Size (bytes):	23897
Entropy (8bit):	5.309124558333512
Encrypted:	false
SSDEEP:	384:qiH5aLGGy474znD9oSZXH79WfhaONcgnCXg9:XuGGhaXXY5TcgnCXg9
MD5:	CD29B9BC973E48A7FCD0EE7153BDF03B
SHA1:	AC3E5CF1C0D4183B2DF14C34BEBB84B3EE657799
SHA-256:	7CB58278C8F54A62C0AFA6DA0C67B3A45AAD637A0BF614E9C0DD42B73CEE266B
SHA-512:	253356199738322AE0D761A162136D91BA00018B180FF54C4D014C0B8AE4A93F5DD4D21664E8C582A4DB73F0F4265D34604D2B4C03CEF02A67882815ED328C2D
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/52.b1edaf4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n("wQh9"),b=n("yvDu"),m=n("LvsC"),O=n("qytN"),g=n("7jL2"),y=n("LfGp"),j=n("uHEx"),E=n("Iwrg"),k=n("+OSO"),S=n("MiOA"),x=n("8dVd"),w=n("26VM"),T=n("mekd"),R=n("3QMb");function exceptionFromError(e,t){var n=parseStackFrames(e,t),r={type:t&&t.name,value:extractMessage(t)};return n.length&&(r.stacktrace={frames:n}),void 0===r.type&&""===r.value&&(r.value="Unrecoverable error caught"),r}function eventFromError(e,t){return{exception:{values:[exceptionFromError(e,t)]}}}function parseStackFrames(e,t){var n=t.stacktrace\|\|t.stack\|\|"",r=function getPopSize(e){if(e){if("number"===typeof e.framesToPop)return e.framesToPop;if(F.test(e.message))return 1}return 0}(t);try{return e(n,r)}catch(a){}return[]}var F=/Minified React error #\d+;/i;function extr

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2552)
Category:	downloaded
Size (bytes):	38833
Entropy (8bit):	5.396122319952389
Encrypted:	false
SSDEEP:	384:KS6y4qqRniuko00PXI5FFxfxY4oYw/lLrJv8LdCV+eMIFrXzmmLhDd9D10i1HcZH:xGnicg5l0b/ltkrO1570gM0NnRDjHHM
MD5:	EEBB03B1B0E746977A74E05652A8AB26
SHA1:	2AE74B816507E6246A2A9D50076A2870D30A3F00
SHA-256:	7576BBDE791D8F3C2D5F2DCF8026751809D07C23AD4DBBC4068691DF9FCF8F1A
SHA-512:	876D5E89339CD78E5C4A735ED0FDEB76460781452408684AD2AA18E583C70A23E26F12B9113E838D0935674A2D8ACD43C4FD8C7EAE7EDB825E0C93D261DDF211
Malicious:	false
Reputation:	low
URL:	https://assets.vidyard.com/play/stylesheets/player-pomo-0d1c572c6bf350fa8c24158eff8e885f.css
Preview:	._29Gjr{height:100%;width:inherit;position:-ms-device-fixed}...giifV{position:absolute;z-index:1;left:50%;top:50%;transform:translate(-50%, -50%);border:5px solid rgba(35,35,35,0.8);width:3em;height:3em;border-radius:50%;opacity:0;-webkit-animation:_3pWeg 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,_1Nluf 1.1s linear infinite;animation:_3pWeg 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,_1Nluf 1.1s linear infinite;transition:opacity 0.2s;pointer-events:none}.giifV._20Z54{opacity:1}@-webkit-keyframes _3pWeg{0%{transform:translate(-50%, -50%) rotate(0deg)}100%{transform:translate(-50%, -50%) rotate(360deg)}}@keyframes _3pWeg{0%{transform:translate(-50%, -50%) rotate(0deg)}100%{transform:translate(-50%, -50%) rotate(360deg)}}@-webkit-keyframes _1Nluf{0%{border-top-color:#ccc}35%{border-top-color:#fff}100%{border-top-color:#ccc}}@keyframes _1Nluf{0%{border-top-color:#ccc}35%{border-top-color:#fff}100%{border-top-color:#ccc}}@media screen and (-ms-high-contrast: active), screen and (forced

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16436), with no line terminators
Category:	downloaded
Size (bytes):	16436
Entropy (8bit):	5.046420217723836
Encrypted:	false
SSDEEP:	192:iQ0dizaqHG3uoRQIsWUq0+DfyvRMRpiyhVAh/qP5SM9/:aj3uoqH9fvRMRpiyhVAh/s571
MD5:	6F779260053E30787F84DFA7BA6743E5
SHA1:	95E6B54A6B0D402191A7D4656D06A5696EDBBDB8
SHA-256:	A03B854D10519FD5BE9CDCBC78FAD3927C1A3DE9E84FA74353C8A19CC20D0501
SHA-512:	4900847584724D9D4880B011038AAFD6D1293290A9A3ADC345E177DB22B3BA3168FB5EB065FE963AEEB1C9E28C51079D400606BE63BEBD6863EA5BBC81D427AC
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/28.812d5a7c.chunk.css
Preview:	.drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-widget-header{color:#fff}.drift-widget-header:not(.drift-widget-header--collapsed){z-index:1}.drift-widget-close{position:absolute;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;top:8px;right:8px;height:16px;width:16px;padding:8px;cursor:pointer;display:none;visibility:hidden}.drift-widget-close svg path{fill:currentColor}.drift-widget-header--collapsed .drift-widget-close svg path{fill:#687882}.drift-widget-close line{stroke:#fff;stroke-width:2px}.drift-widget-chat-wrapper:not(.drift-widget-chat-wrapper__active-conversation) .drift-widget-close line{stroke:#687882}.drift-widget-chat-layout.widget--xs .drift-widget-close,.drift-widget-chat-layout__takeover .drift-widget-header--gdpr-consent .drift-widg

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (702), with no line terminators
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	5.597676264821739
Encrypted:	false
SSDEEP:	12:hnMQbwuOaxyCkv4AEHcXpS1dITiUMGT2IWaEuY1GVMYBW9PO8MiN4:hMiRO9PZSzw8G9P+1Gnz8m
MD5:	9AAE186989277CA4F7F891EB835D0360
SHA1:	22FDFB7A9C6395206BF6C1FCDF9CE9F19742F4AC
SHA-256:	81D28C7270A24AF7513CDC96848E698887EC5DDFA3591FBEF0CF6542A45A2B65
SHA-512:	5027548DDE1A23C46722168BE193F23754056A06E6A5BDD3B31E80E3FDC4C46D2904DC566CF1D48587626BAADF7D093DF4147EDFF462E653E6A34F7570810AF0
Malicious:	false
Reputation:	low
URL:	https://11756258.fls.doubleclick.net/activityi;dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login?
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=*;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login"/></body></html>

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	225885
Entropy (8bit):	5.3173551453637815
Encrypted:	false
SSDEEP:	3072:XmqIrl5phQk+VC2xILRcP2QBYfoSjqkxtxFC2b8L0UzvrG:gS2qVkxtxFo0qzG
MD5:	7C4C8A7061350329F108E3F92F2B6ACC
SHA1:	0F0D8E0A440597DF3010506D70D893AC1E7BB2C8
SHA-256:	7B54A059CCB33E9823AF3F640E25038D5F5D816EDF8DFF3454F1904C91326B56
SHA-512:	4D936542CC92722E774ACF4FBD5FE08F7E462779FB59161ECF162DED20DBA66051BF00B441343E6F9B1F3ABBA34344E1E1D4232A31B26772615069DAFA0E1058
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/include/1716472500000/n6k2yubr6fw7.js
Preview:	!function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};function __webpack_require__(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}__webpack_require__.e=function requireEnsure(e){var t=[],r=n[e];if(0!==r)if(r)t.push(r[2]);else{var o=new Promise(function(t,o){r=n[e]=[t,o]});t.push(r[2]=o);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,__webpack_require__.nc&&a.setAttribute("nonce",__webpack_require__.nc),a.src=function jsonpScriptSrc(e){return __webpack_require__.p+"assets/"+({}[e]\|\|e)+"."+{1:"37afe153",2:"2a722653",3:"ee35dea2"}[e]+".chunk.js"}(e);var s=new Error;i=function(t){a.onerror=a.onload=null,clearTimeout(c);var r=n[e];if(0!==r){if(r){var o=t&&("load"===t.type?"missing"

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.170951677452483
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgGFzZv9Qxli/sJ5u/sRxQ75jmlo1X5E1d1I:0EG+1p1FzZvKxBTvQ7RmS
MD5:	994158C9401B7EF401678606FE49EF49
SHA1:	CF488F7B3E08BAC383046E91D02690FD6A530885
SHA-256:	B6A0D2860468B19A841FCFF7CE4DE1BD9D014FEBCCDB77DB458F98A5B05D094A
SHA-512:	F97850B32C0764EAB97E4B4F90B1CD7FF1016BBEC35396DAD7B088B2D329524DEA647E3620DAD056D81882DDE6DC22CB3C8CBC22364BBCECF222F0ECCB1DAC61
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240521130155-df570d2",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.96c083f3.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	247401
Entropy (8bit):	7.999267707206819
Encrypted:	true
SSDEEP:	6144:dWFvRu3UPJHh6YwSYA+IgUhIEdKt1gwd1DkJfv5aN:dWFvRIoJLYNEkvgwdOxm
MD5:	5E9E9C14A41431C5572B122F6C90F5FB
SHA1:	1CC6558FA30D836C0B194A02472EE4F9B202DC35
SHA-256:	816FD7242EEBD4FFB4E26ACA0CFBF49DDA5B4259C18D83E1EEE3128B8811B2E1
SHA-512:	3E3C68662AEEB383EB674B4EDF8DA4C2B4A850891B1C0F1039CDDE5AEC1D7E7C873D54D2A43D2D582C94A2BBF5C6760E5FE8CFE470A43249F7A84AF0DA27E62A
Malicious:	false
Reputation:	low
URL:	https://spglobal.scene7.com/is/image/spglobalcom/corp_0416_sustainability_vertical?$responsive$
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D................O...(iinf..........infe........av01Color....jiprp...Kipco....ispe.......=........pixi............av1C........colrnclx...........ipma..................Wmdat.....f........2.... ...A@.X..Vue.....aHP....&!QS..`s..L ...c.b..Hlw...\|.i^..HB..FT....I..yY.....'.V..j.\.\^3.#..a~e...{..%.....\p...].-.K....,Cli..,...>...i?K\.....\|....t...3......J@ OVS.......r&...4.?..[...?.z..&O}.khv .M-.......a&.........4....V\|..R..Th...G....j..._Z.H .V.DT..v&.._..........2I:......s[...(.]>~.....=lc..S.4d...+.."...k9.4. n.....<T.kV..5........G(.....[.....Z&.......P..J...."v.,[......W..)K.r.5.r.&l..k.....C..=..........qq.DZA..U..xj.@..x{\|....-O.K.N..4..~5.wC.D.c.4.7.\|...z....%.A.....N..<..O..\|D.kc...W'e...)..3..AS.$..h.....>2.......{....... .....\cxM......-.-$..{gX..2....}...#..Sb'..Aq$@9N@k./R.tZ.q.....HZ......8..kq.v....&.#=.7:S...Ng.....F^.n.B1.

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7215), with no line terminators
Category:	downloaded
Size (bytes):	7215
Entropy (8bit):	5.715038918631035
Encrypted:	false
SSDEEP:	192:XFP79r8FRHF6U/Atg28bngH1nlm6AVPhJ98evibOEOxWShjulmu/TuVH5coKW8A0:p7VfnzeuN/Tk4
MD5:	1C6A1D59A85DC5CC5C7E07197599E9CE
SHA1:	C0E9404A317D60811E5190607D9F74073B9F9CC6
SHA-256:	DBEBA2B031E84A4C7100F7E8F2FE7284C9D296FA1BD2861889F86DF1D708B7B1
SHA-512:	84FBDD8171E910EFA566A3750DA726206EE3BA1AD4BD3F7BD8EF0A6AB52FA86A994D6EE94209F787E88EB6219C1FBE3B7E806E785E8D944525A06BB44D74CBA3
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/main~493df0b3.8510c064.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}catch(i){Promise.all([E.e(49).then(E.t.bind(null,"imET",7)),Promise.all([E.e(2),E.e(40)]).then(E.t.bind(null,"H+SE",7)),E.e(15).then(E.t.bind(null,"2GZm",7)),Promise.all([E.e(2),E.e(12),E.e(7)]).then(E.t.bind(null,"LSZE",7)),E.e(54).then(E.t.bind(null,"3yYM",7))]).then(function(){t()}).catch(function(t){return console.error("Error importing polyfills",t)})}}(function kickOff(){Promise.all([E.e(52),E.e(37),E.e(22),E.e(19),E.e(43),E.e(20),E.e(26),E.e(14),E.e(11),E.e(18),E.e(50),E.e(42),E.e(29),E.e(21),E.e(8),E.e(16),E.e(24),E.e(17)]).then(E.bind(null,"V+70")).catch(function(t){return console.warn("loading root widget failed",t)})})},0:function(t,i,E){t.exports=E("/7QA")},"91+0":function(t){t.exports={"//WS_CHAT_BASE":"localhost:4000",ENV:"

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33094), with no line terminators
Category:	downloaded
Size (bytes):	33094
Entropy (8bit):	5.271194779008479
Encrypted:	false
SSDEEP:	384:+MT7wsVvhAfNL2hzOtDENEhe2xZc9KhvpcFvRrfVBejwX:+M/wsVvhAfNL2CEQbc9KVpcFvFVB6y
MD5:	D8739A9FE9A3A42936F5CD86C8727494
SHA1:	4FB60EC9F1C4EFF985C219BF24E4B1F340D62C97
SHA-256:	8F0F8792237470EE661C6AFC32CA68200DD74BCC0D544D0FD54C7777AF362EAE
SHA-512:	3326F37AE1DB03E06E8A1EC7E0B39D4F055C55E0B2DE6386F0677250A48B0146A081B3E17B42E01C194F0CD3FA5B63871FAE86478891644EA41BA1747A647EE5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{timestamp:e\|\|Object(i.a)(),discarded_events:t}];return Object(r.c)(n?{dsn:n}:{},[o])}},"/brt":function(t,n,e){"use strict";e.d(n,"a",function(){return severityLevelFromString});var r=["fatal","error","warning","log","info","debug"];function severityLevelFromString(t){return"warn"===t?"warning":r.includes(t)?t:"log"}},"26VM":function(t,n,e){"use strict";e.d(n,"a",function(){return isDOMError}),e.d(n,"b",function(){return isDOMException}),e.d(n,"c",function(){return isElement}),e.d(n,"d",function(){return isError}),e.d(n,"e",function(){return isErrorEvent}),e.d(n,"f",function(){return isEvent}),e.d(n,"g",function(){return isInstanceOf}),e.d(n,"h",function(){return isNaN}),e.d(n,"i",function(){return isPlainObject}),e.d(n,"j",function(){ret

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2000 x 2000, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	1727790
Entropy (8bit):	7.981879627723362
Encrypted:	false
SSDEEP:	24576:4Eb4aI2xwZrlqhEiVXCwKgZMIGnhE3CQ6DBp+PrZiHLgKTaaRKpoVy/x7F:zuywZrl0VSDgZMI2hQ8Bpq9ic8DKWcZ5
MD5:	10F0C712AEC12BF683D38AA7E02BC02D
SHA1:	34A547B371D8B263B5300A150474B619374FB333
SHA-256:	746E5D4D2FF4B3DBD4B5DAD04EFB721845D8A1DA871E66C0EF312ED0C50DC92F
SHA-512:	AECCFF99B6AF4DF13C4260CE8802F3F0EDC75848493F257AD863F21F76551757198167009C258841A7C00838E6ED4883FFE5EB8E5693D07957928831EDBA0FD9
Malicious:	false
Reputation:	low
URL:	https://www.spglobal.com/content/dam/spglobal/global-assets/en/images/podcasts/corporate/the-essential-podcast/corp_0410_theessentialpodcastsquare.PNG
Preview:	.PNG........IHDR..............ZS.....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.et.W.-3c..33.,[.dffffffff...:Lf.`..L......h..M....W...5k...$/.u..Q..!B..."D..!B..."D.qM.~...yf.............-.}.......G._.......~...-.....l~.....g.W.N.\|...i..g.../....c+_@.0.p..O.A../..^~.......... .....{......\|./...\.sz.....o.X..e...mi3.\|........A...MK/.....N/..<.`.........S...s......).pit.!67..dDI..Q.{N.wV.o~.[F#8..t..xQ.(.K........i...s.k..k.Y...2K..J.P.b..J.,.'..i.V..5...........p.lt.j..irI...n.-.qI..<5R60...=..z.&.@.&...+...Op.3...Pg..Q.W.0...9Q.b.4)..z....'._9..@.(..h..%....P.`P...1.J.........2:.4...z..ng4].../=.X...K.h..].T.1J...v.Z.!8.y...reQ6....n....z.<....]wV.3Z)]..PVi..,... .^..Z@.^..f....*..;..8../..zt.9..=..2....(V.6....F.M......z..q..5.....R.3./&6...6xd........FVt..4..T..g.Y..P..%..:.O....4..q%..\HeOZ.u-....9.q-:a,.(...Y....NPc....u(..6...%.....urMb.-....E..Q........}.n...ES.5.}..R...5.8U...-9..y...k...k/.W....p.l..REq.0.h.s.EL....A.!..

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (365), with no line terminators
Category:	downloaded
Size (bytes):	365
Entropy (8bit):	4.983341365130917
Encrypted:	false
SSDEEP:	6:5zQ4MtMXRSNIQPELV0H0e66GIKELV0H0e3LV0H0e+nOtaLVeVEy0zmAUSrzmczgn:58Bt4RSCQPU+0eeU+0eR+0esOta5eVAy
MD5:	06B2963B029C0824382815165BFEA73E
SHA1:	DE23FB128E2589CF384603CFBB7F6B7BEF969B05
SHA-256:	EC3A84E593065A50CD77CE9FBA273B4196936940C0813CA248B045DF2E2C8EFF
SHA-512:	1CD97E2DB15DD10C65D22E7EF911E6A6DB742F34574F91743A9C6CC7922C7FE0CBCED0AE837EB6C43617D23FAF959FF3C9D1B3ED49F44FE000FC191FFD60C002
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/25.c695453b.chunk.css
Preview:	.drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12px;border:none;padding:0;-webkit-transform:translateZ(0);-moz-transform:translateZ(0);transform:translateZ(0)}

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	403
Entropy (8bit):	5.283830014085897
Encrypted:	false
SSDEEP:	6:wBqWekiTakpxxdGztoIhS3EaR8RmZFeG5jLCmKs990mvCbcaS3jfU0cM4990mLT:dkK9dg5qEaqoZFeG5KD8jfZe
MD5:	10BCB2A373DB52C571CE62225539DBE3
SHA1:	6AC2E8A626EF069DB565F171D81EB12C86807F66
SHA-256:	1C55123C07BE8D3B19FA6FF0988CB14A27BEDB6EFE8F9D87B81B80CFE81FB42C
SHA-512:	DC3E6BD8516488B8D1494312C20BBD3008FB7041C27E5524C75C6DCDADFB8889929A7E5E187180D4228B5AC636C02286A2827E9923D38956FD134B46074A130C
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD>.<TITLE>Access Denied</TITLE>.</HEAD><BODY>.<H1>Access Denied</H1>. .You don't have permission to access "http://www.spglobal.com/content/dam/sandp.png" on this server.<P>.Reference #18.44b31402.1716472277.9862f9f6.<P>https://errors.edgesuite.net/18.44b31402.1716472277.9862f9f6</P>.</BODY>.</HTML>.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6145), with no line terminators
Category:	downloaded
Size (bytes):	6145
Entropy (8bit):	5.414211503854881
Encrypted:	false
SSDEEP:	192:DpXpF7ZZ7IRn+DVk3+kk21u6nfaN9kV41w6C+:9Xn7fIRn+DVk3vk2o6nfabkg2+
MD5:	26D5C6C952637BEE2E6C46F746FF2C9A
SHA1:	7C296A11E33FC3E3B93758D58362A832D66406F5
SHA-256:	45EDD733008308E83C097BB04C731FB855226CDBC732EA2BD9ED3315AAE6BB6F
SHA-512:	84F8E58588110FD370FE22F6189DE3964CB13C35B30BB502B6FDC70D0809E8C6B32AD08590101033C2C12B63FDC47C41A4CC0E4E4BA713086C753A8C8C762576
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/runtime~main.96c083f3.js
Preview:	!function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.apply(f,_\|\|[]),checkDeferredModules()}function checkDeferredModules(){for(var e,c=0;c<f.length;c++){for(var r=f[c],d=!0,t=1;t<r.length;t++){var n=r[t];0!==a[n]&&(d=!1)}d&&(f.splice(c--,1),e=__webpack_require__(__webpack_require__.s=r[0]))}return e}var c={},r={6:0},a={6:0},f=[];function __webpack_require__(r){if(c[r])return c[r].exports;var a=c[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,__webpack_require__),a.l=!0,a.exports}__webpack_require__.e=function requireEnsure(e){var c=[];r[e]?c.push(r[e]):0!==r[e]&&{1:1,3:1,4:1,8:1,16:1,23:1,25:1,27:1,28:1,30:1,31:1,33:1,35:1,36:1,38:1,39:1,44:1,45:1,46:1,47:1,48:1}[e]&&c.push(r[e]=new Promise(function(c,a){for(var f="assets/css/"+({}[e]\|\|e)+"."+{0:"31d6cfe0",1:"196b564b",2:"

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text
Category:	downloaded
Size (bytes):	624
Entropy (8bit):	5.286473136799648
Encrypted:	false
SSDEEP:	12:PtoN0TvhLHi4vjwoN0/kGj2hVHGvjwoN01lVHdTvjwoN0x5D2VHsvv:loYhLHTcoeH6hVH4co0VHdjcoOh2VHOv
MD5:	949049C0393800BE1194CD5331BE750D
SHA1:	990537E2067811A05E200B05B32E7C17BEFD823D
SHA-256:	27F7F08FDD77E137001BD9A674AD937923EB58AD41E006C3E5CAE4F3FA885012
SHA-512:	667B03E042AABCF7B62FD693A55BBAA5D96A55F215A5EEAD585897A033FEB2A2890E9949C8E4244AD656797F6B3D8710AB6558BE8A583FEF941F71F55ED956BE
Malicious:	false
Reputation:	low
URL:	"https://cdn.vidyard.com/media/hls/jWqYTL70JBGZA_wGoN5WzA/,full_hd,hd,480p,sd,.mp4.urlset/master.m3u8?eiF43Ig41U8wbA0Savxf0TzeSnYi3ejBhfCDWo8lgF3LSIs_r-nwDjRrAN9Q72evSjw4Gom2aJNMmBiXwev7cXup7vW37c4YA0u2jrt1bobPywI6HKg0axDHkKOFsDh9cg76Owek-7S1FESoOran4WKzmKi5MbeTlv1lFn5zuE__xsg8NjpCLcX53qabvkaVSHT8hg"
Preview:	#EXTM3U.#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=2596884,RESOLUTION=1920x1080,FRAME-RATE=30.000,CODECS="avc1.640829,mp4a.40.2",VIDEO-RANGE=SDR.index-f1-v1-a1.m3u8.#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=2605601,RESOLUTION=1280x720,FRAME-RATE=30.000,CODECS="avc1.64081f,mp4a.40.2",VIDEO-RANGE=SDR.index-f2-v1-a1.m3u8.#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=1556047,RESOLUTION=854x480,FRAME-RATE=30.000,CODECS="avc1.4d481f,mp4a.40.2",VIDEO-RANGE=SDR.index-f3-v1-a1.m3u8.#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=1231202,RESOLUTION=640x360,FRAME-RATE=30.000,CODECS="avc1.4d481f,mp4a.40.2",VIDEO-RANGE=SDR.index-f4-v1-a1.m3u8..

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24729)
Category:	downloaded
Size (bytes):	329901
Entropy (8bit):	5.5806128572556615
Encrypted:	false
SSDEEP:	6144:ErvWG6XguIuKhn8QjGV1j/dXQNkKR5LvItQqO:FHIuAnsiLvMQt
MD5:	3B0F2834480A10E2C554405B6FA62285
SHA1:	1BB50B14A5CD4752FB99C380C586722299294476
SHA-256:	5B628844CFD9E29FF8D80A5E9D8CA2CE37AD613E1712F82A4A4BD5A50AB3FFBA
SHA-512:	2E326989AD8A5A000FB57A7D91A88D7255008267F92FBBE9E6D9D372EBE027DC1476F6CB3EEC3C63C127A4FE2192512E3AB6BDC670D362D71AD9056B2C792B22
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NKVB4WM
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"47",. . "macros":[{"function":"__e"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__jsm","vtp_javascript":["template","(function(){return function(b){try{var g=[{name:\"EMAIL\",regex:\/[^\\\/]{4}(@\|%40)(?!example\\.com)[^\\\/]{4}\/gi,group:\"\"},{name:\"SELF-EMAIL\",regex:\/[^\\\/]{4}(@\|%40)(?=example\\.com)[^\\\/]{4}\/gi,group:\"\"},{name:\"TEL\",regex:\/((tel=)\|(telephone=)\|(phone=)\|(mobile=)\|(phoneno=)\|(phonenumber=)\|(mob=))[\\d\\+\\s][^\u0026\\\/\\?]+\/gi,group:\"$1\"},{name:\"NAME\",regex:\/((firstname=)\|(lastname=)\|(surname=)\|(socialsecurityno=)\|(socialsecuritynumber=)\|(social=)\|(memberid=)\|(userid=)\|(username=)\|(uname=)\|(un=)\|(tname=)\|(applicantname=)\|(fullname=))[^\u0026\\\/\\?]+\/gi,\ngroup:\"$1

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	4.556347672103115
Encrypted:	false
SSDEEP:	6:qLzLTAqJmW/HufFg6qvfNV4NhdxQCkRgUQQpAqJmrcPGeFwr52PYSF1d8Mg4Qb:XqJmW/m26qvfNV4NbxTHQuqJmrtr1MdY
MD5:	C364EB9947BE7E89D5F6879883B80147
SHA1:	223F71DC5C2CBD94F3D6222C176AF92033C2E55F
SHA-256:	5124B371E5C2E1ADB733955062A20C6F6055599BD836F1C583AB54267BADB101
SHA-512:	A352A367BB4C2F3C200246582B0D86EA09B5297181EC682B4B24FEE457A25A070301D72B7D1901F171D71091FCFB8A86654E4B6BE4D4E1C74E4E5F265D2CDBA0
Malicious:	false
Reputation:	low
URL:	https://insight.adsrvr.org/track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&upid=b2bmdj2&upv=1.1.0&paapi=1
Preview:	.<html>.<head>. <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script>.</head>.<body>. <div id="universalPixelContainer">. <script type="text/javascript">. (function(global) { . var ttdcm = new TTDCM(); . ttdcm.init( [] );. })(this);. </script>. </div>.</body>.</html>

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 23, 2024 15:50:12.891808033 CEST	192.168.2.5	1.1.1.1	0xa0e0	Standard query (0)	info.ipreo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:12.892013073 CEST	192.168.2.5	1.1.1.1	0x9b5c	Standard query (0)	info.ipreo.com	65	IN (0x0001)	false
May 23, 2024 15:50:13.727179050 CEST	192.168.2.5	1.1.1.1	0x4346	Standard query (0)	ihsmarkit.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:13.727516890 CEST	192.168.2.5	1.1.1.1	0xeba2	Standard query (0)	ihsmarkit.com	65	IN (0x0001)	false
May 23, 2024 15:50:14.713581085 CEST	192.168.2.5	1.1.1.1	0xf103	Standard query (0)	www.spglobal.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:14.715787888 CEST	192.168.2.5	1.1.1.1	0x521d	Standard query (0)	www.spglobal.com	65	IN (0x0001)	false
May 23, 2024 15:50:15.459985971 CEST	192.168.2.5	1.1.1.1	0x28e5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:15.460661888 CEST	192.168.2.5	1.1.1.1	0xc608	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 23, 2024 15:50:16.101320982 CEST	192.168.2.5	1.1.1.1	0x8ece	Standard query (0)	www.stagingciq.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:16.101710081 CEST	192.168.2.5	1.1.1.1	0x98df	Standard query (0)	www.stagingciq.com	65	IN (0x0001)	false
May 23, 2024 15:50:26.036324978 CEST	192.168.2.5	1.1.1.1	0x759e	Standard query (0)	urldefense.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:26.036324978 CEST	192.168.2.5	1.1.1.1	0x682	Standard query (0)	urldefense.com	65	IN (0x0001)	false
May 23, 2024 15:50:26.932848930 CEST	192.168.2.5	1.1.1.1	0x596d	Standard query (0)	www.spcapitaliq.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:26.933301926 CEST	192.168.2.5	1.1.1.1	0xdf94	Standard query (0)	www.spcapitaliq.com	65	IN (0x0001)	false
May 23, 2024 15:50:30.569215059 CEST	192.168.2.5	1.1.1.1	0xa736	Standard query (0)	www.spglobal.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:30.569331884 CEST	192.168.2.5	1.1.1.1	0x8a02	Standard query (0)	www.spglobal.com	65	IN (0x0001)	false
May 23, 2024 15:50:32.524421930 CEST	192.168.2.5	1.1.1.1	0x6d3a	Standard query (0)	app-sjqe.marketo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:32.524709940 CEST	192.168.2.5	1.1.1.1	0xcb54	Standard query (0)	app-sjqe.marketo.com	65	IN (0x0001)	false
May 23, 2024 15:50:36.398236036 CEST	192.168.2.5	1.1.1.1	0x7156	Standard query (0)	www.spglobal.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:36.398356915 CEST	192.168.2.5	1.1.1.1	0x5e3a	Standard query (0)	www.spglobal.com	65	IN (0x0001)	false
May 23, 2024 15:50:42.336519003 CEST	192.168.2.5	1.1.1.1	0x2316	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:42.336519003 CEST	192.168.2.5	1.1.1.1	0x5516	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
May 23, 2024 15:50:43.237731934 CEST	192.168.2.5	1.1.1.1	0x940a	Standard query (0)	assets.vidyard.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:43.237932920 CEST	192.168.2.5	1.1.1.1	0x24	Standard query (0)	assets.vidyard.com	65	IN (0x0001)	false
May 23, 2024 15:50:43.238581896 CEST	192.168.2.5	1.1.1.1	0xcdfa	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:43.238712072 CEST	192.168.2.5	1.1.1.1	0xbff8	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
May 23, 2024 15:50:43.875372887 CEST	192.168.2.5	1.1.1.1	0x7b73	Standard query (0)	cdn.concured.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:43.875372887 CEST	192.168.2.5	1.1.1.1	0xf6cd	Standard query (0)	cdn.concured.com	65	IN (0x0001)	false
May 23, 2024 15:50:44.018991947 CEST	192.168.2.5	1.1.1.1	0x53d7	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:44.019967079 CEST	192.168.2.5	1.1.1.1	0xa846	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
May 23, 2024 15:50:44.890233994 CEST	192.168.2.5	1.1.1.1	0x763b	Standard query (0)	platform.linkedin.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:44.890377045 CEST	192.168.2.5	1.1.1.1	0x7da8	Standard query (0)	platform.linkedin.com	65	IN (0x0001)	false
May 23, 2024 15:50:44.890954018 CEST	192.168.2.5	1.1.1.1	0x9e0e	Standard query (0)	assets.concured.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:44.891103029 CEST	192.168.2.5	1.1.1.1	0xf57d	Standard query (0)	assets.concured.com	65	IN (0x0001)	false
May 23, 2024 15:50:45.001451015 CEST	192.168.2.5	1.1.1.1	0x1ab	Standard query (0)	play.vidyard.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:45.001569033 CEST	192.168.2.5	1.1.1.1	0x8755	Standard query (0)	play.vidyard.com	65	IN (0x0001)	false
May 23, 2024 15:50:45.560048103 CEST	192.168.2.5	1.1.1.1	0xbbb0	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:45.560189962 CEST	192.168.2.5	1.1.1.1	0x2e98	Standard query (0)	platform.twitter.com	65	IN (0x0001)	false
May 23, 2024 15:50:45.699286938 CEST	192.168.2.5	1.1.1.1	0xc45d	Standard query (0)	ws.zoominfo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:45.699470997 CEST	192.168.2.5	1.1.1.1	0xc6ec	Standard query (0)	ws.zoominfo.com	65	IN (0x0001)	false
May 23, 2024 15:50:46.450011015 CEST	192.168.2.5	1.1.1.1	0x53cd	Standard query (0)	raw.vidyard.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:46.450011015 CEST	192.168.2.5	1.1.1.1	0x8173	Standard query (0)	raw.vidyard.com	65	IN (0x0001)	false
May 23, 2024 15:50:46.498843908 CEST	192.168.2.5	1.1.1.1	0x1623	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:46.499078989 CEST	192.168.2.5	1.1.1.1	0x4da1	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
May 23, 2024 15:50:47.106425047 CEST	192.168.2.5	1.1.1.1	0x623a	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:47.106549978 CEST	192.168.2.5	1.1.1.1	0x7fb8	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
May 23, 2024 15:50:47.932694912 CEST	192.168.2.5	1.1.1.1	0x9c2e	Standard query (0)	syndication.twitter.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:47.932694912 CEST	192.168.2.5	1.1.1.1	0x32	Standard query (0)	syndication.twitter.com	65	IN (0x0001)	false
May 23, 2024 15:50:48.003570080 CEST	192.168.2.5	1.1.1.1	0xea6a	Standard query (0)	cdn.vidyard.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.003570080 CEST	192.168.2.5	1.1.1.1	0x2012	Standard query (0)	cdn.vidyard.com	65	IN (0x0001)	false
May 23, 2024 15:50:48.017232895 CEST	192.168.2.5	1.1.1.1	0x87db	Standard query (0)	raw.vidyard.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.017759085 CEST	192.168.2.5	1.1.1.1	0x6f	Standard query (0)	raw.vidyard.com	65	IN (0x0001)	false
May 23, 2024 15:50:48.083266020 CEST	192.168.2.5	1.1.1.1	0x99e8	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.083923101 CEST	192.168.2.5	1.1.1.1	0xd6f6	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.083923101 CEST	192.168.2.5	1.1.1.1	0x3eeb	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
May 23, 2024 15:50:48.084248066 CEST	192.168.2.5	1.1.1.1	0xeb30	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
May 23, 2024 15:50:48.842711926 CEST	192.168.2.5	1.1.1.1	0xd61	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.843091011 CEST	192.168.2.5	1.1.1.1	0xcd3e	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
May 23, 2024 15:50:51.513885975 CEST	192.168.2.5	1.1.1.1	0xe337	Standard query (0)	ob.fishrobotflower.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:51.514010906 CEST	192.168.2.5	1.1.1.1	0x242c	Standard query (0)	ob.fishrobotflower.com	65	IN (0x0001)	false
May 23, 2024 15:50:51.520246029 CEST	192.168.2.5	1.1.1.1	0x311c	Standard query (0)	js.zi-scripts.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:51.520385981 CEST	192.168.2.5	1.1.1.1	0xb33e	Standard query (0)	js.zi-scripts.com	65	IN (0x0001)	false
May 23, 2024 15:50:53.080116034 CEST	192.168.2.5	1.1.1.1	0xd2ca	Standard query (0)	11756258.fls.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.080450058 CEST	192.168.2.5	1.1.1.1	0xecea	Standard query (0)	11756258.fls.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:50:53.080801964 CEST	192.168.2.5	1.1.1.1	0xbdbd	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.080929041 CEST	192.168.2.5	1.1.1.1	0xc728	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:50:53.516231060 CEST	192.168.2.5	1.1.1.1	0xe52e	Standard query (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.516350985 CEST	192.168.2.5	1.1.1.1	0x7444	Standard query (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	65	IN (0x0001)	false
May 23, 2024 15:50:53.961582899 CEST	192.168.2.5	1.1.1.1	0x3e01	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.005245924 CEST	192.168.2.5	1.1.1.1	0xf34a	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:50:54.066004992 CEST	192.168.2.5	1.1.1.1	0x3b7	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.066279888 CEST	192.168.2.5	1.1.1.1	0xc464	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:50:54.066668987 CEST	192.168.2.5	1.1.1.1	0x740	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.067081928 CEST	192.168.2.5	1.1.1.1	0xee01	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
May 23, 2024 15:50:54.633095980 CEST	192.168.2.5	1.1.1.1	0xa351	Standard query (0)	js.zi-scripts.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.633284092 CEST	192.168.2.5	1.1.1.1	0x6c87	Standard query (0)	js.zi-scripts.com	65	IN (0x0001)	false
May 23, 2024 15:50:55.020668030 CEST	192.168.2.5	1.1.1.1	0x79ec	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.020840883 CEST	192.168.2.5	1.1.1.1	0x43a5	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:50:55.029191017 CEST	192.168.2.5	1.1.1.1	0xcd8e	Standard query (0)	abrtp1-cdn.marketo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.029359102 CEST	192.168.2.5	1.1.1.1	0x9b3e	Standard query (0)	abrtp1-cdn.marketo.com	65	IN (0x0001)	false
May 23, 2024 15:50:55.030209064 CEST	192.168.2.5	1.1.1.1	0x391d	Standard query (0)	s2.adform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.030400991 CEST	192.168.2.5	1.1.1.1	0x76da	Standard query (0)	s2.adform.net	65	IN (0x0001)	false
May 23, 2024 15:50:55.076039076 CEST	192.168.2.5	1.1.1.1	0xeae9	Standard query (0)	obs.fishrobotflower.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.076303005 CEST	192.168.2.5	1.1.1.1	0xdb75	Standard query (0)	obs.fishrobotflower.com	65	IN (0x0001)	false
May 23, 2024 15:50:55.076961040 CEST	192.168.2.5	1.1.1.1	0x7c93	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.077406883 CEST	192.168.2.5	1.1.1.1	0x391c	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:50:55.088190079 CEST	192.168.2.5	1.1.1.1	0x15ad	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.088402987 CEST	192.168.2.5	1.1.1.1	0xd6d2	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:50:55.126187086 CEST	192.168.2.5	1.1.1.1	0x6957	Standard query (0)	ws-assets.zoominfo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.126446962 CEST	192.168.2.5	1.1.1.1	0x32cf	Standard query (0)	ws-assets.zoominfo.com	65	IN (0x0001)	false
May 23, 2024 15:50:55.266246080 CEST	192.168.2.5	1.1.1.1	0x5b30	Standard query (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.266359091 CEST	192.168.2.5	1.1.1.1	0x4ca0	Standard query (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	65	IN (0x0001)	false
May 23, 2024 15:50:55.502299070 CEST	192.168.2.5	1.1.1.1	0x99ae	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.502629042 CEST	192.168.2.5	1.1.1.1	0xfd14	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 23, 2024 15:50:55.938952923 CEST	192.168.2.5	1.1.1.1	0x7c07	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.939060926 CEST	192.168.2.5	1.1.1.1	0xcf11	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 23, 2024 15:50:56.123070002 CEST	192.168.2.5	1.1.1.1	0x52a8	Standard query (0)	ws.zoominfo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.123195887 CEST	192.168.2.5	1.1.1.1	0x874a	Standard query (0)	ws.zoominfo.com	65	IN (0x0001)	false
May 23, 2024 15:50:56.562561035 CEST	192.168.2.5	1.1.1.1	0x72e6	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.562798977 CEST	192.168.2.5	1.1.1.1	0x22f7	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
May 23, 2024 15:50:56.959460974 CEST	192.168.2.5	1.1.1.1	0x9ee3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.959616899 CEST	192.168.2.5	1.1.1.1	0x9e00	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 23, 2024 15:50:57.058902979 CEST	192.168.2.5	1.1.1.1	0x117e	Standard query (0)	rtp-static.marketo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.059237957 CEST	192.168.2.5	1.1.1.1	0x5ea3	Standard query (0)	rtp-static.marketo.com	65	IN (0x0001)	false
May 23, 2024 15:50:57.229106903 CEST	192.168.2.5	1.1.1.1	0x9145	Standard query (0)	a1.adform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.229346037 CEST	192.168.2.5	1.1.1.1	0x662c	Standard query (0)	a1.adform.net	65	IN (0x0001)	false
May 23, 2024 15:50:57.239228010 CEST	192.168.2.5	1.1.1.1	0x7f18	Standard query (0)	obs.fishrobotflower.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.239586115 CEST	192.168.2.5	1.1.1.1	0x8c11	Standard query (0)	obs.fishrobotflower.com	65	IN (0x0001)	false
May 23, 2024 15:50:57.283350945 CEST	192.168.2.5	1.1.1.1	0x46f5	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.283524990 CEST	192.168.2.5	1.1.1.1	0xad26	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
May 23, 2024 15:50:57.566943884 CEST	192.168.2.5	1.1.1.1	0x6f8	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.567493916 CEST	192.168.2.5	1.1.1.1	0x621c	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
May 23, 2024 15:50:58.486567020 CEST	192.168.2.5	1.1.1.1	0x31e0	Standard query (0)	abrtp1.marketo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:58.486929893 CEST	192.168.2.5	1.1.1.1	0x1df8	Standard query (0)	abrtp1.marketo.com	65	IN (0x0001)	false
May 23, 2024 15:50:58.544347048 CEST	192.168.2.5	1.1.1.1	0x4850	Standard query (0)	565-bdo-100.mktoresp.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:58.544745922 CEST	192.168.2.5	1.1.1.1	0xfe3f	Standard query (0)	565-bdo-100.mktoresp.com	65	IN (0x0001)	false
May 23, 2024 15:50:59.594600916 CEST	192.168.2.5	1.1.1.1	0x81da	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:59.595355034 CEST	192.168.2.5	1.1.1.1	0x99b5	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.054022074 CEST	192.168.2.5	1.1.1.1	0x188b	Standard query (0)	flo.uri.sh	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.055227995 CEST	192.168.2.5	1.1.1.1	0x4b57	Standard query (0)	flo.uri.sh	65	IN (0x0001)	false
May 23, 2024 15:51:01.126005888 CEST	192.168.2.5	1.1.1.1	0x312a	Standard query (0)	customer.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.126574993 CEST	192.168.2.5	1.1.1.1	0xf9f8	Standard query (0)	customer.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.128504992 CEST	192.168.2.5	1.1.1.1	0xd37	Standard query (0)	conversation.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.128987074 CEST	192.168.2.5	1.1.1.1	0xb2df	Standard query (0)	conversation.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.131086111 CEST	192.168.2.5	1.1.1.1	0x5d7e	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.131556988 CEST	192.168.2.5	1.1.1.1	0x45a8	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.162864923 CEST	192.168.2.5	1.1.1.1	0x30c3	Standard query (0)	targeting.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.166769981 CEST	192.168.2.5	1.1.1.1	0xf10d	Standard query (0)	targeting.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.212727070 CEST	192.168.2.5	1.1.1.1	0x49c1	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.213677883 CEST	192.168.2.5	1.1.1.1	0x2347	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.234750986 CEST	192.168.2.5	1.1.1.1	0xa015	Standard query (0)	cdn.rollbar.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.235183954 CEST	192.168.2.5	1.1.1.1	0xa9b0	Standard query (0)	cdn.rollbar.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.236568928 CEST	192.168.2.5	1.1.1.1	0x1883	Standard query (0)	spglobal.scene7.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.237453938 CEST	192.168.2.5	1.1.1.1	0x3a0e	Standard query (0)	spglobal.scene7.com	65	IN (0x0001)	false
May 23, 2024 15:51:01.932523966 CEST	192.168.2.5	1.1.1.1	0x507e	Standard query (0)	server.seadform.net	65	IN (0x0001)	false
May 23, 2024 15:51:01.932523966 CEST	192.168.2.5	1.1.1.1	0x64f1	Standard query (0)	server.seadform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.943547010 CEST	192.168.2.5	1.1.1.1	0x97e1	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.943916082 CEST	192.168.2.5	1.1.1.1	0x7e8e	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
May 23, 2024 15:51:03.666610003 CEST	192.168.2.5	1.1.1.1	0xab12	Standard query (0)	public.flourish.studio	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:03.666888952 CEST	192.168.2.5	1.1.1.1	0x546	Standard query (0)	public.flourish.studio	65	IN (0x0001)	false
May 23, 2024 15:51:04.034492970 CEST	192.168.2.5	1.1.1.1	0xe42a	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.034531116 CEST	192.168.2.5	1.1.1.1	0x94b	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
May 23, 2024 15:51:04.150181055 CEST	192.168.2.5	1.1.1.1	0x34e8	Standard query (0)	spglobal.scene7.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.150358915 CEST	192.168.2.5	1.1.1.1	0x3df1	Standard query (0)	spglobal.scene7.com	65	IN (0x0001)	false
May 23, 2024 15:51:04.153048992 CEST	192.168.2.5	1.1.1.1	0x3b27	Standard query (0)	server.seadform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.153386116 CEST	192.168.2.5	1.1.1.1	0x929	Standard query (0)	server.seadform.net	65	IN (0x0001)	false
May 23, 2024 15:51:05.267600060 CEST	192.168.2.5	1.1.1.1	0x2035	Standard query (0)	ad.yieldlab.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:05.267849922 CEST	192.168.2.5	1.1.1.1	0x388e	Standard query (0)	ad.yieldlab.net	65	IN (0x0001)	false
May 23, 2024 15:51:05.303003073 CEST	192.168.2.5	1.1.1.1	0x74e9	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:05.303101063 CEST	192.168.2.5	1.1.1.1	0x3fb4	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
May 23, 2024 15:51:06.314918041 CEST	192.168.2.5	1.1.1.1	0x106d	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.315366983 CEST	192.168.2.5	1.1.1.1	0xbc49	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 23, 2024 15:51:06.322374105 CEST	192.168.2.5	1.1.1.1	0xaf54	Standard query (0)	ad.360yield.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.323235989 CEST	192.168.2.5	1.1.1.1	0x68fa	Standard query (0)	ad.360yield.com	65	IN (0x0001)	false
May 23, 2024 15:51:06.496273994 CEST	192.168.2.5	1.1.1.1	0x9a07	Standard query (0)	ih.adscale.de	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.496495962 CEST	192.168.2.5	1.1.1.1	0xf97e	Standard query (0)	ih.adscale.de	65	IN (0x0001)	false
May 23, 2024 15:51:06.496882915 CEST	192.168.2.5	1.1.1.1	0x98bd	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.497077942 CEST	192.168.2.5	1.1.1.1	0x137b	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
May 23, 2024 15:51:06.497998953 CEST	192.168.2.5	1.1.1.1	0x8a0f	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.498172045 CEST	192.168.2.5	1.1.1.1	0xa43e	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
May 23, 2024 15:51:06.498572111 CEST	192.168.2.5	1.1.1.1	0xe3a5	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.498779058 CEST	192.168.2.5	1.1.1.1	0x6d94	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 23, 2024 15:51:06.500071049 CEST	192.168.2.5	1.1.1.1	0x1e59	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.500266075 CEST	192.168.2.5	1.1.1.1	0xccaf	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
May 23, 2024 15:51:06.500607014 CEST	192.168.2.5	1.1.1.1	0xf20b	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.500808001 CEST	192.168.2.5	1.1.1.1	0xf026	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
May 23, 2024 15:51:06.501112938 CEST	192.168.2.5	1.1.1.1	0x75da	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.501221895 CEST	192.168.2.5	1.1.1.1	0x7c59	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
May 23, 2024 15:51:07.770935059 CEST	192.168.2.5	1.1.1.1	0xcf65	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:07.778723955 CEST	192.168.2.5	1.1.1.1	0x70a8	Standard query (0)	loadm.exelator.com	65	IN (0x0001)	false
May 23, 2024 15:51:08.021694899 CEST	192.168.2.5	1.1.1.1	0x7200	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.022273064 CEST	192.168.2.5	1.1.1.1	0xbc8a	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
May 23, 2024 15:51:08.025309086 CEST	192.168.2.5	1.1.1.1	0x14ee	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.025681973 CEST	192.168.2.5	1.1.1.1	0xbd9c	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 23, 2024 15:51:08.027621031 CEST	192.168.2.5	1.1.1.1	0x4cd9	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.027985096 CEST	192.168.2.5	1.1.1.1	0x7431	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 23, 2024 15:51:08.465617895 CEST	192.168.2.5	1.1.1.1	0x4ada	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.466077089 CEST	192.168.2.5	1.1.1.1	0x5bf2	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 23, 2024 15:51:09.129714966 CEST	192.168.2.5	1.1.1.1	0x43ef	Standard query (0)	491-vng-790.mktoresp.com	65	IN (0x0001)	false
May 23, 2024 15:51:09.129714966 CEST	192.168.2.5	1.1.1.1	0x3c96	Standard query (0)	491-vng-790.mktoresp.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.141225100 CEST	192.168.2.5	1.1.1.1	0xa08e	Standard query (0)	ih.adscale.de	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.141510010 CEST	192.168.2.5	1.1.1.1	0xa057	Standard query (0)	ih.adscale.de	65	IN (0x0001)	false
May 23, 2024 15:51:09.144354105 CEST	192.168.2.5	1.1.1.1	0x40bb	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.144354105 CEST	192.168.2.5	1.1.1.1	0xfc10	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
May 23, 2024 15:51:09.146572113 CEST	192.168.2.5	1.1.1.1	0x8fee	Standard query (0)	ads.stickyadstv.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.146980047 CEST	192.168.2.5	1.1.1.1	0xf84c	Standard query (0)	ads.stickyadstv.com	65	IN (0x0001)	false
May 23, 2024 15:51:09.483452082 CEST	192.168.2.5	1.1.1.1	0x1e6c	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.484783888 CEST	192.168.2.5	1.1.1.1	0xa126	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
May 23, 2024 15:51:09.488091946 CEST	192.168.2.5	1.1.1.1	0xef1b	Standard query (0)	api.adrtx.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.488442898 CEST	192.168.2.5	1.1.1.1	0xc9fd	Standard query (0)	api.adrtx.net	65	IN (0x0001)	false
May 23, 2024 15:51:09.511482954 CEST	192.168.2.5	1.1.1.1	0xaf4c	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.512479067 CEST	192.168.2.5	1.1.1.1	0x75b	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 23, 2024 15:51:09.592706919 CEST	192.168.2.5	1.1.1.1	0x3e7e	Standard query (0)	cm.adsafety.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.593219042 CEST	192.168.2.5	1.1.1.1	0xfa94	Standard query (0)	cm.adsafety.net	65	IN (0x0001)	false
May 23, 2024 15:51:10.554529905 CEST	192.168.2.5	1.1.1.1	0xb222	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.554716110 CEST	192.168.2.5	1.1.1.1	0xcf46	Standard query (0)	beacon.krxd.net	65	IN (0x0001)	false
May 23, 2024 15:51:10.639023066 CEST	192.168.2.5	1.1.1.1	0x1bbb	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.680068970 CEST	192.168.2.5	1.1.1.1	0x1c1d	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.680788040 CEST	192.168.2.5	1.1.1.1	0xd8bb	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:51:10.780785084 CEST	192.168.2.5	1.1.1.1	0x563f	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.782078981 CEST	192.168.2.5	1.1.1.1	0xe31e	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
May 23, 2024 15:51:10.872879028 CEST	192.168.2.5	1.1.1.1	0xfcee	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.873225927 CEST	192.168.2.5	1.1.1.1	0xe2fd	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.018902063 CEST	192.168.2.5	1.1.1.1	0xe418	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.019063950 CEST	192.168.2.5	1.1.1.1	0x5d47	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 23, 2024 15:51:11.020764112 CEST	192.168.2.5	1.1.1.1	0x1933	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.021341085 CEST	192.168.2.5	1.1.1.1	0x3200	Standard query (0)	pippio.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.023515940 CEST	192.168.2.5	1.1.1.1	0x76f4	Standard query (0)	load77.exelator.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.024265051 CEST	192.168.2.5	1.1.1.1	0x98da	Standard query (0)	load77.exelator.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.029015064 CEST	192.168.2.5	1.1.1.1	0x562a	Standard query (0)	s3-eu-west-1.amazonaws.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.029345989 CEST	192.168.2.5	1.1.1.1	0x74b5	Standard query (0)	s3-eu-west-1.amazonaws.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.051085949 CEST	192.168.2.5	1.1.1.1	0x8fa6	Standard query (0)	1f2e7.v.fwmrm.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.051491976 CEST	192.168.2.5	1.1.1.1	0xc02	Standard query (0)	1f2e7.v.fwmrm.net	65	IN (0x0001)	false
May 23, 2024 15:51:11.055660009 CEST	192.168.2.5	1.1.1.1	0x74b	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.055900097 CEST	192.168.2.5	1.1.1.1	0xfe11	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:51:11.061049938 CEST	192.168.2.5	1.1.1.1	0xccf2	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.061461926 CEST	192.168.2.5	1.1.1.1	0x703c	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
May 23, 2024 15:51:11.069089890 CEST	192.168.2.5	1.1.1.1	0x8e5d	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.069250107 CEST	192.168.2.5	1.1.1.1	0xde68	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 23, 2024 15:51:11.075958014 CEST	192.168.2.5	1.1.1.1	0x239c	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.076438904 CEST	192.168.2.5	1.1.1.1	0xb7bb	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 23, 2024 15:51:11.078768015 CEST	192.168.2.5	1.1.1.1	0xf3a6	Standard query (0)	cm.adsafety.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.079077959 CEST	192.168.2.5	1.1.1.1	0x6990	Standard query (0)	cm.adsafety.net	65	IN (0x0001)	false
May 23, 2024 15:51:11.621927977 CEST	192.168.2.5	1.1.1.1	0x87eb	Standard query (0)	tags.clickagy.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.622415066 CEST	192.168.2.5	1.1.1.1	0x9616	Standard query (0)	tags.clickagy.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.690823078 CEST	192.168.2.5	1.1.1.1	0x27d4	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.691479921 CEST	192.168.2.5	1.1.1.1	0xcd19	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.694984913 CEST	192.168.2.5	1.1.1.1	0xd92a	Standard query (0)	pdw-adf.userreport.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.695357084 CEST	192.168.2.5	1.1.1.1	0x3eca	Standard query (0)	pdw-adf.userreport.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.737473011 CEST	192.168.2.5	1.1.1.1	0x4213	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.737996101 CEST	192.168.2.5	1.1.1.1	0x2bcb	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.848851919 CEST	192.168.2.5	1.1.1.1	0xefed	Standard query (0)	eu-u.openx.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.849380016 CEST	192.168.2.5	1.1.1.1	0x417f	Standard query (0)	eu-u.openx.net	65	IN (0x0001)	false
May 23, 2024 15:51:11.925097942 CEST	192.168.2.5	1.1.1.1	0x47e1	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.925363064 CEST	192.168.2.5	1.1.1.1	0xa6ac	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
May 23, 2024 15:51:11.951508999 CEST	192.168.2.5	1.1.1.1	0xb360	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.951941967 CEST	192.168.2.5	1.1.1.1	0x190	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
May 23, 2024 15:51:11.983306885 CEST	192.168.2.5	1.1.1.1	0x1384	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.984004021 CEST	192.168.2.5	1.1.1.1	0xbc16	Standard query (0)	a.audrte.com	65	IN (0x0001)	false
May 23, 2024 15:51:12.001701117 CEST	192.168.2.5	1.1.1.1	0x2c09	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.022726059 CEST	192.168.2.5	1.1.1.1	0xe47	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.023366928 CEST	192.168.2.5	1.1.1.1	0x5bf1	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 23, 2024 15:51:12.278666973 CEST	192.168.2.5	1.1.1.1	0x7452	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.278868914 CEST	192.168.2.5	1.1.1.1	0x2253	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
May 23, 2024 15:51:12.809607983 CEST	192.168.2.5	1.1.1.1	0xc933	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.810498953 CEST	192.168.2.5	1.1.1.1	0xe138	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
May 23, 2024 15:51:12.869395971 CEST	192.168.2.5	1.1.1.1	0xfb88	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.869863033 CEST	192.168.2.5	1.1.1.1	0xb22f	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
May 23, 2024 15:51:12.882138968 CEST	192.168.2.5	1.1.1.1	0x309b	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.882438898 CEST	192.168.2.5	1.1.1.1	0xb9ec	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
May 23, 2024 15:51:13.381738901 CEST	192.168.2.5	1.1.1.1	0xf418	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.382313967 CEST	192.168.2.5	1.1.1.1	0x78c7	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
May 23, 2024 15:51:13.382958889 CEST	192.168.2.5	1.1.1.1	0x7def	Standard query (0)	hemsync.clickagy.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.383502007 CEST	192.168.2.5	1.1.1.1	0x7f05	Standard query (0)	hemsync.clickagy.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.383954048 CEST	192.168.2.5	1.1.1.1	0x3e91	Standard query (0)	load77.exelator.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.384232044 CEST	192.168.2.5	1.1.1.1	0x3fa	Standard query (0)	load77.exelator.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.406846046 CEST	192.168.2.5	1.1.1.1	0x321c	Standard query (0)	js.idio.co	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.407223940 CEST	192.168.2.5	1.1.1.1	0x8139	Standard query (0)	js.idio.co	65	IN (0x0001)	false
May 23, 2024 15:51:13.418961048 CEST	192.168.2.5	1.1.1.1	0x301a	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.419151068 CEST	192.168.2.5	1.1.1.1	0x9531	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
May 23, 2024 15:51:13.485194921 CEST	192.168.2.5	1.1.1.1	0xdf5d	Standard query (0)	s3-eu-west-1.amazonaws.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.485517025 CEST	192.168.2.5	1.1.1.1	0xfb96	Standard query (0)	s3-eu-west-1.amazonaws.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.486893892 CEST	192.168.2.5	1.1.1.1	0x118b	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.487052917 CEST	192.168.2.5	1.1.1.1	0xffb8	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.490694046 CEST	192.168.2.5	1.1.1.1	0xc5bd	Standard query (0)	pdw-adf.userreport.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.491147995 CEST	192.168.2.5	1.1.1.1	0x3ad7	Standard query (0)	pdw-adf.userreport.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.508994102 CEST	192.168.2.5	1.1.1.1	0x4828	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.509207964 CEST	192.168.2.5	1.1.1.1	0x327f	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.674190044 CEST	192.168.2.5	1.1.1.1	0x9fb3	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.674315929 CEST	192.168.2.5	1.1.1.1	0xf0c9	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
May 23, 2024 15:51:13.804510117 CEST	192.168.2.5	1.1.1.1	0x1e3a	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.804747105 CEST	192.168.2.5	1.1.1.1	0xa3a2	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.812329054 CEST	192.168.2.5	1.1.1.1	0x10eb	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.812589884 CEST	192.168.2.5	1.1.1.1	0x838c	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
May 23, 2024 15:51:13.986331940 CEST	192.168.2.5	1.1.1.1	0x1f43	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.986491919 CEST	192.168.2.5	1.1.1.1	0x1c1a	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 23, 2024 15:51:15.273730040 CEST	192.168.2.5	1.1.1.1	0xa5bd	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.273886919 CEST	192.168.2.5	1.1.1.1	0x6f7a	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
May 23, 2024 15:51:15.295386076 CEST	192.168.2.5	1.1.1.1	0x2d0e	Standard query (0)	redirect.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.296139956 CEST	192.168.2.5	1.1.1.1	0xac9e	Standard query (0)	redirect.frontend.weborama.fr	65	IN (0x0001)	false
May 23, 2024 15:51:15.379662991 CEST	192.168.2.5	1.1.1.1	0xeaf	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
May 23, 2024 15:51:15.379662991 CEST	192.168.2.5	1.1.1.1	0xc3cf	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.398585081 CEST	192.168.2.5	1.1.1.1	0xa72b	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.398942947 CEST	192.168.2.5	1.1.1.1	0x563	Standard query (0)	s.ad.smaato.net	65	IN (0x0001)	false
May 23, 2024 15:51:15.438180923 CEST	192.168.2.5	1.1.1.1	0x1ae3	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.438563108 CEST	192.168.2.5	1.1.1.1	0x52ba	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
May 23, 2024 15:51:15.439517021 CEST	192.168.2.5	1.1.1.1	0xfd0	Standard query (0)	s.idio.co	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.439867973 CEST	192.168.2.5	1.1.1.1	0x4cf7	Standard query (0)	s.idio.co	65	IN (0x0001)	false
May 23, 2024 15:51:15.505054951 CEST	192.168.2.5	1.1.1.1	0x96e1	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.505328894 CEST	192.168.2.5	1.1.1.1	0x46a7	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
May 23, 2024 15:51:15.614775896 CEST	192.168.2.5	1.1.1.1	0x159e	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.615227938 CEST	192.168.2.5	1.1.1.1	0xd5a9	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 23, 2024 15:51:15.619297028 CEST	192.168.2.5	1.1.1.1	0xf2d4	Standard query (0)	hemsync.clickagy.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.619649887 CEST	192.168.2.5	1.1.1.1	0x5956	Standard query (0)	hemsync.clickagy.com	65	IN (0x0001)	false
May 23, 2024 15:51:15.621475935 CEST	192.168.2.5	1.1.1.1	0x5003	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.621643066 CEST	192.168.2.5	1.1.1.1	0x3839	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 23, 2024 15:51:15.623068094 CEST	192.168.2.5	1.1.1.1	0x217d	Standard query (0)	dmp.adform.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.623281956 CEST	192.168.2.5	1.1.1.1	0x2dd0	Standard query (0)	dmp.adform.net	65	IN (0x0001)	false
May 23, 2024 15:51:15.742685080 CEST	192.168.2.5	1.1.1.1	0x5137	Standard query (0)	www.spglobal.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.743196964 CEST	192.168.2.5	1.1.1.1	0xd710	Standard query (0)	www.spglobal.com	65	IN (0x0001)	false
May 23, 2024 15:51:15.744777918 CEST	192.168.2.5	1.1.1.1	0x5617	Standard query (0)	www.spglobal.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.745254993 CEST	192.168.2.5	1.1.1.1	0xf052	Standard query (0)	www.spglobal.com	65	IN (0x0001)	false
May 23, 2024 15:51:16.145406008 CEST	192.168.2.5	1.1.1.1	0x5739	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.145684958 CEST	192.168.2.5	1.1.1.1	0x9d57	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
May 23, 2024 15:51:16.440186024 CEST	192.168.2.5	1.1.1.1	0x5e9f	Standard query (0)	a.idio.co	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.440494061 CEST	192.168.2.5	1.1.1.1	0xa94b	Standard query (0)	a.idio.co	65	IN (0x0001)	false
May 23, 2024 15:51:16.547027111 CEST	192.168.2.5	1.1.1.1	0xe2a0	Standard query (0)	match.contentexchange.me	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.547416925 CEST	192.168.2.5	1.1.1.1	0xf73e	Standard query (0)	match.contentexchange.me	65	IN (0x0001)	false
May 23, 2024 15:51:16.548901081 CEST	192.168.2.5	1.1.1.1	0x182d	Standard query (0)	sync.teads.tv	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.549194098 CEST	192.168.2.5	1.1.1.1	0x8927	Standard query (0)	sync.teads.tv	65	IN (0x0001)	false
May 23, 2024 15:51:16.869014978 CEST	192.168.2.5	1.1.1.1	0xa618	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.869223118 CEST	192.168.2.5	1.1.1.1	0xff11	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
May 23, 2024 15:51:16.928340912 CEST	192.168.2.5	1.1.1.1	0xc1db	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.928890944 CEST	192.168.2.5	1.1.1.1	0x7030	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 23, 2024 15:51:17.042594910 CEST	192.168.2.5	1.1.1.1	0x6cd8	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.043052912 CEST	192.168.2.5	1.1.1.1	0xf838	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 23, 2024 15:51:17.555768967 CEST	192.168.2.5	1.1.1.1	0xaba4	Standard query (0)	ice.360yield.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.556009054 CEST	192.168.2.5	1.1.1.1	0x1a3b	Standard query (0)	ice.360yield.com	65	IN (0x0001)	false
May 23, 2024 15:51:17.662246943 CEST	192.168.2.5	1.1.1.1	0xddd3	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.662446022 CEST	192.168.2.5	1.1.1.1	0xf2d6	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 23, 2024 15:51:17.728693008 CEST	192.168.2.5	1.1.1.1	0x4397	Standard query (0)	e1.emxdgt.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.728831053 CEST	192.168.2.5	1.1.1.1	0x5af6	Standard query (0)	e1.emxdgt.com	65	IN (0x0001)	false
May 23, 2024 15:51:17.750562906 CEST	192.168.2.5	1.1.1.1	0xfc2d	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.750665903 CEST	192.168.2.5	1.1.1.1	0x56ea	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 23, 2024 15:51:17.794661999 CEST	192.168.2.5	1.1.1.1	0x1f0	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.795047998 CEST	192.168.2.5	1.1.1.1	0x2ff8	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 23, 2024 15:51:17.984107971 CEST	192.168.2.5	1.1.1.1	0x8f04	Standard query (0)	bootstrap.driftapi.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.984707117 CEST	192.168.2.5	1.1.1.1	0x4b4c	Standard query (0)	bootstrap.driftapi.com	65	IN (0x0001)	false
May 23, 2024 15:51:18.063823938 CEST	192.168.2.5	1.1.1.1	0x2fef	Standard query (0)	a.idio.co	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.063823938 CEST	192.168.2.5	1.1.1.1	0x5012	Standard query (0)	a.idio.co	65	IN (0x0001)	false
May 23, 2024 15:51:18.895148039 CEST	192.168.2.5	1.1.1.1	0x9dea	Standard query (0)	play.libsyn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.895642996 CEST	192.168.2.5	1.1.1.1	0xd899	Standard query (0)	play.libsyn.com	65	IN (0x0001)	false
May 23, 2024 15:51:19.982899904 CEST	192.168.2.5	1.1.1.1	0x3f4f	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:19.983063936 CEST	192.168.2.5	1.1.1.1	0xb408	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
May 23, 2024 15:51:20.140194893 CEST	192.168.2.5	1.1.1.1	0xfa8c	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.140729904 CEST	192.168.2.5	1.1.1.1	0xf79a	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 23, 2024 15:51:20.164098978 CEST	192.168.2.5	1.1.1.1	0x7d05	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.164459944 CEST	192.168.2.5	1.1.1.1	0xcccd	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 23, 2024 15:51:20.393378973 CEST	192.168.2.5	1.1.1.1	0x862f	Standard query (0)	bootstrap.driftapi.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.393634081 CEST	192.168.2.5	1.1.1.1	0xeffd	Standard query (0)	bootstrap.driftapi.com	65	IN (0x0001)	false
May 23, 2024 15:51:20.777224064 CEST	192.168.2.5	1.1.1.1	0xb080	Standard query (0)	spl.zeotap.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.777400017 CEST	192.168.2.5	1.1.1.1	0xd973	Standard query (0)	spl.zeotap.com	65	IN (0x0001)	false
May 23, 2024 15:51:20.991492987 CEST	192.168.2.5	1.1.1.1	0x8583	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.992531061 CEST	192.168.2.5	1.1.1.1	0x392d	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:21.592443943 CEST	192.168.2.5	1.1.1.1	0xc73f	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.592705965 CEST	192.168.2.5	1.1.1.1	0xb5dc	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
May 23, 2024 15:51:21.678009033 CEST	192.168.2.5	1.1.1.1	0xd027	Standard query (0)	html5-player.libsyn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.678167105 CEST	192.168.2.5	1.1.1.1	0x2450	Standard query (0)	html5-player.libsyn.com	65	IN (0x0001)	false
May 23, 2024 15:51:21.869307041 CEST	192.168.2.5	1.1.1.1	0x17c6	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.869616032 CEST	192.168.2.5	1.1.1.1	0xa9ec	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
May 23, 2024 15:51:22.127747059 CEST	192.168.2.5	1.1.1.1	0xe424	Standard query (0)	html5-player.libsyn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.129511118 CEST	192.168.2.5	1.1.1.1	0x2310	Standard query (0)	html5-player.libsyn.com	65	IN (0x0001)	false
May 23, 2024 15:51:22.218591928 CEST	192.168.2.5	1.1.1.1	0xd8a8	Standard query (0)	1334519-19.chat.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.218775988 CEST	192.168.2.5	1.1.1.1	0x83db	Standard query (0)	1334519-19.chat.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:22.231355906 CEST	192.168.2.5	1.1.1.1	0x50fc	Standard query (0)	1510748-48.chat.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.231656075 CEST	192.168.2.5	1.1.1.1	0x8dae	Standard query (0)	1510748-48.chat.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:22.266407967 CEST	192.168.2.5	1.1.1.1	0xcacb	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.266555071 CEST	192.168.2.5	1.1.1.1	0x3a8d	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
May 23, 2024 15:51:22.397701979 CEST	192.168.2.5	1.1.1.1	0x7b6c	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.398112059 CEST	192.168.2.5	1.1.1.1	0x71a4	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 23, 2024 15:51:22.406646967 CEST	192.168.2.5	1.1.1.1	0x7f9b	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.406913042 CEST	192.168.2.5	1.1.1.1	0x6e1a	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
May 23, 2024 15:51:22.853817940 CEST	192.168.2.5	1.1.1.1	0x16f2	Standard query (0)	html5-player.libsyn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.854306936 CEST	192.168.2.5	1.1.1.1	0xca8	Standard query (0)	html5-player.libsyn.com	65	IN (0x0001)	false
May 23, 2024 15:51:22.958527088 CEST	192.168.2.5	1.1.1.1	0x6049	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.958636999 CEST	192.168.2.5	1.1.1.1	0xef7f	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 23, 2024 15:51:23.403676987 CEST	192.168.2.5	1.1.1.1	0x6f2f	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:23.404194117 CEST	192.168.2.5	1.1.1.1	0xdf88	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
May 23, 2024 15:51:23.770137072 CEST	192.168.2.5	1.1.1.1	0xc032	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:23.770534039 CEST	192.168.2.5	1.1.1.1	0xfa0e	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
May 23, 2024 15:51:24.697592020 CEST	192.168.2.5	1.1.1.1	0xf077	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.700126886 CEST	192.168.2.5	1.1.1.1	0x3add	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 23, 2024 15:51:24.951606989 CEST	192.168.2.5	1.1.1.1	0xf5a2	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.952150106 CEST	192.168.2.5	1.1.1.1	0x8655	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
May 23, 2024 15:51:24.958053112 CEST	192.168.2.5	1.1.1.1	0xbf32	Standard query (0)	play.libsyn.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.958564997 CEST	192.168.2.5	1.1.1.1	0x61b4	Standard query (0)	play.libsyn.com	65	IN (0x0001)	false
May 23, 2024 15:51:24.962510109 CEST	192.168.2.5	1.1.1.1	0xb468	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.963028908 CEST	192.168.2.5	1.1.1.1	0x301c	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 23, 2024 15:51:25.167875051 CEST	192.168.2.5	1.1.1.1	0xc975	Standard query (0)	a.audrte.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:25.206118107 CEST	192.168.2.5	1.1.1.1	0xde28	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:25.206644058 CEST	192.168.2.5	1.1.1.1	0x4aa2	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
May 23, 2024 15:51:26.810003042 CEST	192.168.2.5	1.1.1.1	0x8c4c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.810149908 CEST	192.168.2.5	1.1.1.1	0xfda6	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 23, 2024 15:51:28.442517042 CEST	192.168.2.5	1.1.1.1	0x921c	Standard query (0)	abrtp1.marketo.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:28.442517042 CEST	192.168.2.5	1.1.1.1	0x8647	Standard query (0)	abrtp1.marketo.com	65	IN (0x0001)	false
May 23, 2024 15:51:29.555795908 CEST	192.168.2.5	1.1.1.1	0x9ba1	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.555900097 CEST	192.168.2.5	1.1.1.1	0xf603	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:51:29.780137062 CEST	192.168.2.5	1.1.1.1	0xb51e	Standard query (0)	log.api.drift.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.780544996 CEST	192.168.2.5	1.1.1.1	0xac1e	Standard query (0)	log.api.drift.com	65	IN (0x0001)	false
May 23, 2024 15:51:29.846883059 CEST	192.168.2.5	1.1.1.1	0x97fa	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.846883059 CEST	192.168.2.5	1.1.1.1	0x305f	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 23, 2024 15:51:30.938102961 CEST	192.168.2.5	1.1.1.1	0xaf29	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:30.938241005 CEST	192.168.2.5	1.1.1.1	0xc192	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
May 23, 2024 15:51:31.176521063 CEST	192.168.2.5	1.1.1.1	0x3f3f	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:31.176723957 CEST	192.168.2.5	1.1.1.1	0x7cbd	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 23, 2024 15:51:31.680605888 CEST	192.168.2.5	1.1.1.1	0x300a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:31.680743933 CEST	192.168.2.5	1.1.1.1	0x6cf1	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 23, 2024 15:51:33.317840099 CEST	192.168.2.5	1.1.1.1	0xf787	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:33.318145990 CEST	192.168.2.5	1.1.1.1	0x4807	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
May 23, 2024 15:51:35.583051920 CEST	192.168.2.5	1.1.1.1	0xa33f	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:35.583668947 CEST	192.168.2.5	1.1.1.1	0x5b3	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 23, 2024 15:51:38.414554119 CEST	192.168.2.5	1.1.1.1	0xe84f	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.414705992 CEST	192.168.2.5	1.1.1.1	0xeb96	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 23, 2024 15:50:13.058509111 CEST	1.1.1.1	192.168.2.5	0xa0e0	No error (0)	info.ipreo.com	ihsmarkit.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:13.058509111 CEST	1.1.1.1	192.168.2.5	0xa0e0	No error (0)	ihsmarkit.com		20.190.249.200	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:13.173046112 CEST	1.1.1.1	192.168.2.5	0x9b5c	No error (0)	info.ipreo.com	ihsmarkit.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:13.789197922 CEST	1.1.1.1	192.168.2.5	0x4346	No error (0)	ihsmarkit.com		20.190.249.200	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:14.811430931 CEST	1.1.1.1	192.168.2.5	0xf103	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:14.811444044 CEST	1.1.1.1	192.168.2.5	0x521d	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:15.482403040 CEST	1.1.1.1	192.168.2.5	0xc608	No error (0)	www.google.com			65	IN (0x0001)	false
May 23, 2024 15:50:15.482418060 CEST	1.1.1.1	192.168.2.5	0x28e5	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:16.162450075 CEST	1.1.1.1	192.168.2.5	0x8ece	No error (0)	www.stagingciq.com	www.stagingciq.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:16.224067926 CEST	1.1.1.1	192.168.2.5	0x98df	No error (0)	www.stagingciq.com	www.stagingciq.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:26.076251030 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	urldefense.com		52.71.28.102	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:26.076251030 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	urldefense.com		52.204.90.22	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:26.076251030 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	urldefense.com		52.6.56.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:27.046127081 CEST	1.1.1.1	192.168.2.5	0x596d	No error (0)	www.spcapitaliq.com	redirect.crownpeak.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:27.046127081 CEST	1.1.1.1	192.168.2.5	0x596d	No error (0)	redirect.crownpeak.com		3.220.214.71	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:27.046127081 CEST	1.1.1.1	192.168.2.5	0x596d	No error (0)	redirect.crownpeak.com		3.220.212.11	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:27.046127081 CEST	1.1.1.1	192.168.2.5	0x596d	No error (0)	redirect.crownpeak.com		3.219.78.25	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:27.058264017 CEST	1.1.1.1	192.168.2.5	0xdf94	No error (0)	www.spcapitaliq.com	redirect.crownpeak.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:27.364243984 CEST	1.1.1.1	192.168.2.5	0x4c74	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:27.364243984 CEST	1.1.1.1	192.168.2.5	0x4c74	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:30.623651981 CEST	1.1.1.1	192.168.2.5	0xa736	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:30.623673916 CEST	1.1.1.1	192.168.2.5	0x8a02	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:32.663423061 CEST	1.1.1.1	192.168.2.5	0xcb54	No error (0)	app-sjqe.marketo.com	sjqe.mkto-test.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:32.663423061 CEST	1.1.1.1	192.168.2.5	0xcb54	No error (0)	sjqe.mkto-test.com			65	IN (0x0001)	false
May 23, 2024 15:50:32.663465023 CEST	1.1.1.1	192.168.2.5	0x6d3a	No error (0)	app-sjqe.marketo.com	sjqe.mkto-test.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:32.663465023 CEST	1.1.1.1	192.168.2.5	0x6d3a	No error (0)	sjqe.mkto-test.com		104.17.98.130	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:32.663465023 CEST	1.1.1.1	192.168.2.5	0x6d3a	No error (0)	sjqe.mkto-test.com		104.17.100.130	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:32.663465023 CEST	1.1.1.1	192.168.2.5	0x6d3a	No error (0)	sjqe.mkto-test.com		104.17.101.130	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:32.663465023 CEST	1.1.1.1	192.168.2.5	0x6d3a	No error (0)	sjqe.mkto-test.com		104.17.97.130	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:32.663465023 CEST	1.1.1.1	192.168.2.5	0x6d3a	No error (0)	sjqe.mkto-test.com		104.17.99.130	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:36.451669931 CEST	1.1.1.1	192.168.2.5	0x5e3a	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:36.451689959 CEST	1.1.1.1	192.168.2.5	0x7156	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:41.434259892 CEST	1.1.1.1	192.168.2.5	0x268f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:41.434259892 CEST	1.1.1.1	192.168.2.5	0x268f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:42.350281954 CEST	1.1.1.1	192.168.2.5	0x2316	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:42.350286007 CEST	1.1.1.1	192.168.2.5	0x5516	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:43.251327038 CEST	1.1.1.1	192.168.2.5	0xcdfa	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:43.251327038 CEST	1.1.1.1	192.168.2.5	0xcdfa	No error (0)	cdn-cf.vidyard.com		18.239.18.49	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:43.251327038 CEST	1.1.1.1	192.168.2.5	0xcdfa	No error (0)	cdn-cf.vidyard.com		18.239.18.33	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:43.251327038 CEST	1.1.1.1	192.168.2.5	0xcdfa	No error (0)	cdn-cf.vidyard.com		18.239.18.36	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:43.251327038 CEST	1.1.1.1	192.168.2.5	0xcdfa	No error (0)	cdn-cf.vidyard.com		18.239.18.21	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:43.261090994 CEST	1.1.1.1	192.168.2.5	0x940a	No error (0)	assets.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:43.266350985 CEST	1.1.1.1	192.168.2.5	0x24	No error (0)	assets.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:43.271244049 CEST	1.1.1.1	192.168.2.5	0xbff8	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:43.938191891 CEST	1.1.1.1	192.168.2.5	0x7b73	No error (0)	cdn.concured.com		34.149.2.41	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:44.048223972 CEST	1.1.1.1	192.168.2.5	0x53d7	No error (0)	platform.twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:44.048223972 CEST	1.1.1.1	192.168.2.5	0x53d7	No error (0)	platform.twitter.map.fastly.net		146.75.120.157	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:44.048285961 CEST	1.1.1.1	192.168.2.5	0xa846	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:44.048285961 CEST	1.1.1.1	192.168.2.5	0xa846	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:44.048285961 CEST	1.1.1.1	192.168.2.5	0xa846	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:44.048285961 CEST	1.1.1.1	192.168.2.5	0xa846	No error (0)	cs1-lb-eu.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:44.924510956 CEST	1.1.1.1	192.168.2.5	0x763b	No error (0)	platform.linkedin.com	2-01-2c3e-0055.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:44.924510956 CEST	1.1.1.1	192.168.2.5	0x763b	No error (0)	cs767.wpc.epsiloncdn.net		152.199.22.144	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:44.924550056 CEST	1.1.1.1	192.168.2.5	0x7da8	No error (0)	platform.linkedin.com	2-01-2c3e-0055.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:44.972050905 CEST	1.1.1.1	192.168.2.5	0x9e0e	No error (0)	assets.concured.com		34.120.111.58	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:45.016747952 CEST	1.1.1.1	192.168.2.5	0x8755	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.016760111 CEST	1.1.1.1	192.168.2.5	0x1ab	No error (0)	play.vidyard.com	p.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.580991030 CEST	1.1.1.1	192.168.2.5	0xbbb0	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.580991030 CEST	1.1.1.1	192.168.2.5	0xbbb0	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.580991030 CEST	1.1.1.1	192.168.2.5	0xbbb0	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.580991030 CEST	1.1.1.1	192.168.2.5	0xbbb0	No error (0)	cs1-lb-eu.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.580991030 CEST	1.1.1.1	192.168.2.5	0xbbb0	No error (0)	cs41.wac.edgecastcdn.net		93.184.220.66	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:45.581002951 CEST	1.1.1.1	192.168.2.5	0x2e98	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.581002951 CEST	1.1.1.1	192.168.2.5	0x2e98	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.581002951 CEST	1.1.1.1	192.168.2.5	0x2e98	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.581002951 CEST	1.1.1.1	192.168.2.5	0x2e98	No error (0)	cs1-lb-eu.8315.ecdns.net	cs41.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:45.732830048 CEST	1.1.1.1	192.168.2.5	0xc45d	No error (0)	ws.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:45.732830048 CEST	1.1.1.1	192.168.2.5	0xc45d	No error (0)	ws.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:45.732844114 CEST	1.1.1.1	192.168.2.5	0xc6ec	No error (0)	ws.zoominfo.com			65	IN (0x0001)	false
May 23, 2024 15:50:46.470340967 CEST	1.1.1.1	192.168.2.5	0x53cd	No error (0)	raw.vidyard.com		52.20.146.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:46.470340967 CEST	1.1.1.1	192.168.2.5	0x53cd	No error (0)	raw.vidyard.com		34.192.36.230	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:46.546660900 CEST	1.1.1.1	192.168.2.5	0x1623	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:46.546660900 CEST	1.1.1.1	192.168.2.5	0x1623	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:46.550815105 CEST	1.1.1.1	192.168.2.5	0x4da1	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
May 23, 2024 15:50:47.131313086 CEST	1.1.1.1	192.168.2.5	0x623a	No error (0)	syndication.twitter.com		104.244.42.72	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:47.958566904 CEST	1.1.1.1	192.168.2.5	0x9c2e	No error (0)	syndication.twitter.com		104.244.42.136	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.017713070 CEST	1.1.1.1	192.168.2.5	0x2012	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:48.018645048 CEST	1.1.1.1	192.168.2.5	0xea6a	No error (0)	cdn.vidyard.com	cdn-cf.vidyard.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:48.018645048 CEST	1.1.1.1	192.168.2.5	0xea6a	No error (0)	cdn-cf.vidyard.com		18.239.18.21	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.018645048 CEST	1.1.1.1	192.168.2.5	0xea6a	No error (0)	cdn-cf.vidyard.com		18.239.18.33	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.018645048 CEST	1.1.1.1	192.168.2.5	0xea6a	No error (0)	cdn-cf.vidyard.com		18.239.18.49	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.018645048 CEST	1.1.1.1	192.168.2.5	0xea6a	No error (0)	cdn-cf.vidyard.com		18.239.18.36	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.029647112 CEST	1.1.1.1	192.168.2.5	0x87db	No error (0)	raw.vidyard.com		52.20.146.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.029647112 CEST	1.1.1.1	192.168.2.5	0x87db	No error (0)	raw.vidyard.com		34.192.36.230	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.095455885 CEST	1.1.1.1	192.168.2.5	0x3eeb	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
May 23, 2024 15:50:48.095470905 CEST	1.1.1.1	192.168.2.5	0x99e8	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.095470905 CEST	1.1.1.1	192.168.2.5	0x99e8	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.095483065 CEST	1.1.1.1	192.168.2.5	0xd6f6	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.095483065 CEST	1.1.1.1	192.168.2.5	0xd6f6	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.099823952 CEST	1.1.1.1	192.168.2.5	0xeb30	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
May 23, 2024 15:50:48.859929085 CEST	1.1.1.1	192.168.2.5	0xd61	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.859929085 CEST	1.1.1.1	192.168.2.5	0xd61	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:48.859947920 CEST	1.1.1.1	192.168.2.5	0xcd3e	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
May 23, 2024 15:50:51.547136068 CEST	1.1.1.1	192.168.2.5	0xe337	No error (0)	ob.fishrobotflower.com		65.9.86.55	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:51.547136068 CEST	1.1.1.1	192.168.2.5	0xe337	No error (0)	ob.fishrobotflower.com		65.9.86.7	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:51.547136068 CEST	1.1.1.1	192.168.2.5	0xe337	No error (0)	ob.fishrobotflower.com		65.9.86.17	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:51.547136068 CEST	1.1.1.1	192.168.2.5	0xe337	No error (0)	ob.fishrobotflower.com		65.9.86.61	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:51.547157049 CEST	1.1.1.1	192.168.2.5	0xb33e	No error (0)	js.zi-scripts.com			65	IN (0x0001)	false
May 23, 2024 15:50:51.548271894 CEST	1.1.1.1	192.168.2.5	0x311c	No error (0)	js.zi-scripts.com		104.18.37.212	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:51.548271894 CEST	1.1.1.1	192.168.2.5	0x311c	No error (0)	js.zi-scripts.com		172.64.150.44	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.136910915 CEST	1.1.1.1	192.168.2.5	0xbdbd	No error (0)	td.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.170928001 CEST	1.1.1.1	192.168.2.5	0xecea	No error (0)	11756258.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:53.170942068 CEST	1.1.1.1	192.168.2.5	0xd2ca	No error (0)	11756258.fls.doubleclick.net	dart.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:53.170942068 CEST	1.1.1.1	192.168.2.5	0xd2ca	No error (0)	dart.l.doubleclick.net		142.250.185.198	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.533710003 CEST	1.1.1.1	192.168.2.5	0xe52e	No error (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:53.533710003 CEST	1.1.1.1	192.168.2.5	0xe52e	No error (0)	a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com		54.196.227.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.552701950 CEST	1.1.1.1	192.168.2.5	0x7444	No error (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:53.969770908 CEST	1.1.1.1	192.168.2.5	0x3e01	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.969770908 CEST	1.1.1.1	192.168.2.5	0x3e01	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.969770908 CEST	1.1.1.1	192.168.2.5	0x3e01	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:53.969770908 CEST	1.1.1.1	192.168.2.5	0x3e01	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.073748112 CEST	1.1.1.1	192.168.2.5	0x3b7	No error (0)	ad.doubleclick.net		142.250.186.102	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.084865093 CEST	1.1.1.1	192.168.2.5	0xc464	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 23, 2024 15:50:54.084877014 CEST	1.1.1.1	192.168.2.5	0xee01	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:54.084886074 CEST	1.1.1.1	192.168.2.5	0x740	No error (0)	munchkin.marketo.net	wildcard.marketo.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:54.654495001 CEST	1.1.1.1	192.168.2.5	0xa351	No error (0)	js.zi-scripts.com		172.64.150.44	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.654495001 CEST	1.1.1.1	192.168.2.5	0xa351	No error (0)	js.zi-scripts.com		104.18.37.212	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:54.659270048 CEST	1.1.1.1	192.168.2.5	0x6c87	No error (0)	js.zi-scripts.com			65	IN (0x0001)	false
May 23, 2024 15:50:55.034079075 CEST	1.1.1.1	192.168.2.5	0x79ec	No error (0)	stats.g.doubleclick.net		142.251.168.154	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.034079075 CEST	1.1.1.1	192.168.2.5	0x79ec	No error (0)	stats.g.doubleclick.net		142.251.168.156	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.034079075 CEST	1.1.1.1	192.168.2.5	0x79ec	No error (0)	stats.g.doubleclick.net		142.251.168.155	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.034079075 CEST	1.1.1.1	192.168.2.5	0x79ec	No error (0)	stats.g.doubleclick.net		142.251.168.157	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.052537918 CEST	1.1.1.1	192.168.2.5	0x391d	No error (0)	s2.adform.net	s2.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:55.052537918 CEST	1.1.1.1	192.168.2.5	0x391d	No error (0)	istrp.adform.net		37.157.2.250	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.052551031 CEST	1.1.1.1	192.168.2.5	0x76da	No error (0)	s2.adform.net	s2.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:55.093162060 CEST	1.1.1.1	192.168.2.5	0x7c93	No error (0)	ad.doubleclick.net		142.250.185.70	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.093173981 CEST	1.1.1.1	192.168.2.5	0x391c	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 23, 2024 15:50:55.093194962 CEST	1.1.1.1	192.168.2.5	0xeae9	No error (0)	obs.fishrobotflower.com		54.83.110.109	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.093194962 CEST	1.1.1.1	192.168.2.5	0xeae9	No error (0)	obs.fishrobotflower.com		34.199.234.25	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.093194962 CEST	1.1.1.1	192.168.2.5	0xeae9	No error (0)	obs.fishrobotflower.com		50.16.211.97	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.093194962 CEST	1.1.1.1	192.168.2.5	0xeae9	No error (0)	obs.fishrobotflower.com		52.45.196.192	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.093194962 CEST	1.1.1.1	192.168.2.5	0xeae9	No error (0)	obs.fishrobotflower.com		3.227.190.204	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.093194962 CEST	1.1.1.1	192.168.2.5	0xeae9	No error (0)	obs.fishrobotflower.com		35.172.245.152	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.098783016 CEST	1.1.1.1	192.168.2.5	0x15ad	No error (0)	ad.doubleclick.net		142.250.186.38	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.103616953 CEST	1.1.1.1	192.168.2.5	0xd6d2	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 23, 2024 15:50:55.130366087 CEST	1.1.1.1	192.168.2.5	0xcd8e	No error (0)	abrtp1-cdn.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:55.135853052 CEST	1.1.1.1	192.168.2.5	0x9b3e	No error (0)	abrtp1-cdn.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:55.142035007 CEST	1.1.1.1	192.168.2.5	0x6957	No error (0)	ws-assets.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.142035007 CEST	1.1.1.1	192.168.2.5	0x6957	No error (0)	ws-assets.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.146802902 CEST	1.1.1.1	192.168.2.5	0x32cf	No error (0)	ws-assets.zoominfo.com			65	IN (0x0001)	false
May 23, 2024 15:50:55.300925970 CEST	1.1.1.1	192.168.2.5	0x5b30	No error (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:55.300925970 CEST	1.1.1.1	192.168.2.5	0x5b30	No error (0)	a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com		54.196.227.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.305748940 CEST	1.1.1.1	192.168.2.5	0x4ca0	No error (0)	vfhbo3jsnvrutdkuee1akd0lj.litix.io	a9be09319b0a247e4921c2153e4502d8-a6f2beb0335bc90f.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:55.513253927 CEST	1.1.1.1	192.168.2.5	0x99ae	No error (0)	adservice.google.com		216.58.206.66	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:55.538192034 CEST	1.1.1.1	192.168.2.5	0xfd14	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 23, 2024 15:50:55.957828999 CEST	1.1.1.1	192.168.2.5	0xcf11	No error (0)	www.google.com			65	IN (0x0001)	false
May 23, 2024 15:50:55.957842112 CEST	1.1.1.1	192.168.2.5	0x7c07	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.138183117 CEST	1.1.1.1	192.168.2.5	0x52a8	No error (0)	ws.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.138183117 CEST	1.1.1.1	192.168.2.5	0x52a8	No error (0)	ws.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.141242981 CEST	1.1.1.1	192.168.2.5	0x874a	No error (0)	ws.zoominfo.com			65	IN (0x0001)	false
May 23, 2024 15:50:56.576286077 CEST	1.1.1.1	192.168.2.5	0x22f7	No error (0)	adservice.google.com			65	IN (0x0001)	false
May 23, 2024 15:50:56.576307058 CEST	1.1.1.1	192.168.2.5	0x72e6	No error (0)	adservice.google.com		216.58.206.34	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.977144003 CEST	1.1.1.1	192.168.2.5	0x9ee3	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:56.977157116 CEST	1.1.1.1	192.168.2.5	0x9e00	No error (0)	www.google.com			65	IN (0x0001)	false
May 23, 2024 15:50:57.079607964 CEST	1.1.1.1	192.168.2.5	0x5ea3	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:57.079651117 CEST	1.1.1.1	192.168.2.5	0x117e	No error (0)	rtp-static.marketo.com	wildcard.marketo.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:57.237361908 CEST	1.1.1.1	192.168.2.5	0x662c	No error (0)	a1.adform.net	a1.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:57.239356041 CEST	1.1.1.1	192.168.2.5	0x9145	No error (0)	a1.adform.net	a1.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:57.256562948 CEST	1.1.1.1	192.168.2.5	0x7f18	No error (0)	obs.fishrobotflower.com		54.83.110.109	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.256562948 CEST	1.1.1.1	192.168.2.5	0x7f18	No error (0)	obs.fishrobotflower.com		35.172.245.152	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.256562948 CEST	1.1.1.1	192.168.2.5	0x7f18	No error (0)	obs.fishrobotflower.com		50.16.211.97	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.256562948 CEST	1.1.1.1	192.168.2.5	0x7f18	No error (0)	obs.fishrobotflower.com		34.199.234.25	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.256562948 CEST	1.1.1.1	192.168.2.5	0x7f18	No error (0)	obs.fishrobotflower.com		3.227.190.204	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.256562948 CEST	1.1.1.1	192.168.2.5	0x7f18	No error (0)	obs.fishrobotflower.com		52.45.196.192	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658152103 CEST	1.1.1.1	192.168.2.5	0x46f5	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:57.658152103 CEST	1.1.1.1	192.168.2.5	0x46f5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.77	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658152103 CEST	1.1.1.1	192.168.2.5	0x46f5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.87	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658152103 CEST	1.1.1.1	192.168.2.5	0x46f5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.14	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658152103 CEST	1.1.1.1	192.168.2.5	0x46f5	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.73	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658164978 CEST	1.1.1.1	192.168.2.5	0x6f8	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:57.658164978 CEST	1.1.1.1	192.168.2.5	0x6f8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.87	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658164978 CEST	1.1.1.1	192.168.2.5	0x6f8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.73	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658164978 CEST	1.1.1.1	192.168.2.5	0x6f8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.77	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.658164978 CEST	1.1.1.1	192.168.2.5	0x6f8	No error (0)	dl7g9llrghqi1.cloudfront.net		18.245.86.14	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:57.726303101 CEST	1.1.1.1	192.168.2.5	0x621c	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:57.726351976 CEST	1.1.1.1	192.168.2.5	0xad26	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:58.545833111 CEST	1.1.1.1	192.168.2.5	0x31e0	No error (0)	abrtp1.marketo.com		192.28.144.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:58.678575039 CEST	1.1.1.1	192.168.2.5	0x4850	No error (0)	565-bdo-100.mktoresp.com		192.28.144.124	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:59.605293989 CEST	1.1.1.1	192.168.2.5	0x81da	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:50:59.605293989 CEST	1.1.1.1	192.168.2.5	0x81da	No error (0)	dl7g9llrghqi1.cloudfront.net		3.160.212.44	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:59.605293989 CEST	1.1.1.1	192.168.2.5	0x81da	No error (0)	dl7g9llrghqi1.cloudfront.net		3.160.212.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:59.605293989 CEST	1.1.1.1	192.168.2.5	0x81da	No error (0)	dl7g9llrghqi1.cloudfront.net		3.160.212.110	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:59.605293989 CEST	1.1.1.1	192.168.2.5	0x81da	No error (0)	dl7g9llrghqi1.cloudfront.net		3.160.212.69	A (IP address)	IN (0x0001)	false
May 23, 2024 15:50:59.610045910 CEST	1.1.1.1	192.168.2.5	0x99b5	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.069820881 CEST	1.1.1.1	192.168.2.5	0x188b	No error (0)	flo.uri.sh		172.64.144.214	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.069820881 CEST	1.1.1.1	192.168.2.5	0x188b	No error (0)	flo.uri.sh		104.18.43.42	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.072993040 CEST	1.1.1.1	192.168.2.5	0x4b57	No error (0)	flo.uri.sh			65	IN (0x0001)	false
May 23, 2024 15:51:01.142541885 CEST	1.1.1.1	192.168.2.5	0x45a8	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.142541885 CEST	1.1.1.1	192.168.2.5	0x45a8	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.144634008 CEST	1.1.1.1	192.168.2.5	0xb2df	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.144634008 CEST	1.1.1.1	192.168.2.5	0xb2df	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.147582054 CEST	1.1.1.1	192.168.2.5	0xf9f8	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.160228014 CEST	1.1.1.1	192.168.2.5	0xd37	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.160228014 CEST	1.1.1.1	192.168.2.5	0xd37	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.160228014 CEST	1.1.1.1	192.168.2.5	0xd37	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.160228014 CEST	1.1.1.1	192.168.2.5	0xd37	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.160228014 CEST	1.1.1.1	192.168.2.5	0xd37	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.160228014 CEST	1.1.1.1	192.168.2.5	0xd37	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.163837910 CEST	1.1.1.1	192.168.2.5	0x312a	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.163837910 CEST	1.1.1.1	192.168.2.5	0x312a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.163837910 CEST	1.1.1.1	192.168.2.5	0x312a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.163837910 CEST	1.1.1.1	192.168.2.5	0x312a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.163837910 CEST	1.1.1.1	192.168.2.5	0x312a	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.172086000 CEST	1.1.1.1	192.168.2.5	0x5d7e	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.172086000 CEST	1.1.1.1	192.168.2.5	0x5d7e	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.172086000 CEST	1.1.1.1	192.168.2.5	0x5d7e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.172086000 CEST	1.1.1.1	192.168.2.5	0x5d7e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.172086000 CEST	1.1.1.1	192.168.2.5	0x5d7e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.172086000 CEST	1.1.1.1	192.168.2.5	0x5d7e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.183206081 CEST	1.1.1.1	192.168.2.5	0x30c3	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.183206081 CEST	1.1.1.1	192.168.2.5	0x30c3	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.183206081 CEST	1.1.1.1	192.168.2.5	0x30c3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.183206081 CEST	1.1.1.1	192.168.2.5	0x30c3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.183206081 CEST	1.1.1.1	192.168.2.5	0x30c3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.183206081 CEST	1.1.1.1	192.168.2.5	0x30c3	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.215842009 CEST	1.1.1.1	192.168.2.5	0xf10d	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.215842009 CEST	1.1.1.1	192.168.2.5	0xf10d	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.226473093 CEST	1.1.1.1	192.168.2.5	0x2347	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.231230974 CEST	1.1.1.1	192.168.2.5	0x49c1	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.245717049 CEST	1.1.1.1	192.168.2.5	0xa9b0	No error (0)	cdn.rollbar.com	d1ftdm4q83us3q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.250533104 CEST	1.1.1.1	192.168.2.5	0xa015	No error (0)	cdn.rollbar.com	d1ftdm4q83us3q.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.250533104 CEST	1.1.1.1	192.168.2.5	0xa015	No error (0)	d1ftdm4q83us3q.cloudfront.net		108.156.60.33	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.250533104 CEST	1.1.1.1	192.168.2.5	0xa015	No error (0)	d1ftdm4q83us3q.cloudfront.net		108.156.60.72	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.250533104 CEST	1.1.1.1	192.168.2.5	0xa015	No error (0)	d1ftdm4q83us3q.cloudfront.net		108.156.60.40	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.250533104 CEST	1.1.1.1	192.168.2.5	0xa015	No error (0)	d1ftdm4q83us3q.cloudfront.net		108.156.60.116	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:01.253058910 CEST	1.1.1.1	192.168.2.5	0x3a0e	No error (0)	spglobal.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.264098883 CEST	1.1.1.1	192.168.2.5	0x1883	No error (0)	spglobal.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.949403048 CEST	1.1.1.1	192.168.2.5	0x507e	No error (0)	server.seadform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.950247049 CEST	1.1.1.1	192.168.2.5	0x64f1	No error (0)	server.seadform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.957315922 CEST	1.1.1.1	192.168.2.5	0x97e1	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:01.957478046 CEST	1.1.1.1	192.168.2.5	0x7e8e	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:03.702860117 CEST	1.1.1.1	192.168.2.5	0xab12	No error (0)	public.flourish.studio	public.flourish.studio.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:03.707725048 CEST	1.1.1.1	192.168.2.5	0x546	No error (0)	public.flourish.studio	public.flourish.studio.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		52.208.202.34	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		52.211.81.74	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		54.171.20.81	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		52.215.230.136	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		52.18.168.73	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		34.246.225.92	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		52.51.151.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046452999 CEST	1.1.1.1	192.168.2.5	0xe42a	No error (0)	euw-ice.360yield.com		108.128.49.153	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:04.046472073 CEST	1.1.1.1	192.168.2.5	0x94b	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.046472073 CEST	1.1.1.1	192.168.2.5	0x94b	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.186867952 CEST	1.1.1.1	192.168.2.5	0x3b27	No error (0)	server.seadform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.188246012 CEST	1.1.1.1	192.168.2.5	0x929	No error (0)	server.seadform.net	track-eu.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.191982985 CEST	1.1.1.1	192.168.2.5	0x3df1	No error (0)	spglobal.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.198545933 CEST	1.1.1.1	192.168.2.5	0x34e8	No error (0)	spglobal.scene7.com	wildcard.scene7.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.381897926 CEST	1.1.1.1	192.168.2.5	0xdb30	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:04.381897926 CEST	1.1.1.1	192.168.2.5	0xdb30	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:05.284099102 CEST	1.1.1.1	192.168.2.5	0x388e	No error (0)	ad.yieldlab.net	yieldlab.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:05.289098024 CEST	1.1.1.1	192.168.2.5	0x2035	No error (0)	ad.yieldlab.net	yieldlab.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:05.388873100 CEST	1.1.1.1	192.168.2.5	0x3fb4	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:05.393230915 CEST	1.1.1.1	192.168.2.5	0x74e9	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.331851006 CEST	1.1.1.1	192.168.2.5	0x106d	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.331878901 CEST	1.1.1.1	192.168.2.5	0xbc49	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		54.246.180.244	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		34.253.46.26	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		52.48.62.133	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		52.51.146.36	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		176.34.130.130	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		34.246.225.92	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		46.137.56.245	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.338558912 CEST	1.1.1.1	192.168.2.5	0xaf54	No error (0)	euw-ice.360yield.com		52.211.130.211	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.343276978 CEST	1.1.1.1	192.168.2.5	0x68fa	No error (0)	ad.360yield.com	ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.343276978 CEST	1.1.1.1	192.168.2.5	0x68fa	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.508311033 CEST	1.1.1.1	192.168.2.5	0x8a0f	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.508332968 CEST	1.1.1.1	192.168.2.5	0xa43e	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.104	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.56	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		178.32.197.57	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.105	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		5.135.209.105	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.234	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.216	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.185	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		149.202.238.104	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.73	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		5.196.111.72	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		91.134.110.136	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		51.178.195.217	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		164.132.25.184	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508347034 CEST	1.1.1.1	192.168.2.5	0x98bd	No error (0)	rtb-csync-euw2.smartadserver.com		217.182.178.233	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508359909 CEST	1.1.1.1	192.168.2.5	0xe3a5	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.508359909 CEST	1.1.1.1	192.168.2.5	0xe3a5	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508373022 CEST	1.1.1.1	192.168.2.5	0x9a07	No error (0)	ih.adscale.de		18.198.150.232	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508373022 CEST	1.1.1.1	192.168.2.5	0x9a07	No error (0)	ih.adscale.de		52.28.144.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508373022 CEST	1.1.1.1	192.168.2.5	0x9a07	No error (0)	ih.adscale.de		52.59.106.1	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508384943 CEST	1.1.1.1	192.168.2.5	0x1e59	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.508384943 CEST	1.1.1.1	192.168.2.5	0x1e59	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.513322115 CEST	1.1.1.1	192.168.2.5	0x137b	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.513344049 CEST	1.1.1.1	192.168.2.5	0x6d94	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.513350010 CEST	1.1.1.1	192.168.2.5	0x75da	No error (0)	ps.eyeota.net		18.184.216.10	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.514393091 CEST	1.1.1.1	192.168.2.5	0xf20b	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.514393091 CEST	1.1.1.1	192.168.2.5	0xf20b	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.514393091 CEST	1.1.1.1	192.168.2.5	0xf20b	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:06.514408112 CEST	1.1.1.1	192.168.2.5	0xf026	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:06.514434099 CEST	1.1.1.1	192.168.2.5	0xccaf	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
May 23, 2024 15:51:07.817361116 CEST	1.1.1.1	192.168.2.5	0xcf65	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:07.817361116 CEST	1.1.1.1	192.168.2.5	0xcf65	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:07.817361116 CEST	1.1.1.1	192.168.2.5	0xcf65	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:07.817361116 CEST	1.1.1.1	192.168.2.5	0xcf65	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:07.863367081 CEST	1.1.1.1	192.168.2.5	0x70a8	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:07.863367081 CEST	1.1.1.1	192.168.2.5	0x70a8	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:07.863367081 CEST	1.1.1.1	192.168.2.5	0x70a8	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:08.035412073 CEST	1.1.1.1	192.168.2.5	0x7200	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040196896 CEST	1.1.1.1	192.168.2.5	0x4cd9	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:08.040209055 CEST	1.1.1.1	192.168.2.5	0x7431	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.040221930 CEST	1.1.1.1	192.168.2.5	0x14ee	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:08.487641096 CEST	1.1.1.1	192.168.2.5	0x4ada	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.155839920 CEST	1.1.1.1	192.168.2.5	0xfc10	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
May 23, 2024 15:51:09.155864000 CEST	1.1.1.1	192.168.2.5	0x40bb	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.155864000 CEST	1.1.1.1	192.168.2.5	0x40bb	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.155873060 CEST	1.1.1.1	192.168.2.5	0xa08e	No error (0)	ih.adscale.de		52.28.144.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.155873060 CEST	1.1.1.1	192.168.2.5	0xa08e	No error (0)	ih.adscale.de		18.198.150.232	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.155873060 CEST	1.1.1.1	192.168.2.5	0xa08e	No error (0)	ih.adscale.de		52.59.106.1	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.160547018 CEST	1.1.1.1	192.168.2.5	0xf84c	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:09.160558939 CEST	1.1.1.1	192.168.2.5	0x8fee	No error (0)	ads.stickyadstv.com	ip1.ads.stickyadstv.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:09.228691101 CEST	1.1.1.1	192.168.2.5	0x3c96	No error (0)	491-vng-790.mktoresp.com		192.28.144.124	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.552102089 CEST	1.1.1.1	192.168.2.5	0x1e6c	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.552102089 CEST	1.1.1.1	192.168.2.5	0x1e6c	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.552138090 CEST	1.1.1.1	192.168.2.5	0xef1b	No error (0)	api.adrtx.net	adstax-match-proxy.adrtx.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:09.552138090 CEST	1.1.1.1	192.168.2.5	0xef1b	No error (0)	adstax-match-proxy.adrtx.net		52.17.118.57	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.552138090 CEST	1.1.1.1	192.168.2.5	0xef1b	No error (0)	adstax-match-proxy.adrtx.net		54.78.222.177	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.552156925 CEST	1.1.1.1	192.168.2.5	0xc9fd	No error (0)	api.adrtx.net	adstax-match-proxy.adrtx.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:09.577037096 CEST	1.1.1.1	192.168.2.5	0xaf4c	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:09.577056885 CEST	1.1.1.1	192.168.2.5	0x75b	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		217.79.178.221	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		89.163.240.121	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		217.79.178.233	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		139.162.172.148	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		193.135.9.135	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		139.162.185.155	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		89.163.142.91	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		89.163.155.32	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		217.79.187.54	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		217.79.178.236	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		139.162.185.124	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		193.135.9.134	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		89.163.240.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		217.79.187.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		217.79.187.69	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		193.135.9.133	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:09.627899885 CEST	1.1.1.1	192.168.2.5	0x3e7e	No error (0)	cm.adsafety.net		62.141.38.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.605798006 CEST	1.1.1.1	192.168.2.5	0xb222	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.605817080 CEST	1.1.1.1	192.168.2.5	0xcf46	Name error (3)	beacon.krxd.net	none	none	65	IN (0x0001)	false
May 23, 2024 15:51:10.669085979 CEST	1.1.1.1	192.168.2.5	0x1bbb	Name error (3)	beacon.krxd.net	none	none	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.687722921 CEST	1.1.1.1	192.168.2.5	0x1c1d	No error (0)	cm.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.796310902 CEST	1.1.1.1	192.168.2.5	0xe31e	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:10.796330929 CEST	1.1.1.1	192.168.2.5	0x563f	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:10.796330929 CEST	1.1.1.1	192.168.2.5	0x563f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.796330929 CEST	1.1.1.1	192.168.2.5	0x563f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.796330929 CEST	1.1.1.1	192.168.2.5	0x563f	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:10.925997972 CEST	1.1.1.1	192.168.2.5	0xfcee	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.028970957 CEST	1.1.1.1	192.168.2.5	0xe418	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.033703089 CEST	1.1.1.1	192.168.2.5	0x1933	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.038527966 CEST	1.1.1.1	192.168.2.5	0x98da	No error (0)	load77.exelator.com	1605158521.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	load77.exelator.com	1605158521.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	1605158521.rsc.cdn77.org		156.146.33.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	1605158521.rsc.cdn77.org		156.146.33.140	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	1605158521.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	1605158521.rsc.cdn77.org		195.181.175.15	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	1605158521.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	1605158521.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043298006 CEST	1.1.1.1	192.168.2.5	0x76f4	No error (0)	1605158521.rsc.cdn77.org		212.102.56.181	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.218.44.24	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.218.45.112	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.92.32.136	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.218.25.251	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.218.40.251	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.218.105.34	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.92.1.120	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.043309927 CEST	1.1.1.1	192.168.2.5	0x562a	No error (0)	s3-eu-west-1.amazonaws.com		52.218.96.26	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.064668894 CEST	1.1.1.1	192.168.2.5	0xc02	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.064682961 CEST	1.1.1.1	192.168.2.5	0x8fa6	No error (0)	1f2e7.v.fwmrm.net	g11v.fwgtm.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.069417000 CEST	1.1.1.1	192.168.2.5	0x74b	No error (0)	cm.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.074115038 CEST	1.1.1.1	192.168.2.5	0xccf2	No error (0)	ps.eyeota.net		52.57.150.20	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.078885078 CEST	1.1.1.1	192.168.2.5	0x8e5d	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		139.162.185.124	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		193.135.9.134	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		217.79.187.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		89.163.240.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		193.135.9.135	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		62.141.38.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		193.135.9.133	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		217.79.187.54	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		139.162.172.148	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		217.79.187.69	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		217.79.178.221	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		139.162.185.155	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		217.79.178.233	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		89.163.240.121	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		89.163.142.91	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		217.79.178.236	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088912964 CEST	1.1.1.1	192.168.2.5	0xf3a6	No error (0)	cm.adsafety.net		89.163.155.32	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.088928938 CEST	1.1.1.1	192.168.2.5	0x239c	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.644098043 CEST	1.1.1.1	192.168.2.5	0x9616	No error (0)	tags.clickagy.com	d3i9xyriglxn0r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.678374052 CEST	1.1.1.1	192.168.2.5	0x87eb	No error (0)	tags.clickagy.com	d3i9xyriglxn0r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.678374052 CEST	1.1.1.1	192.168.2.5	0x87eb	No error (0)	d3i9xyriglxn0r.cloudfront.net		18.65.39.64	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.678374052 CEST	1.1.1.1	192.168.2.5	0x87eb	No error (0)	d3i9xyriglxn0r.cloudfront.net		18.65.39.118	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.678374052 CEST	1.1.1.1	192.168.2.5	0x87eb	No error (0)	d3i9xyriglxn0r.cloudfront.net		18.65.39.128	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.678374052 CEST	1.1.1.1	192.168.2.5	0x87eb	No error (0)	d3i9xyriglxn0r.cloudfront.net		18.65.39.2	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.705914021 CEST	1.1.1.1	192.168.2.5	0xcd19	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.705914021 CEST	1.1.1.1	192.168.2.5	0xcd19	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.705930948 CEST	1.1.1.1	192.168.2.5	0x27d4	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.705930948 CEST	1.1.1.1	192.168.2.5	0x27d4	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.705930948 CEST	1.1.1.1	192.168.2.5	0x27d4	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.710629940 CEST	1.1.1.1	192.168.2.5	0xd92a	No error (0)	pdw-adf.userreport.com	d3i42lyttuj6qr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.710629940 CEST	1.1.1.1	192.168.2.5	0xd92a	No error (0)	d3i42lyttuj6qr.cloudfront.net		52.222.214.118	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.710629940 CEST	1.1.1.1	192.168.2.5	0xd92a	No error (0)	d3i42lyttuj6qr.cloudfront.net		52.222.214.97	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.710629940 CEST	1.1.1.1	192.168.2.5	0xd92a	No error (0)	d3i42lyttuj6qr.cloudfront.net		52.222.214.74	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.710629940 CEST	1.1.1.1	192.168.2.5	0xd92a	No error (0)	d3i42lyttuj6qr.cloudfront.net		52.222.214.81	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.710640907 CEST	1.1.1.1	192.168.2.5	0x3eca	No error (0)	pdw-adf.userreport.com	d3i42lyttuj6qr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.755326986 CEST	1.1.1.1	192.168.2.5	0x4213	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.755326986 CEST	1.1.1.1	192.168.2.5	0x4213	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.755342007 CEST	1.1.1.1	192.168.2.5	0x2bcb	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.755342007 CEST	1.1.1.1	192.168.2.5	0x2bcb	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.863075972 CEST	1.1.1.1	192.168.2.5	0xefed	No error (0)	eu-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.863075972 CEST	1.1.1.1	192.168.2.5	0xefed	No error (0)	eu-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.948173046 CEST	1.1.1.1	192.168.2.5	0x47e1	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.948173046 CEST	1.1.1.1	192.168.2.5	0x47e1	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:11.948185921 CEST	1.1.1.1	192.168.2.5	0xa6ac	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:11.962846041 CEST	1.1.1.1	192.168.2.5	0x190	Server failure (2)	a.audrte.com	none	none	65	IN (0x0001)	false
May 23, 2024 15:51:11.962857008 CEST	1.1.1.1	192.168.2.5	0xb360	Server failure (2)	a.audrte.com	none	none	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.000330925 CEST	1.1.1.1	192.168.2.5	0x1384	Server failure (2)	a.audrte.com	none	none	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.000349045 CEST	1.1.1.1	192.168.2.5	0xbc16	Server failure (2)	a.audrte.com	none	none	65	IN (0x0001)	false
May 23, 2024 15:51:12.012896061 CEST	1.1.1.1	192.168.2.5	0x2c09	Server failure (2)	a.audrte.com	none	none	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.197.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.77.117	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.213.103.114	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.81.13	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.71.27	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		176.34.167.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.215.242.107	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.034991026 CEST	1.1.1.1	192.168.2.5	0xe47	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		79.125.35.115	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.035007954 CEST	1.1.1.1	192.168.2.5	0x5bf1	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.035007954 CEST	1.1.1.1	192.168.2.5	0x5bf1	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.035007954 CEST	1.1.1.1	192.168.2.5	0x5bf1	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.292654991 CEST	1.1.1.1	192.168.2.5	0x2253	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.292681932 CEST	1.1.1.1	192.168.2.5	0x7452	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.292681932 CEST	1.1.1.1	192.168.2.5	0x7452	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		3.65.80.227	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.292681932 CEST	1.1.1.1	192.168.2.5	0x7452	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		3.120.47.227	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.292681932 CEST	1.1.1.1	192.168.2.5	0x7452	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.193.183.207	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.292681932 CEST	1.1.1.1	192.168.2.5	0x7452	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.184.68.13	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.818979979 CEST	1.1.1.1	192.168.2.5	0xc933	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.818979979 CEST	1.1.1.1	192.168.2.5	0xc933	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.879025936 CEST	1.1.1.1	192.168.2.5	0xfb88	No error (0)	aorta.clickagy.com		34.198.38.143	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.879025936 CEST	1.1.1.1	192.168.2.5	0xfb88	No error (0)	aorta.clickagy.com		18.211.202.82	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.879025936 CEST	1.1.1.1	192.168.2.5	0xfb88	No error (0)	aorta.clickagy.com		54.242.219.146	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.879025936 CEST	1.1.1.1	192.168.2.5	0xfb88	No error (0)	aorta.clickagy.com		23.20.26.217	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.895739079 CEST	1.1.1.1	192.168.2.5	0x309b	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:12.895739079 CEST	1.1.1.1	192.168.2.5	0x309b	No error (0)	cdn.w55c.net		52.59.78.67	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.895739079 CEST	1.1.1.1	192.168.2.5	0x309b	No error (0)	cdn.w55c.net		3.78.151.12	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.895739079 CEST	1.1.1.1	192.168.2.5	0x309b	No error (0)	cdn.w55c.net		3.79.77.2	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.895739079 CEST	1.1.1.1	192.168.2.5	0x309b	No error (0)	cdn.w55c.net		18.194.143.242	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.895739079 CEST	1.1.1.1	192.168.2.5	0x309b	No error (0)	cdn.w55c.net		3.67.59.237	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.895739079 CEST	1.1.1.1	192.168.2.5	0x309b	No error (0)	cdn.w55c.net		52.59.104.153	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:12.895756960 CEST	1.1.1.1	192.168.2.5	0xb9ec	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.406002045 CEST	1.1.1.1	192.168.2.5	0xf418	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.406002045 CEST	1.1.1.1	192.168.2.5	0xf418	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.406002045 CEST	1.1.1.1	192.168.2.5	0xf418	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.406002045 CEST	1.1.1.1	192.168.2.5	0xf418	No error (0)	demdex.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.406024933 CEST	1.1.1.1	192.168.2.5	0x78c7	No error (0)	adobedc.demdex.net	demdex.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.406035900 CEST	1.1.1.1	192.168.2.5	0x3fa	No error (0)	load77.exelator.com	1605158521.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	load77.exelator.com	1605158521.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	1605158521.rsc.cdn77.org		212.102.56.182	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	1605158521.rsc.cdn77.org		156.146.33.140	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	1605158521.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	1605158521.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	1605158521.rsc.cdn77.org		156.146.33.138	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	1605158521.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.410782099 CEST	1.1.1.1	192.168.2.5	0x3e91	No error (0)	1605158521.rsc.cdn77.org		195.181.175.15	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.420439005 CEST	1.1.1.1	192.168.2.5	0x7def	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.420439005 CEST	1.1.1.1	192.168.2.5	0x7def	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		54.159.240.171	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.420439005 CEST	1.1.1.1	192.168.2.5	0x7def	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		34.224.237.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.420439005 CEST	1.1.1.1	192.168.2.5	0x7def	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		50.16.42.79	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.420439005 CEST	1.1.1.1	192.168.2.5	0x7def	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		54.92.244.178	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.425259113 CEST	1.1.1.1	192.168.2.5	0x321c	No error (0)	js.idio.co		3.162.38.11	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.425259113 CEST	1.1.1.1	192.168.2.5	0x321c	No error (0)	js.idio.co		3.162.38.38	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.425259113 CEST	1.1.1.1	192.168.2.5	0x321c	No error (0)	js.idio.co		3.162.38.81	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.425259113 CEST	1.1.1.1	192.168.2.5	0x321c	No error (0)	js.idio.co		3.162.38.55	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.425271988 CEST	1.1.1.1	192.168.2.5	0x7f05	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.430324078 CEST	1.1.1.1	192.168.2.5	0x301a	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.430324078 CEST	1.1.1.1	192.168.2.5	0x301a	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.430324078 CEST	1.1.1.1	192.168.2.5	0x301a	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.430324078 CEST	1.1.1.1	192.168.2.5	0x301a	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497638941 CEST	1.1.1.1	192.168.2.5	0xffb8	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.497638941 CEST	1.1.1.1	192.168.2.5	0xffb8	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.497658014 CEST	1.1.1.1	192.168.2.5	0x118b	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.497658014 CEST	1.1.1.1	192.168.2.5	0x118b	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.497658014 CEST	1.1.1.1	192.168.2.5	0x118b	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.218.100.51	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.218.110.3	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.218.29.75	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.92.20.96	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.218.0.203	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.92.19.88	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.218.90.51	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.497679949 CEST	1.1.1.1	192.168.2.5	0xdf5d	No error (0)	s3-eu-west-1.amazonaws.com		52.218.37.211	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.502527952 CEST	1.1.1.1	192.168.2.5	0x3ad7	No error (0)	pdw-adf.userreport.com	d3i42lyttuj6qr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.517388105 CEST	1.1.1.1	192.168.2.5	0xc5bd	No error (0)	pdw-adf.userreport.com	d3i42lyttuj6qr.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.517388105 CEST	1.1.1.1	192.168.2.5	0xc5bd	No error (0)	d3i42lyttuj6qr.cloudfront.net		108.138.233.103	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.517388105 CEST	1.1.1.1	192.168.2.5	0xc5bd	No error (0)	d3i42lyttuj6qr.cloudfront.net		108.138.233.112	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.517388105 CEST	1.1.1.1	192.168.2.5	0xc5bd	No error (0)	d3i42lyttuj6qr.cloudfront.net		108.138.233.47	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.517388105 CEST	1.1.1.1	192.168.2.5	0xc5bd	No error (0)	d3i42lyttuj6qr.cloudfront.net		108.138.233.88	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.527010918 CEST	1.1.1.1	192.168.2.5	0x4828	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.527010918 CEST	1.1.1.1	192.168.2.5	0x4828	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.527025938 CEST	1.1.1.1	192.168.2.5	0x327f	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.689320087 CEST	1.1.1.1	192.168.2.5	0x9fb3	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.689330101 CEST	1.1.1.1	192.168.2.5	0xf0c9	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.815907955 CEST	1.1.1.1	192.168.2.5	0x1e3a	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.815907955 CEST	1.1.1.1	192.168.2.5	0x1e3a	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		34.252.112.229	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.815907955 CEST	1.1.1.1	192.168.2.5	0x1e3a	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.171.139.95	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.815907955 CEST	1.1.1.1	192.168.2.5	0x1e3a	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.16.132.124	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.815907955 CEST	1.1.1.1	192.168.2.5	0x1e3a	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.195.194.200	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.815943003 CEST	1.1.1.1	192.168.2.5	0xa3a2	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:13.825433969 CEST	1.1.1.1	192.168.2.5	0x10eb	No error (0)	aorta.clickagy.com		23.20.26.217	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.825433969 CEST	1.1.1.1	192.168.2.5	0x10eb	No error (0)	aorta.clickagy.com		18.211.202.82	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.825433969 CEST	1.1.1.1	192.168.2.5	0x10eb	No error (0)	aorta.clickagy.com		54.242.219.146	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:13.825433969 CEST	1.1.1.1	192.168.2.5	0x10eb	No error (0)	aorta.clickagy.com		34.198.38.143	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:14.009812117 CEST	1.1.1.1	192.168.2.5	0x1f43	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:14.009812117 CEST	1.1.1.1	192.168.2.5	0x1f43	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:14.009812117 CEST	1.1.1.1	192.168.2.5	0x1f43	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:14.009812117 CEST	1.1.1.1	192.168.2.5	0x1f43	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.298928976 CEST	1.1.1.1	192.168.2.5	0xa5bd	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.305145025 CEST	1.1.1.1	192.168.2.5	0x2d0e	No error (0)	redirect.frontend.weborama.fr		35.190.24.218	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.387312889 CEST	1.1.1.1	192.168.2.5	0xeaf	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.394287109 CEST	1.1.1.1	192.168.2.5	0xc3cf	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.406229019 CEST	1.1.1.1	192.168.2.5	0xa72b	No error (0)	s.ad.smaato.net		108.156.39.69	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.406229019 CEST	1.1.1.1	192.168.2.5	0xa72b	No error (0)	s.ad.smaato.net		108.156.39.126	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.406229019 CEST	1.1.1.1	192.168.2.5	0xa72b	No error (0)	s.ad.smaato.net		108.156.39.117	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.406229019 CEST	1.1.1.1	192.168.2.5	0xa72b	No error (0)	s.ad.smaato.net		108.156.39.10	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.446291924 CEST	1.1.1.1	192.168.2.5	0x1ae3	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.446291924 CEST	1.1.1.1	192.168.2.5	0x1ae3	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.446291924 CEST	1.1.1.1	192.168.2.5	0x1ae3	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.76.144.165	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.446291924 CEST	1.1.1.1	192.168.2.5	0x1ae3	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.158.34.148	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.456221104 CEST	1.1.1.1	192.168.2.5	0x52ba	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.456221104 CEST	1.1.1.1	192.168.2.5	0x52ba	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.456254005 CEST	1.1.1.1	192.168.2.5	0xfd0	No error (0)	s.idio.co		3.162.38.39	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.456254005 CEST	1.1.1.1	192.168.2.5	0xfd0	No error (0)	s.idio.co		3.162.38.79	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.456254005 CEST	1.1.1.1	192.168.2.5	0xfd0	No error (0)	s.idio.co		3.162.38.48	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.456254005 CEST	1.1.1.1	192.168.2.5	0xfd0	No error (0)	s.idio.co		3.162.38.19	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		52.48.246.250	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		34.254.84.230	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		34.246.206.6	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		34.251.183.115	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		52.210.242.228	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		34.241.112.102	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		34.255.48.153	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.518127918 CEST	1.1.1.1	192.168.2.5	0x96e1	No error (0)	match.prod.bidr.io		34.240.216.83	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.624212027 CEST	1.1.1.1	192.168.2.5	0x159e	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.624212027 CEST	1.1.1.1	192.168.2.5	0x159e	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.635567904 CEST	1.1.1.1	192.168.2.5	0x2dd0	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.635582924 CEST	1.1.1.1	192.168.2.5	0x5003	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.635582924 CEST	1.1.1.1	192.168.2.5	0x5003	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.635596037 CEST	1.1.1.1	192.168.2.5	0x3839	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.635608912 CEST	1.1.1.1	192.168.2.5	0x217d	No error (0)	dmp.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.635622025 CEST	1.1.1.1	192.168.2.5	0xd5a9	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.635622025 CEST	1.1.1.1	192.168.2.5	0xd5a9	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.687328100 CEST	1.1.1.1	192.168.2.5	0xf2d4	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.687328100 CEST	1.1.1.1	192.168.2.5	0xf2d4	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		54.92.244.178	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.687328100 CEST	1.1.1.1	192.168.2.5	0xf2d4	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		50.16.42.79	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.687328100 CEST	1.1.1.1	192.168.2.5	0xf2d4	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		54.159.240.171	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.687328100 CEST	1.1.1.1	192.168.2.5	0xf2d4	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		34.224.237.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:15.687349081 CEST	1.1.1.1	192.168.2.5	0x5956	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.807509899 CEST	1.1.1.1	192.168.2.5	0x5617	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.807538033 CEST	1.1.1.1	192.168.2.5	0x5137	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.807552099 CEST	1.1.1.1	192.168.2.5	0xd710	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:15.807564020 CEST	1.1.1.1	192.168.2.5	0xf052	No error (0)	www.spglobal.com	www.spglobal.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:16.161138058 CEST	1.1.1.1	192.168.2.5	0x5739	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:16.161138058 CEST	1.1.1.1	192.168.2.5	0x5739	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.172.103.101	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.161158085 CEST	1.1.1.1	192.168.2.5	0x9d57	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:16.466460943 CEST	1.1.1.1	192.168.2.5	0x5e9f	No error (0)	a.idio.co		54.208.138.231	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.466460943 CEST	1.1.1.1	192.168.2.5	0x5e9f	No error (0)	a.idio.co		52.86.89.1	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.466460943 CEST	1.1.1.1	192.168.2.5	0x5e9f	No error (0)	a.idio.co		52.54.153.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.566256046 CEST	1.1.1.1	192.168.2.5	0x8927	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:16.566277981 CEST	1.1.1.1	192.168.2.5	0x182d	No error (0)	sync.teads.tv	sync.teads.tv.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:16.568037987 CEST	1.1.1.1	192.168.2.5	0xe2a0	No error (0)	match.contentexchange.me		46.19.11.36	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.880918980 CEST	1.1.1.1	192.168.2.5	0xa618	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.967555046 CEST	1.1.1.1	192.168.2.5	0xc1db	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:16.967555046 CEST	1.1.1.1	192.168.2.5	0xc1db	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.967555046 CEST	1.1.1.1	192.168.2.5	0xc1db	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:16.967600107 CEST	1.1.1.1	192.168.2.5	0x7030	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.052264929 CEST	1.1.1.1	192.168.2.5	0x6cd8	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		52.212.132.56	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		52.211.81.74	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		52.49.75.140	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		54.154.125.194	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		34.250.20.25	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		34.250.191.7	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		54.171.20.81	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.565763950 CEST	1.1.1.1	192.168.2.5	0xaba4	No error (0)	euw-ice.360yield.com		52.51.146.36	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.580166101 CEST	1.1.1.1	192.168.2.5	0x1a3b	No error (0)	ice.360yield.com	euw-ice.360yield.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		52.49.45.15	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.672032118 CEST	1.1.1.1	192.168.2.5	0xddd3	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.742238998 CEST	1.1.1.1	192.168.2.5	0x4397	No error (0)	e1.emxdgt.com		52.29.164.212	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.742238998 CEST	1.1.1.1	192.168.2.5	0x4397	No error (0)	e1.emxdgt.com		18.197.201.29	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.742238998 CEST	1.1.1.1	192.168.2.5	0x4397	No error (0)	e1.emxdgt.com		52.58.37.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.742238998 CEST	1.1.1.1	192.168.2.5	0x4397	No error (0)	e1.emxdgt.com		3.73.220.73	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.763156891 CEST	1.1.1.1	192.168.2.5	0xfc2d	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:17.804442883 CEST	1.1.1.1	192.168.2.5	0x1f0	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:17.856133938 CEST	1.1.1.1	192.168.2.5	0x2ff8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:18.011821032 CEST	1.1.1.1	192.168.2.5	0x8f04	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:18.011821032 CEST	1.1.1.1	192.168.2.5	0x8f04	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:18.011821032 CEST	1.1.1.1	192.168.2.5	0x8f04	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.238.243.86	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.011821032 CEST	1.1.1.1	192.168.2.5	0x8f04	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.238.243.10	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.011821032 CEST	1.1.1.1	192.168.2.5	0x8f04	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.238.243.128	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.011821032 CEST	1.1.1.1	192.168.2.5	0x8f04	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.238.243.9	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.014693975 CEST	1.1.1.1	192.168.2.5	0x4b4c	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:18.014693975 CEST	1.1.1.1	192.168.2.5	0x4b4c	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:18.082046986 CEST	1.1.1.1	192.168.2.5	0x2fef	No error (0)	a.idio.co		52.54.153.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.082046986 CEST	1.1.1.1	192.168.2.5	0x2fef	No error (0)	a.idio.co		52.86.89.1	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.082046986 CEST	1.1.1.1	192.168.2.5	0x2fef	No error (0)	a.idio.co		54.208.138.231	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:18.905515909 CEST	1.1.1.1	192.168.2.5	0x9dea	No error (0)	play.libsyn.com		204.16.247.177	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.017951965 CEST	1.1.1.1	192.168.2.5	0x3f4f	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.154777050 CEST	1.1.1.1	192.168.2.5	0xf79a	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:20.154791117 CEST	1.1.1.1	192.168.2.5	0xfa8c	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:20.154791117 CEST	1.1.1.1	192.168.2.5	0xfa8c	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.154791117 CEST	1.1.1.1	192.168.2.5	0xfa8c	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.172616959 CEST	1.1.1.1	192.168.2.5	0x7d05	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.172616959 CEST	1.1.1.1	192.168.2.5	0x7d05	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.172616959 CEST	1.1.1.1	192.168.2.5	0x7d05	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.172616959 CEST	1.1.1.1	192.168.2.5	0x7d05	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.428333044 CEST	1.1.1.1	192.168.2.5	0x862f	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:20.428333044 CEST	1.1.1.1	192.168.2.5	0x862f	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:20.428333044 CEST	1.1.1.1	192.168.2.5	0x862f	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.172.112.40	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.428333044 CEST	1.1.1.1	192.168.2.5	0x862f	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.172.112.55	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.428333044 CEST	1.1.1.1	192.168.2.5	0x862f	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.172.112.118	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.428333044 CEST	1.1.1.1	192.168.2.5	0x862f	No error (0)	d1nie5ipy0d64w.cloudfront.net		18.172.112.11	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.428350925 CEST	1.1.1.1	192.168.2.5	0xeffd	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:20.428350925 CEST	1.1.1.1	192.168.2.5	0xeffd	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:20.789231062 CEST	1.1.1.1	192.168.2.5	0xb080	No error (0)	spl.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.789231062 CEST	1.1.1.1	192.168.2.5	0xb080	No error (0)	spl.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.789231062 CEST	1.1.1.1	192.168.2.5	0xb080	No error (0)	spl.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:20.789244890 CEST	1.1.1.1	192.168.2.5	0xd973	No error (0)	spl.zeotap.com			65	IN (0x0001)	false
May 23, 2024 15:51:21.004086971 CEST	1.1.1.1	192.168.2.5	0x392d	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:21.004086971 CEST	1.1.1.1	192.168.2.5	0x392d	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:21.004106045 CEST	1.1.1.1	192.168.2.5	0x8583	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:21.004106045 CEST	1.1.1.1	192.168.2.5	0x8583	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:21.004106045 CEST	1.1.1.1	192.168.2.5	0x8583	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.004106045 CEST	1.1.1.1	192.168.2.5	0x8583	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.004106045 CEST	1.1.1.1	192.168.2.5	0x8583	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.004106045 CEST	1.1.1.1	192.168.2.5	0x8583	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.991549969 CEST	1.1.1.1	192.168.2.5	0xc73f	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:21.991549969 CEST	1.1.1.1	192.168.2.5	0xc73f	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.991549969 CEST	1.1.1.1	192.168.2.5	0xc73f	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.991549969 CEST	1.1.1.1	192.168.2.5	0xc73f	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.991656065 CEST	1.1.1.1	192.168.2.5	0xd027	No error (0)	html5-player.libsyn.com		204.16.247.184	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.992592096 CEST	1.1.1.1	192.168.2.5	0xa9ec	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:21.992607117 CEST	1.1.1.1	192.168.2.5	0x17c6	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:21.992607117 CEST	1.1.1.1	192.168.2.5	0x17c6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.992607117 CEST	1.1.1.1	192.168.2.5	0x17c6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.992607117 CEST	1.1.1.1	192.168.2.5	0x17c6	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:21.992631912 CEST	1.1.1.1	192.168.2.5	0xb5dc	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:22.202434063 CEST	1.1.1.1	192.168.2.5	0xe424	No error (0)	html5-player.libsyn.com		204.16.247.184	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.276377916 CEST	1.1.1.1	192.168.2.5	0xcacb	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	1334519-19.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		34.195.15.24	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		107.21.218.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.218.222.230	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.147.251.125	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.194.182.238	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.0.164.203	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		35.153.196.54	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289006948 CEST	1.1.1.1	192.168.2.5	0xd8a8	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		35.174.134.171	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.289019108 CEST	1.1.1.1	192.168.2.5	0x83db	No error (0)	1334519-19.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:22.297224998 CEST	1.1.1.1	192.168.2.5	0x8dae	No error (0)	1510748-48.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	1510748-48.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.218.167.115	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		107.21.218.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		52.206.238.245	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.147.251.125	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.220.254.159	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.85.2.165	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.194.182.238	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.302191973 CEST	1.1.1.1	192.168.2.5	0x50fc	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		34.192.239.162	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.442259073 CEST	1.1.1.1	192.168.2.5	0x71a4	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:22.442271948 CEST	1.1.1.1	192.168.2.5	0x7b6c	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:22.442271948 CEST	1.1.1.1	192.168.2.5	0x7b6c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.49.44.23	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.442271948 CEST	1.1.1.1	192.168.2.5	0x7b6c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		79.125.94.16	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.442271948 CEST	1.1.1.1	192.168.2.5	0x7b6c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.31.50.141	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.442271948 CEST	1.1.1.1	192.168.2.5	0x7b6c	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.48.182.227	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.446115971 CEST	1.1.1.1	192.168.2.5	0x7f9b	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.867057085 CEST	1.1.1.1	192.168.2.5	0x16f2	No error (0)	html5-player.libsyn.com		204.16.247.184	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.972800970 CEST	1.1.1.1	192.168.2.5	0x6049	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.972800970 CEST	1.1.1.1	192.168.2.5	0x6049	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.972800970 CEST	1.1.1.1	192.168.2.5	0x6049	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:22.972812891 CEST	1.1.1.1	192.168.2.5	0xef7f	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 23, 2024 15:51:23.519403934 CEST	1.1.1.1	192.168.2.5	0xdf88	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:23.519417048 CEST	1.1.1.1	192.168.2.5	0x6f2f	No error (0)	edge.adobedc.net	adobedc.net.ssl.sc.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:23.519417048 CEST	1.1.1.1	192.168.2.5	0x6f2f	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.17	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:23.519417048 CEST	1.1.1.1	192.168.2.5	0x6f2f	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.27	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:23.519417048 CEST	1.1.1.1	192.168.2.5	0x6f2f	No error (0)	adobedc.net.ssl.sc.omtrdc.net		63.140.62.222	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:23.785531044 CEST	1.1.1.1	192.168.2.5	0xc032	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.749419928 CEST	1.1.1.1	192.168.2.5	0xf077	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.749419928 CEST	1.1.1.1	192.168.2.5	0xf077	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.973596096 CEST	1.1.1.1	192.168.2.5	0xf5a2	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:24.973596096 CEST	1.1.1.1	192.168.2.5	0xf5a2	No error (0)	cdn.w55c.net		3.78.151.12	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.973596096 CEST	1.1.1.1	192.168.2.5	0xf5a2	No error (0)	cdn.w55c.net		3.79.77.2	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.973596096 CEST	1.1.1.1	192.168.2.5	0xf5a2	No error (0)	cdn.w55c.net		3.67.59.237	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.973596096 CEST	1.1.1.1	192.168.2.5	0xf5a2	No error (0)	cdn.w55c.net		52.59.78.67	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.973596096 CEST	1.1.1.1	192.168.2.5	0xf5a2	No error (0)	cdn.w55c.net		52.59.104.153	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.973596096 CEST	1.1.1.1	192.168.2.5	0xf5a2	No error (0)	cdn.w55c.net		18.194.143.242	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.973609924 CEST	1.1.1.1	192.168.2.5	0x8655	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:24.973619938 CEST	1.1.1.1	192.168.2.5	0xbf32	No error (0)	play.libsyn.com		204.16.247.177	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.976866007 CEST	1.1.1.1	192.168.2.5	0x301c	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 23, 2024 15:51:24.979259968 CEST	1.1.1.1	192.168.2.5	0xb468	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.979259968 CEST	1.1.1.1	192.168.2.5	0xb468	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:24.979259968 CEST	1.1.1.1	192.168.2.5	0xb468	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:25.178553104 CEST	1.1.1.1	192.168.2.5	0xc975	Server failure (2)	a.audrte.com	none	none	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:25.219403982 CEST	1.1.1.1	192.168.2.5	0x4aa2	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:25.219403982 CEST	1.1.1.1	192.168.2.5	0x4aa2	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:25.219413996 CEST	1.1.1.1	192.168.2.5	0xde28	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:25.219413996 CEST	1.1.1.1	192.168.2.5	0xde28	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:25.219413996 CEST	1.1.1.1	192.168.2.5	0xde28	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.18.219.127	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.235.18	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.110.165	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.220.209.169	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.32.208	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.107.72	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.197.68	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.817924023 CEST	1.1.1.1	192.168.2.5	0x8c4c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.71.27	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:26.822726011 CEST	1.1.1.1	192.168.2.5	0xfda6	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:26.822726011 CEST	1.1.1.1	192.168.2.5	0xfda6	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:26.822726011 CEST	1.1.1.1	192.168.2.5	0xfda6	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:28.457348108 CEST	1.1.1.1	192.168.2.5	0x921c	No error (0)	abrtp1.marketo.com		192.28.144.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.588252068 CEST	1.1.1.1	192.168.2.5	0x9ba1	No error (0)	cm.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.789313078 CEST	1.1.1.1	192.168.2.5	0xb51e	No error (0)	log.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:29.789313078 CEST	1.1.1.1	192.168.2.5	0xb51e	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:29.789313078 CEST	1.1.1.1	192.168.2.5	0xb51e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.789313078 CEST	1.1.1.1	192.168.2.5	0xb51e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.789313078 CEST	1.1.1.1	192.168.2.5	0xb51e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.789313078 CEST	1.1.1.1	192.168.2.5	0xb51e	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.799633026 CEST	1.1.1.1	192.168.2.5	0xac1e	No error (0)	log.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:29.799633026 CEST	1.1.1.1	192.168.2.5	0xac1e	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:29.907474041 CEST	1.1.1.1	192.168.2.5	0x97fa	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:30.951571941 CEST	1.1.1.1	192.168.2.5	0xaf29	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:30.951571941 CEST	1.1.1.1	192.168.2.5	0xaf29	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:30.951571941 CEST	1.1.1.1	192.168.2.5	0xaf29	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:30.951587915 CEST	1.1.1.1	192.168.2.5	0xc192	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:30.951587915 CEST	1.1.1.1	192.168.2.5	0xc192	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 15:51:31.185282946 CEST	1.1.1.1	192.168.2.5	0x3f3f	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:31.185282946 CEST	1.1.1.1	192.168.2.5	0x3f3f	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:31.692471027 CEST	1.1.1.1	192.168.2.5	0x300a	No error (0)	ad.doubleclick.net		142.250.186.166	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:31.692487001 CEST	1.1.1.1	192.168.2.5	0x6cf1	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 23, 2024 15:51:33.327440023 CEST	1.1.1.1	192.168.2.5	0xf787	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:35.595191956 CEST	1.1.1.1	192.168.2.5	0xa33f	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		54.163.32.160	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		54.157.2.15	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		52.72.126.131	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		54.157.60.254	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		54.144.2.150	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		52.72.151.87	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		52.86.37.184	A (IP address)	IN (0x0001)	false
May 23, 2024 15:51:38.433429956 CEST	1.1.1.1	192.168.2.5	0xe84f	No error (0)	sync.ipredictive.com		52.72.76.247	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	20.190.249.200	80	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 23, 2024 15:50:13.130055904 CEST	448	OUT	GET /Privacy-Policy.html HTTP/1.1 Host: info.ipreo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 23, 2024 15:50:13.687618971 CEST	367	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://ihsmarkit.com/industry/financial-markets.html Date: Thu, 23 May 2024 13:50:13 GMT Content-Length: 170 Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 68 73 6d 61 72 6b 69 74 2e 63 6f 6d 2f 69 6e 64 75 73 74 72 79 2f 66 69 6e 61 6e 63 69 61 6c 2d 6d 61 72 6b 65 74 73 2e 68 74 6d 6c 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://ihsmarkit.com/industry/financial-markets.html">here</a>.</h2></body></html>
May 23, 2024 15:50:58.694397926 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49726	3.220.214.71	80	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 23, 2024 15:50:27.065155029 CEST	434	OUT	GET / HTTP/1.1 Host: www.spcapitaliq.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 23, 2024 15:50:27.618839979 CEST	407	IN	HTTP/1.1 301 Moved Permanently Server: openresty/1.19.3.2 Date: Thu, 23 May 2024 13:50:27 GMT Content-Type: text/html Content-Length: 175 Connection: close Location: https://www.spglobal.com/_redirects/www.spcapitaliq.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 2f 31 2e 31 39 2e 33 2e 32 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty/1.19.3.2</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49709	20.190.249.200	80	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
May 23, 2024 15:50:58.133161068 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	20.190.249.200	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:14 UTC	687	OUT	GET /industry/financial-markets.html HTTP/1.1 Host: ihsmarkit.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:14 UTC	304	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Location: https://www.spglobal.com/marketintelligence/en/ Date: Thu, 23 May 2024 13:50:14 GMT Content-Length: 164 X-FRAME-OPTIONS: SAMEORIGIN Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-05-23 13:50:14 UTC	164	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 2f 65 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.spglobal.com/marketintelligence/en/">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49718	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 13:50:17 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=8428 Date: Thu, 23 May 2024 13:50:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49720	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 13:50:19 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=8466 Date: Thu, 23 May 2024 13:50:19 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-23 13:50:19 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49723	52.71.28.102	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:26 UTC	776	OUT	GET /v3/__http://www.spcapitaliq.com/__;!!GjvTz_vk!S23AgMpOHeRszJTw0uERhApJ206Qy-6sZgONselCccTEnesoxmXELyzjpgIAJ4dUeu42X6YW-6U7TAxHRak42voGpjIk$ HTTP/1.1 Host: urldefense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:26 UTC	355	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:50:26 GMT Content-Length: 0 Connection: close Location: http://www.spcapitaliq.com/ Strict-Transport-Security: max-age=31536000 X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: default-src 'self';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49743	104.17.98.130	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:33 UTC	542	OUT	GET /js/forms2/js/forms2.js HTTP/1.1 Host: app-sjqe.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:33 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:33 GMT Content-Type: application/x-javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 14 May 2024 07:25:35 GMT ETag: W/"469a2c-8f4ff-61864e86519c0" Vary: Accept-Encoding Strict-Transport-Security: max-age=63113904 X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2866 Server: cloudflare CF-RAY: 888584039e09c40c-EWR
2024-05-23 13:50:33 UTC	943	IN	Data Raw: 37 64 66 36 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 73 28 6f 2c 75 29 7b 69 66 28 21 6e 5b 6f 5d 29 7b 69 66 28 21 74 5b 6f 5d 29 7b 76 61 72 20 61 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 75 26 26 61 29 72 65 74 75 72 6e 20 61 28 6f 2c 21 30 29 3b 69 66 28 69 29 72 65 74 75 72 6e 20 69 28 6f 2c 21 30 29 3b 76 61 72 20 66 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 6f 2b 22 27 22 29 3b 74 68 72 6f 77 20 66 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 66 7d 76 61 72 20 6c 3d 6e 5b 6f 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 6f 5d Data Ascii: 7df6(function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o]
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 28 65 6c 74 29 20 7b 0a 09 09 76 61 72 20 63 6f 64 65 20 3d 20 65 6c 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 0a 09 09 69 66 20 28 63 6f 64 65 20 3d 3d 3d 20 50 4c 55 53 20 7c 7c 0a 09 09 20 20 20 20 63 6f 64 65 20 3d 3d 3d 20 50 4c 55 53 5f 55 52 4c 5f 53 41 46 45 29 0a 09 09 09 72 65 74 75 72 6e 20 36 32 20 2f 2f 20 27 2b 27 0a 09 09 69 66 20 28 63 6f 64 65 20 3d 3d 3d 20 53 4c 41 53 48 20 7c 7c 0a 09 09 20 20 20 20 63 6f 64 65 20 3d 3d 3d 20 53 4c 41 53 48 5f 55 52 4c 5f 53 41 46 45 29 0a 09 09 09 72 65 74 75 72 6e 20 36 33 20 2f 2f 20 27 2f 27 0a 09 09 69 66 20 28 63 6f 64 65 20 3c 20 4e 55 4d 42 45 52 29 0a 09 09 09 72 65 74 75 72 6e 20 2d 31 20 2f 2f 6e 6f 20 6d 61 74 63 68 0a 09 09 69 66 20 28 63 6f 64 65 20 3c 20 4e 55 4d 42 45 52 20 2b 20 31 Data Ascii: (elt) {var code = elt.charCodeAt(0)if (code === PLUS \|\| code === PLUS_URL_SAFE)return 62 // '+'if (code === SLASH \|\| code === SLASH_URL_SAFE)return 63 // '/'if (code < NUMBER)return -1 //no matchif (code < NUMBER + 1
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 29 20 3c 3c 20 31 32 29 20 7c 20 28 64 65 63 6f 64 65 28 62 36 34 2e 63 68 61 72 41 74 28 69 20 2b 20 32 29 29 20 3c 3c 20 36 29 20 7c 20 64 65 63 6f 64 65 28 62 36 34 2e 63 68 61 72 41 74 28 69 20 2b 20 33 29 29 0a 09 09 09 70 75 73 68 28 28 74 6d 70 20 26 20 30 78 46 46 30 30 30 30 29 20 3e 3e 20 31 36 29 0a 09 09 09 70 75 73 68 28 28 74 6d 70 20 26 20 30 78 46 46 30 30 29 20 3e 3e 20 38 29 0a 09 09 09 70 75 73 68 28 74 6d 70 20 26 20 30 78 46 46 29 0a 09 09 7d 0a 0a 09 09 69 66 20 28 70 6c 61 63 65 48 6f 6c 64 65 72 73 20 3d 3d 3d 20 32 29 20 7b 0a 09 09 09 74 6d 70 20 3d 20 28 64 65 63 6f 64 65 28 62 36 34 2e 63 68 61 72 41 74 28 69 29 29 20 3c 3c 20 32 29 20 7c 20 28 64 65 63 6f 64 65 28 62 36 34 2e 63 68 61 72 41 74 28 69 20 2b 20 31 29 29 20 3e 3e Data Ascii: ) << 12) \| (decode(b64.charAt(i + 2)) << 6) \| decode(b64.charAt(i + 3))push((tmp & 0xFF0000) >> 16)push((tmp & 0xFF00) >> 8)push(tmp & 0xFF)}if (placeHolders === 2) {tmp = (decode(b64.charAt(i)) << 2) \| (decode(b64.charAt(i + 1)) >>
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 09 74 65 6d 70 20 3d 20 28 75 69 6e 74 38 5b 75 69 6e 74 38 2e 6c 65 6e 67 74 68 20 2d 20 32 5d 20 3c 3c 20 38 29 20 2b 20 28 75 69 6e 74 38 5b 75 69 6e 74 38 2e 6c 65 6e 67 74 68 20 2d 20 31 5d 29 0a 09 09 09 09 6f 75 74 70 75 74 20 2b 3d 20 65 6e 63 6f 64 65 28 74 65 6d 70 20 3e 3e 20 31 30 29 0a 09 09 09 09 6f 75 74 70 75 74 20 2b 3d 20 65 6e 63 6f 64 65 28 28 74 65 6d 70 20 3e 3e 20 34 29 20 26 20 30 78 33 46 29 0a 09 09 09 09 6f 75 74 70 75 74 20 2b 3d 20 65 6e 63 6f 64 65 28 28 74 65 6d 70 20 3c 3c 20 32 29 20 26 20 30 78 33 46 29 0a 09 09 09 09 6f 75 74 70 75 74 20 2b 3d 20 27 3d 27 0a 09 09 09 09 62 72 65 61 6b 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 6f 75 74 70 75 74 0a 09 7d 0a 0a 09 65 78 70 6f 72 74 73 2e 74 6f 42 79 74 65 41 72 72 61 79 Data Ascii: temp = (uint8[uint8.length - 2] << 8) + (uint8[uint8.length - 1])output += encode(temp >> 10)output += encode((temp >> 4) & 0x3F)output += encode((temp << 2) & 0x3F)output += '='break}return output}exports.toByteArray
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 70 6f 72 74 20 66 6f 72 20 61 64 64 69 6e 67 20 6e 65 77 20 70 72 6f 70 65 72 74 69 65 73 20 74 6f 20 60 55 69 6e 74 38 41 72 72 61 79 60 20 69 6e 73 74 61 6e 63 65 73 2c 0a 20 2a 20 20 20 20 20 53 65 65 3a 20 68 74 74 70 73 3a 2f 2f 62 75 67 7a 69 6c 6c 61 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 36 39 35 34 33 38 2e 0a 20 2a 0a 20 2a 20 20 20 2d 20 53 61 66 61 72 69 20 35 2d 37 20 6c 61 63 6b 73 20 73 75 70 70 6f 72 74 20 66 6f 72 20 63 68 61 6e 67 69 6e 67 20 74 68 65 20 60 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 60 20 70 72 6f 70 65 72 74 79 0a 20 2a 20 20 20 20 20 6f 6e 20 6f 62 6a 65 63 74 73 2e 0a 20 2a 0a 20 2a 20 20 20 2d 20 43 68 72 6f 6d 65 20 39 2d 31 30 Data Ascii: port for adding new properties to `Uint8Array` instances, * See: https://bugzilla.mozilla.org/show_bug.cgi?id=695438. * * - Safari 5-7 lacks support for changing the `Object.prototype.constructor` property * on objects. * * - Chrome 9-10
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 20 54 68 65 20 42 75 66 66 65 72 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 72 65 74 75 72 6e 73 20 69 6e 73 74 61 6e 63 65 73 20 6f 66 20 60 55 69 6e 74 38 41 72 72 61 79 60 20 74 68 61 74 20 61 72 65 20 61 75 67 6d 65 6e 74 65 64 0a 20 2a 20 77 69 74 68 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 70 65 72 74 69 65 73 20 66 6f 72 20 61 6c 6c 20 74 68 65 20 6e 6f 64 65 20 60 42 75 66 66 65 72 60 20 41 50 49 20 66 75 6e 63 74 69 6f 6e 73 2e 20 57 65 20 75 73 65 0a 20 2a 20 60 55 69 6e 74 38 41 72 72 61 79 60 20 73 6f 20 74 68 61 74 20 73 71 75 61 72 65 20 62 72 61 63 6b 65 74 20 6e 6f 74 61 74 69 6f 6e 20 77 6f 72 6b 73 20 61 73 20 65 78 70 65 63 74 65 64 20 2d 2d 20 69 74 20 72 65 74 75 72 6e 73 0a 20 2a 20 61 20 73 69 6e 67 6c 65 20 6f 63 74 65 74 2e 0a 20 2a 0a Data Ascii: The Buffer constructor returns instances of `Uint8Array` that are augmented * with function properties for all the node `Buffer` API functions. We use * `Uint8Array` so that square bracket notation works as expected -- it returns * a single octet. *
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 20 6c 65 6e 67 74 68 20 3d 20 62 79 74 65 4c 65 6e 67 74 68 28 73 74 72 69 6e 67 2c 20 65 6e 63 6f 64 69 6e 67 29 20 7c 20 30 0a 20 20 74 68 61 74 20 3d 20 61 6c 6c 6f 63 61 74 65 28 74 68 61 74 2c 20 6c 65 6e 67 74 68 29 0a 0a 20 20 74 68 61 74 2e 77 72 69 74 65 28 73 74 72 69 6e 67 2c 20 65 6e 63 6f 64 69 6e 67 29 0a 20 20 72 65 74 75 72 6e 20 74 68 61 74 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 72 6f 6d 4f 62 6a 65 63 74 20 28 74 68 61 74 2c 20 6f 62 6a 65 63 74 29 20 7b 0a 20 20 69 66 20 28 42 75 66 66 65 72 2e 69 73 42 75 66 66 65 72 28 6f 62 6a 65 63 74 29 29 20 72 65 74 75 72 6e 20 66 72 6f 6d 42 75 66 66 65 72 28 74 68 61 74 2c 20 6f 62 6a 65 63 74 29 0a 0a 20 20 69 66 20 28 69 73 41 72 72 61 79 28 6f 62 6a 65 63 74 29 29 20 72 65 74 75 72 6e 20 Data Ascii: length = byteLength(string, encoding) \| 0 that = allocate(that, length) that.write(string, encoding) return that}function fromObject (that, object) { if (Buffer.isBuffer(object)) return fromBuffer(that, object) if (isArray(object)) return
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 69 74 27 73 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 74 68 65 20 62 65 68 61 76 69 6f 72 0a 20 20 2f 2f 20 6f 66 20 74 68 65 20 6f 6c 64 20 42 75 66 66 65 72 20 63 6f 6e 73 74 72 75 63 74 6f 72 2e 0a 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 20 2b 3d 20 31 29 20 7b 0a 20 20 20 20 74 68 61 74 5b 69 5d 20 3d 20 61 72 72 61 79 5b 69 5d 20 26 20 32 35 35 0a 20 20 7d 0a 20 20 72 65 74 75 72 6e 20 74 68 61 74 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 66 72 6f 6d 41 72 72 61 79 42 75 66 66 65 72 20 28 74 68 61 74 2c 20 61 72 72 61 79 29 20 7b 0a 20 20 69 66 20 28 42 75 66 66 65 72 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 20 7b 0a 20 20 20 20 2f 2f 20 52 65 74 75 72 6e 20 61 6e 20 61 Data Ascii: it's compatible with the behavior // of the old Buffer constructor. for (var i = 0; i < length; i += 1) { that[i] = array[i] & 255 } return that}function fromArrayBuffer (that, array) { if (Buffer.TYPED_ARRAY_SUPPORT) { // Return an a
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 74 68 65 20 66 75 74 75 72 65 0a 20 20 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 65 6e 67 74 68 20 3d 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 72 65 6e 74 20 3d 20 75 6e 64 65 66 69 6e 65 64 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 61 6c 6c 6f 63 61 74 65 20 28 74 68 61 74 2c 20 6c 65 6e 67 74 68 29 20 7b 0a 20 20 69 66 20 28 42 75 66 66 65 72 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 20 7b 0a 20 20 20 20 2f 2f 20 52 65 74 75 72 6e 20 61 6e 20 61 75 67 6d 65 6e 74 65 64 20 60 55 69 6e 74 38 41 72 72 61 79 60 20 69 6e 73 74 61 6e 63 65 2c 20 66 6f 72 20 62 65 73 74 20 70 65 72 66 6f 72 6d 61 6e 63 65 0a 20 20 20 20 74 68 61 74 20 3d 20 42 75 66 66 65 72 2e 5f 61 75 67 6d Data Ascii: the future Buffer.prototype.length = undefined Buffer.prototype.parent = undefined}function allocate (that, length) { if (Buffer.TYPED_ARRAY_SUPPORT) { // Return an augmented `Uint8Array` instance, for best performance that = Buffer._augm
2024-05-23 13:50:33 UTC	1369	IN	Data Raw: 65 72 73 27 29 0a 20 20 7d 0a 0a 20 20 69 66 20 28 61 20 3d 3d 3d 20 62 29 20 72 65 74 75 72 6e 20 30 0a 0a 20 20 76 61 72 20 78 20 3d 20 61 2e 6c 65 6e 67 74 68 0a 20 20 76 61 72 20 79 20 3d 20 62 2e 6c 65 6e 67 74 68 0a 0a 20 20 76 61 72 20 69 20 3d 20 30 0a 20 20 76 61 72 20 6c 65 6e 20 3d 20 4d 61 74 68 2e 6d 69 6e 28 78 2c 20 79 29 0a 20 20 77 68 69 6c 65 20 28 69 20 3c 20 6c 65 6e 29 20 7b 0a 20 20 20 20 69 66 20 28 61 5b 69 5d 20 21 3d 3d 20 62 5b 69 5d 29 20 62 72 65 61 6b 0a 0a 20 20 20 20 2b 2b 69 0a 20 20 7d 0a 0a 20 20 69 66 20 28 69 20 21 3d 3d 20 6c 65 6e 29 20 7b 0a 20 20 20 20 78 20 3d 20 61 5b 69 5d 0a 20 20 20 20 79 20 3d 20 62 5b 69 5d 0a 20 20 7d 0a 0a 20 20 69 66 20 28 78 20 3c 20 79 29 20 72 65 74 75 72 6e 20 2d 31 0a 20 20 69 66 20 Data Ascii: ers') } if (a === b) return 0 var x = a.length var y = b.length var i = 0 var len = Math.min(x, y) while (i < len) { if (a[i] !== b[i]) break ++i } if (i !== len) { x = a[i] y = b[i] } if (x < y) return -1 if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49788	34.149.2.41	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:44 UTC	539	OUT	GET /widget/concured-shim.js HTTP/1.1 Host: cdn.concured.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:44 UTC	705	IN	HTTP/1.1 200 OK x-goog-generation: 1689780305711616 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 34948 x-goog-hash: crc32c=YICSgg== x-goog-hash: md5=O/lLJQO1m1hFNC2X7liv1w== x-goog-storage-class: STANDARD Accept-Ranges: bytes X-GUploader-UploadID: ABPtcPqyBcKUpWmn8_agBbYPYgu2incqza8cGl4Ho9A3CUqBivIJw4x1wesv_dno98leUCA2dzE Server: UploadServer Date: Thu, 23 May 2024 13:50:44 GMT Last-Modified: Wed, 19 Jul 2023 15:25:05 GMT ETag: "3bf94b2503b59b5845342d97ee58afd7" Content-Type: text/javascript Content-Length: 34948 Age: 0 Cache-Control: public,max-age=0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:44 UTC	685	IN	Data Raw: 2f 2f 20 53 65 74 20 74 68 65 20 63 6f 6e 63 75 72 65 64 20 6e 61 6d 65 73 70 61 63 65 0a 77 69 6e 64 6f 77 2e 63 6f 6e 63 75 72 65 64 20 3d 20 77 69 6e 64 6f 77 2e 63 6f 6e 63 75 72 65 64 20 7c 7c 20 7b 7d 3b 0a 0a 2f 2f 20 43 6f 6e 63 75 72 65 64 20 43 6f 6e 66 69 67 0a 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 20 3d 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 6c 65 74 20 63 6f 6e 66 69 67 20 3d 20 6e 75 6c 6c 3b 0a 20 20 74 72 79 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 63 6f 6e 66 69 67 55 72 6c 20 3d 20 60 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 63 6f 6e 63 75 72 65 64 2e 63 6f 6d 2f 73 63 72 69 70 74 2f 63 6f 6e 66 69 67 2f 24 7b 63 6f 6e 63 75 72 65 64 2e 6e 61 6d 65 20 3f 20 60 24 7b 63 6f 6e 63 75 72 65 64 2e 6e 61 Data Ascii: // Set the concured namespacewindow.concured = window.concured \|\| {};// Concured Configconcured.config = async function () { let config = null; try { const configUrl = `https://assets.concured.com/script/config/${concured.name ? `${concured.na
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 20 7d 3b 0a 2f 2f 20 47 6f 6f 67 6c 65 20 41 6e 61 6c 79 74 69 63 73 20 54 65 6c 65 6d 65 74 72 79 0a 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 77 69 6e 64 6f 77 2e 67 74 61 67 20 3d 20 77 69 6e 64 6f 77 2e 67 74 61 67 0a 20 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 20 7b 20 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 20 7d 3b 0a 2f 2f 20 42 65 61 63 6f 6e 20 54 65 6c 65 6d 65 74 72 79 0a 77 69 6e 64 6f 77 2e 62 65 61 63 6f 6e 20 3d 20 77 69 6e 64 6f 77 2e 62 65 61 63 6f 6e 20 7c 7c 20 7b 7d 3b 0a 2f 2f 20 43 6f 6e 63 75 72 65 64 20 54 65 6c 65 6d 65 74 72 79 0a 63 6f Data Ascii: ).push(arguments); };// Google Analytics Telemetrywindow.dataLayer = window.dataLayer \|\| [];window.gtag = window.gtag \|\| function gtag() { dataLayer.push(arguments); };// Beacon Telemetrywindow.beacon = window.beacon \|\| {};// Concured Telemetryco
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 63 6f 6e 66 69 67 2e 62 65 61 63 6f 6e 5f 61 6e 61 6c 79 74 69 63 73 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 63 75 72 65 64 2e 62 65 61 63 6f 6e 28 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 72 72 6f 72 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 20 20 7d 2c 0a 7d 3b 0a 0a 63 6f 6e 63 75 72 65 64 2e 62 65 61 63 6f 6e 20 3d 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 65 61 63 6f 6e 28 29 20 7b 0a 20 20 20 20 62 65 61 63 6f 6e 2e 76 69 73 69 74 5f 69 64 20 3d 20 77 69 6e 64 6f 77 2e 63 72 Data Ascii: config.beacon_analytics) { concured.beacon(); } return true; } catch (error) { console.log(error); } return true; },};concured.beacon = async function () { function setBeacon() { beacon.visit_id = window.cr
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 53 74 61 74 65 20 3d 3d 3d 20 27 76 69 73 69 62 6c 65 27 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 72 65 76 69 6f 75 73 56 69 73 69 74 20 3d 20 62 65 61 63 6f 6e 2e 76 69 73 69 74 5f 69 64 3b 0a 20 20 20 20 20 20 20 20 73 65 74 42 65 61 63 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 62 65 61 63 6f 6e 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 7b 0a 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 5f 74 79 70 65 3a 20 27 64 6f 63 75 6d 65 6e 74 5f 76 69 73 69 62 6c 65 27 2c 0a 20 20 20 20 20 20 20 20 20 20 70 72 65 76 69 6f 75 73 5f 76 69 73 69 74 5f 69 64 3a 20 70 72 65 76 69 6f 75 73 56 69 73 69 74 2c 0a 20 20 20 20 20 20 20 20 20 20 74 69 6d 65 73 74 61 6d 70 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 2c 0a 20 20 Data Ascii: State === 'visible') { const previousVisit = beacon.visit_id; setBeacon(); beacon.events.push({ event_type: 'document_visible', previous_visit_id: previousVisit, timestamp: new Date().toISOString(),
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 3d 24 7b 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 5f 75 74 6d 3f 2e 75 74 6d 5f 63 61 6d 70 61 69 67 6e 7d 24 7b 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 5f 75 74 6d 3f 2e 75 74 6d 5f 63 6f 6e 74 65 6e 74 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 20 20 20 20 20 20 3f 20 60 26 75 74 6d 5f 63 6f 6e 74 65 6e 74 3d 24 7b 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 5f 75 74 6d 3f 2e 75 74 6d 5f 63 6f 6e 74 65 6e 74 7d 60 0a 20 20 20 20 20 20 20 20 3a 20 27 27 7d 60 0a 20 20 20 20 20 20 3a 20 27 27 7d 60 0a 20 20 20 20 3a 20 27 27 7d 60 0a 20 20 3a 20 27 27 7d 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 69 63 74 75 Data Ascii: =${concured.config.recommendation_utm?.utm_campaign}${concured.config.recommendation_utm?.utm_content !== undefined ? `&utm_content=${concured.config.recommendation_utm?.utm_content}` : ''}` : ''}` : ''}` : ''}"> <pictu
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 63 75 72 65 64 2d 62 61 72 27 29 3b 0a 20 20 20 20 62 61 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 63 75 72 65 64 2d 62 61 72 2d 63 74 61 27 29 3b 0a 20 20 20 20 69 66 20 28 63 6f 6e 63 75 72 65 64 2e 73 74 6f 72 61 67 65 2e 67 65 74 28 27 63 6f 6e 63 75 72 65 64 2e 62 61 72 2d 74 6f 67 67 6c 65 27 29 29 20 7b 0a 20 20 20 20 20 20 62 61 72 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6c 6f 73 65 64 27 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 63 6f 6e 73 74 20 63 6f 6e 74 65 6e 74 20 3d 20 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 63 75 72 65 64 2d 62 61 72 2d 68 65 61 64 65 72 20 63 6f 6e 63 75 72 65 64 2d 62 61 72 2d 74 6f 67 67 6c 65 22 20 72 6f 6c 65 3d 22 6c 69 6e 6b 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 0a 20 20 20 Data Ascii: cured-bar'); bar.classList.add('concured-bar-cta'); if (concured.storage.get('concured.bar-toggle')) { bar.classList.add('closed'); } const content = `<div class="concured-bar-header concured-bar-toggle" role="link" tabindex="0">
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 3e 60 0a 20 20 20 20 3a 20 60 3c 69 6d 67 20 73 72 63 3d 22 24 7b 63 6f 6e 66 69 67 2e 62 61 72 2e 66 61 6c 6c 62 61 63 6b 5f 69 6d 61 67 65 5b 69 6e 64 65 78 5d 7d 22 20 61 6c 74 3d 22 22 20 2f 3e 60 7d 0a 20 20 20 20 20 20 20 20 3c 2f 70 69 63 74 75 72 65 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 63 75 72 65 64 2d 61 72 74 69 63 6c 65 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 33 3e 24 7b 69 6e 66 6f 2e 74 69 74 6c 65 7d 3c 2f 68 33 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 61 72 74 69 63 6c 65 3e 60 29 2e 6a 6f 69 6e 28 27 27 29 7d 0a 20 20 20 20 20 20 3c 61 72 74 69 63 6c 65 20 63 6c 61 73 73 3d 22 63 6f 6e 63 75 72 65 64 2d 62 61 72 2d 61 72 74 69 63 6c 65 22 Data Ascii: >` : `<img src="${config.bar.fallback_image[index]}" alt="" />`} </picture> <div class="concured-article-title"> <h3>${info.title}</h3> </div> </a></article>`).join('')} <article class="concured-bar-article"
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 62 61 72 3b 0a 20 20 7d 2c 0a 20 20 62 6f 78 28 64 61 74 61 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 62 6f 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 64 69 76 27 29 3b 0a 20 20 20 20 62 6f 78 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 63 6f 6e 63 75 72 65 64 2d 62 6f 78 27 29 3b 0a 20 20 20 20 63 6f 6e 73 74 20 63 6f 6e 74 65 6e 74 20 3d 20 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 63 75 72 65 64 2d 62 6f 78 2d 68 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 63 75 72 65 64 2d 62 6f 78 2d 68 65 61 64 65 72 2d 77 72 61 70 70 65 72 22 3e 20 0a 20 20 20 20 20 20 20 20 3c 68 32 3e 24 7b Data Ascii: ontent; return bar; }, box(data, config) { const box = document.createElement('div'); box.classList.add('concured-box'); const content = `<div class="concured-box-header"> <div class="concured-box-header-wrapper"> <h2>${
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 63 75 72 65 64 2d 61 72 74 69 63 6c 65 2d 74 69 74 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 68 33 3e 24 7b 69 6e 66 6f 2e 74 69 74 6c 65 7d 3c 2f 68 33 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 61 3e 3c 2f 61 72 74 69 63 6c 65 3e 60 29 2e 6a 6f 69 6e 28 27 27 29 7d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 60 3b 0a 20 20 20 20 62 6f 78 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 63 6f 6e 74 65 6e 74 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 62 6f 78 3b 0a 20 20 7d 2c 0a 20 20 62 6f 78 43 74 61 28 64 61 74 61 2c 20 63 6f 6e 66 69 67 29 20 7b 0a 20 20 20 20 63 6f 6e 73 74 20 65 6c 65 6d 65 Data Ascii: <div class="concured-article-title"> <h3>${info.title}</h3> </div> </a></article>`).join('')} </div> </div> </div>`; box.innerHTML = content; return box; }, boxCta(data, config) { const eleme
2024-05-23 13:50:44 UTC	1390	IN	Data Raw: 74 69 6f 6e 5f 75 74 6d 2e 75 74 6d 5f 73 6f 75 72 63 65 7d 24 7b 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 5f 75 74 6d 3f 2e 75 74 6d 5f 6d 65 64 69 75 6d 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 20 20 3f 20 60 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 24 7b 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 5f 75 74 6d 2e 75 74 6d 5f 6d 65 64 69 75 6d 7d 24 7b 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 2e 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 5f 75 74 6d 3f 2e 75 74 6d 5f 63 61 6d 70 61 69 67 6e 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 0a 20 20 20 20 20 20 3f 20 60 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 24 7b 63 6f 6e 63 75 72 65 64 2e 63 6f 6e 66 69 67 Data Ascii: tion_utm.utm_source}${concured.config.recommendation_utm?.utm_medium !== undefined ? `&utm_medium=${concured.config.recommendation_utm.utm_medium}${concured.config.recommendation_utm?.utm_campaign !== undefined ? `&utm_campaign=${concured.config

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49789	146.75.120.157	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:45 UTC	530	OUT	GET /widgets.js HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:45 UTC	615	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93065 Last-Modified: Mon, 11 Dec 2023 17:20:28 GMT ETag: "824beb891744db98ccbd3a456e59e0f7" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=1800 Content-Type: application/javascript; charset=utf-8 Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Accept-Ranges: bytes Date: Thu, 23 May 2024 13:50:45 GMT X-Served-By: cache-iad-kjyo7100044-IAD, cache-fra-etou8220087-FRA X-Cache: HIT, HIT Vary: Accept-Encoding TW-CDN: FT
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 28 2f 28 4d 53 49 45 20 28 5b 36 37 38 39 5d 7c 31 30 7c 31 31 29 29 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 28 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 2e 77 69 64 67 65 74 73 26 26 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 65 64 26 26 77 69 6e 64 6f 77 2e 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 26 26 77 69 6e 64 6f 77 2e 74 77 74 74 72 2e 77 69 64 67 65 74 73 2e 6c 6f 61 64 28 29 2c 77 69 6e 64 6f 77 2e 5f 5f 74 77 74 74 Data Ascii: Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|(window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.loaded&&window.twttr.widgets.load&&window.twttr.widgets.load(),window.__twtt
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 74 5d 3b 69 66 28 30 21 3d 3d 6e 29 7b 69 66 28 6e 29 7b 76 61 72 20 69 3d 65 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 65 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 65 2e 74 79 70 65 29 2c 6f 3d 65 26 26 65 2e 74 61 72 67 65 74 26 26 65 2e 74 61 72 67 65 74 2e 73 72 63 2c 73 3d 6e 65 77 20 45 72 72 6f 72 28 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 74 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 69 2b 22 3a 20 22 2b 6f 2b 22 29 22 29 3b 73 2e 74 79 70 65 3d 69 2c 73 2e 72 65 71 75 65 73 74 3d 6f 2c 6e 5b 31 5d 28 73 29 7d 72 5b 74 5d 3d 76 6f 69 64 20 30 7d 7d 3b 76 61 72 20 63 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 28 7b 74 79 70 65 3a 22 74 69 6d 65 6f 75 74 22 2c 74 61 72 67 65 74 3a 75 7d 29 7d 2c 31 32 65 34 Data Ascii: t];if(0!==n){if(n){var i=e&&("load"===e.type?"missing":e.type),o=e&&e.target&&e.target.src,s=new Error("Loading chunk "+t+" failed.\n("+i+": "+o+")");s.type=i,s.request=o,n[1](s)}r[t]=void 0}};var c=setTimeout(function(){s({type:"timeout",target:u})},12e4
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 5d 29 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 6d 61 74 63 68 28 2f 5c 73 28 5b 61 2d 7a 41 2d 5a 5d 2b 29 2f 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 4f 62 6a 65 63 74 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 76 61 72 20 65 3b 69 66 28 21 73 28 74 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 4f 62 6a 65 63 74 2e 6b 65 79 73 29 72 65 74 75 72 6e 21 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 65 20 69 6e 20 74 29 69 66 28 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 72 65 74 75 72 6e 21 31 3b 72 65 74 Data Ascii: ]);return t}function o(t){return{}.toString.call(t).match(/\s([a-zA-Z]+)/)[1].toLowerCase()}function s(t){return t===Object(t)}function a(t){var e;if(!s(t))return!1;if(Object.keys)return!Object.keys(t).length;for(e in t)if(t.hasOwnProperty(e))return!1;ret
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 29 3f 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 28 5c 77 2b 29 5c 2f 28 3f 3a 6c 69 6b 65 73 7c 66 61 76 6f 72 69 74 65 73 29 2f 69 2c 68 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 28 5c 77 2b 29 5c 2f 6c 69 73 74 73 5c 2f 28 5b 5c 77 2d 25 5d 2b 29 2f 69 2c 70 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 3f 3a 77 77 77 5c 2e 29 3f 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 69 5c 2f 6c 69 76 65 5c 2f 28 5c 64 2b 29 2f 69 2c 6d 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 74 77 69 74 74 65 72 5c 2e 63 6f 6d 5c 2f 73 65 74 74 69 6e 67 73 2f 69 2c 76 3d 2f 5e 68 74 74 70 73 3f 3a 5c 2f 5c 2f 28 6c 6f 63 61 6c 68 6f 73 74 7c 70 6c 61 74 66 6f 72 6d 29 5c Data Ascii: )?twitter\.com\/(\w+)\/(?:likes\|favorites)/i,h=/^https?:\/\/(?:www\.)?twitter\.com\/(\w+)\/lists\/([\w-%]+)/i,p=/^https?:\/\/(?:www\.)?twitter\.com\/i\/live\/(\d+)/i,m=/^https?:\/\/syndication\.twitter\.com\/settings/i,v=/^https?:\/\/(localhost\|platform)\
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 7b 72 65 74 75 72 6e 20 63 2e 74 65 73 74 28 74 29 26 26 52 65 67 45 78 70 2e 24 31 7d 2c 6c 69 6b 65 73 53 63 72 65 65 6e 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6c 2e 74 65 73 74 28 74 29 26 26 52 65 67 45 78 70 2e 24 31 7d 2c 6c 69 73 74 53 63 72 65 65 6e 4e 61 6d 65 41 6e 64 53 6c 75 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 6e 2c 72 3b 69 66 28 68 2e 74 65 73 74 28 74 29 29 7b 65 3d 52 65 67 45 78 70 2e 24 31 2c 6e 3d 52 65 67 45 78 70 2e 24 32 3b 74 72 79 7b 72 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 7b 6f 77 6e 65 72 53 63 72 65 65 6e 4e 61 6d 65 3a 65 2c 73 6c 75 67 3a 72 7c 7c 6e 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 65 76 Data Ascii: {return c.test(t)&&RegExp.$1},likesScreenName:function(t){return l.test(t)&&RegExp.$1},listScreenNameAndSlug:function(t){var e,n,r;if(h.test(t)){e=RegExp.$1,n=RegExp.$2;try{r=decodeURIComponent(n)}catch(t){}return{ownerScreenName:e,slug:r\|\|n}}return!1},ev
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 32 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 72 2e 74 6f 52 65 61 6c 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 65 2c 6e 2e 63 6f 6e 63 61 74 28 69 29 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 6c 6f 63 61 74 69 6f 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 72 28 22 5f 5f 74 77 74 74 72 22 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 30 29 2c 69 3d 2f 5c 62 28 5b 5c 77 2d 5f 5d 2b 29 5c 62 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 22 5c Data Ascii: 2);return function(){var i=r.toRealArray(arguments);return t.apply(e,n.concat(i))}}},function(t,e){t.exports=location},function(t,e,n){var r=n(47);t.exports=new r("__twttr")},function(t,e,n){var r=n(0),i=/\b([\w-_]+)\b/g;function o(t){return new RegExp("\
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 30 39 29 2c 69 3d 6e 28 32 31 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 64 61 74 61 2d 74 77 69 74 74 65 72 2d 65 78 74 72 61 63 74 65 64 2d 22 2b 69 2e 67 65 6e 65 72 61 74 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 72 28 65 2c 6e 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 74 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 22 74 72 75 65 22 29 2c 65 7d 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 Data Ascii: ction(t,e,n){var r=n(109),i=n(21);t.exports=function(){var t="data-twitter-extracted-"+i.generate();return function(e,n){return r(e,n).filter(function(e){return!e.hasAttribute(t)}).map(function(e){return e.setAttribute(t,"true"),e})}}},function(t,e){funct
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 29 2c 61 2e 61 73 42 6f 6f 6c 65 61 6e 28 66 2e 64 6e 74 29 26 26 69 2e 73 65 74 4f 6e 28 29 2c 68 3d 73 2e 67 65 74 45 78 70 65 72 69 6d 65 6e 74 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 2e 61 64 64 57 69 64 67 65 74 28 6e 28 66 2c 6c 2c 76 6f 69 64 20 30 2c 74 29 29 7d 29 2c 64 26 26 68 2e 74 68 65 6e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 21 31 29 7d 29 2c 68 29 3a 28 64 26 26 75 2e 61 73 79 6e 63 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 21 31 29 7d 29 2c 72 2e 72 65 6a 65 63 74 28 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 74 61 72 67 65 74 20 65 6c 65 6d 65 6e 74 20 73 70 65 63 69 66 69 65 64 2e 20 45 78 70 65 63 74 65 64 3a 20 22 2b 63 29 29 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c Data Ascii: ),a.asBoolean(f.dnt)&&i.setOn(),h=s.getExperiments().then(function(t){return o.addWidget(n(f,l,void 0,t))}),d&&h.then(d,function(){d(!1)}),h):(d&&u.async(function(){d(!1)}),r.reject(new Error("No target element specified. Expected: "+c)))}}},function(t,e,
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 6e 22 2c 74 29 26 26 28 6e 3d 65 2c 65 3d 74 2c 74 3d 31 29 2c 72 2e 64 65 66 65 72 28 74 2c 73 28 65 2c 61 29 2c 6e 29 2c 61 2e 70 72 6f 6d 69 73 65 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 29 2c 69 3d 6e 28 31 29 2c 6f 3d 6e 28 30 29 2c 73 3d 7b 7d 2c 61 3d 6f 2e 63 6f 6e 74 61 69 6e 73 28 72 2e 68 72 65 66 2c 22 74 77 5f 64 65 62 75 67 3d 74 72 75 65 22 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 69 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 2b 69 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 7c 7c 2b 6e 65 77 20 44 61 74 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 69 66 28 69 2e 63 6f Data Ascii: n",t)&&(n=e,e=t,t=1),r.defer(t,s(e,a),n),a.promise}}},function(t,e,n){var r=n(8),i=n(1),o=n(0),s={},a=o.contains(r.href,"tw_debug=true");function u(){}function c(){}function d(){return i.performance&&+i.performance.now()\|\|+new Date}function f(t,e){if(i.co
2024-05-23 13:50:45 UTC	1379	IN	Data Raw: 72 65 74 69 6e 61 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 3d 74 7c 7c 6f 29 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3f 74 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3e 3d 31 2e 35 3a 21 21 74 2e 6d 61 74 63 68 4d 65 64 69 61 26 26 74 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 34 34 64 70 69 29 22 29 2e 6d 61 74 63 68 65 73 7d 2c 61 6e 79 49 45 3a 75 2c 69 65 39 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2f 4d 53 49 45 20 39 2f 2e 74 65 73 74 28 74 3d 74 7c 7c 61 29 7d 2c 69 65 31 30 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2f 4d 53 49 45 20 31 30 2f 2e 74 65 73 74 28 74 3d 74 7c 7c 61 29 Data Ascii: retina:function(t){return(t=t\|\|o).devicePixelRatio?t.devicePixelRatio>=1.5:!!t.matchMedia&&t.matchMedia("only screen and (min-resolution: 144dpi)").matches},anyIE:u,ie9:function(t){return/MSIE 9/.test(t=t\|\|a)},ie10:function(t){return/MSIE 10/.test(t=t\|\|a)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49795	34.120.111.58	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:45 UTC	598	OUT	GET /script/config/spglobal/19bf0a5e.json HTTP/1.1 Host: assets.concured.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:45 UTC	590	IN	HTTP/1.1 404 Not Found Content-Type: application/xml; charset=UTF-8 Content-Length: 127 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Cache-Control, Content-Length, Content-Type, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: ABPtcPpVPQpSX2TSc2lI0VuLPCl7SIzllYxq8kLUXPvPGw0Wq_wjR3m4vs_lo8B0vJ3DHyRuEj0 Date: Thu, 23 May 2024 13:50:45 GMT Expires: Thu, 23 May 2024 13:50:45 GMT Cache-Control: private, max-age=0 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:45 UTC	127	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49793	152.199.22.144	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:45 UTC	526	OUT	GET /in.js HTTP/1.1 Host: platform.linkedin.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:46 UTC	576	IN	HTTP/1.1 200 OK Age: 1451 Cache-Control: public, max-age=3600 Content-Type: text/javascript; charset=UTF-8 Date: Thu, 23 May 2024 13:50:46 GMT Expires: Thu, 23 May 2024 14:26:35 GMT Last-Modified: Thu, 23 May 2024 13:26:36 GMT Server: ECAcc (lhd/35B8) Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-Li-Source-Fabric: prod-lva1 X-LI-UUID: AAYZHwAN1bfVzjcBsIq6/g== Content-Length: 522702 Connection: close
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 2f 2a 20 78 64 6f 6f 72 2d 66 72 6f 6e 74 65 6e 64 3a 20 76 30 2e 32 2e 31 38 33 20 28 4d 6f 6e 2c 20 32 30 20 4d 61 79 20 32 30 32 34 20 31 39 3a 35 30 3a 35 35 20 47 4d 54 29 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 76 61 72 20 50 41 59 4c 4f 41 44 20 3d 20 7b 22 45 4e 56 22 3a 7b 22 77 69 64 67 65 74 22 3a 7b 22 61 6c 75 6d 6e 69 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 77 73 2f 61 6c 75 6d 6e 69 22 2c 22 66 6f 6c 6c 6f 77 6d 65 6d 62 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 77 73 2f 66 6f 6c 6c 6f 77 6d 65 6d 62 65 72 22 2c 22 73 65 74 74 69 6e 67 73 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e Data Ascii: /* xdoor-frontend: v0.2.183 (Mon, 20 May 2024 19:50:55 GMT) */(function() {var PAYLOAD = {"ENV":{"widget":{"alumni_url":"https://www.linkedin.com/cws/alumni","followmember_url":"https://www.linkedin.com/cws/followmember","settings_url":"https://www.lin
2024-05-23 13:50:46 UTC	1	IN	Data Raw: 22 Data Ascii: "
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 61 72 74 69 63 6c 65 22 2c 22 61 73 69 64 65 22 2c 22 61 75 64 69 6f 22 2c 22 62 64 69 22 2c 22 62 64 6f 22 2c 22 62 69 67 22 2c 22 62 6c 6f 63 6b 71 75 6f 74 65 22 2c 22 62 72 22 2c 22 62 75 74 74 6f 6e 22 2c 22 63 65 6e 74 65 72 22 2c 22 63 69 74 65 22 2c 22 63 6f 64 65 22 2c 22 64 61 74 61 6c 69 73 74 22 2c 22 64 64 22 2c 22 64 65 74 61 69 6c 73 22 2c 22 64 66 6e 22 2c 22 64 69 76 22 2c 22 64 6c 22 2c 22 64 74 22 2c 22 66 69 65 6c 64 73 65 74 22 2c 22 66 69 67 63 61 70 74 69 6f 6e 22 2c 22 66 69 67 75 72 65 22 2c 22 66 6f 6e 74 22 2c 22 66 6f 6f 74 65 72 22 2c 22 68 31 22 2c 22 68 32 22 2c 22 68 33 22 2c 22 68 34 22 2c 22 68 35 22 2c 22 68 36 22 2c 22 68 65 61 64 65 72 22 2c 22 68 67 72 6f 75 70 22 2c 22 68 72 22 2c 22 69 6d 67 22 2c 22 69 6e 73 22 2c Data Ascii: article","aside","audio","bdi","bdo","big","blockquote","br","button","center","cite","code","datalist","dd","details","dfn","div","dl","dt","fieldset","figcaption","figure","font","footer","h1","h2","h3","h4","h5","h6","header","hgroup","hr","img","ins",
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 3a 63 61 73 65 22 62 61 73 65 36 34 22 3a 63 61 73 65 22 75 63 73 32 22 3a 63 61 73 65 22 75 63 73 2d 32 22 3a 63 61 73 65 22 75 74 66 31 36 6c 65 22 3a 63 61 73 65 22 75 74 66 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 21 30 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 2c 66 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 6f 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 6c 69 73 74 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 6e 20 41 72 72 61 79 20 6f 66 20 42 75 66 66 65 72 73 27 29 3b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 66 2e 61 6c 6c 6f 63 28 30 29 3b 76 61 72 20 Data Ascii: ase"latin1":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}},f.concat=function(e,t){if(!o(e))throw new TypeError('"list" argument must be an Array of Buffers');if(0===e.length)return f.alloc(0);var
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 5f 70 61 72 73 65 42 61 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 74 68 69 73 2e 77 6f 72 64 73 3d 5b 30 5d 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 69 3d 31 3b 69 3c 3d 36 37 31 30 38 38 36 33 3b 69 2a 3d 74 29 6e 2b 2b 3b 6e 2d 2d 2c 69 3d 69 2f 74 7c 30 3b 66 6f 72 28 76 61 72 20 6f 3d 65 2e 6c 65 6e 67 74 68 2d 72 2c 61 3d 6f 25 6e 2c 73 3d 4d 61 74 68 2e 6d 69 6e 28 6f 2c 6f 2d 61 29 2b 72 2c 63 3d 30 2c 75 3d 72 3b 75 3c 73 3b 75 2b 3d 6e 29 63 3d 66 28 65 2c 75 2c 75 2b 6e 2c 74 29 2c 74 68 69 73 2e 69 6d 75 6c 6e 28 69 29 2c 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 2b 63 3c 36 37 31 30 38 38 36 34 3f 74 68 69 73 2e 77 6f 72 64 73 5b 30 5d 2b 3d 63 3a 74 68 69 73 2e Data Ascii: prototype._parseBase=function(e,t,r){this.words=[0],this.length=1;for(var n=0,i=1;i<=67108863;i*=t)n++;n--,i=i/t\|0;for(var o=e.length-r,a=o%n,s=Math.min(o,o-a)+r,c=0,u=r;u<s;u+=n)c=f(e,u,u+n,t),this.imuln(i),this.words[0]+c<67108864?this.words[0]+=c:this.
2024-05-23 13:50:46 UTC	3	IN	Data Raw: 74 68 2e Data Ascii: th.
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 69 6d 75 6c 28 43 2c 6f 65 29 7c 30 2c 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 43 2c 61 65 29 7c 30 2c 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 41 2c 66 65 29 7c 30 2c 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 41 2c 63 65 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 4d 2c 66 65 29 7c 30 2c 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 4d 2c 63 65 29 7c 30 2c 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 64 65 29 7c 30 2c 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 68 65 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 78 2c 64 65 29 7c 30 2c 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 78 2c 68 65 29 7c 30 3b 76 61 72 20 49 65 3d 28 63 2b 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 77 2c 70 65 29 7c 30 29 7c 30 29 2b 28 28 38 31 39 31 26 Data Ascii: imul(C,oe)\|0,o=o+Math.imul(C,ae)\|0,n=n+Math.imul(A,fe)\|0,i=(i=i+Math.imul(A,ce)\|0)+Math.imul(M,fe)\|0,o=o+Math.imul(M,ce)\|0,n=n+Math.imul(k,de)\|0,i=(i=i+Math.imul(k,he)\|0)+Math.imul(x,de)\|0,o=o+Math.imul(x,he)\|0;var Ie=(c+(n=n+Math.imul(w,pe)\|0)\|0)+((8191&
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 72 65 64 53 75 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2e 72 65 64 2c 22 72 65 64 53 75 62 20 77 6f 72 6b 73 20 6f 6e 6c 79 20 77 69 74 68 20 72 65 64 20 6e 75 6d 62 65 72 73 22 29 2c 74 68 69 73 2e 72 65 64 2e 73 75 62 28 74 68 69 73 2c 65 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 49 53 75 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 74 68 69 73 2e 72 65 64 2c 22 72 65 64 49 53 75 62 20 77 6f 72 6b 73 20 6f 6e 6c 79 20 77 69 74 68 20 72 65 64 20 6e 75 6d 62 65 72 73 22 29 2c 74 68 69 73 2e 72 65 64 2e 69 73 75 62 28 74 68 69 73 2c 65 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 53 68 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: rototype.redSub=function(e){return n(this.red,"redSub works only with red numbers"),this.red.sub(this,e)},o.prototype.redISub=function(e){return n(this.red,"redISub works only with red numbers"),this.red.isub(this,e)},o.prototype.redShl=function(e){return
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 20 72 28 74 68 69 73 2c 65 29 7d 7d 2c 53 3d 74 2b 22 20 49 74 65 72 61 74 6f 72 22 2c 6b 3d 22 76 61 6c 75 65 73 22 3d 3d 62 2c 78 3d 21 31 2c 45 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 41 3d 45 5b 64 5d 7c 7c 45 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 7c 7c 62 26 26 45 5b 62 5d 2c 4d 3d 41 7c 7c 5f 28 62 29 2c 49 3d 62 3f 6b 3f 5f 28 22 65 6e 74 72 69 65 73 22 29 3a 4d 3a 76 6f 69 64 20 30 2c 4f 3d 22 41 72 72 61 79 22 3d 3d 74 26 26 45 2e 65 6e 74 72 69 65 73 7c 7c 41 3b 69 66 28 4f 26 26 28 77 3d 75 28 4f 2e 63 61 6c 6c 28 6e 65 77 20 65 29 29 29 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 77 2e 6e 65 78 74 26 26 28 63 28 77 2c 53 2c 21 30 29 2c 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 5b 64 5d 7c 7c 61 Data Ascii: r(this,e)}},S=t+" Iterator",k="values"==b,x=!1,E=e.prototype,A=E[d]\|\|E["@@iterator"]\|\|b&&E[b],M=A\|\|_(b),I=b?k?_("entries"):M:void 0,O="Array"==t&&E.entries\|\|A;if(O&&(w=u(O.call(new e)))!==Object.prototype&&w.next&&(c(w,S,!0),n\|\|"function"==typeof w[d]\|\|a
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 61 6e 73 66 6f 72 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3b 74 72 79 7b 74 68 69 73 2e 68 61 73 68 4d 6f 64 65 3f 74 68 69 73 2e 5f 75 70 64 61 74 65 28 65 29 3a 74 68 69 73 2e 70 75 73 68 28 74 68 69 73 2e 5f 75 70 64 61 74 65 28 65 29 29 7d 63 61 74 63 68 28 65 29 7b 6e 3d 65 7d 66 69 6e 61 6c 6c 79 7b 72 28 6e 29 7d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 74 72 79 7b 74 68 69 73 2e 70 75 73 68 28 74 68 69 73 2e 5f 5f 66 69 6e 61 6c 28 29 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 28 74 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 66 69 6e 61 6c 4f 72 44 69 67 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e Data Ascii: ansform=function(e,t,r){var n;try{this.hashMode?this._update(e):this.push(this._update(e))}catch(e){n=e}finally{r(n)}},a.prototype._flush=function(e){var t;try{this.push(this.__final())}catch(e){t=e}e(t)},a.prototype._finalOrDigest=function(e){var t=this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49811	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:46 UTC	567	OUT	GET /pixel/62b46da73ec962008fbce029 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/marketintelligence/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:46 UTC	1032	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:46 GMT Content-Type: text/javascript Content-Length: 0 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; path=/; expires=Thu, 23-May-24 14:20:46 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 88858453f9201861-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49806	93.184.220.66	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:46 UTC	780	OUT	GET /widgets/widget_iframe.2f70fb173b9000da126c79afe2098f02.html?origin=https%3A%2F%2Fwww.spglobal.com HTTP/1.1 Host: platform.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:46 UTC	627	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Age: 5125147 Cache-Control: public, max-age=315360000 Content-Type: text/html; charset=utf-8 Date: Thu, 23 May 2024 13:50:46 GMT Etag: "81267302efdfb3e4524a22631a8fc99e" Last-Modified: Mon, 11 Dec 2023 17:19:49 GMT P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" Server: ECS (lhd/35DC) Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ Vary: Accept-Encoding x-amz-server-side-encryption: AES256 X-Cache: HIT x-tw-cdn: VZ Content-Length: 327164 Connection: close
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 74 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 54 77 69 74 74 65 72 20 57 69 64 67 65 74 20 49 66 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 21 66 75 6e 63 74 69 6f 6e 28 29 7b 46 75 6e 63 74 69 6f 6e 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 26 26 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 26 26 28 2f 28 4d 53 49 45 20 28 5b 36 37 38 39 5d 7c 31 30 7c 31 31 29 29 7c 54 72 69 64 65 6e 74 2f 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 Data Ascii: <!DOCTYPE HTML><meta chartset="utf-8"><title>Twitter Widget Iframe</title><body><script type="text/javascript">!function(){Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|function(e){v
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 28 70 2c 47 29 7c 30 2c 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 70 2c 5a 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 47 29 7c 30 2c 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 62 2c 5a 29 7c 30 3b 76 61 72 20 5f 65 3d 28 63 2b 28 6e 3d 6e 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 51 29 7c 30 29 7c 30 29 2b 28 28 38 31 39 31 26 28 69 3d 28 69 3d 69 2b 4d 61 74 68 2e 69 6d 75 6c 28 75 2c 65 65 29 7c 30 29 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 51 29 7c 30 29 29 3c 3c 31 33 29 7c 30 3b 63 3d 28 28 6f 3d 6f 2b 4d 61 74 68 2e 69 6d 75 6c 28 64 2c 65 65 29 7c 30 29 2b 28 69 3e 3e 3e 31 33 29 7c 30 29 2b 28 5f 65 3e 3e 3e 32 36 29 7c 30 2c 5f 65 26 3d 36 37 31 30 38 38 36 33 2c 6e 3d 4d 61 74 68 2e 69 6d 75 6c 28 6b 2c 7a 29 2c 69 3d 28 69 3d 4d 61 Data Ascii: (p,G)\|0,i=(i=i+Math.imul(p,Z)\|0)+Math.imul(b,G)\|0,o=o+Math.imul(b,Z)\|0;var _e=(c+(n=n+Math.imul(u,Q)\|0)\|0)+((8191&(i=(i=i+Math.imul(u,ee)\|0)+Math.imul(d,Q)\|0))<<13)\|0;c=((o=o+Math.imul(d,ee)\|0)+(i>>>13)\|0)+(_e>>>26)\|0,_e&=67108863,n=Math.imul(k,z),i=(i=Ma
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 3b 30 21 3d 3d 6e 2e 6e 65 67 61 74 69 76 65 3b 29 64 2d 2d 2c 6e 2e 6e 65 67 61 74 69 76 65 3d 30 2c 6e 2e 5f 69 73 68 6c 6e 73 75 62 6d 75 6c 28 69 2c 31 2c 75 29 2c 6e 2e 69 73 5a 65 72 6f 28 29 7c 7c 28 6e 2e 6e 65 67 61 74 69 76 65 5e 3d 31 29 3b 66 26 26 28 66 2e 77 6f 72 64 73 5b 75 5d 3d 64 29 7d 72 65 74 75 72 6e 20 66 26 26 66 2e 73 74 72 69 70 28 29 2c 6e 2e 73 74 72 69 70 28 29 2c 22 64 69 76 22 21 3d 3d 74 26 26 30 21 3d 3d 72 26 26 6e 2e 69 75 73 68 72 6e 28 72 29 2c 7b 64 69 76 3a 66 7c 7c 6e 75 6c 6c 2c 6d 6f 64 3a 6e 7d 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 76 6d 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 6e 28 21 65 2e 69 73 5a 65 72 6f 28 29 29 2c 74 68 69 73 2e 69 73 5a 65 72 6f 28 29 3f 7b Data Ascii: ;0!==n.negative;)d--,n.negative=0,n._ishlnsubmul(i,1,u),n.isZero()\|\|(n.negative^=1);f&&(f.words[u]=d)}return f&&f.strip(),n.strip(),"div"!==t&&0!==r&&n.iushrn(r),{div:f\|\|null,mod:n}},o.prototype.divmod=function(e,t,r){return n(!e.isZero()),this.isZero()?{
2024-05-23 13:50:46 UTC	3	IN	Data Raw: 79 70 65 Data Ascii: ype
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 6f 66 20 65 29 69 66 28 74 29 7b 69 66 28 22 68 65 78 22 3d 3d 3d 74 29 66 6f 72 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 61 2d 7a 30 2d 39 5d 2b 2f 67 69 2c 22 22 29 29 2e 6c 65 6e 67 74 68 25 32 21 3d 30 26 26 28 65 3d 22 30 22 2b 65 29 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 32 29 72 2e 70 75 73 68 28 70 61 72 73 65 49 6e 74 28 65 5b 6e 5d 2b 65 5b 6e 2b 31 5d 2c 31 36 29 29 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 2e 63 68 61 72 43 6f 64 65 41 74 28 6e 29 2c 6f 3d 69 3e 3e 38 2c 61 3d 32 35 35 26 69 3b 6f 3f 72 2e 70 75 73 68 28 6f 2c 61 29 3a 72 2e 70 75 73 68 28 61 29 7d 65 6c 73 65 20 66 6f 72 28 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b Data Ascii: of e)if(t){if("hex"===t)for((e=e.replace(/[^a-z0-9]+/gi,"")).length%2!=0&&(e="0"+e),n=0;n<e.length;n+=2)r.push(parseInt(e[n]+e[n+1],16))}else for(var n=0;n<e.length;n++){var i=e.charCodeAt(n),o=i>>8,a=255&i;o?r.push(o,a):r.push(a)}else for(n=0;n<e.length;
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 66 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 20 32 2a 72 3b 63 61 73 65 22 68 65 78 22 3a 72 65 74 75 72 6e 20 72 3e 3e 3e 31 3b 63 61 73 65 22 62 61 73 65 36 34 22 3a 72 65 74 75 72 6e 20 7a 28 65 29 2e 6c 65 6e 67 74 68 3b 64 65 66 61 75 6c 74 3a 69 66 28 6e 29 72 65 74 75 72 6e 20 71 28 65 29 2e 6c 65 6e 67 74 68 3b 74 3d 28 22 22 2b 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 65 5b 74 5d 3d 65 5b 72 5d 2c 65 5b 72 5d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 2c 72 2c 6e 2c 69 29 7b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 2d 31 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 3f 28 6e 3d 72 2c Data Ascii: f-16le":return 2*r;case"hex":return r>>>1;case"base64":return z(e).length;default:if(n)return q(e).length;t=(""+t).toLowerCase(),n=!0}}function b(e,t,r){var n=e[t];e[t]=e[r],e[r]=n}function y(e,t,r,n,i){if(0===e.length)return-1;if("string"==typeof r?(n=r,
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 69 66 28 69 3d 6e 75 6c 6c 2c 72 3c 31 32 38 29 7b 69 66 28 28 74 2d 3d 31 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 29 7d 65 6c 73 65 20 69 66 28 72 3c 32 30 34 38 29 7b 69 66 28 28 74 2d 3d 32 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 36 7c 31 39 32 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 20 69 66 28 72 3c 36 35 35 33 36 29 7b 69 66 28 28 74 2d 3d 33 29 3c 30 29 62 72 65 61 6b 3b 6f 2e 70 75 73 68 28 72 3e 3e 31 32 7c 32 32 34 2c 72 3e 3e 36 26 36 33 7c 31 32 38 2c 36 33 26 72 7c 31 32 38 29 7d 65 6c 73 65 7b 69 66 28 21 28 72 3c 31 31 31 34 31 31 32 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 64 65 20 70 6f 69 6e 74 22 29 3b 69 66 28 28 Data Ascii: 239,191,189);if(i=null,r<128){if((t-=1)<0)break;o.push(r)}else if(r<2048){if((t-=2)<0)break;o.push(r>>6\|192,63&r\|128)}else if(r<65536){if((t-=3)<0)break;o.push(r>>12\|224,r>>6&63\|128,63&r\|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 22 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 7c 7c 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 72 65 74 75 72 6e 20 74 68 69 73 3b 69 66 28 61 3d 28 72 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 29 2e 6c 65 6e 67 74 68 2c 6f 3d 2d 31 2c 72 3d 3d 3d 74 7c 7c 6e 28 72 2e 6c 69 73 74 65 6e 65 72 29 26 26 72 2e 6c 69 73 74 65 6e 65 72 3d 3d 3d 74 29 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 26 26 74 68 69 73 2e 65 6d 69 74 28 22 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 22 2c 65 2c 74 29 3b 65 6c 73 65 20 69 66 28 69 28 72 29 29 7b 66 6f 72 28 66 Data Ascii: "listener must be a function");if(!this._events\|\|!this._events[e])return this;if(a=(r=this._events[e]).length,o=-1,r===t\|\|n(r.listener)&&r.listener===t)delete this._events[e],this._events.removeListener&&this.emit("removeListener",e,t);else if(i(r)){for(f
2024-05-23 13:50:46 UTC	4	IN	Data Raw: 31 37 35 29 Data Ascii: 175)
2024-05-23 13:50:46 UTC	16383	IN	Data Raw: 2c 6e 2e 68 6d 61 63 3d 72 28 31 37 36 29 2c 6e 2e 73 68 61 31 3d 6e 2e 73 68 61 2e 73 68 61 31 2c 6e 2e 73 68 61 32 35 36 3d 6e 2e 73 68 61 2e 73 68 61 32 35 36 2c 6e 2e 73 68 61 32 32 34 3d 6e 2e 73 68 61 2e 73 68 61 32 32 34 2c 6e 2e 73 68 61 33 38 34 3d 6e 2e 73 68 61 2e 73 68 61 33 38 34 2c 6e 2e 73 68 61 35 31 32 3d 6e 2e 73 68 61 2e 73 68 61 35 31 32 2c 6e 2e 72 69 70 65 6d 64 31 36 30 3d 6e 2e 72 69 70 65 6d 64 2e 72 69 70 65 6d 64 31 36 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 3b 65 2e 65 78 70 6f 72 74 73 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 72 2e 63 61 6c 6c 28 65 29 Data Ascii: ,n.hmac=r(176),n.sha1=n.sha.sha1,n.sha256=n.sha.sha256,n.sha224=n.sha.sha224,n.sha384=n.sha.sha384,n.sha512=n.sha.sha512,n.ripemd160=n.ripemd.ripemd160},function(e,t){var r={}.toString;e.exports=Array.isArray\|\|function(e){return"[object Array]"==r.call(e)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49821	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:47 UTC	545	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:47 UTC	860	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: Dw6K+rTuf8kOuPIEBw1QQA== Last-Modified: Mon, 20 May 2024 16:31:15 GMT x-ms-request-id: 4d9696ba-f01e-0051-0699-ab5f9c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 13 Expires: Fri, 24 May 2024 13:50:47 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 888584594c3ac336-EWR
2024-05-23 13:50:47 UTC	509	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d Data Ascii: AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 Data Ascii: f(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 Data Ascii: ler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 Data Ascii: nt("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d Data Ascii: ),this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElem
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 Data Ascii: locationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],t
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 79 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 Data Ascii: yer"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData")
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 65 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c Data Ascii: egionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Rul
2024-05-23 13:50:47 UTC	1369	IN	Data Raw: 68 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e Data Ascii: hasIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.on

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49820	52.20.146.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:47 UTC	539	OUT	OPTIONS /v2/visitors HTTP/1.1 Host: raw.vidyard.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://play.vidyard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:47 UTC	360	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:47 GMT Content-Type: text/html;charset=utf-8 Content-Length: 0 Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://play.vidyard.com Access-Control-Allow-Methods: POST, PUT Access-Control-Allow-Headers: Content-Type, Accept, Origin Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49833	104.244.42.72	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:47 UTC	620	OUT	GET /settings?session_id=2e62094c07b0bcd5863083a35b7577a11a1fc9a9 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://platform.twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://platform.twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:47 UTC	567	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:50:47 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Thu, 23 May 2024 13:50:47 GMT content-length: 870 x-transaction-id: 884b597beb94f4db strict-transport-security: max-age=631138519 access-control-allow-origin: https://platform.twitter.com access-control-allow-credentials: true x-response-time: 7 x-connection-hash: 1c453e15f612cdc2ff16aab31432711aad9ca58b007aa6196cbcae00c9b7d11f connection: close
2024-05-23 13:50:47 UTC	870	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 Data Ascii: {"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49776	18.239.18.49	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:47 UTC	846	OUT	GET /media/hls/jWqYTL70JBGZA_wGoN5WzA/,full_hd,hd,480p,sd,.mp4.urlset/master.m3u8?eiF43Ig41U8wbA0Savxf0TzeSnYi3ejBhfCDWo8lgF3LSIs_r-nwDjRrAN9Q72evSjw4Gom2aJNMmBiXwev7cXup7vW37c4YA0u2jrt1bobPywI6HKg0axDHkKOFsDh9cg76Owek-7S1FESoOran4WKzmKi5MbeTlv1lFn5zuE__xsg8NjpCLcX53qabvkaVSHT8hg HTTP/1.1 Host: cdn.vidyard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.vidyard.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:47 UTC	505	IN	HTTP/1.1 200 OK Content-Type: application/vnd.apple.mpegurl Content-Length: 624 Connection: close Server: nginx/1.21.1 Date: Tue, 07 May 2024 14:42:59 GMT ETag: "-1-270" Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 e3175a7d38795328ac3444e1d56a9f4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: MCxI6GFAyTbiLsfAPgK-Xz6SJ7BL1CkKoJ66dwe0L2pxbyWCRV1Qtg== Age: 1379268 x-cdn: cloudfront Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag,X-CDN
2024-05-23 13:50:47 UTC	624	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 53 54 52 45 41 4d 2d 49 4e 46 3a 50 52 4f 47 52 41 4d 2d 49 44 3d 31 2c 42 41 4e 44 57 49 44 54 48 3d 32 35 39 36 38 38 34 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 31 39 32 30 78 31 30 38 30 2c 46 52 41 4d 45 2d 52 41 54 45 3d 33 30 2e 30 30 30 2c 43 4f 44 45 43 53 3d 22 61 76 63 31 2e 36 34 30 38 32 39 2c 6d 70 34 61 2e 34 30 2e 32 22 2c 56 49 44 45 4f 2d 52 41 4e 47 45 3d 53 44 52 0a 69 6e 64 65 78 2d 66 31 2d 76 31 2d 61 31 2e 6d 33 75 38 0a 23 45 58 54 2d 58 2d 53 54 52 45 41 4d 2d 49 4e 46 3a 50 52 4f 47 52 41 4d 2d 49 44 3d 31 2c 42 41 4e 44 57 49 44 54 48 3d 32 36 30 35 36 30 31 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 31 32 38 30 78 37 32 30 2c 46 52 41 4d 45 2d 52 41 54 45 3d 33 30 2e 30 30 30 2c 43 4f 44 45 43 Data Ascii: #EXTM3U#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=2596884,RESOLUTION=1920x1080,FRAME-RATE=30.000,CODECS="avc1.640829,mp4a.40.2",VIDEO-RANGE=SDRindex-f1-v1-a1.m3u8#EXT-X-STREAM-INF:PROGRAM-ID=1,BANDWIDTH=2605601,RESOLUTION=1280x720,FRAME-RATE=30.000,CODEC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49838	52.20.146.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:47 UTC	635	OUT	POST /v2/visitors HTTP/1.1 Host: raw.vidyard.com Connection: keep-alive Content-Length: 71 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://play.vidyard.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:47 UTC	71	OUT	Data Raw: 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 22 3a 22 31 32 38 30 78 31 30 32 34 22 2c 22 63 6f 6c 6f 75 72 73 22 3a 32 34 2c 22 6f 73 22 3a 22 57 69 6e 33 32 22 2c 22 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 7d Data Ascii: {"resolution":"1280x1024","colours":24,"os":"Win32","language":"en-US"}
2024-05-23 13:50:48 UTC	231	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:47 GMT Content-Type: application/json; charset=utf-8 Content-Length: 71 Connection: close Access-Control-Allow-Origin: https://play.vidyard.com X-Vidyard-Hostname: f67f43c88527
2024-05-23 13:50:48 UTC	71	IN	Data Raw: 7b 22 6b 65 79 22 3a 22 75 30 32 7a 6a 44 63 7a 78 6a 79 49 71 66 64 4d 30 77 48 4a 77 41 22 2c 22 63 72 65 61 74 65 64 5f 61 74 22 3a 22 32 30 32 34 2d 30 35 2d 32 33 20 31 33 3a 35 30 3a 34 37 20 55 54 43 22 7d Data Ascii: {"key":"u02zjDczxjyIqfdM0wHJwA","created_at":"2024-05-23 13:50:47 UTC"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49839	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:47 UTC	633	OUT	GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/1b11452b-62cc-4fad-8149-9b39c40329a4.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:48 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:48 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 8885845e09010f84-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 32425 Cache-Control: public, max-age=86400 Expires: Fri, 24 May 2024 13:50:48 GMT Last-Modified: Sat, 30 Mar 2024 04:21:30 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: VKSe/a3gHPrVEiMXsooMtQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0f8e155f-501e-006f-0359-823370000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-23 13:50:48 UTC	467	IN	Data Raw: 31 34 38 64 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 31 62 31 31 Data Ascii: 148d{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"1b11
2024-05-23 13:50:48 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 38 61 37 30 2d 31 31 64 61 2d 37 30 38 31 2d 61 64 66 65 2d 39 64 36 61 30 32 61 32 64 62 34 65 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 61 22 2c 22 62 62 22 2c 22 72 73 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 71 22 2c 22 73 Data Ascii: t":[{"Id":"018e8a70-11da-7081-adfe-9d6a02a2db4e","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","s
2024-05-23 13:50:48 UTC	1369	IN	Data Raw: 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 52 65 6a 65 63 74 41 6c 6c 20 42 61 6e 6e 65 72 20 2d 20 53 50 47 6c 6f 62 61 6c 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 Data Ascii: PushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"RejectAll Banner - SPGlobal","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthF
2024-05-23 13:50:48 UTC	1369	IN	Data Raw: 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 52 65 6a 65 63 74 41 6c 6c 20 42 61 6e 6e 65 72 20 2d 20 53 50 47 6c 6f 62 61 6c 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 Data Ascii: GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"RejectAll Banner - SPGlobal","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false}],"IabData":{"cookieVersion":"1","c
2024-05-23 13:50:48 UTC	695	IN	Data Raw: 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 43 4d 44 4d 41 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 Data Ascii: Features":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"CookieV2GeolocationJsonApi":true,"CookieV2GCMDMA":true,"CookieV2TCF21":true,"CookieV2RemoveSettingsIcon":true,"CookieV2BannerLogo":true,"CookieV2GeneralVendors":tr
2024-05-23 13:50:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49842	104.244.42.136	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:48 UTC	407	OUT	GET /settings?session_id=2e62094c07b0bcd5863083a35b7577a11a1fc9a9 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:48 UTC	468	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:50:48 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Thu, 23 May 2024 13:50:48 GMT content-length: 870 x-transaction-id: fa6a6d1638b259b3 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 3f08a0f96f317e291d2c7b0f422ad4821fd84561472ee7ac45ba674da04f1fed connection: close
2024-05-23 13:50:48 UTC	870	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 Data Ascii: {"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49847	52.20.146.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:48 UTC	350	OUT	GET /v2/visitors HTTP/1.1 Host: raw.vidyard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:48 UTC	158	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 13:50:48 GMT Content-Type: text/html;charset=utf-8 Content-Length: 26 Connection: close X-Cascade: pass
2024-05-23 13:50:48 UTC	26	IN	GET /v2/visitors

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49845	52.20.146.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:48 UTC	543	OUT	OPTIONS /v2/player_loads HTTP/1.1 Host: raw.vidyard.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://play.vidyard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:48 UTC	360	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:48 GMT Content-Type: text/html;charset=utf-8 Content-Length: 0 Connection: close Access-Control-Max-Age: 86400 Access-Control-Allow-Origin: https://play.vidyard.com Access-Control-Allow-Methods: POST, PUT Access-Control-Allow-Headers: Content-Type, Accept, Origin Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49841	18.239.18.49	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:48 UTC	661	OUT	GET /thumbnails/jWqYTL70JBGZA_wGoN5WzA/7e5d6d1b3cdaa7e4a5d1d9.jpg HTTP/1.1 Host: cdn.vidyard.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:48 UTC	585	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 111700 Connection: close Last-Modified: Mon, 07 Mar 2022 22:51:32 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: SkFWfbsZMHDm14n.wri71LC3tquASQ5u Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 18 May 2024 08:02:40 GMT ETag: "ccf2308a14b197ca486bf2e5ab282ef6" X-Cache: Hit from cloudfront Via: 1.1 9dba3ae645587c3cf23f9d232c9cb4e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: BzdDtEB8y2SzSo-IcJu382ig_4p-0clw747R-1LtKxSbtpu_f58b8Q== Age: 453510 x-cdn: cloudfront Vary: Origin
2024-05-23 13:50:48 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 10 4c 61 76 63 35 37 2e 31 30 37 2e 31 30 30 ff db 00 43 00 0a 07 07 09 07 06 0a 09 08 09 0b 0b 0a 0c 0f 19 10 0f 0e 0e 0f 1e 16 17 12 19 24 20 26 25 23 20 23 22 28 2d 39 30 28 2a 36 2b 22 23 32 44 32 36 3b 3d 40 40 40 26 30 46 4b 45 3e 4a 39 3f 40 3d ff c0 00 0b 08 02 d0 05 00 01 01 11 00 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 53 10 00 01 03 03 00 05 09 04 08 03 06 03 07 03 02 07 02 00 03 04 01 05 12 06 11 13 22 32 14 21 31 41 42 51 52 61 71 23 33 62 d1 15 24 43 72 81 a1 b1 c1 91 e1 f0 07 34 53 82 a2 b2 16 25 92 44 63 73 c2 d2 f1 f2 54 83 e2 26 35 a3 17 45 64 93 b3 74 ff da 00 08 01 01 00 00 3f 00 e8 39 09 ef 87 01 70 92 78 12 Data Ascii: JFIFLavc57.107.100C$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=S"2!1ABQRaq#3b$Cr4S%DcsT&5Edt?9px
2024-05-23 13:50:48 UTC	16384	IN	Data Raw: 2e 53 2f 45 b9 e5 fc a2 26 d6 30 65 8b 9b 3c 7a 32 a7 95 7a 29 eb 5d 54 d7 d6 9e 8f 20 5d f8 7e 1f 0a 96 09 dd a8 b4 da cc e9 25 f0 41 be 3f ba 2b 08 eb ae ca 7d 4e 8e d6 0a d1 a8 0e ff 00 84 59 fd d5 d1 34 3a c0 4d 45 fa e4 71 1d ec 84 87 a4 b5 f7 fa 75 2d 8f 03 78 21 82 24 48 20 82 c6 e9 76 99 8d b5 b3 89 0c f2 92 5d af 0a e6 7e de 79 9b a7 91 78 89 3f ed 76 1f 47 c3 c9 c9 32 77 71 11 e7 f4 f9 ad ad 8e ca d6 89 b7 b5 cc 5f b8 90 e2 e7 80 75 f5 0f ef 54 08 09 d3 cc cf 2c 92 f0 47 82 71 a7 4a 39 e6 07 8a b4 de 08 26 ee 78 bc 5d a5 5c d3 45 9e d4 0f 85 21 d3 cd 46 24 40 9e 06 89 33 3e 78 c7 6c da 0f 7d e2 f0 aa 02 3c d1 87 83 88 fc 2a e2 2c 5e 4f be 7c 65 fe 95 31 29 47 91 2b 0d c0 e3 ff 00 6a cc df f4 87 e8 a8 9c 92 19 e5 24 b8 8b c1 e7 ea b1 90 a1 15 ca Data Ascii: .S/E&0e<z2z)]T ]~%A?+}NY4:MEqu-x!$H v]~yx?vG2wq_uT,GqJ9&x]\E!F$@3>xl}<*,^O\|e1)G+j$
2024-05-23 13:50:48 UTC	16384	IN	Data Raw: 03 c4 64 f8 7c 5e 8a d5 d6 86 43 66 d3 c0 24 05 c4 25 d0 b0 b7 fd 11 76 06 72 21 e4 e4 6e 2c 7a c3 f9 27 ec 7a 5c ec 7c 63 dc b7 99 e1 17 3a ff 00 1f 25 3e ff 00 a1 d0 ee ed 9c b8 18 b1 30 b7 b2 1e 03 f5 f5 ef a2 c7 c2 d0 cb ac d7 cc 0e 3e c3 1e 22 73 9a 9f 87 7a 8c 11 e4 d8 ee b9 e0 22 f3 05 c2 e0 eb a1 7f 15 d2 ec 1a 42 c5 e9 bc 3d dc 91 e2 6f f7 a2 b2 91 1d a9 0c 1b 52 40 5c 64 b8 84 96 0e ff 00 a3 6f da 8f 95 c0 c8 a3 0e f6 ef 48 7e fa 95 86 8d e9 61 6e c7 b9 1f dd 7b f6 aa da 2c d5 e7 44 5a 95 9b b0 31 61 ee 2c 7b 05 e9 dc b1 e1 74 76 c6 66 e8 3a 4d bc 3b bb 3e bf 4a d1 54 dd 2f 53 2f 52 b9 44 c3 ec d0 45 b1 d7 80 7a 53 cf ad 41 27 53 19 a4 20 a4 6d 7d 83 41 e1 d6 9e 8f 2a 1b 5b 92 5a dc 2f b4 e7 d6 1e 7a b5 f3 ad 85 ab 4d ad 90 34 55 d8 e0 d7 b6 6f Data Ascii: d\|^Cf$%vr!n,z'z\\|c:%>0>"sz"B=oR@\doH~an{,DZ1a,{tvf:M;>JT/S/RDEzSA'S m}A*[Z/zM4Uo
2024-05-23 13:50:49 UTC	16384	IN	Data Raw: 86 6a ae 3d 80 79 71 bb 30 f6 e1 96 4d b7 d4 34 a7 42 b9 41 29 25 25 04 10 41 36 40 2e b6 60 7b d9 6e ac bc f8 a4 6d fd 1e 6d 37 f1 6d 07 70 29 d5 5a 6b e2 ae ae af e2 a5 c7 84 20 de e7 6b 88 ba cf d7 d3 ba 9c d4 56 11 e3 a9 e0 d0 82 5e 09 38 60 82 08 28 d2 2e 4c 45 e3 59 c9 17 57 e7 9e 10 f1 70 c8 b8 b2 e6 15 58 4e c6 b2 b0 fb bb 5d a4 cc bd a4 82 e8 0f 4f 11 7a 2c f6 8d de 88 2f 8f 81 99 17 29 2c 84 8b a7 69 4e bf c5 75 e0 31 75 b1 30 e0 2d e4 a4 a4 95 98 d2 4d 38 b7 d8 db 38 e0 7b 79 d8 fb be a1 f5 af 47 e1 d2 b8 ed ca e4 fd d6 51 48 98 e9 38 f1 71 11 7e dd d4 a7 72 b6 d0 43 7f fe 2a 8c 0c f6 84 84 87 c4 1a b5 d5 75 67 5a 2e d8 62 ab e5 7b 25 08 8f 6a a1 3a d0 87 02 8f 82 62 44 52 75 57 4a b4 3b c6 9b e4 ef e0 20 7c 03 c3 f8 a9 b1 d5 80 06 69 ac 9a 0e Data Ascii: j=yq0M4BA)%%A6@.`{nmm7mp)Zk kV^8`(.LEYWpXN]Oz,/),iNu1u0-M88{yGQH8q~rC*ugZ.b{%j:bDRuWJ; \|i
2024-05-23 13:50:49 UTC	16384	IN	Data Raw: 68 10 60 65 cf de ed 37 1c 78 cf ce bd d4 a7 5a bc 89 0a e1 a4 8c 60 cc 42 6f 1e 27 ba 1b 0f 4a 75 ff 00 15 a4 d1 83 28 4f 9d b2 4b a2 e1 8e f0 90 f4 17 97 ad 16 9d 21 67 34 9b 4c 61 e8 f3 78 07 b7 98 5c 2d 8f 67 cc bb 97 22 9f 3d fb 94 a2 91 24 c8 8c 94 55 b0 d1 8d 13 19 5f 5d ba ee b2 3b c2 df 8b d7 c9 5e dc ae 8c 42 60 f7 36 61 d9 c7 b5 f8 2c fc d0 c0 da 9b 7b e3 c7 28 f6 ec b9 ca 95 e8 27 3c 03 e5 d3 55 51 2a 6b b3 cc ce 49 e4 f7 f5 cd 4a 75 53 ba 8a b9 dd d4 84 10 5d 4c ae f6 f8 51 2d 97 08 72 08 59 69 ba b8 36 e1 fb 77 3a aa e5 7b a9 cf af 5f e0 b0 37 2b b9 48 37 4c f7 9e 75 c2 22 2f 32 ae be 6f c5 6b 5d ba 34 16 a3 3d 1e 07 f9 1f 27 16 0b 68 35 0a 35 af 8e ba bb 44 55 e9 af 55 3d 55 45 aa 51 06 d6 39 e3 81 6a d9 fe 6a ca 2c a2 db f2 48 79 6d bb 5d Data Ascii: h`e7xZ`Bo'Ju(OK!g4Lax\-g"=$U_];^B`6a,{('<UQ*kIJuS]LQ-rYi6w:{_7+H7Lu"/2ok]4='h55DUU=UEQ9jj,Hym]
2024-05-23 13:50:49 UTC	16384	IN	Data Raw: d2 9d 29 1b 04 41 00 f6 93 1f 1a ec c7 a8 7e 22 f2 58 2b 2d aa 76 99 de 36 b3 1d 73 01 f7 cf 78 7b 84 7c d7 50 b4 40 83 02 08 b5 6d 68 45 9f 17 59 79 d6 bd 35 52 5d 21 68 0c cc c4 40 47 22 22 e8 1a 2e 5b a5 7a 56 fd e9 f3 89 6d 37 06 0f 0f 75 5d e8 e9 fc 7a 28 af 74 3b 42 45 a8 8d 5c 2e a1 f5 92 d4 4d b2 5d 8f bd e7 e4 b7 2b 3f a4 3a 4c d5 82 08 e7 ed 26 10 d3 66 df ef 5f 25 82 b7 da 2e ba 6d 75 39 12 5d 2c 32 a6 da 41 74 0d 3c 23 4e fe ea 2e 9f 6d b5 46 b4 45 18 90 c3 10 1f e2 55 eb ad 6a 8a f3 02 df 3e dc e8 5d 71 e4 c3 bd 91 73 61 ab ae 95 ef 5c 54 80 40 cf 03 c8 32 ae 25 8e ac a9 d5 5d 5d 48 90 46 89 25 04 10 41 1a 34 69 c8 ff 00 6b f0 b7 52 fc 90 23 2e 4a d0 78 48 bf 3c 53 68 22 4a 44 89 04 14 9b 7c 27 6e 53 9a 8e cf da 15 07 2e a1 a7 7d 7c a8 ba 23 Data Ascii: )A~"X+-v6sx{\|P@mhEYy5R]!h@G"".[zVm7u]z(t;BE\.M]+?:L&f_%.mu9],2At<#N.mFEUj>]qsa\T@2%]]HF%A4ikR#.JxH<Sh"JD\|'nS.}\|#
2024-05-23 13:50:49 UTC	13396	IN	Data Raw: 58 39 f7 59 37 29 59 c9 3c bc 23 e1 f2 57 96 0d 2c 28 b8 c4 9f bd 1b b2 e7 58 7c e8 b6 ad 3a 32 1b da b2 62 e0 17 09 0f 42 66 6c 26 27 c5 38 f2 43 20 25 cf 2f 9a 3d 26 d0 66 78 65 0f 2d d7 3d 7b fb 94 8d 1e d2 67 6c a6 2d 3c 1b 48 dd a1 eb 0f bb f2 5d 02 3c 86 a5 30 2e c6 31 70 0b b4 2a 15 f2 7d be 14 1c 2e 5b c0 e6 bc 5b f1 ea fd 3d 57 2a 74 f7 cf 73 1f 87 c2 a2 10 66 9d b6 c8 28 13 86 46 02 58 f1 09 74 15 3b aa a5 4f 85 0d dc dd b3 99 13 23 ab 26 dc e3 0f 9d 15 60 24 6f 66 9d 49 44 89 04 69 68 d1 a3 4b 03 4e e6 96 0e e1 be 07 8a 42 d3 da 34 44 ae 50 79 41 c8 26 f2 e1 1d 9d 75 fe 6a 86 6c 5e 4b 39 f8 e6 79 6c 8a a3 fc 14 62 48 45 9a 19 a5 66 99 2d c3 4d ed 51 81 a2 20 50 dd dd 4d f1 a6 c9 47 24 d2 19 a1 9a 41 3b 82 16 f8 52 6e b3 86 24 30 da 3c e7 0a ec Data Ascii: X9Y7)Y<#W,(X\|:2bBfl&'8C %/=&fxe-={gl-<H]<0.1p}.[[=Wtsf(FXt;O#&`$ofIDihKNB4DPyA&ujl^K9ylbHEf-MQ PMG$A;Rn$0<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49850	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:48 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:48 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:48 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 88858462af357cac-EWR
2024-05-23 13:50:48 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49849	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:48 UTC	427	OUT	GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/1b11452b-62cc-4fad-8149-9b39c40329a4.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:48 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:48 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 88858462bb3ac445-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 30982 Cache-Control: public, max-age=86400 Expires: Fri, 24 May 2024 13:50:48 GMT Last-Modified: Sat, 30 Mar 2024 04:21:30 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: VKSe/a3gHPrVEiMXsooMtQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 4f462c7a-401e-003e-1c59-82aefc000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-23 13:50:48 UTC	467	IN	Data Raw: 31 34 38 64 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 31 62 31 31 Data Ascii: 148d{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"1b11
2024-05-23 13:50:48 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 38 61 37 30 2d 31 31 64 61 2d 37 30 38 31 2d 61 64 66 65 2d 39 64 36 61 30 32 61 32 64 62 34 65 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 22 2c 22 61 7a 22 2c 22 62 61 22 2c 22 62 62 22 2c 22 72 73 22 2c 22 62 64 22 2c 22 72 75 22 2c 22 62 66 22 2c 22 72 77 22 2c 22 62 68 22 2c 22 62 69 22 2c 22 62 6a 22 2c 22 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 71 22 2c 22 73 Data Ascii: t":[{"Id":"018e8a70-11da-7081-adfe-9d6a02a2db4e","Name":"Global","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw","az","ba","bb","rs","bd","ru","bf","rw","bh","bi","bj","bl","bm","bn","bo","sa","bq","s
2024-05-23 13:50:48 UTC	1369	IN	Data Raw: 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 52 65 6a 65 63 74 41 6c 6c 20 42 61 6e 6e 65 72 20 2d 20 53 50 47 6c 6f 62 61 6c 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 Data Ascii: PushesDown":false,"Default":true,"Global":true,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"RejectAll Banner - SPGlobal","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthF
2024-05-23 13:50:48 UTC	1369	IN	Data Raw: 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 52 65 6a 65 63 74 41 6c 6c 20 42 61 6e 6e 65 72 20 2d 20 53 50 47 6c 6f 62 61 6c 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 Data Ascii: GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"RejectAll Banner - SPGlobal","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false}],"IabData":{"cookieVersion":"1","c
2024-05-23 13:50:48 UTC	695	IN	Data Raw: 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 41 73 73 69 67 6e 54 65 6d 70 6c 61 74 65 52 75 6c 65 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 43 4d 44 4d 41 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 Data Ascii: Features":{"CookieV2BannerFocus":true,"CookieV2GPC":true,"CookieV2AssignTemplateRule":true,"CookieV2GeolocationJsonApi":true,"CookieV2GCMDMA":true,"CookieV2TCF21":true,"CookieV2RemoveSettingsIcon":true,"CookieV2BannerLogo":true,"CookieV2GeneralVendors":tr
2024-05-23 13:50:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49846	18.239.18.21	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:48 UTC	614	OUT	GET /media/hls/jWqYTL70JBGZA_wGoN5WzA/,full_hd,hd,480p,sd,.mp4.urlset/master.m3u8?eiF43Ig41U8wbA0Savxf0TzeSnYi3ejBhfCDWo8lgF3LSIs_r-nwDjRrAN9Q72evSjw4Gom2aJNMmBiXwev7cXup7vW37c4YA0u2jrt1bobPywI6HKg0axDHkKOFsDh9cg76Owek-7S1FESoOran4WKzmKi5MbeTlv1lFn5zuE__xsg8NjpCLcX53qabvkaVSHT8hg HTTP/1.1 Host: cdn.vidyard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:49 UTC	372	IN	HTTP/1.1 403 Forbidden Server: CloudFront Date: Thu, 23 May 2024 13:50:48 GMT Content-Length: 0 Connection: close X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 916d412afdd39cf0d9689036f0f43bb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: RZFjgyxVfyVekGhXiDdYPHVqIFTeI0YTebf-Tilix_aNUEv92AnPyw== x-cdn: cloudfront Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49858	52.20.146.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:49 UTC	640	OUT	POST /v2/player_loads HTTP/1.1 Host: raw.vidyard.com Connection: keep-alive Content-Length: 330 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://play.vidyard.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:49 UTC	330	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 35 32 38 39 2c 22 63 6f 6f 6b 69 65 5f 75 75 69 64 22 3a 22 75 30 32 7a 6a 44 63 7a 78 6a 79 49 71 66 64 4d 30 77 48 4a 77 41 22 2c 22 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 5f 69 64 22 3a 33 34 32 33 32 30 34 2c 22 70 6c 61 79 65 72 5f 69 64 22 3a 22 7a 58 4c 6a 55 4b 46 36 50 31 70 6f 75 54 48 52 63 76 79 69 31 67 22 2c 22 70 6c 61 79 65 72 5f 74 79 70 65 22 3a 22 68 74 6d 6c 22 2c 22 70 6c 61 79 65 72 5f 76 65 72 73 69 6f 6e 22 3a 22 32 2f 32 30 32 34 2d 30 35 2d 31 36 54 31 36 3a 31 33 3a 31 39 2e 38 38 37 5a 2f 37 35 37 64 39 33 39 39 39 37 22 2c 22 73 6f 75 72 63 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 22 2c 22 74 68 75 6d 62 6e 61 69 6c 5f 69 64 22 3a Data Ascii: {"account_id":5289,"cookie_uuid":"u02zjDczxjyIqfdM0wHJwA","organization_id":3423204,"player_id":"zXLjUKF6P1pouTHRcvyi1g","player_type":"html","player_version":"2/2024-05-16T16:13:19.887Z/757d939997","source_url":"https://www.spglobal.com/","thumbnail_id":
2024-05-23 13:50:49 UTC	231	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:49 GMT Content-Type: application/json; charset=utf-8 Content-Length: 68 Connection: close Access-Control-Allow-Origin: https://play.vidyard.com X-Vidyard-Hostname: 47d10fdfa50c
2024-05-23 13:50:49 UTC	68	IN	Data Raw: 7b 22 70 6c 61 79 65 72 5f 6c 6f 61 64 5f 69 64 22 3a 22 4a 7a 37 79 51 57 6f 54 47 5a 62 33 49 54 44 57 4a 74 7a 66 32 77 22 2c 22 74 69 6d 65 5f 61 72 72 69 76 65 22 3a 31 37 31 36 34 37 32 32 34 39 7d Data Ascii: {"player_load_id":"Jz7yQWoTGZb3ITDWJtzf2w","time_arrive":1716472249}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49860	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:49 UTC	558	OUT	GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:49 UTC	815	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:49 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: s7qm2vbmUNglr6Jt5k9KHA== Last-Modified: Thu, 21 Mar 2024 07:04:35 GMT x-ms-request-id: f463857b-001e-005d-3a08-7c3307000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 71378 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 888584675d0e4385-EWR
2024-05-23 13:50:49 UTC	554	IN	Data Raw: 37 63 37 31 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 33 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c71/** * onetrust-banner-sdk * v202403.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 Data Ascii: otype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return ne
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 Data Ascii: l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function F(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=ar
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 63 65 6f 66 20 6a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 58 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 57 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d Data Ascii: ceof j)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void X((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){W(t,e)}var n,r}function W(e,t){e._state=2,e._value=t,J(e)}function J(e){2===e._state&&0==
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 6a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6a 3f 74 3a 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 6a 2e 72 61 63 65 3d 66 75 6e 63 Data Ascii: eturn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},j.resolve=function(t){return t&&"object"==typeof t&&t.constructor===j?t:new j(function(e){e(t)})},j.reject=function(o){return new j(function(e,t){t(o)})},j.race=func
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 51 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 Data Ascii: e:!0,configurable:!0})},Q.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 Data Ascii: .initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 5a 3d 5a 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 5d 3d Data Ascii: e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=Z=Z\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=ee=ee\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=te=te\|\|{})[e.Purpose=1]=
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 70 65 3d 70 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 5b Data Ascii: ]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=pe=pe\|\|{}).Active="1",e.InActive="0",(e=he=he\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ge=ge\|\|{})[
2024-05-23 13:50:49 UTC	1369	IN	Data Raw: 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e Data Ascii: anted="granted",e.denied="denied",0,(e=Ae=Ae\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Ie=Ie\|\|{}).cookies="cookies",e.vendors="vendors",(e=Le=Le\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GEN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49861	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:49 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:49 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:49 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 888584677ae25e80-EWR
2024-05-23 13:50:49 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49862	18.239.18.21	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:49 UTC	399	OUT	GET /thumbnails/jWqYTL70JBGZA_wGoN5WzA/7e5d6d1b3cdaa7e4a5d1d9.jpg HTTP/1.1 Host: cdn.vidyard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:50 UTC	585	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 111700 Connection: close Last-Modified: Mon, 07 Mar 2022 22:51:32 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: SkFWfbsZMHDm14n.wri71LC3tquASQ5u Accept-Ranges: bytes Server: AmazonS3 Date: Sat, 18 May 2024 08:02:40 GMT ETag: "ccf2308a14b197ca486bf2e5ab282ef6" X-Cache: Hit from cloudfront Via: 1.1 cc275df4032e534bfa7c3c156b598f5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: CktTOX3tKixDOKGdZ6GbnN6XmacjWv0MsFs2c0wHcYTS5ogtMEHObQ== Age: 453512 x-cdn: cloudfront Vary: Origin
2024-05-23 13:50:50 UTC	15799	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 10 4c 61 76 63 35 37 2e 31 30 37 2e 31 30 30 ff db 00 43 00 0a 07 07 09 07 06 0a 09 08 09 0b 0b 0a 0c 0f 19 10 0f 0e 0e 0f 1e 16 17 12 19 24 20 26 25 23 20 23 22 28 2d 39 30 28 2a 36 2b 22 23 32 44 32 36 3b 3d 40 40 40 26 30 46 4b 45 3e 4a 39 3f 40 3d ff c0 00 0b 08 02 d0 05 00 01 01 11 00 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 53 10 00 01 03 03 00 05 09 04 08 03 06 03 07 03 02 07 02 00 03 04 01 05 12 06 11 13 22 32 14 21 31 41 42 51 52 61 71 23 33 62 d1 15 24 43 72 81 a1 b1 c1 91 e1 f0 07 34 53 82 a2 b2 16 25 92 44 63 73 c2 d2 f1 f2 54 83 e2 26 35 a3 17 45 64 93 b3 74 ff da 00 08 01 01 00 00 3f 00 e8 39 09 ef 87 01 70 92 78 12 Data Ascii: JFIFLavc57.107.100C$ &%# #"(-90(*6+"#2D26;=@@@&0FKE>J9?@=S"2!1ABQRaq#3b$Cr4S%DcsT&5Edt?9px
2024-05-23 13:50:50 UTC	16384	IN	Data Raw: 4d 49 0d bc 37 3d e3 3f bd 2b d4 54 ea aa 9f 72 b6 f2 23 13 65 d1 93 05 cf 73 20 7a 0b ca bd d5 a7 5d 15 79 34 90 82 08 d3 80 69 dc d3 8b 5b a3 1a 66 56 ff 00 a9 5c bd a4 3e 11 73 a6 a1 4e ea f7 8f e8 9c d2 9d 11 20 63 e9 3b 50 0b 91 88 72 21 1e c7 9d 3b e9 e5 d4 b1 69 bc 12 30 49 44 8f 34 79 a7 00 d3 a0 69 f0 3c 16 94 8d ad 36 89 b2 78 db 62 ee 23 ec de 2e 87 e9 dd 5f 35 86 76 2b f6 a9 c7 12 63 44 db c2 5b c2 4a 58 19 07 06 ea d0 da ae 42 ef b2 7b 8d 59 10 2c 2d ca 6b 4e 9f b1 32 20 ec 8f 50 fa 28 2b 51 63 75 f9 b0 76 53 fd cf d8 b9 e0 5d 3f 44 ec 76 fb 44 1e 50 cf d6 5e 2f fb 47 5a ba 76 53 51 58 37 64 ba 2d 80 8e 59 12 c0 5f f4 bb e9 53 38 f0 f2 6e 1f 68 ba dd f9 51 55 86 2e fc 29 65 1c 41 47 20 4c 13 59 98 a7 10 c1 3a 0a 74 28 e5 28 f0 64 08 8d 6b 5a Data Ascii: MI7=?+Tr#es z]y4i[fV\>sN c;Pr!;i0ID4yi<6xb#._5v+cD[JXB{Y,-kN2 P(+QcuvS]?DvDP^/GZvSQX7d-Y_S8nhQU.)eAG LY:t((dkZ
2024-05-23 13:50:50 UTC	16384	IN	Data Raw: 89 dc 5a 67 81 49 8b 08 7f ce ad 5a 8b 82 82 52 9f 9b 9b 50 03 66 03 c4 f1 74 6b ee 1e fa aa 8b 1b bf 42 e9 34 cb 39 ee b2 ee a7 e3 fc 75 ad 37 ab eb ad 6c 50 41 67 e7 e8 f4 17 6e a7 70 79 ad a1 e5 42 c4 b8 06 b4 eb d5 d1 af d7 5a 7c a6 8b 46 31 c0 32 78 be cf ad 3f 1e da 4e e2 73 c3 23 e2 16 fa 83 e6 ac c0 12 90 44 82 08 23 44 b2 5a 53 08 42 e2 2e 87 1b e3 bd eb 45 59 1e 38 87 1a 90 4e a8 32 8d 67 6f 26 f8 44 dc e0 2f 78 aa e2 ba 21 c6 b6 3a 08 79 d9 8f ff 00 12 ab 4e b3 57 cd 16 19 0d 9c 88 1b a7 c4 e3 7d 45 e8 b1 6e b4 4d 39 81 ee a4 66 8b 35 b5 d0 1d 24 e4 b2 86 cf 27 dc be 5e c4 8b b0 e7 77 a5 7f 54 f4 d8 fa 39 72 ba bf 6f bc 47 fa 2e e3 b4 d9 f2 81 e6 6d de e2 a7 57 3f 9e a4 c8 45 ba e8 23 ee 86 c4 ae 36 52 2c b2 6c 75 f3 78 b5 76 7f 45 9e d2 49 f0 Data Ascii: ZgIZRPftkB49u7lPAgnpyBZ\|F12x?Ns#D#DZSB.EY8N2go&D/x!:yNW}EnM9f5$'^wT9roG.mW?E#6R,luxvEI
2024-05-23 13:50:50 UTC	16384	IN	Data Raw: 51 2a 53 b2 8c 9d 78 f2 32 e2 25 0d 33 fe a4 11 22 44 8d 04 a4 49 d0 4b c1 39 82 99 1c 30 6f 33 31 fb be 2f c7 a9 31 2a e4 eb bf ed 51 12 12 41 38 94 09 d4 ea 4a 09 39 a2 cd 36 92 90 9b 41 38 b5 1a 23 a5 df 41 87 24 98 d6 50 ff 00 c4 6c 77 c6 bd f5 eb 2d 4b 7b 7c d2 18 36 8b 50 cb 33 17 f6 9e e4 5b 2e 25 ce 73 b8 69 9d d5 a0 e2 32 dd c7 b0 01 d7 5f 45 d1 ac 1a 37 1b 47 98 30 8c 64 e3 ce 8d 36 8e 17 6b f9 26 f4 ae 7c eb 45 8d db 84 37 58 6f 67 c5 b4 ed 6b ee f3 f2 5c d0 a0 5d 6f 56 a7 6e b2 64 3f 24 04 bd 8b 7d 39 9e bd 55 ad 2b d5 fc 16 8f fb 3c 81 0e 2b ef 9c 90 70 6e 83 ba 3b 41 ea af 5d 3f 87 3a 93 fd a0 69 49 45 d8 5b 21 9b 82 f3 9e d8 8b 2a 53 10 f3 f2 af e1 d0 ab 74 87 4b 24 dc a2 46 6b 3c 59 1d e2 2e 8d ad 7b eb 4e ef 24 fe 8b 68 77 2f c6 e1 3c f1 Data Ascii: QSx2%3"DIK90o31/1QA8J96A8#A$Plw-K{\|6P3[.%si2_E7G0d6k&\|E7Xogk\]oVnd?$}9U+<+pn;A]?:iIE[!*StK$Fk<Y.{N$hw/<
2024-05-23 13:50:50 UTC	16384	IN	Data Raw: b5 cd 06 c9 f1 f0 11 29 44 e8 ff 00 43 54 90 3c d2 f0 4e 6c b3 6d 42 90 18 26 b3 24 e6 69 87 43 35 51 7f 90 d4 76 f6 41 8e d8 b8 bd 15 35 b6 cb 32 ee fe ca 1b 44 e6 3c 45 d4 34 ef ad 57 4f b0 68 f3 16 08 98 01 ed 24 b9 ab 68 e7 ed 4e ea 2b 27 5d 6a 2b 06 ec 97 45 b6 5a 1c 88 8b a0 68 b9 de 94 e9 71 5e 9b 28 96 d3 26 e1 f0 b8 5d 6f fc a9 fa a9 5a 37 a0 ef 9b fc a2 f0 1b 30 e6 21 67 2e 73 fb dd de 8b 75 80 b4 da a1 bf e9 8c 3b 2e 6d 33 8c 99 98 ee 88 97 30 eb eb 2a ac 04 2b 45 cf 4a 6e 2f c8 0d ec 8a a4 e3 98 ea 0d 7d ca a6 6c 27 e0 4a 38 f2 5a 26 de 1e 21 2f d7 d2 bd 55 4d 23 4a 4b 41 3f 1c 33 71 48 75 dc 77 00 d4 62 34 ca 24 49 58 25 20 82 24 94 48 24 e6 82 08 20 78 a2 46 8f 04 b4 48 20 92 89 04 d1 02 67 64 3e 04 5c 9c 7c 09 5b 21 4e 80 29 a0 d2 73 04 a4 Data Ascii: )DCT<NlmB&$iC5QvA52D<E4WOh$hN+']j+EZhq^(&]oZ70!g.su;.m30*+EJn/}l'J8Z&!/UM#JKA?3qHuwb4$IX% $H$ xFH gd>\\|[!N)s
2024-05-23 13:50:50 UTC	16384	IN	Data Raw: 79 1b 23 f8 0b 8b d1 5e 35 29 a0 60 4f 32 f8 7a f2 f3 f2 d5 f9 ab 3b 6d ca 4c ac 63 c3 68 9c 9c 5b a2 f1 73 e1 4a f7 77 7a ad 6d 8e d1 07 46 f1 90 78 94 9c 71 27 0b a7 9f a5 69 3e 9a 69 a8 a7 21 e3 16 d9 1e 27 0b a0 7f ae aa 2e 77 a4 3a 59 3b 4b a7 7d 1f 6a 32 8d 6e 1d d7 0b c7 e7 5e ef 2a 2b 9b 06 8f 46 b5 e4 6c 86 f9 76 8b a5 5f 84 74 30 4d 90 24 a6 f3 f6 89 49 24 19 36 aa 24 34 ec 27 f3 8c 1e c7 c2 ac c0 f3 6c 4f c4 98 91 20 41 30 52 30 e3 51 1d 94 2e f0 23 8f 1d f0 31 3c 37 15 f0 27 38 14 72 df 55 f2 ad ac 48 6f 81 54 f2 a7 60 66 d7 10 26 5d bb b5 1d bc cc ff 00 fc 96 4e f5 7c 7e 79 ec 80 fe ad fe e5 4c b5 16 57 79 55 b5 a6 83 ec 8b 87 f7 5a 88 ad 72 76 c7 35 2b 0d aa 7d a8 f8 29 81 ee d4 02 75 ad b9 ef e3 8f 11 75 2a c9 b7 42 95 b8 1b b1 bf 37 7c eb Data Ascii: y#^5)`O2z;mLch[sJwzmFxq'i>i!'.w:Y;K}j2n^+Flv_t0M$I$6$4'lO A0R0Q.#1<7'8rUHoT`f&]N\|~yLWyUZrv5+})uuB7\|
2024-05-23 13:50:50 UTC	13981	IN	Data Raw: 0d 7c ca 9d dd 4b 9b 3a 65 28 cc de 32 23 22 c8 88 8b 5d 4a b5 57 1a 37 3e e1 63 95 ca e3 00 94 62 dd 70 5e 70 5b 07 75 77 54 ab 4e 7a 79 74 2e 98 d6 90 db ce dd cb 64 9e c1 91 1d ec b9 e8 35 ee a5 69 cd 5e aa 73 2e 77 a5 7a 6c fd e9 fe 49 0c 09 88 2d ff 00 17 eb df 5f da 8b 45 a2 7a 18 50 b6 53 6e a0 3b 6e 26 d9 e9 c3 b8 ab f1 7e 8b 68 a8 74 9b 4a 5a b0 44 c0 00 5c 98 43 ba de 5c 34 f1 17 92 e6 d1 e2 dc 34 92 ea 78 7b 79 2e 6f 11 17 67 ce b5 ea a5 17 53 b0 58 23 58 20 ec 99 f6 8f 17 be 7b ac ab dd e9 dd 45 62 e9 3a 0c 19 b2 02 e1 e3 ba 24 5a b2 af 76 bd 55 5c f3 49 34 b3 de c2 b6 9e 59 0e 32 25 0f 6b e0 0e ea 53 a2 b5 eb 51 34 47 44 ca f8 f8 c8 98 04 dc 11 ff 00 f8 b5 ee 1f 2e fa ae a2 11 da 8e d8 83 20 22 03 ba 22 3d 9a 28 77 4b a4 3b 2c 4e 51 31 dc 43 Data Ascii: \|K:e(2#"]JW7>cbp^p[uwTNzyt.d5i^s.wzlI-_EzPSn;n&~htJZD\C\44x{y.ogSX#X {Eb:$ZvU\I4Y2%kSQ4GD. ""=(wK;,NQ1C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49866	52.20.146.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:50 UTC	354	OUT	GET /v2/player_loads HTTP/1.1 Host: raw.vidyard.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:50 UTC	158	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 13:50:50 GMT Content-Type: text/html;charset=utf-8 Content-Length: 30 Connection: close X-Cascade: pass
2024-05-23 13:50:50 UTC	30	IN	GET /v2/player_loads

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49876	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:50 UTC	636	OUT	GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/018e8a70-0f3b-7e64-9425-2236b00a879c/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:51 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:51 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 888584714dae198e-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 30812 Cache-Control: public, max-age=86400 Expires: Fri, 24 May 2024 13:50:51 GMT Last-Modified: Sat, 30 Mar 2024 04:21:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: WHcfdKBDtxUSao/J9ECzcg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: a62289f0-801e-0021-1714-9a1df8000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-23 13:50:51 UTC	467	IN	Data Raw: 37 63 31 61 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c1a{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 63 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 5c 6e 5c 6e 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 Data Ascii: ce and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.\n\nBecause we respect your right to privacy, you can choose not to allow some
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 59 6f 75 72 20 43 6f 6f 6b 69 65 20 43 6f 6e 74 72 6f 6c 73 3a 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 Data Ascii: kies":false,"LastReconsentDate":null,"BannerTitle":"Your Cookie Controls:","ForceConsent":false,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lif
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 65 6e 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 73 65 74 20 62 79 20 75 73 20 6f 72 20 62 79 20 74 68 69 72 64 20 70 61 72 74 79 20 70 72 6f 76 69 64 65 72 73 20 77 68 6f 73 65 20 73 Data Ascii: "Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose s
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 35 37 37 64 37 61 33 2d 35 33 31 31 2d 34 66 66 30 2d 39 32 61 39 2d 64 66 34 35 36 66 31 65 30 31 32 65 22 2c 22 4e 61 6d 65 22 3a 22 4f 41 4d 52 65 71 75 65 73 74 43 6f 6e 74 65 78 74 5f 22 2c 22 48 6f 73 74 22 3a 22 69 64 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4f 41 4d 52 65 71 75 65 73 74 43 6f 6e 74 65 78 74 5f 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 Data Ascii: ":1,"category":null,"isThirdParty":false},{"id":"2577d7a3-5311-4ff0-92a9-df456f1e012e","Name":"OAMRequestContext_","Host":"id.spglobal.com","IsSession":false,"Length":"0","description":"OAMRequestContext_","DurationType":1,"category":null,"isThirdParty":f
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 69 73 20 63 6f 6f 6b 69 65 20 63 6f 6c 6c 65 63 74 73 20 61 6e 64 20 74 72 61 6e 73 66 65 72 73 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 20 66 72 6f 6d 20 77 65 62 66 6f 72 6d 73 20 74 6f 20 69 6e 74 65 72 6e 61 6c 20 64 61 74 61 62 61 73 65 73 2e 5c 6e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 64 63 34 33 64 62 38 2d 64 30 39 31 2d 34 62 66 38 2d 61 37 32 30 2d 39 38 37 37 33 33 39 35 61 34 39 33 22 2c 22 4e 61 6d 65 22 3a 22 5f 70 61 72 73 65 6c 79 5f 76 69 73 69 74 6f 72 22 2c 22 48 6f 73 74 22 3a 22 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 Data Ascii: is cookie collects and transfers contact info from webforms to internal databases.\n","DurationType":1,"category":null,"isThirdParty":false},{"id":"0dc43db8-d091-4bf8-a720-98773395a493","Name":"_parsely_visitor","Host":"spglobal.com","IsSession":false,"Le
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 35 33 38 62 64 22 2c 22 4e 61 6d 65 22 3a 22 64 75 6d 6d 79 22 2c 22 48 6f 73 74 22 3a 22 64 65 76 2e 64 69 6d 65 6e 73 69 6f 6e 73 70 69 72 61 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 67 61 74 65 77 61 79 2e 6f 6e 32 34 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 67 61 74 65 77 61 79 2e 6f 6e 32 34 2e 63 6f 6d 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 37 30 31 22 2c 22 44 65 73 63 72 69 70 Data Ascii: 538bd","Name":"dummy","Host":"dev.dimensionspira.spglobal.com","IsSession":true,"Length":"0","description":"","DurationType":1,"category":null,"isThirdParty":false}]},{"HostName":"gateway.on24.com","DisplayName":"gateway.on24.com","HostId":"H701","Descrip
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 6f 64 75 63 74 20 73 75 69 74 65 20 66 72 6f 6d 20 63 6f 6d 70 61 6e 79 20 46 35 2e 20 55 73 75 61 6c 6c 79 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 6d 61 6e 61 67 69 6e 67 20 73 65 73 73 69 6f 6e 73 20 6f 6e 20 6c 6f 61 64 20 62 61 6c 61 6e 63 65 64 20 73 65 72 76 65 72 73 2c 20 74 6f 20 65 6e 73 75 72 65 20 75 73 65 72 20 72 65 71 75 65 73 74 73 20 61 72 65 20 72 6f 75 74 65 64 20 63 6f 6e 73 69 73 74 65 6e 74 6c 79 20 74 6f 20 74 68 65 20 63 6f 72 72 65 63 74 20 73 65 72 76 65 72 2e 20 54 68 65 20 63 6f 6d 6d 6f 6e 20 72 6f 6f 74 20 69 73 20 42 49 47 69 70 53 65 72 76 65 72 20 6d 6f 73 74 20 63 6f 6d 6d 6f 6e 6c 79 20 66 6f 6c 6c 6f 77 65 64 20 62 79 20 61 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 2c 20 75 73 75 61 6c 6c 79 20 74 68 65 20 6f 6e 65 Data Ascii: oduct suite from company F5. Usually associated with managing sessions on load balanced servers, to ensure user requests are routed consistently to the correct server. The common root is BIGipServer most commonly followed by a domain name, usually the one
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 22 48 6f 73 74 22 3a 22 73 70 6f 74 69 66 79 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 64 6f 6d 61 69 6e 20 69 73 20 6f 77 6e 65 64 20 62 79 20 53 70 6f 74 69 66 79 2c 20 61 20 55 53 41 20 62 61 73 65 64 20 6d 75 73 69 63 20 73 74 72 65 61 6d 69 6e 67 20 73 65 72 76 69 63 65 2e 20 20 53 70 6f 74 69 66 79 20 70 72 6f 76 69 64 65 73 20 61 20 6e 75 6d 62 65 72 20 6f 66 20 74 6f 6f 6c 73 20 74 6f 20 65 6d 62 65 64 20 69 6e 74 6f 20 77 65 62 73 69 74 65 73 2c 20 77 68 69 63 68 20 65 6e 61 62 6c 65 20 74 68 65 20 74 72 61 63 6b 69 6e 67 20 6f 66 20 75 73 65 72 73 20 61 6e 64 20 6e 6f 6e 2d 75 73 65 72 73 20 61 63 72 6f 73 73 20 Data Ascii: "Host":"spotify.com","IsSession":false,"Length":"364","description":"This domain is owned by Spotify, a USA based music streaming service. Spotify provides a number of tools to embed into websites, which enable the tracking of users and non-users across
2024-05-23 13:50:51 UTC	1369	IN	Data Raw: 47 72 6f 75 70 49 64 22 3a 22 43 30 30 30 34 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 6d 61 79 20 62 65 20 73 65 74 20 74 68 72 6f 75 67 68 20 6f 75 72 20 73 69 74 65 20 62 79 20 6f 75 72 20 61 64 76 65 72 74 69 73 69 6e 67 20 70 61 72 74 6e 65 72 73 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 75 73 65 64 20 62 79 20 74 68 6f 73 65 20 63 6f 6d 70 61 6e 69 65 73 20 74 6f 20 62 75 69 6c 64 20 61 20 70 72 6f 66 69 6c 65 20 6f 66 Data Ascii: GroupId":"C0004","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49885	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:51 UTC	430	OUT	GET /consent/1b11452b-62cc-4fad-8149-9b39c40329a4/018e8a70-0f3b-7e64-9425-2236b00a879c/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 888584777c698c0f-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 84209 Cache-Control: public, max-age=86400 Expires: Fri, 24 May 2024 13:50:52 GMT Last-Modified: Sat, 30 Mar 2024 04:21:40 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: WHcfdKBDtxUSao/J9ECzcg== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 15afbfd1-501e-0052-3dd1-9b4a1f000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-05-23 13:50:52 UTC	467	IN	Data Raw: 31 66 37 39 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 1f79{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 63 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 5c 6e 5c 6e 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 Data Ascii: ce and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience.\n\nBecause we respect your right to privacy, you can choose not to allow some
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 59 6f 75 72 20 43 6f 6f 6b 69 65 20 43 6f 6e 74 72 6f 6c 73 3a 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 Data Ascii: kies":false,"LastReconsentDate":null,"BannerTitle":"Your Cookie Controls:","ForceConsent":false,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lif
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 65 6e 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 73 65 74 20 62 79 20 75 73 20 6f 72 20 62 79 20 74 68 69 72 64 20 70 61 72 74 79 20 70 72 6f 76 69 64 65 72 73 20 77 68 6f 73 65 20 73 Data Ascii: "Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third party providers whose s
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 32 35 37 37 64 37 61 33 2d 35 33 31 31 2d 34 66 66 30 2d 39 32 61 39 2d 64 66 34 35 36 66 31 65 30 31 32 65 22 2c 22 4e 61 6d 65 22 3a 22 4f 41 4d 52 65 71 75 65 73 74 43 6f 6e 74 65 78 74 5f 22 2c 22 48 6f 73 74 22 3a 22 69 64 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4f 41 4d 52 65 71 75 65 73 74 43 6f 6e 74 65 78 74 5f 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 Data Ascii: ":1,"category":null,"isThirdParty":false},{"id":"2577d7a3-5311-4ff0-92a9-df456f1e012e","Name":"OAMRequestContext_","Host":"id.spglobal.com","IsSession":false,"Length":"0","description":"OAMRequestContext_","DurationType":1,"category":null,"isThirdParty":f
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 69 73 20 63 6f 6f 6b 69 65 20 63 6f 6c 6c 65 63 74 73 20 61 6e 64 20 74 72 61 6e 73 66 65 72 73 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 20 66 72 6f 6d 20 77 65 62 66 6f 72 6d 73 20 74 6f 20 69 6e 74 65 72 6e 61 6c 20 64 61 74 61 62 61 73 65 73 2e 5c 6e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 64 63 34 33 64 62 38 2d 64 30 39 31 2d 34 62 66 38 2d 61 37 32 30 2d 39 38 37 37 33 33 39 35 61 34 39 33 22 2c 22 4e 61 6d 65 22 3a 22 5f 70 61 72 73 65 6c 79 5f 76 69 73 69 74 6f 72 22 2c 22 48 6f 73 74 22 3a 22 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 Data Ascii: is cookie collects and transfers contact info from webforms to internal databases.\n","DurationType":1,"category":null,"isThirdParty":false},{"id":"0dc43db8-d091-4bf8-a720-98773395a493","Name":"_parsely_visitor","Host":"spglobal.com","IsSession":false,"Le
2024-05-23 13:50:52 UTC	753	IN	Data Raw: 35 33 38 62 64 22 2c 22 4e 61 6d 65 22 3a 22 64 75 6d 6d 79 22 2c 22 48 6f 73 74 22 3a 22 64 65 76 2e 64 69 6d 65 6e 73 69 6f 6e 73 70 69 72 61 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 67 61 74 65 77 61 79 2e 6f 6e 32 34 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 67 61 74 65 77 61 79 2e 6f 6e 32 34 2e 63 6f 6d 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 37 30 31 22 2c 22 44 65 73 63 72 69 70 Data Ascii: 538bd","Name":"dummy","Host":"dev.dimensionspira.spglobal.com","IsSession":true,"Length":"0","description":"","DurationType":1,"category":null,"isThirdParty":false}]},{"HostName":"gateway.on24.com","DisplayName":"gateway.on24.com","HostId":"H701","Descrip
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 69 74 20 69 73 20 68 6f 73 74 65 64 20 6f 6e 2c 20 62 75 74 20 6e 6f 74 20 61 6c 77 61 79 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 64 64 61 31 64 61 64 34 2d 65 66 65 66 2d 34 62 62 30 2d 38 37 30 61 2d 61 64 66 36 33 34 65 30 62 38 63 62 22 2c 22 4e 61 6d 65 22 3a 22 4a 53 45 53 53 49 4f 4e 49 44 22 2c 22 48 6f 73 74 22 3a 22 67 61 74 65 77 61 79 2e 6f 6e 32 34 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 65 6e 65 72 61 6c 20 70 75 72 70 6f 73 65 20 70 6c 61 74 66 6f 72 6d Data Ascii: 7ff9it is hosted on, but not always.","DurationType":1,"category":null,"isThirdParty":false},{"id":"dda1dad4-efef-4bb0-870a-adf634e0b8cb","Name":"JSESSIONID","Host":"gateway.on24.com","IsSession":true,"Length":"0","description":"General purpose platform
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 62 73 69 74 65 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 2c 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 73 70 6f 74 69 66 79 2e 63 6f 6d 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 73 70 6f 74 69 66 79 2e 63 6f 6d 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 34 33 30 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 31 33 64 66 33 34 63 65 2d 30 66 34 66 2d 34 36 31 36 2d 62 66 62 38 2d 63 62 37 62 32 64 34 30 64 65 39 38 22 2c 22 4e 61 6d 65 22 3a 22 73 70 5f 6c 61 6e 64 69 6e 67 22 2c 22 48 6f 73 74 22 3a 22 Data Ascii: bsite.","DurationType":1,"category":null,"isThirdParty":false}]},{"HostName":"spotify.com","DisplayName":"spotify.com","HostId":"H430","Description":"","PrivacyPolicy":"","Cookies":[{"id":"13df34ce-0f4f-4616-bfb8-cb7b2d40de98","Name":"sp_landing","Host":"
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 3a 5b 7b 22 69 64 22 3a 22 62 66 37 66 39 31 39 34 2d 39 64 33 38 2d 34 66 39 36 2d 38 35 65 64 2d 61 35 30 63 34 30 31 32 34 30 37 38 22 2c 22 4e 61 6d 65 22 3a 22 63 6f 6f 6b 69 65 73 2e 6a 73 5f 64 74 65 73 74 22 2c 22 48 6f 73 74 22 3a 22 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 5d 2c 22 50 75 72 70 6f 73 65 49 64 22 3a 22 34 37 45 35 34 41 46 38 2d 46 44 31 35 2d 34 32 35 30 2d 39 44 39 41 2d 38 39 45 42 31 38 41 32 38 45 46 46 22 2c 22 43 75 73 Data Ascii: :[{"id":"bf7f9194-9d38-4f96-85ed-a50c40124078","Name":"cookies.js_dtest","Host":"spglobal.com","IsSession":true,"Length":"0","description":"","DurationType":1,"category":null,"isThirdParty":false}]}],"PurposeId":"47E54AF8-FD15-4250-9D9A-89EB18A28EFF","Cus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49889	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:51 UTC	592	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 19297366-b01e-0077-0452-82ec17000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 35761 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88858477aff319db-EWR
2024-05-23 13:50:52 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49887	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	599	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 1cebe518-901e-002d-1152-828af0000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 35761 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88858477ab0c42cd-EWR
2024-05-23 13:50:52 UTC	560	IN	Data Raw: 37 63 37 38 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c78 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 Data Ascii: BsaW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvd
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 76 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 Data Ascii: vbGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMT
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 59 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a Data Ascii: YWdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49888	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	599	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: 531ea3b7-d01e-002c-4d52-82d52c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 35761 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88858477b83f19ef-EWR
2024-05-23 13:50:52 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49892	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	526	OUT	GET /zi-tag.js HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	620	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Wed, 15 May 2024 06:37:27 GMT x-amz-version-id: 4TVPkf0eH3kVl0Vjj3KPZI_FUiecs6et etag: W/"5c7228fc2640a4dfce48217428980fe3" vary: Accept-Encoding x-cache: Hit from cloudfront via: 1.1 931eba134e92940e6c080405fee84c64.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: -9o_pteNc9nf-KYwg_9MtV755lHbn0KmFbUTkGmHQVfkPijYzhX_Pg== Age: 19716 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584783e3e8c21-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:52 UTC	749	IN	Data Raw: 32 33 65 30 0d 0a 69 66 28 21 77 69 6e 64 6f 77 2e 7a 69 74 61 67 29 7b 77 69 6e 64 6f 77 2e 7a 69 74 61 67 3d 7b 7d 7d 77 69 6e 64 6f 77 2e 7a 69 74 61 67 2e 53 43 48 45 44 55 4c 45 5f 42 41 43 4b 45 4e 44 5f 55 52 4c 3d 77 69 6e 64 6f 77 2e 5a 49 54 61 67 45 6e 76 3d 3d 3d 22 64 65 76 22 3f 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 64 75 6c 65 2d 73 74 61 67 69 6e 67 2e 7a 6f 6f 6d 69 6e 66 6f 2e 63 6f 6d 2f 7a 69 73 63 68 65 64 75 6c 65 2e 6a 73 22 3a 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 64 75 6c 65 2e 7a 6f 6f 6d 69 6e 66 6f 2e 63 6f 6d 2f 7a 69 73 63 68 65 64 75 6c 65 2e 6a 73 22 3b 77 69 6e 64 6f 77 2e 7a 69 74 61 67 2e 46 4f 52 4d 43 4f 4d 50 4c 45 54 45 5f 42 41 43 4b 45 4e 44 5f 55 52 4c 3d 77 69 6e 64 6f 77 2e 5a 49 54 61 67 45 6e 76 3d 3d 3d 22 Data Ascii: 23e0if(!window.zitag){window.zitag={}}window.zitag.SCHEDULE_BACKEND_URL=window.ZITagEnv==="dev"?"https://schedule-staging.zoominfo.com/zischedule.js":"https://schedule.zoominfo.com/zischedule.js";window.zitag.FORMCOMPLETE_BACKEND_URL=window.ZITagEnv==="
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 64 6f 77 2e 7a 69 74 61 67 2e 69 73 43 68 61 74 53 63 72 69 70 74 41 6c 72 65 61 64 79 4c 6f 61 64 65 64 3d 28 29 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 69 6e 73 65 6e 74 43 6f 6d 70 61 6e 79 44 6f 6d 61 69 6e 26 26 77 69 6e 64 6f 77 2e 69 6e 73 65 6e 74 50 72 6f 6a 65 63 74 4e 61 6d 65 26 26 77 69 6e 64 6f 77 2e 69 6e 73 65 6e 74 50 72 6f 6a 65 63 74 4b 65 79 29 72 65 74 75 72 6e 20 74 72 75 65 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 77 69 6e 64 6f 77 2e 7a 69 74 61 67 2e 69 73 46 6f 72 6d 43 6f 6d 70 6c 65 74 65 53 63 72 69 70 74 41 6c 72 65 61 64 79 4c 6f 61 64 65 64 3d 28 29 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 5f 7a 69 5f 66 63 26 26 28 77 69 6e 64 6f 77 2e 5f 7a 69 5f 66 63 2e 66 6f 72 6d 49 64 7c 7c 77 69 6e 64 6f 77 2e 5f 7a Data Ascii: dow.zitag.isChatScriptAlreadyLoaded=()=>{if(window.insentCompanyDomain&&window.insentProjectName&&window.insentProjectKey)return true;else return false};window.zitag.isFormCompleteScriptAlreadyLoaded=()=>{if(window._zi_fc&&(window._zi_fc.formId\|\|window._z
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 7d 29 3b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 43 68 61 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 64 21 22 29 7d 3b 77 69 6e 64 6f 77 2e 7a 69 74 61 67 2e 49 6e 73 65 72 74 46 6f 72 6d 43 6f 6d 70 6c 65 74 65 4c 65 67 61 63 79 53 63 72 69 70 74 3d 6b 65 79 73 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 69 73 46 6f 72 6d 43 6f 6d 70 6c 65 74 65 44 69 73 61 62 6c 65 64 3d 3d 3d 74 72 75 65 29 72 65 74 75 72 6e 3b 69 66 28 77 69 6e 64 6f 77 2e 5a 49 57 68 69 74 65 4c 69 73 74 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 77 69 6e 64 6f 77 2e 5a 49 57 68 69 74 65 4c 69 73 Data Ascii: addEventListener("load",function(n){document.body.appendChild(s)});console.log("Chat Script Loaded!")};window.zitag.InsertFormCompleteLegacyScript=keys=>{if(window.isFormCompleteDisabled===true)return;if(window.ZIWhiteList&&Array.isArray(window.ZIWhiteLis
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 7a 69 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 7a 69 2e 61 73 79 6e 63 3d 74 72 75 65 3b 7a 69 2e 73 72 63 3d 77 69 6e 64 6f 77 3f 2e 7a 69 74 61 67 3f 2e 46 4f 52 4d 43 4f 4d 50 4c 45 54 45 5f 42 41 43 4b 45 4e 44 5f 55 52 4c 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 7a 69 2c 73 29 3b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 46 6f 72 6d 43 6f 6d 70 6c 65 74 65 20 53 63 72 69 70 74 20 4c 6f 61 64 65 64 21 22 29 3b 7a 69 2e 6f 6e 65 72 72 6f 72 3d 65 3d 3e 7b 65 72 72 6f 72 48 61 6e 64 6c 65 72 Data Ascii: lement("script");zi.type="text/javascript";zi.async=true;zi.src=window?.zitag?.FORMCOMPLETE_BACKEND_URL;var s=document.getElementsByTagName("script")[0];s.parentNode.insertBefore(zi,s);console.log("FormComplete Script Loaded!");zi.onerror=e=>{errorHandler
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 72 74 57 65 62 53 69 67 68 74 73 53 63 72 69 70 74 3d 28 6b 65 79 73 2c 5f 76 74 6f 6b 29 3d 3e 7b 69 66 28 77 69 6e 64 6f 77 2e 5a 49 57 68 69 74 65 4c 69 73 74 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 77 69 6e 64 6f 77 2e 5a 49 57 68 69 74 65 4c 69 73 74 29 26 26 77 69 6e 64 6f 77 2e 5a 49 57 68 69 74 65 4c 69 73 74 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 73 69 67 68 74 73 22 29 3d 3d 3d 2d 31 29 72 65 74 75 72 6e 3b 69 66 28 21 6b 65 79 73 2e 77 65 62 73 69 74 65 49 64 29 7b 72 65 74 75 72 6e 7d 63 6f 6e 73 74 20 5f 7a 69 74 6f 6b 3d 77 69 6e 64 6f 77 3f 2e 7a 69 74 61 67 3f 2e 72 65 61 64 43 6f 6f 6b 69 65 28 22 5f 7a 69 74 6f 6b 22 29 3b 6c 65 74 20 68 65 61 64 65 72 73 3d 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 74 65 78 74 2f 6a 61 Data Ascii: rtWebSightsScript=(keys,_vtok)=>{if(window.ZIWhiteList&&Array.isArray(window.ZIWhiteList)&&window.ZIWhiteList.indexOf("websights")===-1)return;if(!keys.websiteId){return}const _zitok=window?.zitag?.readCookie("_zitok");let headers={"Content-Type":"text/ja
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 4f 66 28 6e 61 6d 65 29 3d 3d 30 29 7b 6c 65 74 20 63 6f 6f 6b 69 65 3d 63 2e 73 70 6c 69 74 28 22 3d 22 29 5b 31 5d 3b 73 77 69 74 63 68 28 6e 61 6d 65 29 7b 63 61 73 65 22 5f 7a 69 74 6f 6b 22 3a 74 6f 6b 65 6e 73 2e 70 75 73 68 28 63 6f 6f 6b 69 65 29 3b 72 65 74 75 72 6e 20 74 6f 6b 65 6e 73 3b 64 65 66 61 75 6c 74 3a 74 6f 6b 65 6e 73 2e 70 75 73 68 28 63 6f 6f 6b 69 65 29 3b 72 65 74 75 72 6e 20 74 6f 6b 65 6e 73 7d 7d 7d 72 65 74 75 72 6e 20 74 6f 6b 65 6e 73 7d 3b 77 69 6e 64 6f 77 2e 7a 69 74 61 67 2e 64 65 6c 65 74 65 5a 69 54 6f 6b 3d 61 73 79 6e 63 28 29 3d 3e 7b 76 61 72 20 70 61 74 68 6e 61 6d 65 3d 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 24 2f 2c 22 22 29 2c 73 65 67 6d 65 6e 74 73 3d 70 61 74 Data Ascii: Of(name)==0){let cookie=c.split("=")[1];switch(name){case"_zitok":tokens.push(cookie);return tokens;default:tokens.push(cookie);return tokens}}}return tokens};window.zitag.deleteZiTok=async()=>{var pathname=location.pathname.replace(/\/$/,""),segments=pat
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 77 3f 2e 7a 69 74 61 67 3f 2e 5a 49 5f 54 41 47 5f 42 41 43 4b 45 4e 44 5f 55 52 4c 7d 67 65 74 53 75 62 73 63 72 69 70 74 69 6f 6e 73 60 2c 7b 6d 65 74 68 6f 64 3a 22 47 45 54 22 2c 68 65 61 64 65 72 73 3a 68 65 61 64 65 72 73 7d 29 3b 63 6f 6e 73 74 20 64 61 74 61 3d 61 77 61 69 74 20 72 65 73 70 6f 6e 73 65 2e 6a 73 6f 6e 28 29 3b 69 66 28 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 3d 3d 3d 32 30 30 26 26 64 61 74 61 26 26 64 61 74 61 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 73 29 7b 6c 65 74 20 63 61 6e 53 65 74 43 6f 6f 6b 69 65 3d 74 72 75 65 3b 69 66 28 77 69 6e 64 6f 77 3f 2e 5a 49 57 68 69 74 65 4c 69 73 74 3f 2e 6c 65 6e 67 74 68 3d 3d 3d 31 26 26 77 69 6e 64 6f 77 3f 2e 5a 49 57 68 69 74 65 4c 69 73 74 3f 2e 5b 30 5d 3d 3d 3d 22 66 6f 72 6d 63 Data Ascii: w?.zitag?.ZI_TAG_BACKEND_URL}getSubscriptions`,{method:"GET",headers:headers});const data=await response.json();if(response.status===200&&data&&data.subscriptions){let canSetCookie=true;if(window?.ZIWhiteList?.length===1&&window?.ZIWhiteList?.[0]==="formc
2024-05-23 13:50:52 UTC	229	IN	Data Raw: 66 65 74 63 68 28 60 24 7b 77 69 6e 64 6f 77 2e 7a 69 74 61 67 2e 5a 49 5f 54 41 47 5f 42 41 43 4b 45 4e 44 5f 55 52 4c 7d 6c 6f 67 45 72 72 6f 72 60 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 41 75 74 68 6f 72 69 7a 61 74 69 6f 6e 3a 22 42 65 61 72 65 72 20 22 2b 77 69 6e 64 6f 77 2e 5a 49 50 72 6f 6a 65 63 74 4b 65 79 7d 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 72 72 6f 72 44 61 74 61 29 7d 29 7d 3b 77 69 6e 64 6f 77 3f 2e 7a 69 74 61 67 3f 2e 47 65 74 4c 69 73 74 4f 66 45 6e 74 69 74 6c 65 6d 65 6e 74 73 28 29 3b 0d 0a Data Ascii: fetch(`${window.zitag.ZI_TAG_BACKEND_URL}logError`,{method:"POST",headers:{"Content-Type":"application/json",Authorization:"Bearer "+window.ZIProjectKey},body:JSON.stringify(errorData)})};window?.zitag?.GetListOfEntitlements();
2024-05-23 13:50:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49891	65.9.86.55	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	559	OUT	GET /i/6d462c1fd1fbf4524156773cc7d41d65.js HTTP/1.1 Host: ob.fishrobotflower.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	503	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 104552 Connection: close ETag: "19868-JhYSXZ1v99WcD/BUEWhy69Y8UBE" Server: Caddy Cache-Control: max-age=43200 Date: Thu, 23 May 2024 02:23:02 GMT Expires: Thu, 23 May 2024 14:23:02 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f32f19f2f9b3c0c60a4ff31c809ed008.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-C1 X-Amz-Cf-Id: A2wHzjjLh7LQ3Y-FDwZaZ2pvOHCjGhIrr7Wx3zPWrOLw4-xZZhUxhQ== Age: 41270
2024-05-23 13:50:52 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2024-05-23 13:50:52 UTC	16384	IN	Data Raw: 72 20 72 3d 78 2e 57 74 28 22 5f 67 61 22 29 3b 69 66 28 72 29 7b 76 61 72 20 65 3d 72 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 65 2e 6c 65 6e 67 74 68 3e 3d 32 29 72 65 74 75 72 6e 20 65 5b 65 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 7d 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 48 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 76 2b 74 2c 61 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 2c 6f 3d 22 22 3b 69 66 28 70 2e 4a 28 6e 29 29 6f 3d 6e 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 75 20 69 6e 20 6e 29 7b 6f 2b 3d 75 2b 22 3d 22 2b 28 70 2e 6e 74 28 75 2c 22 65 5f 22 29 3f 63 28 70 2e 59 28 75 6e Data Ascii: r r=x.Wt("_ga");if(r){var e=r.split(".");if(e.length>=2)return e[e.length-2]+"."+e[e.length-1]}}catch(t){}return"-"},Hn:function(t,n,r){var e=v+t,a="application/x-www-form-urlencoded",o="";if(p.J(n))o=n;else{for(var u in n){o+=u+"="+(p.nt(u,"e_")?c(p.Y(un
2024-05-23 13:50:52 UTC	12288	IN	Data Raw: 6f 6e 28 74 2c 6e 2c 72 29 7b 76 61 72 20 65 3d 72 28 30 29 2c 69 3d 72 28 32 29 2c 61 3d 65 2e 64 6f 6d 55 2c 6f 3d 65 2e 75 2c 63 3d 65 2e 75 74 69 6c 2c 75 3d 77 69 6e 64 6f 77 2c 66 3d 64 6f 63 75 6d 65 6e 74 2c 76 3d 66 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 73 3d 75 2e 73 63 72 65 65 6e 2c 6c 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 35 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 7d 76 61 72 20 68 3d 7b 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 65 29 7b 76 61 72 20 5f 3d 5b 5d 2c 6d 3d 30 2c 70 3d 30 2c 79 3d 21 31 2c 67 3d 21 31 2c 62 3d 21 31 2c 77 3d 6e 2e 64 65 74 65 63 74 6f 72 54 69 6d 65 6f 75 Data Ascii: on(t,n,r){var e=r(0),i=r(2),a=e.domU,o=e.u,c=e.util,u=window,f=document,v=f.documentElement,s=u.screen,l=u.navigator;function d(){return Math.floor(50*Math.random())+1}var h={};t.exports=function(t,n,r,e){var _=[],m=0,p=0,y=!1,g=!1,b=!1,w=n.detectorTimeou
2024-05-23 13:50:52 UTC	16384	IN	Data Raw: 69 67 49 6e 74 28 31 29 20 3d 3d 3d 20 31 6e 20 26 26 20 4e 75 6d 62 65 72 28 31 6e 29 20 3d 3d 3d 20 31 27 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 21 30 7d 2c 41 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 74 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 72 65 74 75 72 6e 21 65 76 61 6c 28 22 28 29 3d 3e 21 21 31 22 29 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 21 30 7d 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6c 2e 6d 69 6d 65 54 79 70 65 73 26 26 6c 2e 6d 69 6d 65 54 79 70 65 73 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 4d 69 6d 65 54 79 70 65 41 72 72 61 79 5d 22 21 3d 3d 74 26 26 21 2f 4d 53 4d 69 6d 65 54 79 70 65 73 43 6f 6c 6c 65 63 74 69 6f Data Ascii: igInt(1) === 1n && Number(1n) === 1')}catch(t){}return!0},An=function(){if(!dt)return!1;try{return!eval("()=>!!1")()}catch(t){}return!0},Fn=function(){try{var t=l.mimeTypes&&l.mimeTypes.toString();return"[object MimeTypeArray]"!==t&&!/MSMimeTypesCollectio
2024-05-23 13:50:52 UTC	16384	IN	Data Raw: 65 3a 22 65 22 7d 7d 2c 6e 3d 5b 31 2c 4d 61 74 68 2e 50 49 2c 4d 61 74 68 2e 50 49 2f 32 2c 31 2f 4d 61 74 68 2e 50 49 2c 31 65 2d 33 30 30 2c 31 65 2d 33 31 30 2c 32 2c 2d 31 30 30 5d 2c 72 3d 22 22 2c 65 3d 30 3b 65 3c 6e 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 7b 76 61 72 20 69 3d 6e 5b 65 5d 3b 72 2b 3d 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 65 78 70 28 69 29 7d 29 2c 72 2b 3d 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 73 69 6e 28 69 29 7d 29 2c 72 2b 3d 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 63 6f 73 28 69 29 7d 29 2c 72 2b 3d 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 74 61 6e 28 69 29 7d 29 2c 72 2b 3d 74 28 66 75 Data Ascii: e:"e"}},n=[1,Math.PI,Math.PI/2,1/Math.PI,1e-300,1e-310,2,-100],r="",e=0;e<n.length;e+=1){var i=n[e];r+=t(function(){return Math.exp(i)}),r+=t(function(){return Math.sin(i)}),r+=t(function(){return Math.cos(i)}),r+=t(function(){return Math.tan(i)}),r+=t(fu
2024-05-23 13:50:52 UTC	16384	IN	Data Raw: 21 31 2c 6d 3d 66 2e 55 6e 28 29 2c 70 3d 21 31 2c 79 3d 7b 43 65 3a 6e 75 6c 6c 2c 49 65 3a 5b 5d 2c 45 65 3a 7b 6b 65 3a 30 2c 78 65 3a 5b 5d 7d 2c 41 65 3a 7b 6b 74 3a 6e 75 6c 6c 2c 6b 65 3a 30 2c 46 65 3a 6e 75 6c 6c 7d 2c 44 65 3a 7b 6b 74 3a 6e 75 6c 6c 2c 6b 65 3a 30 2c 46 65 3a 6e 75 6c 6c 7d 2c 4f 65 3a 7b 6b 74 3a 6e 75 6c 6c 2c 6b 65 3a 30 2c 46 65 3a 6e 75 6c 6c 7d 2c 6a 65 3a 7b 6b 74 3a 6e 75 6c 6c 2c 6b 65 3a 30 2c 46 65 3a 6e 75 6c 6c 7d 2c 52 65 3a 7b 6b 74 3a 6e 75 6c 6c 2c 6b 65 3a 30 2c 46 65 3a 6e 75 6c 6c 7d 2c 4d 65 3a 5b 5d 2c 4e 65 3a 5b 5d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 79 2e 43 65 7c 7c 28 79 2e 43 65 3d 74 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 68 69 64 64 65 6e 22 3d 3d 3d 63 2e 55 Data Ascii: !1,m=f.Un(),p=!1,y={Ce:null,Ie:[],Ee:{ke:0,xe:[]},Ae:{kt:null,ke:0,Fe:null},De:{kt:null,ke:0,Fe:null},Oe:{kt:null,ke:0,Fe:null},je:{kt:null,ke:0,Fe:null},Re:{kt:null,ke:0,Fe:null},Me:[],Ne:[]},g=function(t,n){y.Ce\|\|(y.Ce=t)},b=function(t,n){"hidden"===c.U
2024-05-23 13:50:52 UTC	10344	IN	Data Raw: 3b 72 65 74 75 72 6e 20 61 2e 7a 74 28 6f 2e 44 6e 2c 74 2c 72 2c 38 36 34 30 30 29 7c 7c 22 2d 22 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 2d 22 7d 7d 2c 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 57 74 28 6f 2e 44 6e 29 7c 7c 22 2d 22 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 2d 22 7d 7d 2c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 63 6b 29 72 65 74 75 72 6e 22 22 3b 74 72 79 7b 76 61 72 20 6e 3d 6f 2e 41 6e 2c 72 3d 61 2e 57 74 28 6e 29 2c 65 3d 22 22 3b 72 65 74 75 72 6e 20 65 3d 72 7c 7c 5b 22 31 22 2c 69 2e 4c 28 61 2e 4a 74 28 29 2f 31 65 33 29 2c 69 2e 4e 28 31 36 29 5d 2e 6a 6f 69 6e 28 22 2e 22 29 2c 61 2e 7a 74 28 6e 2c 65 2c 74 2e 61 70 64 2c 37 38 38 34 Data Ascii: ;return a.zt(o.Dn,t,r,86400)\|\|"-"}catch(t){return"-"}},ce:function(){try{return a.Wt(o.Dn)\|\|"-"}catch(t){return"-"}},ue:function(t){if(!t\|\|!t.ck)return"";try{var n=o.An,r=a.Wt(n),e="";return e=r\|\|["1",i.L(a.Jt()/1e3),i.N(16)].join("."),a.zt(n,e,t.apd,7884

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49895	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	386	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 8bb19052-c01e-006d-0924-7c8dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 71302 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885847c2e5743c4-EWR
2024-05-23 13:50:52 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49897	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:52 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: fc145aa7-801e-000e-2a26-7c1033000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 66450 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885847cd9854255-EWR
2024-05-23 13:50:52 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-05-23 13:50:52 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49896	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	563	OUT	OPTIONS /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,visited_url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:53 UTC	607	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 13:50:53 GMT Connection: close apigw-requestid: YOh1kh3QvHcEMOg= x-powered-by: Express vary: Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 0 x-cache: Miss from cloudfront via: 1.1 c123eaeab0338ee38c9f9a5fe5647218.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: Uw_8l55duEBxHxK2uhL34zGOvDX5_qWHnYSHyT6DQgRPv-_eq02siw== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885847cec1e41df-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49898	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:53 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:52 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 2afaf4cb-101e-0033-69c3-7b6628000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 30941 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885847d1e8042a3-EWR
2024-05-23 13:50:53 UTC	560	IN	Data Raw: 37 63 37 38 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c78 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 Data Ascii: BsaW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvd
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 76 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 Data Ascii: vbGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMT
2024-05-23 13:50:53 UTC	1369	IN	Data Raw: 59 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a Data Ascii: YWdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49899	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:52 UTC	577	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:53 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:53 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Mon, 20 May 2024 16:31:16 GMT ETag: 0x8DC78EA45982A81 x-ms-request-id: 325facb6-001e-004f-4734-ab8571000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 65959 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885847d9c687ca8-EWR
2024-05-23 13:50:53 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49905	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	719	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer 1edd5669f11674524557 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 visited_url: https://www.spglobal.com/marketintelligence/en/ Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:54 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:54 GMT Content-Type: application/json; charset=utf-8 Content-Length: 199 Connection: close apigw-requestid: YOh1whRoPHcES3A= x-powered-by: Express etag: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc" access-control-allow-origin: * access-control-expose-headers: * x-cache: Miss from cloudfront via: 1.1 c36b03c9737c294317e3651e77ee0c4a.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: FILAx3IthjR2mYM3zrHjnInJrmRWdQwIsWz8YdI6Sha4QZBJlcUgFQ== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584845c2b7ca8-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:54 UTC	199	IN	Data Raw: 7b 22 65 72 72 22 3a 66 61 6c 73 65 2c 22 73 75 62 73 63 72 69 70 74 69 6f 6e 73 22 3a 7b 22 66 63 22 3a 7b 22 70 72 6f 6a 65 63 74 4b 65 79 22 3a 22 65 38 61 35 39 65 34 35 39 39 36 63 65 61 64 30 30 63 37 31 63 30 30 39 33 33 30 34 61 30 22 7d 2c 22 77 73 22 3a 7b 22 77 65 62 73 69 74 65 49 64 22 3a 22 36 32 62 34 36 64 61 37 33 65 63 39 36 32 30 30 38 66 62 63 65 30 32 39 22 7d 7d 2c 22 5f 7a 69 74 6f 6b 22 3a 22 61 63 37 34 36 61 30 37 31 36 62 35 31 65 36 37 33 38 31 37 31 37 31 36 34 37 32 32 35 34 22 2c 22 5f 76 74 6f 6b 22 3a 22 4f 43 34 30 4e 69 34 78 4d 6a 4d 75 4d 54 63 31 22 7d Data Ascii: {"err":false,"subscriptions":{"fc":{"projectKey":"e8a59e45996cead00c71c0093304a0"},"ws":{"websiteId":"62b46da73ec962008fbce029"}},"_zitok":"ac746a0716b51e6738171716472254","_vtok":"OC40Ni4xMjMuMTc1"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49904	142.250.185.198	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	1220	OUT	GET /activityi;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1 Host: 11756258.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:54 UTC	1190	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://11756258.fls.doubleclick.net/activityi;dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49903	142.250.185.162	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	1230	OUT	GET /td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:54 UTC	795	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 14:05:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 13:50:54 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-23 13:50:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49907	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	371	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:54 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:54 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Mon, 20 May 2024 16:31:16 GMT ETag: 0x8DC78EA45982A81 x-ms-request-id: 66fb0907-101e-0050-3630-ab5e61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 51035 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88858484adc10fa0-EWR
2024-05-23 13:50:54 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49906	54.196.227.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	548	OUT	OPTIONS / HTTP/1.1 Host: vfhbo3jsnvrutdkuee1akd0lj.litix.io Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://play.vidyard.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:54 UTC	291	IN	HTTP/1.1 200 OK access-control-allow-headers: Content-Type access-control-allow-methods: POST, GET access-control-allow-origin: * access-control-max-age: 86400 date: Thu, 23 May 2024 13:50:54 GMT content-length: 0 x-envoy-upstream-service-time: 0 server: envoy connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49908	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	667	OUT	GET /logos/5cb57702-8ef7-437e-a62b-408fe78cd310/6363e1f2-8f9e-4538-82e0-901d90e0cf02/splogo.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:54 UTC	841	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:54 GMT Content-Type: application/octet-stream Content-Length: 9618 Connection: close Content-MD5: ErRY5AFr7DHWQJxbChpLKA== Last-Modified: Tue, 25 Feb 2020 16:55:07 GMT ETag: 0x8D7BA1377E666A5 x-ms-request-id: 59bd558c-901e-0012-0735-234253000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75852 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88858487fb061841-EWR
2024-05-23 13:50:54 UTC	528	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 00 ae 08 06 00 00 00 5a fb 28 32 00 00 20 00 49 44 41 54 78 9c ed dd 79 9c 1c 75 9d ff f1 57 75 f7 1c 49 26 c9 e4 26 e4 20 21 07 49 00 39 94 e5 12 f1 44 60 f1 40 f1 04 95 cd a2 78 72 28 a8 ab fb 73 11 ef f5 20 a2 b0 c2 22 77 d6 55 59 51 3c 50 17 57 41 41 76 b9 91 2b 21 81 1c 24 84 9c 93 cc e4 98 e9 a3 7e 7f 7c ba 33 93 9e ee aa 6f 55 57 cf d1 79 3f 1f 8f 3c c4 e9 ea aa 9a 9e ea fa d4 f7 fb fd 7c 3f 5f 10 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: PNGIHDRZ(2 IDATxyuWuI&& !I9D`@xr(s "wUYQ<PWAAv+!$~\|3oUWy?<\|?_
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: f6 35 6d 7c 3b 63 5a 9a f1 f1 28 f8 3e cb 37 6c ac ba 6d 2a 95 a2 50 28 24 72 5e 25 99 74 8a 5c 3e d9 7d 0e 37 f5 ba 96 a2 ec d7 f3 3c 52 1e e4 0b d1 cf 23 9d f2 28 f8 d4 ed fb 90 84 b8 d7 99 07 50 c7 ef fa 50 d3 e8 d7 41 1c 0d 1f d8 2a dd 28 9a 9b 32 bc 7c da 54 26 b7 b6 70 50 53 0b e3 d2 29 0e f6 9b 38 30 0b f9 2a 1f 49 1a 9f 15 4d 3e 1b bc 1c 3b 0a 05 9e eb e9 66 ed ce dd 3c bc 76 df a2 d8 b5 5c 28 e9 94 b7 cf c5 39 b5 7d 2c 0b 27 8c e3 f0 51 a3 38 dc 6b 62 66 36 c5 9e 94 c7 21 5d 1e 63 f2 05 7c 3c 7c cf e3 e9 36 c8 7a 05 9e cb e4 59 e9 e7 59 d9 bd 87 95 9d 5d 3c b1 7e c3 de 7d 25 11 8c ca f7 f1 9e 85 f3 38 a2 b9 95 1c 1e b5 7e 2f d2 9e cf f3 f9 1c 1b b2 39 9a 3d 9b 60 b9 2d 97 67 4d 57 17 9b 3b bb d8 ba 73 57 bf f7 d4 f3 41 a5 e2 39 a6 52 e4 cb 1e 12 Data Ascii: 5m\|;cZ(>7lmP($r^%t\>}7<R#(PPA(2\|T&pPS)80*IM>;f<v\(9},'Q8kbf6!]c\|<\|6zYY]<~}%8~/9=`-gMW;sWA9R
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: 61 4b 01 48 3b 07 b4 72 fb 06 38 8f eb 27 15 b8 61 e3 46 9e 2a 76 cd a7 3c 6b e1 0d 97 ae 37 cf f3 48 7b 1e b9 e2 35 3d aa b5 95 73 e6 ce e6 c2 5d 23 98 d2 9d 23 e7 65 d8 91 4e c7 ba 0e 7c 0f 46 16 0a b4 16 f2 4c 58 f7 68 c2 67 3e 78 1a 2e b0 1d 3d 73 1a e7 8d 9f c8 bb 36 59 77 61 57 ba 39 b1 20 e1 a4 cf 0d e3 a5 d6 0c 57 94 dd 30 4a 1d 9f 00 0b a6 4e e1 03 53 a6 f0 a1 62 f0 ed 4a 37 d7 ed 86 89 e7 d1 9e cf e2 f9 79 9e 1b 95 61 49 a6 8b a5 4f 2d df fb 72 73 3a 4d 01 7f 9f 80 76 ca bc 83 f9 78 cb 58 4e dc 66 01 6d 5b a6 a9 f2 c0 d1 20 f0 3d 68 f6 a1 2d df 83 ef a5 b8 7a 62 8e 9b d6 6f 60 e5 c6 de ee a7 a8 e3 2b e5 01 fd 83 87 2d e4 9f 3b 47 d0 96 cb 45 6a 15 25 a1 ef 13 f5 96 a6 66 6e 6c cf f2 c6 3d 4d 1c d6 d9 43 c1 4b b3 3d 9d cc df c2 f7 60 4c 3e 4f c6 Data Ascii: aKH;r8'aF*v<k7H{5=s]##eN\|FLXhg>x.=s6YwaW9 W0JNSbJ7yaIO-rs:MvxXNfm[ =h-zbo`+-;GEj%fnl=MCK=`L>O
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: f8 b7 90 6d 8e 02 22 65 40 64 3c 68 f2 7d 5a f3 79 4a 99 ae b7 4f f2 b9 ae 63 0b f7 af 5a bb 77 bb f2 00 57 a9 c5 bf f8 d0 05 5c b2 67 24 53 f6 94 02 7e 8a ee 54 8a 9c 97 c2 07 4a 47 08 3a 97 94 6f 59 c0 2d 85 02 be 47 dc 5e 83 c7 b0 87 ab 6a d6 51 61 79 2f 05 b6 21 ca 31 b0 bd 09 f8 14 76 13 4a c2 6d c0 57 88 f8 85 72 70 24 f0 43 ac 85 16 47 17 70 09 70 4d 62 67 d4 df 02 e0 e9 3a ee bf e4 0f c0 7f 61 01 bb 2b ca 1b 7b c7 a8 2c 2d fe b2 f6 dd ac ee c9 72 51 66 34 c7 74 e4 29 78 29 3a d2 99 b8 dd 3b 17 02 9f c1 5a f9 b5 ba 19 f8 1a f0 4c 0d fb b8 1e f8 87 80 d7 57 61 bd 13 91 35 03 39 82 6f cc 75 f6 5e 60 69 c8 36 87 62 ad 91 d8 6c 9a 8c 35 0a 7f 35 d1 e3 9a 1d 5b b9 ef f9 de 46 60 26 6d 8d c3 bd 01 cd f3 78 df c2 f9 5c 94 6b 63 d6 ce 1c d9 54 9a 9d a9 f4 Data Ascii: m"e@d<h}ZyJOcZwW\g$S~TJG:oY-G^jQay/!1vJmWrp$CGppMbg:a+{,-rQf4t)x):;ZLWa59ou^`i6bl55[F`&mx\kcT
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: fb ec 27 d1 3b 55 a5 07 2b df b5 0c 4b 68 fa 3d 56 bf b0 de fa 5e 1f f3 b1 4c d6 57 63 0f 04 33 e8 ed 15 e9 c1 0a 42 3f 89 25 77 dd 89 cd 8b ac 87 d9 58 af c3 09 c0 e1 d8 98 fb 28 ac c6 28 d8 90 c8 2e e0 79 ec 33 ba 07 cb c2 0d 2d e6 2c d5 35 62 8b ad dd 61 9b b5 e1 9b 38 d9 83 db 44 5a 97 04 81 ed 01 af 4d c0 ad e5 77 38 c1 49 28 db b0 2f d0 70 53 4a de 09 92 c2 5a 35 49 68 21 b8 d6 5e c9 f5 09 1d 0f ac 16 66 98 24 4b c1 c5 75 0e f0 10 36 c6 7c 29 16 38 0e 64 df f9 97 cd 58 60 79 13 36 3d e5 51 ec ef f7 de 3a 9f 5b e9 21 e3 27 58 50 fd 0e 96 84 34 97 7d bb fa 9b b1 d6 d2 69 c5 f3 fb 1b 56 99 e8 15 09 9e cb e9 d8 dc c7 e7 b0 24 b2 73 b1 9e a4 31 f4 06 35 b0 eb b6 0d fb ee 9e 53 dc 76 35 76 3d 9c 98 e0 f9 ec 57 1a b1 c5 e6 32 cb 64 5a 82 c7 3b 03 0b a6 95 Data Ascii: ';U+Kh=V^LWc3B?%wX((.y3-,5ba8DZMw8I(/pSJZ5Ih!^f$Ku6\|)8dX`y6=Q:[!'XP4}iV$s15Sv5v=W2dZ;
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: 8a 8d 0b c4 0d c4 5f 77 38 6e 9c 2f 44 2d 4b 2b 9e 8f ad 03 17 b6 32 78 81 f8 ab 45 bb 56 e1 77 11 f6 f4 0e e1 4f e8 25 5d b5 9c 48 05 ab 12 de 5f 25 2e d5 41 a2 06 eb 3c d6 c2 fb 7e c8 76 67 61 0f 75 71 3d 4b f4 c0 7f 17 36 0e 7d 5c c0 36 ed 58 cb ec be 0a af fd 18 78 80 ca 53 8c 9a 89 5e e5 28 ac 24 5c 3b f6 b0 38 1c 4b e3 0d 98 46 4c f7 2f 97 c7 ca fe 84 65 1a 26 e9 b3 44 ff f2 cf c1 c6 b2 6a 69 5d 9e 86 95 37 0a 12 16 60 92 96 a6 b7 c5 16 f4 2f 6e 50 fb 1e 6e 4b bf b8 72 09 fc 8d bc 86 72 58 37 5e 17 d1 97 7a 02 9b 6b 19 d6 d2 8d b2 a0 6b 25 71 27 b8 bb 4c c6 ae f6 60 bc 1a 9b d3 78 6f 85 7f 7f c4 5a 6c 51 6c 08 79 bd 05 15 4d 0e b5 3f 04 b6 92 cb b0 a7 ae a4 92 0c c2 5c 8c 0d 60 bb ba 1b 7b 12 ab c5 11 d8 b8 46 d0 80 78 23 7d 29 b6 e1 96 58 12 85 4b Data Ascii: _w8n/D-K+2xEVwO%]H_%.A<~vgauq=K6}\6XxS^($\;8KFL/e&Dji]7`/nPnKrrX7^zkk%q'L`xoZlQlyM?\`{Fx#})XK
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: bd c2 47 5f 07 11 fe 85 da 40 ff ac ab a0 b4 61 80 99 11 cf 63 19 d6 15 1b 56 6b ae 92 3d d8 64 72 31 79 ac 06 60 98 a4 56 97 9e c7 d0 c8 a6 5b 43 f5 e2 d9 25 6f aa 61 ff 61 e5 ba 1e a6 b6 d5 20 5e 1d f3 7d 27 13 9e 9d fc 50 d9 ff 1f 4b f8 72 3c 97 13 7d e9 2c 97 16 a0 84 68 b4 c0 76 3f 6e 37 f6 2b 12 3c a6 4b da 7f a5 25 5f c2 32 10 df 1c e3 5c b6 62 45 9f a3 a6 64 df 40 78 ba f3 fe e6 87 0e db bc 09 cb 3a ad d5 40 65 d4 b9 4c 60 fe 9f 90 d7 67 12 be 9a 79 25 27 13 3e 86 f8 97 18 fb ed 2b 6c 5c b4 9a f3 1c b6 29 3f b7 39 0e ef 89 f3 b0 f8 fa 18 ef 89 2a 4e 49 b4 61 a5 d1 02 5b 17 6e 49 17 1f 20 99 75 da 66 e1 16 d8 ee a9 f0 b3 47 08 be c0 16 61 d3 04 a2 5a 85 8d a5 b9 56 e5 e8 06 be 16 e3 38 8d ee 51 dc c6 39 7f 0d cc ad e1 38 df 60 e0 d6 d8 72 a9 80 e1 Data Ascii: G_@acVk=dr1y`V[C%oaa ^}'PKr<},hv?n7+<K%_2\bEd@x:@eL`gy%'>+l\)?9*NIa[nI ufGaZV8Q98`r
2024-05-23 13:50:54 UTC	876	IN	Data Raw: ec 97 f6 97 c0 06 36 46 72 18 d6 7a 4b b2 ba 7f 37 f6 c4 36 1f f8 b7 1a f7 75 3b 96 25 f5 ab 5a 4f aa 28 87 05 f5 45 ec bb 88 e5 f1 58 25 f1 30 97 11 3c 38 ee 32 e1 b7 d6 aa eb 43 d1 17 b1 84 9d 5f 24 b0 af 07 b1 b1 cd 7f 2a fb 59 25 93 1d f7 f9 53 ec 89 dd e5 21 c9 65 35 f0 75 58 2b e2 02 c2 57 9a 0e b2 16 cb e6 8b d3 9a 08 1b 73 1c 87 b5 30 5f 87 7b 71 82 72 df 06 ce 8c f9 de 0f 52 5b 20 d9 89 55 b2 29 25 bc fd 02 b7 fb 49 50 cd d9 2b b1 c9 e7 2e e3 67 13 1c b6 19 36 1a 39 2b 32 cc e9 58 eb ea d5 58 2a 7f 14 2f 61 4f 55 bf c7 aa 25 c4 ad 48 1e e4 54 ec 26 10 94 05 57 cd 4a ac 05 78 1d d5 bb 67 26 62 69 e9 e3 a9 9e 8a 9c c1 2e f8 e3 a8 5c 43 70 06 e1 4f 96 4b 49 b6 84 d9 50 73 2c 36 2e 79 3a 95 d7 dd ab 24 87 95 ae fa 3e 95 c7 c4 52 d8 5c cc f2 9a a6 f7 Data Ascii: 6FrzK76u;%ZO(EX%0<82C_$Y%S!e5uX+Ws0_{qrR[ U)%IP+.g69+2XX/aOU%HT&WJxg&bi.\CpOKIPs,6.y:$>R\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49909	104.19.177.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	609	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:54 UTC	830	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:54 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Mon, 20 May 2024 16:31:17 GMT ETag: 0x8DC78EA46222CDC x-ms-request-id: a3095f4a-901e-00af-67e8-aa63f9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 71385 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 888584880f2143b3-EWR
2024-05-23 13:50:54 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-05-23 13:50:54 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-05-23 13:50:54 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49912	173.194.76.157	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	869	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&gjid=236941860&_gid=628374559.1716472251&_u=YHBAAEAAAAAAACAEK~&z=1376759657 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.spglobal.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.spglobal.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 23 May 2024 13:50:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:55 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49913	142.250.186.102	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	1206	OUT	GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	4102	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16828096138677050514"}],"aggregatable_trigger_data":[{"filters":[{"14":["12593915"]}],"key_piece":"0xc259d5b69d511d38","source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]},{"key_piece":"0x4669cf00f9937fab","not_filters":{"14":["12593915"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"628539424":81,"628539425":81,"628539426":81,"628539427":7946,"628678596":32,"628678597":32,"628678598":32,"628678599":3177},"debug_key":"9077553200263231938","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16828096138677050514","filters":[{"14":["12593915"],"source_type":["event"]}, [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 22-Jun-2024 13:50:54 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 14:05:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49911	173.194.76.157	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:54 UTC	867	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&gjid=351969260&_gid=628374559.1716472251&_u=YHDAAEABAAAAACAGK~&z=101072218 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.spglobal.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.spglobal.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 23 May 2024 13:50:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:55 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49917	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	592	OUT	OPTIONS /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: _vtok,_zitok,content-type,visited-url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/marketintelligence/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	1089	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:55 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: GET,HEAD via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=5ks.sRQfaZ94APbPc0eXZLTQ4e22ht9w.NyJq5r2RfI-1716472255-1.0.1.1-YfdkGx0Go9rm5nvC_i981KRSf0Iri5YK9VBqKgtKvp2uCf40WqeuQMLIvbby89WxZwwJsoChsdDPoZG34Ue8CA; path=/; expires=Thu, 23-May-24 14:20:55 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=ELTAF81AW9rwWDre53DBNM1mrxT1v2ZxomztxZpxYNM-1716472255197-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8885848abf79729f-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:55 UTC	13	IN	Data Raw: 38 0d 0a 47 45 54 2c 48 45 41 44 0d 0a Data Ascii: 8GET,HEAD
2024-05-23 13:50:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49915	54.196.227.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	646	OUT	POST / HTTP/1.1 Host: vfhbo3jsnvrutdkuee1akd0lj.litix.io Connection: keep-alive Content-Length: 1193 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://play.vidyard.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.vidyard.com/zXLjUKF6P1pouTHRcvyi1g.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	1193	OUT	Data Raw: 7b 22 65 76 65 6e 74 73 22 3a 5b 7b 22 6d 61 70 76 65 22 3a 22 32 2e 31 22 2c 22 6d 65 6d 22 3a 22 6d 75 78 2d 65 6d 62 65 64 22 2c 22 6d 65 6d 76 65 22 3a 22 34 2e 30 2e 31 22 2c 22 75 64 76 63 67 22 3a 22 22 2c 22 70 69 6e 69 64 22 3a 22 30 35 66 65 32 31 64 30 2d 38 61 62 66 2d 34 61 32 66 2d 38 64 62 63 2d 65 32 65 34 37 37 37 33 30 34 63 38 22 2c 22 6d 73 61 72 61 22 3a 31 2c 22 62 64 6d 22 3a 22 6c 69 74 69 78 2e 69 6f 22 2c 22 70 73 71 6e 6f 22 3a 31 2c 22 78 73 71 6e 6f 22 3a 31 2c 22 70 69 73 70 61 22 3a 74 72 75 65 2c 22 70 70 68 74 69 22 3a 30 2c 22 70 61 75 6f 6e 22 3a 66 61 6c 73 65 2c 22 70 70 72 6f 6e 22 3a 22 6d 65 74 61 64 61 74 61 22 2c 22 76 73 6f 64 75 22 3a 6e 75 6c 6c 2c 22 76 73 6f 68 74 22 3a 30 2c 22 76 73 6f 77 64 22 3a 30 2c 22 Data Ascii: {"events":[{"mapve":"2.1","mem":"mux-embed","memve":"4.0.1","udvcg":"","pinid":"05fe21d0-8abf-4a2f-8dbc-e2e4777304c8","msara":1,"bdm":"litix.io","psqno":1,"xsqno":1,"pispa":true,"pphti":0,"pauon":false,"ppron":"metadata","vsodu":null,"vsoht":0,"vsowd":0,"
2024-05-23 13:50:55 UTC	216	IN	HTTP/1.1 200 OK access-control-allow-methods: POST, GET access-control-allow-origin: * date: Thu, 23 May 2024 13:50:55 GMT content-length: 0 x-envoy-upstream-service-time: 0 server: envoy connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49920	172.64.150.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	375	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	555	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 13:50:55 GMT Content-Type: application/json; charset=utf-8 Content-Length: 34 Connection: close apigw-requestid: YOh18i0CPHcEMxw= x-powered-by: Express etag: W/"22-rSbFy3+q7HC5w4g2QQFk/dDLFDo" x-cache: Error from cloudfront via: 1.1 c70c0d114d0fcf32b9941c29c00266de.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: 6C4ndgFm6sCGJDRYoDVLuliKSn0BkgYsYYrD7dIYrPrx1sNs66nMjQ== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885848b6823c3eb-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:55 UTC	34	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 22 7d Data Ascii: {"error":"Failed to authenticate"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49916	142.250.185.198	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	1254	OUT	GET /activityi;dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1 Host: 11756258.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	812	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:55 GMT Expires: Thu, 23 May 2024 13:50:55 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 14:05:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 13:50:55 UTC	578	IN	Data Raw: 32 61 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 4c 4a 37 72 66 31 6f 34 59 44 46 51 Data Ascii: 2aa<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLLJ7rf1o4YDFQ
2024-05-23 13:50:55 UTC	111	IN	Data Raw: 64 3d 31 33 6c 33 6c 33 6c 33 6c 31 3b 64 6d 61 3d 30 3b 65 70 76 65 72 3d 32 3b 7e 6f 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 25 32 46 65 6e 25 32 46 22 2f 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F"/></body></html>
2024-05-23 13:50:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49922	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	431	OUT	GET /logos/5cb57702-8ef7-437e-a62b-408fe78cd310/6363e1f2-8f9e-4538-82e0-901d90e0cf02/splogo.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	841	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:55 GMT Content-Type: application/octet-stream Content-Length: 9618 Connection: close Content-MD5: ErRY5AFr7DHWQJxbChpLKA== Last-Modified: Tue, 25 Feb 2020 16:55:07 GMT ETag: 0x8D7BA1377E666A5 x-ms-request-id: 59bd558c-901e-0012-0735-234253000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75853 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885848c69ca7c82-EWR
2024-05-23 13:50:55 UTC	528	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b6 00 00 00 ae 08 06 00 00 00 5a fb 28 32 00 00 20 00 49 44 41 54 78 9c ed dd 79 9c 1c 75 9d ff f1 57 75 f7 1c 49 26 c9 e4 26 e4 20 21 07 49 00 39 94 e5 12 f1 44 60 f1 40 f1 04 95 cd a2 78 72 28 a8 ab fb 73 11 ef f5 20 a2 b0 c2 22 77 d6 55 59 51 3c 50 17 57 41 41 76 b9 91 2b 21 81 1c 24 84 9c 93 cc e4 98 e9 a3 7e 7f 7c ba 33 93 9e ee aa 6f 55 57 cf d1 79 3f 1f 8f 3c c4 e9 ea aa 9a 9e ea fa d4 f7 fb fd 7c 3f 5f 10 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 11 Data Ascii: PNGIHDRZ(2 IDATxyuWuI&& !I9D`@xr(s "wUYQ<PWAAv+!$~\|3oUWy?<\|?_
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: f6 35 6d 7c 3b 63 5a 9a f1 f1 28 f8 3e cb 37 6c ac ba 6d 2a 95 a2 50 28 24 72 5e 25 99 74 8a 5c 3e d9 7d 0e 37 f5 ba 96 a2 ec d7 f3 3c 52 1e e4 0b d1 cf 23 9d f2 28 f8 d4 ed fb 90 84 b8 d7 99 07 50 c7 ef fa 50 d3 e8 d7 41 1c 0d 1f d8 2a dd 28 9a 9b 32 bc 7c da 54 26 b7 b6 70 50 53 0b e3 d2 29 0e f6 9b 38 30 0b f9 2a 1f 49 1a 9f 15 4d 3e 1b bc 1c 3b 0a 05 9e eb e9 66 ed ce dd 3c bc 76 df a2 d8 b5 5c 28 e9 94 b7 cf c5 39 b5 7d 2c 0b 27 8c e3 f0 51 a3 38 dc 6b 62 66 36 c5 9e 94 c7 21 5d 1e 63 f2 05 7c 3c 7c cf e3 e9 36 c8 7a 05 9e cb e4 59 e9 e7 59 d9 bd 87 95 9d 5d 3c b1 7e c3 de 7d 25 11 8c ca f7 f1 9e 85 f3 38 a2 b9 95 1c 1e b5 7e 2f d2 9e cf f3 f9 1c 1b b2 39 9a 3d 9b 60 b9 2d 97 67 4d 57 17 9b 3b bb d8 ba 73 57 bf f7 d4 f3 41 a5 e2 39 a6 52 e4 cb 1e 12 Data Ascii: 5m\|;cZ(>7lmP($r^%t\>}7<R#(PPA(2\|T&pPS)80*IM>;f<v\(9},'Q8kbf6!]c\|<\|6zYY]<~}%8~/9=`-gMW;sWA9R
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 61 4b 01 48 3b 07 b4 72 fb 06 38 8f eb 27 15 b8 61 e3 46 9e 2a 76 cd a7 3c 6b e1 0d 97 ae 37 cf f3 48 7b 1e b9 e2 35 3d aa b5 95 73 e6 ce e6 c2 5d 23 98 d2 9d 23 e7 65 d8 91 4e c7 ba 0e 7c 0f 46 16 0a b4 16 f2 4c 58 f7 68 c2 67 3e 78 1a 2e b0 1d 3d 73 1a e7 8d 9f c8 bb 36 59 77 61 57 ba 39 b1 20 e1 a4 cf 0d e3 a5 d6 0c 57 94 dd 30 4a 1d 9f 00 0b a6 4e e1 03 53 a6 f0 a1 62 f0 ed 4a 37 d7 ed 86 89 e7 d1 9e cf e2 f9 79 9e 1b 95 61 49 a6 8b a5 4f 2d df fb 72 73 3a 4d 01 7f 9f 80 76 ca bc 83 f9 78 cb 58 4e dc 66 01 6d 5b a6 a9 f2 c0 d1 20 f0 3d 68 f6 a1 2d df 83 ef a5 b8 7a 62 8e 9b d6 6f 60 e5 c6 de ee a7 a8 e3 2b e5 01 fd 83 87 2d e4 9f 3b 47 d0 96 cb 45 6a 15 25 a1 ef 13 f5 96 a6 66 6e 6c cf f2 c6 3d 4d 1c d6 d9 43 c1 4b b3 3d 9d cc df c2 f7 60 4c 3e 4f c6 Data Ascii: aKH;r8'aF*v<k7H{5=s]##eN\|FLXhg>x.=s6YwaW9 W0JNSbJ7yaIO-rs:MvxXNfm[ =h-zbo`+-;GEj%fnl=MCK=`L>O
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: f8 b7 90 6d 8e 02 22 65 40 64 3c 68 f2 7d 5a f3 79 4a 99 ae b7 4f f2 b9 ae 63 0b f7 af 5a bb 77 bb f2 00 57 a9 c5 bf f8 d0 05 5c b2 67 24 53 f6 94 02 7e 8a ee 54 8a 9c 97 c2 07 4a 47 08 3a 97 94 6f 59 c0 2d 85 02 be 47 dc 5e 83 c7 b0 87 ab 6a d6 51 61 79 2f 05 b6 21 ca 31 b0 bd 09 f8 14 76 13 4a c2 6d c0 57 88 f8 85 72 70 24 f0 43 ac 85 16 47 17 70 09 70 4d 62 67 d4 df 02 e0 e9 3a ee bf e4 0f c0 7f 61 01 bb 2b ca 1b 7b c7 a8 2c 2d fe b2 f6 dd ac ee c9 72 51 66 34 c7 74 e4 29 78 29 3a d2 99 b8 dd 3b 17 02 9f c1 5a f9 b5 ba 19 f8 1a f0 4c 0d fb b8 1e f8 87 80 d7 57 61 bd 13 91 35 03 39 82 6f cc 75 f6 5e 60 69 c8 36 87 62 ad 91 d8 6c 9a 8c 35 0a 7f 35 d1 e3 9a 1d 5b b9 ef f9 de 46 60 26 6d 8d c3 bd 01 cd f3 78 df c2 f9 5c 94 6b 63 d6 ce 1c d9 54 9a 9d a9 f4 Data Ascii: m"e@d<h}ZyJOcZwW\g$S~TJG:oY-G^jQay/!1vJmWrp$CGppMbg:a+{,-rQf4t)x):;ZLWa59ou^`i6bl55[F`&mx\kcT
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: fb ec 27 d1 3b 55 a5 07 2b df b5 0c 4b 68 fa 3d 56 bf b0 de fa 5e 1f f3 b1 4c d6 57 63 0f 04 33 e8 ed 15 e9 c1 0a 42 3f 89 25 77 dd 89 cd 8b ac 87 d9 58 af c3 09 c0 e1 d8 98 fb 28 ac c6 28 d8 90 c8 2e e0 79 ec 33 ba 07 cb c2 0d 2d e6 2c d5 35 62 8b ad dd 61 9b b5 e1 9b 38 d9 83 db 44 5a 97 04 81 ed 01 af 4d c0 ad e5 77 38 c1 49 28 db b0 2f d0 70 53 4a de 09 92 c2 5a 35 49 68 21 b8 d6 5e c9 f5 09 1d 0f ac 16 66 98 24 4b c1 c5 75 0e f0 10 36 c6 7c 29 16 38 0e 64 df f9 97 cd 58 60 79 13 36 3d e5 51 ec ef f7 de 3a 9f 5b e9 21 e3 27 58 50 fd 0e 96 84 34 97 7d bb fa 9b b1 d6 d2 69 c5 f3 fb 1b 56 99 e8 15 09 9e cb e9 d8 dc c7 e7 b0 24 b2 73 b1 9e a4 31 f4 06 35 b0 eb b6 0d fb ee 9e 53 dc 76 35 76 3d 9c 98 e0 f9 ec 57 1a b1 c5 e6 32 cb 64 5a 82 c7 3b 03 0b a6 95 Data Ascii: ';U+Kh=V^LWc3B?%wX((.y3-,5ba8DZMw8I(/pSJZ5Ih!^f$Ku6\|)8dX`y6=Q:[!'XP4}iV$s15Sv5v=W2dZ;
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 8a 8d 0b c4 0d c4 5f 77 38 6e 9c 2f 44 2d 4b 2b 9e 8f ad 03 17 b6 32 78 81 f8 ab 45 bb 56 e1 77 11 f6 f4 0e e1 4f e8 25 5d b5 9c 48 05 ab 12 de 5f 25 2e d5 41 a2 06 eb 3c d6 c2 fb 7e c8 76 67 61 0f 75 71 3d 4b f4 c0 7f 17 36 0e 7d 5c c0 36 ed 58 cb ec be 0a af fd 18 78 80 ca 53 8c 9a 89 5e e5 28 ac 24 5c 3b f6 b0 38 1c 4b e3 0d 98 46 4c f7 2f 97 c7 ca fe 84 65 1a 26 e9 b3 44 ff f2 cf c1 c6 b2 6a 69 5d 9e 86 95 37 0a 12 16 60 92 96 a6 b7 c5 16 f4 2f 6e 50 fb 1e 6e 4b bf b8 72 09 fc 8d bc 86 72 58 37 5e 17 d1 97 7a 02 9b 6b 19 d6 d2 8d b2 a0 6b 25 71 27 b8 bb 4c c6 ae f6 60 bc 1a 9b d3 78 6f 85 7f 7f c4 5a 6c 51 6c 08 79 bd 05 15 4d 0e b5 3f 04 b6 92 cb b0 a7 ae a4 92 0c c2 5c 8c 0d 60 bb ba 1b 7b 12 ab c5 11 d8 b8 46 d0 80 78 23 7d 29 b6 e1 96 58 12 85 4b Data Ascii: _w8n/D-K+2xEVwO%]H_%.A<~vgauq=K6}\6XxS^($\;8KFL/e&Dji]7`/nPnKrrX7^zkk%q'L`xoZlQlyM?\`{Fx#})XK
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: bd c2 47 5f 07 11 fe 85 da 40 ff ac ab a0 b4 61 80 99 11 cf 63 19 d6 15 1b 56 6b ae 92 3d d8 64 72 31 79 ac 06 60 98 a4 56 97 9e c7 d0 c8 a6 5b 43 f5 e2 d9 25 6f aa 61 ff 61 e5 ba 1e a6 b6 d5 20 5e 1d f3 7d 27 13 9e 9d fc 50 d9 ff 1f 4b f8 72 3c 97 13 7d e9 2c 97 16 a0 84 68 b4 c0 76 3f 6e 37 f6 2b 12 3c a6 4b da 7f a5 25 5f c2 32 10 df 1c e3 5c b6 62 45 9f a3 a6 64 df 40 78 ba f3 fe e6 87 0e db bc 09 cb 3a ad d5 40 65 d4 b9 4c 60 fe 9f 90 d7 67 12 be 9a 79 25 27 13 3e 86 f8 97 18 fb ed 2b 6c 5c b4 9a f3 1c b6 29 3f b7 39 0e ef 89 f3 b0 f8 fa 18 ef 89 2a 4e 49 b4 61 a5 d1 02 5b 17 6e 49 17 1f 20 99 75 da 66 e1 16 d8 ee a9 f0 b3 47 08 be c0 16 61 d3 04 a2 5a 85 8d a5 b9 56 e5 e8 06 be 16 e3 38 8d ee 51 dc c6 39 7f 0d cc ad e1 38 df 60 e0 d6 d8 72 a9 80 e1 Data Ascii: G_@acVk=dr1y`V[C%oaa ^}'PKr<},hv?n7+<K%_2\bEd@x:@eL`gy%'>+l\)?9*NIa[nI ufGaZV8Q98`r
2024-05-23 13:50:55 UTC	876	IN	Data Raw: ec 97 f6 97 c0 06 36 46 72 18 d6 7a 4b b2 ba 7f 37 f6 c4 36 1f f8 b7 1a f7 75 3b 96 25 f5 ab 5a 4f aa 28 87 05 f5 45 ec bb 88 e5 f1 58 25 f1 30 97 11 3c 38 ee 32 e1 b7 d6 aa eb 43 d1 17 b1 84 9d 5f 24 b0 af 07 b1 b1 cd 7f 2a fb 59 25 93 1d f7 f9 53 ec 89 dd e5 21 c9 65 35 f0 75 58 2b e2 02 c2 57 9a 0e b2 16 cb e6 8b d3 9a 08 1b 73 1c 87 b5 30 5f 87 7b 71 82 72 df 06 ce 8c f9 de 0f 52 5b 20 d9 89 55 b2 29 25 bc fd 02 b7 fb 49 50 cd d9 2b b1 c9 e7 2e e3 67 13 1c b6 19 36 1a 39 2b 32 cc e9 58 eb ea d5 58 2a 7f 14 2f 61 4f 55 bf c7 aa 25 c4 ad 48 1e e4 54 ec 26 10 94 05 57 cd 4a ac 05 78 1d d5 bb 67 26 62 69 e9 e3 a9 9e 8a 9c c1 2e f8 e3 a8 5c 43 70 06 e1 4f 96 4b 49 b6 84 d9 50 73 2c 36 2e 79 3a 95 d7 dd ab 24 87 95 ae fa 3e 95 c7 c4 52 d8 5c cc f2 9a a6 f7 Data Ascii: 6FrzK76u;%ZO(EX%0<82C_$Y%S!e5uX+Ws0_{qrR[ U)%IP+.g69+2XX/aOU%HT&WJxg&bi.\CpOKIPs,6.y:$>R\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49921	104.19.178.52	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	874	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:55 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Mon, 20 May 2024 16:31:17 GMT ETag: 0x8DC78EA46222CDC x-ms-request-id: a3095f4a-901e-00af-67e8-aa63f9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 2 Expires: Fri, 24 May 2024 13:50:55 GMT Cache-Control: public, max-age=86400 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885848cbe7c41e9-EWR
2024-05-23 13:50:55 UTC	495	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 31 38 48 2e 38 31 76 36 7a 6d 37 2e 37 34 2e 31 61 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 31 2e 32 2d 2e 33 32 20 32 2e 32 39 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 Data Ascii: 18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 30 31 2d 2e 32 38 2d 31 2e 33 36 41 33 2e 32 34 20 33 2e 32 34 20 30 20 30 31 32 37 20 38 2e 34 36 61 32 2e 31 38 20 32 2e 31 38 20 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 Data Ascii: 01-.28-1.36A3.24 3.24 0 0127 8.46a2.18 2.18 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 20 30 20 30 30 2e 31 37 20 31 20 31 2e 35 20 31 2e 35 20 30 20 30 30 2e 34 39 2e 36 38 20 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c Data Ascii: 0 00.17 1 1.5 1.5 0 00.49.68 1.39 1.39 0 001.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l
2024-05-23 13:50:55 UTC	592	IN	Data Raw: 38 2e 34 37 61 32 2e 37 36 20 32 2e 37 36 20 30 20 30 31 32 2e 37 37 20 32 2e 39 33 68 2d 35 2e 36 43 38 31 20 35 2e 34 36 20 38 32 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 Data Ascii: 8.47a2.76 2.76 0 012.77 2.93h-5.6C81 5.46 82 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49932	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	789	OUT	GET /formcomplete.js HTTP/1.1 Host: ws-assets.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:50:55 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:55 GMT Content-Type: application/javascript Content-Length: 91778 Connection: close x-goog-generation: 1715854477710382 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 91778 x-goog-hash: crc32c=p5SAHw== x-goog-hash: md5=AGRVvUTtKJ3cxAPQ7NlqsA== x-goog-storage-class: STANDARD accept-ranges: bytes x-guploader-uploadid: ABPtcPqpO3HUqFFVfvpGhzcxfClDxtvM1AbgRye48qiYScWDQyNschrBPQ3HJscaZrIym_tAC4NHWJdfqg expires: Thu, 23 May 2024 14:16:58 GMT Cache-Control: public, max-age=3600 last-modified: Thu, 16 May 2024 10:14:37 GMT etag: "006455bd44ed289ddcc403d0ecd96ab0" Age: 2037 alt-svc: h3=":443"; ma=86400 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885848e7c901819-EWR
2024-05-23 13:50:55 UTC	576	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=fun
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 70 65 72 74 79 28 6e 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 2c 32 26 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 74 29 72 2e 64 28 6e 2c 6f 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6f 29 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 72 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 3b 72 65 74 75 72 6e 20 72 2e 64 28 65 2c 22 61 22 2c 65 29 2c 65 7d 2c 72 2e 6f 3d 66 Data Ascii: perty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)r.d(n,o,function(e){return t[e]}.bind(null,o));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=f
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 5f 5f 7d 2c 66 3d 7b 7d 2c 68 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 3f 76 6f 69 64 20 30 3a 70 28 55 69 6e 74 38 41 72 72 61 79 29 2c 64 3d 7b 22 25 41 67 67 72 65 67 61 74 65 45 72 72 6f 72 25 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 41 67 67 72 65 67 61 74 65 45 72 72 6f 72 3f 76 6f 69 64 20 30 3a 41 67 67 72 65 67 61 74 65 45 72 72 6f 72 2c 22 25 41 72 72 61 79 25 22 3a 41 72 72 61 79 2c 22 25 41 72 72 61 79 42 75 66 66 65 72 25 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 3f 76 6f 69 64 20 30 3a 41 72 72 61 79 42 75 66 66 65 72 2c 22 25 41 72 72 61 79 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 25 Data Ascii: proto__},f={},h="undefined"==typeof Uint8Array?void 0:p(Uint8Array),d={"%AggregateError%":"undefined"==typeof AggregateError?void 0:AggregateError,"%Array%":Array,"%ArrayBuffer%":"undefined"==typeof ArrayBuffer?void 0:ArrayBuffer,"%ArrayIteratorPrototype%
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 2c 22 25 4a 53 4f 4e 25 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4a 53 4f 4e 3f 4a 53 4f 4e 3a 76 6f 69 64 20 30 2c 22 25 4d 61 70 25 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 3f 76 6f 69 64 20 30 3a 4d 61 70 2c 22 25 4d 61 70 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 25 22 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4d 61 70 26 26 6c 3f 70 28 28 6e 65 77 20 4d 61 70 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 29 3a 76 6f 69 64 20 30 2c 22 25 4d 61 74 68 25 22 3a 4d 61 74 68 2c 22 25 4e 75 6d 62 65 72 25 22 3a 4e 75 6d 62 65 72 2c 22 25 4f 62 6a 65 63 74 25 22 3a 4f 62 6a 65 63 74 2c 22 25 70 61 72 73 65 46 6c 6f 61 74 25 22 3a 70 61 72 73 65 46 Data Ascii: void 0,"%JSON%":"object"==typeof JSON?JSON:void 0,"%Map%":"undefined"==typeof Map?void 0:Map,"%MapIteratorPrototype%":"undefined"!=typeof Map&&l?p((new Map)[Symbol.iterator]()):void 0,"%Math%":Math,"%Number%":Number,"%Object%":Object,"%parseFloat%":parseF
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 65 74 3f 76 6f 69 64 20 30 3a 57 65 61 6b 53 65 74 7d 2c 79 3d 7b 22 25 41 72 72 61 79 42 75 66 66 65 72 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 41 72 72 61 79 42 75 66 66 65 72 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 65 6e 74 72 69 65 73 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 65 6e 74 72 69 65 73 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 66 6f 72 45 61 63 68 25 22 3a 5b 22 41 72 72 61 79 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 66 6f 72 45 61 63 68 22 5d 2c 22 25 41 72 72 61 79 50 72 6f 74 6f 5f 6b 65 79 73 25 22 3a 5b 22 41 72 72 61 79 22 2c Data Ascii: et?void 0:WeakSet},y={"%ArrayBufferPrototype%":["ArrayBuffer","prototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array",
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 74 6f 5f 74 6f 53 74 72 69 6e 67 25 22 3a 5b 22 4f 62 6a 65 63 74 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 74 6f 53 74 72 69 6e 67 22 5d 2c 22 25 4f 62 6a 50 72 6f 74 6f 5f 76 61 6c 75 65 4f 66 25 22 3a 5b 22 4f 62 6a 65 63 74 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 76 61 6c 75 65 4f 66 22 5d 2c 22 25 50 72 6f 6d 69 73 65 50 72 6f 74 6f 74 79 70 65 25 22 3a 5b 22 50 72 6f 6d 69 73 65 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 25 50 72 6f 6d 69 73 65 50 72 6f 74 6f 5f 74 68 65 6e 25 22 3a 5b 22 50 72 6f 6d 69 73 65 22 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 22 74 68 65 6e 22 5d 2c 22 25 50 72 6f 6d 69 73 65 5f 61 6c 6c 25 22 3a 5b 22 50 72 6f 6d 69 73 65 22 2c 22 61 6c 6c 22 5d 2c 22 25 50 72 6f 6d 69 73 65 5f 72 65 6a 65 63 74 25 22 3a 5b 22 Data Ascii: to_toString%":["Object","prototype","toString"],"%ObjProto_valueOf%":["Object","prototype","valueOf"],"%PromisePrototype%":["Promise","prototype"],"%PromiseProto_then%":["Promise","prototype","then"],"%Promise_all%":["Promise","all"],"%Promise_reject%":["
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 73 6c 69 63 65 29 2c 53 3d 2f 5b 5e 25 2e 5b 5c 5d 5d 2b 7c 5c 5b 28 3f 3a 28 2d 3f 5c 64 2b 28 3f 3a 5c 2e 5c 64 2b 29 3f 29 7c 28 5b 22 27 5d 29 28 28 3f 3a 28 3f 21 5c 32 29 5b 5e 5c 5c 5d 7c 5c 5c 2e 29 2a 3f 29 5c 32 29 5c 5d 7c 28 3f 3d 28 3f 3a 5c 2e 7c 5c 5b 5c 5d 29 28 3f 3a 5c 2e 7c 5c 5b 5c 5d 7c 25 24 29 29 2f 67 2c 41 3d 2f 5c 5c 28 5c 5c 29 3f 2f 67 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 45 28 74 2c 30 2c 31 29 2c 72 3d 45 28 74 2c 2d 31 29 3b 69 66 28 22 25 22 3d 3d 3d 65 26 26 22 25 22 21 3d 3d 72 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 22 69 6e 76 61 6c 69 64 20 69 6e 74 72 69 6e 73 69 63 20 73 79 6e 74 61 78 2c 20 65 78 70 65 63 74 65 64 20 63 6c 6f 73 69 6e 67 20 60 25 60 22 29 3b 69 66 28 22 25 22 3d 3d 3d 72 26 Data Ascii: slice),S=/[^%.[\]]+\|\[(?:(-?\d+(?:\.\d+)?)\|(["'])((?:(?!\2)[^\\]\|\\.)*?)\2)\]\|(?=(?:\.\|\[\])(?:\.\|\[\]\|%$))/g,A=/\$\$?/g,O=function(t){var e=E(t,0,1),r=E(t,-1);if("%"===e&&"%"!==r)throw new n("invalid intrinsic syntax, expected closing `%`");if("%"===r&
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 3b 70 26 26 28 6f 3d 70 5b 30 5d 2c 62 28 72 2c 67 28 5b 30 2c 31 5d 2c 70 29 29 29 3b 66 6f 72 28 76 61 72 20 66 3d 31 2c 68 3d 21 30 3b 66 3c 72 2e 6c 65 6e 67 74 68 3b 66 2b 3d 31 29 7b 76 61 72 20 79 3d 72 5b 66 5d 2c 6d 3d 45 28 79 2c 30 2c 31 29 2c 77 3d 45 28 79 2c 2d 31 29 3b 69 66 28 28 27 22 27 3d 3d 3d 6d 7c 7c 22 27 22 3d 3d 3d 6d 7c 7c 22 60 22 3d 3d 3d 6d 7c 7c 27 22 27 3d 3d 3d 77 7c 7c 22 27 22 3d 3d 3d 77 7c 7c 22 60 22 3d 3d 3d 77 29 26 26 6d 21 3d 3d 77 29 74 68 72 6f 77 20 6e 65 77 20 6e 28 22 70 72 6f 70 65 72 74 79 20 6e 61 6d 65 73 20 77 69 74 68 20 71 75 6f 74 65 73 20 6d 75 73 74 20 68 61 76 65 20 6d 61 74 63 68 69 6e 67 20 71 75 6f 74 65 73 22 29 3b 69 66 28 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 21 3d 3d 79 26 26 68 7c 7c 28 6c Data Ascii: ;p&&(o=p[0],b(r,g([0,1],p)));for(var f=1,h=!0;f<r.length;f+=1){var y=r[f],m=E(y,0,1),w=E(y,-1);if(('"'===m\|\|"'"===m\|\|"`"===m\|\|'"'===w\|\|"'"===w\|\|"`"===w)&&m!==w)throw new n("property names with quotes must have matching quotes");if("constructor"!==y&&h\|\|(l
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 7b 6f 62 6a 3a 7b 6f 3a 74 7d 2c 70 72 6f 70 3a 22 6f 22 7d 5d 2c 72 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 66 6f 72 28 76 61 72 20 6f 3d 65 5b 6e 5d 2c 61 3d 6f 2e 6f 62 6a 5b 6f 2e 70 72 6f 70 5d 2c 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 2c 75 3d 30 3b 75 3c 73 2e 6c 65 6e 67 74 68 3b 2b 2b 75 29 7b 76 61 72 20 63 3d 73 5b 75 5d 2c 6c 3d 61 5b 63 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 6e 75 6c 6c 21 3d 3d 6c 26 26 2d 31 3d 3d 3d 72 2e 69 6e 64 65 78 4f 66 28 6c 29 26 26 28 65 2e 70 75 73 68 28 7b 6f 62 6a 3a 61 2c 70 72 6f 70 3a 63 7d 29 2c 72 2e 70 75 73 68 28 6c 29 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f Data Ascii: ion(t){for(var e=[{obj:{o:t},prop:"o"}],r=[],n=0;n<e.length;++n)for(var o=e[n],a=o.obj[o.prop],s=Object.keys(a),u=0;u<s.length;++u){var c=s[u],l=a[c];"object"==typeof l&&null!==l&&-1===r.indexOf(l)&&(e.push({obj:a,prop:c}),r.push(l))}return function(t){fo
2024-05-23 13:50:55 UTC	1369	IN	Data Raw: 65 67 45 78 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 7d 2c 6d 61 79 62 65 4d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 69 28 74 29 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 3d 31 29 72 2e 70 75 73 68 28 65 28 74 5b 6e 5d 29 29 3b 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 65 28 74 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 72 2c 6e 29 7b 69 66 28 21 72 29 72 65 74 75 72 6e 20 65 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 72 29 7b 69 66 28 69 28 65 29 29 65 2e 70 Data Ascii: egExp:function(t){return"[object RegExp]"===Object.prototype.toString.call(t)},maybeMap:function(t,e){if(i(t)){for(var r=[],n=0;n<t.length;n+=1)r.push(e(t[n]));return r}return e(t)},merge:function t(e,r,n){if(!r)return e;if("object"!=typeof r){if(i(e))e.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49924	142.251.168.154	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	657	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&gjid=236941860&_gid=628374559.1716472251&_u=YHBAAEAAAAAAACAEK~&z=1376759657 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-23 13:50:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 23 May 2024 13:50:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:55 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49923	142.251.168.154	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	655	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&gjid=351969260&_gid=628374559.1716472251&_u=YHDAAEABAAAAACAGK~&z=101072218 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-23 13:50:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 23 May 2024 13:50:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:55 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49929	142.250.185.70	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 139 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	139	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 39 30 37 37 35 35 33 32 30 30 32 36 33 32 33 31 39 33 38 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://spglobal.com","trigger_debug_key":"9077553200263231938"},"type":"trigger-no-matching-source"}]
2024-05-23 13:50:56 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 13:50:56 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49933	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	1021	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/javascript visited-url: https://www.spglobal.com/marketintelligence/en/ _vtok: OC40Ni4xMjMuMTc1 _zitok: ac746a0716b51e6738171716472254 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/marketintelligence/en/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:50:56 UTC	656	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:56 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885848f281472b3-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:56 UTC	713	IN	Data Raw: 31 32 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 1209(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-05-23 13:50:56 UTC	1369	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e Data Ascii: rentNode.insertBefore(d,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...
2024-05-23 13:50:56 UTC	1369	IN	Data Raw: 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 70 2b 22 53 65 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 Data Ascii: onStorage.setItem(p+"Session",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.ha
2024-05-23 13:50:56 UTC	1174	IN	Data Raw: 28 6e 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 65 29 29 3a 74 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 Data Ascii: (n),clearInterval(e)):t++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystat
2024-05-23 13:50:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49928	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	6101	OUT	GET /ct?id=36498&url=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1716472252436&hl=1&op=0&ag=300509663&rand=040071195005060211758750255662960922957918772088120906196602121961211153850280480068&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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 [TRUNCATED] Host: obs.fishrobotflower.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:55 UTC	396	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 23 May 2024 13:50:55 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Set-Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389; Max-Age=29030400; Path=/; Expires=Thu, 24 Apr 2025 13:50:55 GMT; HttpOnly; Secure; SameSite=None Connection: close Transfer-Encoding: chunked
2024-05-23 13:50:55 UTC	783	IN	Data Raw: 63 62 63 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 33 36 34 39 38 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 33 36 34 39 38 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 Data Ascii: cbctypeof __ctcg_ct_36498_exec === 'function' && __ctcg_ct_36498_exec({"tc":"37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd661955264577090
2024-05-23 13:50:55 UTC	2358	IN	Data Raw: 36 34 39 30 39 38 62 32 63 38 32 30 62 64 33 32 33 62 32 34 38 33 37 62 33 61 39 39 39 38 64 31 31 36 36 38 38 34 62 61 32 31 65 35 34 31 65 36 64 33 31 35 64 36 34 30 39 65 33 64 30 63 30 62 35 34 38 63 36 65 65 63 34 33 39 63 64 30 61 64 33 66 65 30 64 31 37 36 38 37 30 63 65 30 38 62 64 62 63 62 37 37 38 39 34 39 30 34 33 35 62 64 31 65 35 61 31 33 37 66 34 33 33 65 39 66 65 63 36 32 62 65 34 32 63 37 39 61 39 35 33 36 61 34 64 65 32 62 62 64 39 63 32 66 63 65 38 39 65 63 66 64 36 62 38 34 62 64 65 62 31 66 33 65 33 65 38 34 61 39 31 30 30 34 64 65 62 34 32 38 35 34 30 39 66 33 65 30 66 34 31 66 66 30 32 38 39 30 66 38 35 62 65 39 65 36 32 66 62 37 37 38 61 37 33 33 39 30 34 64 64 35 31 33 64 36 61 65 33 38 63 30 31 38 32 35 65 31 61 66 38 30 37 61 32 Data Ascii: 649098b2c820bd323b24837b3a9998d1166884ba21e541e6d315d6409e3d0c0b548c6eec439cd0ad3fe0d176870ce08bdbcb7789490435bd1e5a137f433e9fec62be42c79a9536a4de2bbd9c2fce89ecfd6b84bdeb1f3e3e84a91004deb4285409f3e0f41ff02890f85be9e62fb778a733904dd513d6ae38c01825e1af807a2
2024-05-23 13:50:55 UTC	131	IN	Data Raw: 33 2f 45 44 32 50 67 78 73 4c 56 78 7a 58 64 34 37 4d 65 33 56 4a 72 68 59 55 39 46 31 32 4d 7a 6e 45 37 4d 41 53 53 4c 7a 70 61 34 35 6a 32 69 37 47 42 45 3d 22 2c 22 72 65 71 22 3a 22 38 63 31 65 62 61 38 36 65 65 65 66 34 32 66 35 65 35 66 31 37 37 34 65 39 30 38 64 32 62 39 30 22 2c 22 70 68 66 22 3a 74 72 75 65 2c 22 70 68 66 69 22 3a 74 72 75 65 7d 2c 22 22 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 3/ED2PgxsLVxzXd47Me3VJrhYU9F12MznE7MASSLzpa45j2i7GBE=","req":"8c1eba86eeef42f5e5f1774e908d2b90","phf":true,"phfi":true},"");0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49930	142.250.186.38	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	944	OUT	GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=161265342.1716472243;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission; ar_debug=1
2024-05-23 13:50:56 UTC	4271	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"16828096138677050514"}],"aggregatable_trigger_data":[{"filters":[{"14":["12593915"]}],"key_piece":"0xc259d5b69d511d38","source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]},{"key_piece":"0x4669cf00f9937fab","not_filters":{"14":["12593915"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"628539424":81,"628539425":81,"628539426":81,"628539427":7946,"628678596":32,"628678597":32,"628678598":32,"628678599":3177},"debug_key":"9077553200263231938","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"16828096138677050514","filters":[{"14":["12593915"],"source_type":["event"]}, [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 22-Jun-2024 13:50:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt; expires=Sat, 23-May-2026 13:50:56 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49926	37.157.2.250	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	551	OUT	GET /banners/scripts/st/trackpoint-async.js HTTP/1.1 Host: s2.adform.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:56 UTC	474	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 13:50:55 GMT Content-Type: application/javascript Content-Length: 81812 Connection: close Vary: Accept-Encoding last-modified: Fri, 08 Mar 2024 07:02:31 GMT x-rgw-object-type: Normal etag: "1c188eabf1f0749a0cffb2c108473370" x-amz-request-id: tx00000cb0a74798aa33860-0066014733-32974d05-default Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800 X-Cache-Status: HIT Accept-Ranges: bytes
2024-05-23 13:50:56 UTC	15910	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 41 3d 77 69 6e 64 6f 77 2e 41 64 66 6f 72 6d 3d 77 69 6e 64 6f 77 2e 41 64 66 6f 72 6d 7c 7c 7b 7d 3b 76 61 72 20 61 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 63 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 69 66 28 61 2e 66 6f 72 45 61 63 68 29 61 2e 66 6f 72 45 61 63 68 28 63 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 28 61 5b 62 5d 2c 62 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 20 62 28 29 3f 61 2b 22 3d 22 2b 63 3a 22 22 Data Ascii: (function(){var A=window.Adform=window.Adform\|\|{};var aa=Object.prototype.toString,ca=Object.prototype.hasOwnProperty;function G(a,c){if(null!=a)if(a.forEach)a.forEach(c);else for(var b=0;b<a.length;b++)c(a[b],b,a)}function da(a,c,b){return b()?a+"="+c:""
2024-05-23 13:50:56 UTC	16384	IN	Data Raw: 3d 21 31 2c 30 3d 3d 65 3f 74 68 69 73 5b 74 68 69 73 2e 74 2b 2b 5d 3d 77 3a 65 2b 67 3e 74 68 69 73 2e 44 42 3f 28 74 68 69 73 5b 74 68 69 73 2e 74 2d 31 5d 7c 3d 28 77 26 28 31 3c 3c 74 68 69 73 2e 44 42 2d 65 29 2d 31 29 3c 3c 65 2c 74 68 69 73 5b 74 68 69 73 2e 74 2b 2b 5d 3d 77 3e 3e 74 68 69 73 2e 44 42 2d 0a 65 29 3a 74 68 69 73 5b 74 68 69 73 2e 74 2d 31 5d 7c 3d 77 3c 3c 65 2c 65 2b 3d 67 2c 65 3e 3d 74 68 69 73 2e 44 42 26 26 28 65 2d 3d 74 68 69 73 2e 44 42 29 29 7d 38 3d 3d 67 26 26 30 21 3d 28 64 5b 30 5d 26 31 32 38 29 26 26 28 74 68 69 73 2e 73 3d 2d 31 2c 30 3c 65 26 26 28 74 68 69 73 5b 74 68 69 73 2e 74 2d 31 5d 7c 3d 28 31 3c 3c 74 68 69 73 2e 44 42 2d 65 29 2d 31 3c 3c 65 29 29 3b 74 68 69 73 2e 63 6c 61 6d 70 28 29 3b 63 26 26 62 2e Data Ascii: =!1,0==e?this[this.t++]=w:e+g>this.DB?(this[this.t-1]\|=(w&(1<<this.DB-e)-1)<<e,this[this.t++]=w>>this.DB-e):this[this.t-1]\|=w<<e,e+=g,e>=this.DB&&(e-=this.DB))}8==g&&0!=(d[0]&128)&&(this.s=-1,0<e&&(this[this.t-1]\|=(1<<this.DB-e)-1<<e));this.clamp();c&&b.
2024-05-23 13:50:56 UTC	16384	IN	Data Raw: 29 72 65 74 75 72 6e 20 61 2e 6d 6f 64 50 6f 77 28 74 68 69 73 2e 64 2c 74 68 69 73 2e 6e 29 3b 0a 76 61 72 20 64 3d 61 2e 6d 6f 64 28 74 68 69 73 2e 70 29 2e 6d 6f 64 50 6f 77 28 74 68 69 73 2e 64 6d 70 31 2c 74 68 69 73 2e 70 29 3b 66 6f 72 28 61 3d 61 2e 6d 6f 64 28 74 68 69 73 2e 71 29 2e 6d 6f 64 50 6f 77 28 74 68 69 73 2e 64 6d 71 31 2c 74 68 69 73 2e 71 29 3b 30 3e 64 2e 63 6f 6d 70 61 72 65 54 6f 28 61 29 3b 29 64 3d 64 2e 61 64 64 28 74 68 69 73 2e 70 29 3b 72 65 74 75 72 6e 20 64 2e 73 75 62 74 72 61 63 74 28 61 29 2e 6d 75 6c 74 69 70 6c 79 28 74 68 69 73 2e 63 6f 65 66 66 29 2e 6d 6f 64 28 74 68 69 73 2e 70 29 2e 6d 75 6c 74 69 70 6c 79 28 74 68 69 73 2e 71 29 2e 61 64 64 28 61 29 7d 3b 48 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 50 72 69 76 Data Ascii: )return a.modPow(this.d,this.n);var d=a.mod(this.p).modPow(this.dmp1,this.p);for(a=a.mod(this.q).modPow(this.dmq1,this.q);0>d.compareTo(a);)d=d.add(this.p);return d.subtract(a).multiply(this.coeff).mod(this.p).multiply(this.q).add(a)};H.prototype.setPriv
2024-05-23 13:50:56 UTC	16384	IN	Data Raw: 28 64 29 5d 3d 64 3b 66 6f 72 28 64 3d 30 3b 38 3e 64 3b 2b 2b 64 29 62 5b 22 20 5c 66 5c 6e 5c 72 5c 74 5c 75 30 30 61 30 5c 75 32 30 32 38 5c 75 32 30 32 39 22 2e 63 68 61 72 41 74 28 64 29 5d 3d 2d 31 7d 65 3d 5b 5d 3b 76 61 72 20 66 3d 30 2c 67 3d 30 3b 66 6f 72 28 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 68 3d 63 2e 63 68 61 72 41 74 28 64 29 3b 69 66 28 22 3d 22 3d 3d 68 29 62 72 65 61 6b 3b 68 3d 62 5b 68 5d 3b 69 66 28 2d 31 21 3d 68 29 7b 69 66 28 68 3d 3d 3d 61 29 74 68 72 6f 77 22 49 6c 6c 65 67 61 6c 20 63 68 61 72 61 63 74 65 72 20 61 74 20 6f 66 66 73 65 74 20 22 2b 64 3b 66 7c 3d 68 3b 32 3c 3d 2b 2b 67 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 5d 3d 66 2c 67 3d 66 3d 30 29 3a 66 3c 3c 3d 34 7d 7d 69 66 28 67 29 74 Data Ascii: (d)]=d;for(d=0;8>d;++d)b[" \f\n\r\t\u00a0\u2028\u2029".charAt(d)]=-1}e=[];var f=0,g=0;for(d=0;d<c.length;++d){var h=c.charAt(d);if("="==h)break;h=b[h];if(-1!=h){if(h===a)throw"Illegal character at offset "+d;f\|=h;2<=++g?(e[e.length]=f,g=f=0):f<<=4}}if(g)t
2024-05-23 13:50:56 UTC	16384	IN	Data Raw: 73 70 6c 61 79 3a 6e 6f 6e 65 22 27 2b 65 2b 22 3e 3c 2f 69 66 72 61 6d 65 3e 22 3b 61 62 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 66 2e 66 69 72 73 74 43 68 69 6c 64 29 29 7d 65 6c 73 65 20 24 61 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 62 28 61 2c 63 2c 62 29 7d 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 29 7b 76 61 72 20 63 3d 61 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 62 3d 61 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 63 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 63 2e 73 72 63 3d 61 3b 62 Data Ascii: splay:none"'+e+"></iframe>";ab.body.appendChild(f.removeChild(f.firstChild))}else $a(window,"load",function(){bb(a,c,b)})}catch(h){}}function cb(a){var c=ab.createElement("script"),b=ab.getElementsByTagName("script")[0];c.type="text/javascript";c.src=a;b
2024-05-23 13:50:56 UTC	366	IN	Data Raw: 2e 67 70 70 7c 7c 6e 75 6c 6c 2c 54 3d 61 2e 67 70 70 5f 73 69 64 7c 7c 6e 75 6c 6c 2c 55 3d 61 2e 48 74 74 70 48 6f 73 74 7c 7c 6e 75 6c 6c 2c 50 3d 61 2e 65 69 64 73 7c 7c 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 63 26 26 28 6c 26 26 28 5a 2e 41 64 76 65 72 74 69 73 65 72 49 64 3d 6c 29 2c 7a 26 26 28 5a 2e 54 68 69 72 64 50 61 72 74 79 49 64 3d 7a 29 2c 78 26 26 28 5a 2e 50 61 72 61 6d 73 2e 65 6e 63 72 79 70 74 6f 72 3d 78 29 2c 75 26 26 28 5a 2e 50 61 72 61 6d 73 2e 70 75 62 6c 69 63 4b 65 79 3d 75 29 2c 4a 26 26 28 5a 2e 47 64 70 72 3d 4a 29 2c 45 26 26 28 5a 2e 47 64 70 72 43 6f 6e 73 65 6e 74 3d 45 29 2c 49 26 26 28 5a 2e 47 70 70 3d 49 29 2c 54 26 26 28 5a 2e 47 70 70 53 69 64 3d 54 29 2c 55 26 26 28 5a 2e 50 61 72 61 6d 73 2e 48 74 74 70 48 6f 73 74 3d Data Ascii: .gpp\|\|null,T=a.gpp_sid\|\|null,U=a.HttpHost\|\|null,P=a.eids\|\|null;null!=c&&(l&&(Z.AdvertiserId=l),z&&(Z.ThirdPartyId=z),x&&(Z.Params.encryptor=x),u&&(Z.Params.publicKey=u),J&&(Z.Gdpr=J),E&&(Z.GdprConsent=E),I&&(Z.Gpp=I),T&&(Z.GppSid=T),U&&(Z.Params.HttpHost=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49934	54.196.227.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	358	OUT	GET / HTTP/1.1 Host: vfhbo3jsnvrutdkuee1akd0lj.litix.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:56 UTC	109	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:50:55 GMT server: envoy connection: close content-length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49927	37.157.2.250	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:55 UTC	550	OUT	GET /banners/scripts/st/trackpoint-sync.js HTTP/1.1 Host: s2.adform.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:56 UTC	474	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 13:50:56 GMT Content-Type: application/javascript Content-Length: 80973 Connection: close Vary: Accept-Encoding last-modified: Fri, 08 Mar 2024 07:02:31 GMT x-rgw-object-type: Normal etag: "1f2a925fb7f06495a8b0944fbd4b97e6" x-amz-request-id: tx000000f62a0dcead3e850-006601475d-3296fdb1-default Access-Control-Allow-Origin: * Cache-Control: public, max-age=604800 X-Cache-Status: HIT Accept-Ranges: bytes
2024-05-23 13:50:56 UTC	15910	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 41 3d 77 69 6e 64 6f 77 2e 41 64 66 6f 72 6d 3d 77 69 6e 64 6f 77 2e 41 64 66 6f 72 6d 7c 7c 7b 7d 3b 76 61 72 20 61 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 63 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 69 66 28 61 2e 66 6f 72 45 61 63 68 29 61 2e 66 6f 72 45 61 63 68 28 63 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 63 28 61 5b 62 5d 2c 62 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 20 62 28 29 3f 61 2b 22 3d 22 2b 63 3a 22 22 Data Ascii: (function(){var A=window.Adform=window.Adform\|\|{};var aa=Object.prototype.toString,ca=Object.prototype.hasOwnProperty;function F(a,c){if(null!=a)if(a.forEach)a.forEach(c);else for(var b=0;b<a.length;b++)c(a[b],b,a)}function da(a,c,b){return b()?a+"="+c:""
2024-05-23 13:50:56 UTC	16384	IN	Data Raw: 74 68 69 73 2e 44 42 2d 65 29 2d 31 29 3c 3c 65 2c 74 68 69 73 5b 74 68 69 73 2e 74 2b 2b 5d 3d 71 3e 3e 74 68 69 73 2e 44 42 2d 0a 65 29 3a 74 68 69 73 5b 74 68 69 73 2e 74 2d 31 5d 7c 3d 71 3c 3c 65 2c 65 2b 3d 66 2c 65 3e 3d 74 68 69 73 2e 44 42 26 26 28 65 2d 3d 74 68 69 73 2e 44 42 29 29 7d 38 3d 3d 66 26 26 30 21 3d 28 64 5b 30 5d 26 31 32 38 29 26 26 28 74 68 69 73 2e 73 3d 2d 31 2c 30 3c 65 26 26 28 74 68 69 73 5b 74 68 69 73 2e 74 2d 31 5d 7c 3d 28 31 3c 3c 74 68 69 73 2e 44 42 2d 65 29 2d 31 3c 3c 65 29 29 3b 74 68 69 73 2e 63 6c 61 6d 70 28 29 3b 78 26 26 62 2e 5a 45 52 4f 2e 73 75 62 54 6f 28 74 68 69 73 2c 74 68 69 73 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 61 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 64 3d Data Ascii: this.DB-e)-1)<<e,this[this.t++]=q>>this.DB-e):this[this.t-1]\|=q<<e,e+=f,e>=this.DB&&(e-=this.DB))}8==f&&0!=(d[0]&128)&&(this.s=-1,0<e&&(this[this.t-1]\|=(1<<this.DB-e)-1<<e));this.clamp();x&&b.ZERO.subTo(this,this)};b.prototype.clamp=function(){for(var d=
2024-05-23 13:50:56 UTC	16384	IN	Data Raw: 77 28 74 68 69 73 2e 64 6d 70 31 2c 74 68 69 73 2e 70 29 3b 66 6f 72 28 61 3d 61 2e 6d 6f 64 28 74 68 69 73 2e 71 29 2e 6d 6f 64 50 6f 77 28 74 68 69 73 2e 64 6d 71 31 2c 74 68 69 73 2e 71 29 3b 30 3e 64 2e 63 6f 6d 70 61 72 65 54 6f 28 61 29 3b 29 64 3d 64 2e 61 64 64 28 74 68 69 73 2e 70 29 3b 72 65 74 75 72 6e 20 64 2e 73 75 62 74 72 61 63 74 28 61 29 2e 6d 75 6c 74 69 70 6c 79 28 74 68 69 73 2e 63 6f 65 66 66 29 2e 6d 6f 64 28 74 68 69 73 2e 70 29 2e 6d 75 6c 74 69 70 6c 79 28 74 68 69 73 2e 71 29 2e 61 64 64 28 61 29 7d 3b 47 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 50 72 69 76 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6e 75 6c 6c 21 3d 61 26 26 6e 75 6c 6c 21 3d 62 26 26 30 3c 61 2e 6c 65 6e 67 74 68 26 26 30 3c 62 2e 6c 65 6e 67 Data Ascii: w(this.dmp1,this.p);for(a=a.mod(this.q).modPow(this.dmq1,this.q);0>d.compareTo(a);)d=d.add(this.p);return d.subtract(a).multiply(this.coeff).mod(this.p).multiply(this.q).add(a)};G.prototype.setPrivate=function(a,b,c){null!=a&&null!=b&&0<a.length&&0<b.leng
2024-05-23 13:50:56 UTC	16384	IN	Data Raw: 72 41 74 28 64 29 5d 3d 2d 31 7d 65 3d 5b 5d 3b 76 61 72 20 66 3d 30 2c 6c 3d 30 3b 66 6f 72 28 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 67 3d 62 2e 63 68 61 72 41 74 28 64 29 3b 69 66 28 22 3d 22 3d 3d 67 29 62 72 65 61 6b 3b 67 3d 63 5b 67 5d 3b 69 66 28 2d 31 21 3d 67 29 7b 69 66 28 67 3d 3d 3d 61 29 74 68 72 6f 77 22 49 6c 6c 65 67 61 6c 20 63 68 61 72 61 63 74 65 72 20 61 74 20 6f 66 66 73 65 74 20 22 2b 64 3b 66 7c 3d 67 3b 32 3c 3d 2b 2b 6c 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 5d 3d 66 2c 6c 3d 66 3d 30 29 3a 66 3c 3c 3d 34 7d 7d 69 66 28 6c 29 74 68 72 6f 77 22 48 65 78 20 65 6e 63 6f 64 69 6e 67 20 69 6e 63 6f 6d 70 6c 65 74 65 3a 20 34 20 62 69 74 73 20 6d 69 73 73 69 6e 67 22 3b 72 65 74 75 72 6e 20 65 7d 3b 77 69 Data Ascii: rAt(d)]=-1}e=[];var f=0,l=0;for(d=0;d<b.length;++d){var g=b.charAt(d);if("="==g)break;g=c[g];if(-1!=g){if(g===a)throw"Illegal character at offset "+d;f\|=g;2<=++l?(e[e.length]=f,l=f=0):f<<=4}}if(l)throw"Hex encoding incomplete: 4 bits missing";return e};wi
2024-05-23 13:50:56 UTC	15911	IN	Data Raw: 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 67 2e 66 69 72 73 74 43 68 69 6c 64 29 29 7d 65 6c 73 65 20 5a 61 28 77 69 6e 64 6f 77 2c 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 62 28 61 2c 63 2c 62 29 7d 29 7d 63 61 74 63 68 28 68 29 7b 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 62 62 28 61 29 7b 76 61 72 20 63 3d 24 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 62 3d 24 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 63 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 63 2e 73 72 63 3d 61 3b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 62 29 3b 72 Data Ascii: body.appendChild(g.removeChild(g.firstChild))}else Za(window,"load",function(){ab(a,c,b)})}catch(h){}}function bb(a){var c=$a.createElement("script"),b=$a.getElementsByTagName("script")[0];c.type="text/javascript";c.src=a;b.parentNode.insertBefore(c,b);r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49722	52.71.28.102	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:56 UTC	772	OUT	GET /v3/__http://www.spglobal.com__;!!GjvTz_vk!S23AgMpOHeRszJTw0uERhApJ206Qy-6sZgONselCccTEnesoxmXELyzjpgIAJ4dUeu42X6YW-6U7TAxHRak42sA2nCnI$ HTTP/1.1 Host: urldefense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:56 UTC	351	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:50:56 GMT Content-Length: 0 Connection: close Location: http://www.spglobal.com Strict-Transport-Security: max-age=31536000 X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Content-Security-Policy: default-src 'self';

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49935	216.58.206.66	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:56 UTC	1135	OUT	GET /ddm/fls/z/dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://11756258.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:56 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49939	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:56 UTC	563	OUT	OPTIONS /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:56 UTC	1052	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,Authorization,visitorId,_zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: POST via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=3klDHaxLXvqxH4yB1nv8B5l27acXiabBDDeqf7UB8Jk-1716472256-1.0.1.1-abC7lAgFXbLa0C4MSBktVWIyyz1DB9Pu6tRLtkQOWdRxLDUp8rt40aYMb2CS65dBefOck3jpXuGA9on6NOxMvg; path=/; expires=Thu, 23-May-24 14:20:56 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=NL94kD9aaF72laAka.Y5.Qfz4eKLT9Dxs591vpkEj.U-1716472256752-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 888584944f18c459-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:56 UTC	9	IN	Data Raw: 34 0d 0a 50 4f 53 54 0d 0a Data Ascii: 4POST
2024-05-23 13:50:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49940	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:56 UTC	635	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:50:56 UTC	570	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:56 GMT Content-Length: 0 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88858494add419d7-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49936	172.217.18.4	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:56 UTC	819	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&_u=YHBAAEAAAAAAACAEK~&z=1562181121 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:56 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49938	172.217.18.4	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:56 UTC	818	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&_u=YHDAAEABAAAAACAGK~&z=1332001211 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:57 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49942	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:57 UTC	2226	OUT	GET /tracker/tc_imp.gif?e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400035db386ee683e99332bd06b442c316f0496f70bfc72f02431e24f97999c140ab51258fc6e279126332a5de6c7fd6d5431f2b436f0715a7902c701e56f2ab0b2093aef6298ee35d60013ee9f3e4869265b68edf0fb907945e6b3798be9eb7a031c5d9b46a90340a84f0c9244c14a5686fba8c063abbcaf1708704fc5aa0c15a9e5dc1dd27807c75d59338c722d795f6b0cfb8bf4678a773a8e8a5744e69ed9138c5f01bed01135d8b040dd08e82cf8cfb897d88649098b2c820bd323b24837b3a9998d1166884ba21e541e6d315d6409e3d0c0b548c6eec439cd0ad3fe0d176870ce08bdbcb7789490435bd1e5a137f433e9fec62be42c79a9536a4de2bbd9c2fce89ecfd6b84bdeb1f3e3e84a91004deb4285409f3e0f41ff02890f85be9e62fb778a733904dd513d6ae38c01825e1af807a2d69327076520949ee98d87ed810aa5752516ba4 [TRUNCATED] Host: obs.fishrobotflower.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:50:57 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 23 May 2024 13:50:57 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-05-23 13:50:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49944	216.58.206.34	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:57 UTC	887	OUT	GET /ddm/fls/z/dc_pre=CLLJ7rf1o4YDFQPwOwIdwfILfw;src=11756258;type=onsite;cat=spsitewd;ord=4029846717223;npa=0;auiddc=;ps=1;pcor=1208866049;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:57 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49945	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:57 UTC	951	OUT	POST /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Content-Length: 57 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: bearer e8a59e45996cead00c71c0093304a0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:50:57 UTC	57	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 2f 65 6e 2f 22 7d Data Ascii: {"url":"https://www.spglobal.com/marketintelligence/en/"}
2024-05-23 13:50:57 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:57 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow etag: W/"e00-UQmDY9qLYZ5Nt6UCwN8iJWYEwus" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885849b2cc17c9a-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:57 UTC	685	IN	Data Raw: 65 30 30 0d 0a 5b 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 66 66 65 33 66 32 63 33 2d 65 30 66 63 2d 34 32 62 30 2d 61 61 61 32 2d 62 66 32 34 63 31 39 63 65 65 34 62 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 76 2e 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 2f 65 6e 2f 63 61 6d 70 61 69 67 6e 73 2f 63 6f 6d 6d 65 72 63 69 61 6c 2d 6c 65 6e 64 69 6e 67 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 72 65 71 75 65 73 74 46 6f 72 6d 5f 65 6d 62 65 64 64 65 64 5f 32 27 5d 22 2c 22 66 6f 72 6d 49 66 72 61 6d 65 57 72 61 70 70 65 72 53 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 Data Ascii: e00[{"inputs":null,"formId":"ffe3f2c3-e0fc-42b0-aaa2-bf24c19cee4b","url":"https://dev.www.spglobal.com/marketintelligence/en/campaigns/commercial-lending","selector":"form[id='requestForm_embedded_2']","formIframeWrapperSelector":null,"isManual":true,"s
2024-05-23 13:50:57 UTC	1369	IN	Data Raw: 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 34 66 66 65 65 64 38 66 2d 31 63 30 63 2d 34 39 30 37 2d 62 36 37 33 2d 66 30 62 62 33 38 31 39 65 36 36 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 67 65 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 70 67 6c 6f 62 61 6c 2f 63 6f 72 70 6f 72 61 74 65 2f 75 73 2f 65 6e 2d 74 65 73 74 2f 66 6f 72 6d 73 2d 74 65 73 74 69 6e 67 2e 68 74 6d 6c 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 67 75 69 64 65 43 6f 6e 74 61 69 6e 65 72 46 6f 72 6d 27 5d 22 2c 22 66 6f 72 6d 49 66 Data Ascii: formLoadTimeout":4000},"isDevelopmentMode":false},{"inputs":null,"formId":"4ffeed8f-1c0c-4907-b673-f0bb3819e66e","url":"https://stage.spglobal.com/content/spglobal/corporate/us/en-test/forms-testing.html","selector":"form[id='guideContainerForm']","formIf
2024-05-23 13:50:57 UTC	1369	IN	Data Raw: 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 43 69 74 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 69 74 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 69 65 6c 64 22 3a 22 63 6f 6e 74 61 63 74 43 69 74 79 22 2c 22 61 74 74 72 53 65 6c 65 63 74 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 Data Ascii: or":"name"},{"complete":false,"nameAttr":"City","displayName":"City","elementType":"input","mappedField":"contactCity","attrSelector":"name"},{"complete":false,"nameAttr":"complianceCountry","displayName":"complianceCountry","elementType":"input","mappedF
2024-05-23 13:50:57 UTC	168	IN	Data Raw: 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 61 6d 65 4d 61 70 70 69 6e 67 4f 74 68 65 72 50 61 67 65 73 22 3a 74 72 75 65 2c 22 61 64 64 69 74 69 6f 6e 61 6c 53 65 74 74 69 6e 67 73 22 3a 7b 22 6e 6f 46 6f 63 75 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 45 6d 61 69 6c 56 65 72 69 66 79 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 5d 0d 0a Data Ascii: tor":null,"isManual":true,"sameMappingOtherPages":true,"additionalSettings":{"noFocus":false,"noEmailVerify":false,"formLoadTimeout":4000},"isDevelopmentMode":false}]
2024-05-23 13:50:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49946	216.58.206.68	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:57 UTC	583	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-11&cid=766154725.1716472251&jid=1754150771&_u=YHBAAEAAAAAAACAEK~&z=1562181121 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:58 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49947	216.58.206.68	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:57 UTC	582	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-112909543-1&cid=766154725.1716472251&jid=1073569889&_u=YHDAAEABAAAAACAGK~&z=1332001211 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:58 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:50:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:50:58 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49950	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:58 UTC	1990	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:50:58 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 23 May 2024 13:50:58 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-05-23 13:50:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49951	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:58 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 5578 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:50:58 UTC	5578	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:50:58 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:50:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49952	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:58 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 1723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:50:58 UTC	1723	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:50:58 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:50:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49954	18.245.86.77	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:58 UTC	550	OUT	GET /include/1716472500000/n6k2yubr6fw7.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:58 UTC	973	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225885 Connection: close Server: istio-envoy Date: Thu, 23 May 2024 13:50:58 GMT Last-Modified: Wed, 22 May 2024 13:34:06 GMT ETag: "7c4c8a7061350329f108e3f92f2b6acc" x-amz-server-side-encryption: AES256 x-amz-version-id: XYnjHdjtoHL3LHbO4aoVXXJc8JG50RFv Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 31 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 1ed131e2ff13a9b8852067b4dfb6f2dc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: 4i1a2UOxFg_GbgZJrTqAvUmHLQxMRLixIHniNmW9cq1pIgF7uKHQjg==
2024-05-23 13:50:58 UTC	7680	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 63 3d 30 2c 75 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 69 5b 63 5d 2c 6e 5b 6f 5d 26 26 75 2e 70 75 73 68 28 6e 5b 6f 5d 5b 30 5d 29 2c 6e 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 61 26 26 61 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 7d 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 30 3a 30 7d 3b 66 75 6e 63 74 69 Data Ascii: !function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};functi
2024-05-23 13:50:59 UTC	4127	IN	Data Raw: 65 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 34 3d 3d 3d 73 2e 72 65 61 64 79 53 74 61 74 65 26 26 74 28 72 29 7d 29 2c 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 69 29 7d 7d 28 74 68 69 73 2e 6d 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 6c 2e 62 69 6e 64 28 74 68 69 73 29 29 2c 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 76 61 72 20 6e 3d 66 65 74 63 68 3b 66 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 20 66 65 74 63 68 28 72 29 7b 66 6f 72 28 76 61 72 20 6f 3d 5b 5d 2c 69 3d 30 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 69 29 6f 5b 69 2d 30 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 72 2c 69 29 7b 76 61 72 20 61 3d 63 2b 2b 3b Data Ascii: echange",function(){4===s.readyState&&t(r)}),n.apply(this,i)}}(this.m.bind(this),this.l.bind(this)),function x(e,t){var n=fetch;fetch=function fetch(r){for(var o=[],i=0;i<arguments.length;++i)o[i-0]=arguments[i];return new Promise(function(r,i){var a=c++;
2024-05-23 13:50:59 UTC	16384	IN	Data Raw: 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 3d 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 65 29 7b 5b 22 6e 65 78 74 22 2c 22 74 68 72 6f 77 22 2c 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 74 2c 65 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 73 79 6e 63 49 74 65 72 61 74 6f 72 28 65 2c 74 29 7b 76 61 72 20 6e 3b 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 3d 66 75 6e 63 74 69 6f 6e 20 65 6e 71 75 65 75 65 28 Data Ascii: rFunctionPrototype.prototype=Generator.prototype=Object.create(p);function defineIteratorMethods(e){["next","throw","return"].forEach(function(t){e[t]=function(e){return this._invoke(t,e)}})}function AsyncIterator(e,t){var n;this._invoke=function enqueue(
2024-05-23 13:50:59 UTC	4096	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 28 74 68 69 73 29 7d 2c 65 2e 6c 61 7a 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 3d 21 30 2c 74 68 69 73 7d 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 3f 65 3a 75 74 69 6c 73 5f 69 73 50 72 6f 6d 69 73 65 28 65 29 3f 6e 65 77 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 74 68 65 6e 28 74 2c 6e 29 7d 29 3a 28 6e 65 77 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 29 2e 72 65 73 6f 6c 76 65 28 65 29 7d 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 72 65 6a Data Ascii: e.resolve(this)},e.lazy=function(){return this.errorHandled=!0,this},ZalgoPromise.resolve=function(e){return e instanceof ZalgoPromise?e:utils_isPromise(e)?new ZalgoPromise(function(t,n){return e.then(t,n)}):(new ZalgoPromise).resolve(e)},ZalgoPromise.rej
2024-05-23 13:50:59 UTC	16384	IN	Data Raw: 65 2e 67 65 74 4f 72 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 28 65 29 3b 76 61 72 20 6e 3d 74 28 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 28 65 2c 6e 29 2c 6e 7d 2c 43 72 6f 73 73 44 6f 6d 61 69 6e 53 61 66 65 57 65 61 6b 4d 61 70 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 7c 7c 65 2e 5f 5f 6e 61 6d 65 5f 5f 7c 7c 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 61 6e 6f 6e 79 6d 6f 75 73 22 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 46 75 6e 63 74 69 6f 6e 4e 61 6d 65 28 65 2c 74 29 7b 74 72 79 7b 64 65 6c 65 74 65 20 65 2e 6e 61 6d 65 2c 65 2e 6e 61 6d 65 Data Ascii: e.getOrSet=function(e,t){if(this.has(e))return this.get(e);var n=t();return this.set(e,n),n},CrossDomainSafeWeakMap}();function getFunctionName(e){return e.name\|\|e.__name__\|\|e.displayName\|\|"anonymous"}function setFunctionName(e,t){try{delete e.name,e.name
2024-05-23 13:50:59 UTC	16384	IN	Data Raw: 65 72 69 61 6c 69 7a 65 54 79 70 65 28 22 63 72 6f 73 73 5f 64 6f 6d 61 69 6e 5f 66 75 6e 63 74 69 6f 6e 22 2c 7b 69 64 3a 63 2c 6e 61 6d 65 3a 75 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 72 69 61 6c 69 7a 65 4d 65 73 73 61 67 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 2c 69 3d 72 2e 6f 6e 2c 61 3d 72 2e 73 65 6e 64 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 41 29 3b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 5b 65 5d 3b 69 66 28 69 73 53 65 72 69 61 6c 69 7a 65 64 54 79 70 65 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 72 3d 64 65 74 65 72 6d 69 6e 65 54 79 70 65 28 6e 29 3b Data Ascii: erializeType("cross_domain_function",{id:c,name:u})}function serializeMessage(e,t,n,r){var o,i=r.on,a=r.send;return function(e,t){void 0===t&&(t=A);var n=JSON.stringify(e,function(e){var n=this[e];if(isSerializedType(this))return n;var r=determineType(n);
2024-05-23 13:50:59 UTC	1024	IN	Data Raw: 3d 65 7d 28 74 2e 6c 65 6e 67 74 68 29 3f 63 72 65 61 74 65 42 75 66 66 65 72 28 65 2c 30 29 3a 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 29 3b 69 66 28 22 42 75 66 66 65 72 22 3d 3d 3d 74 2e 74 79 70 65 26 26 69 28 74 2e 64 61 74 61 29 29 72 65 74 75 72 6e 20 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 2e 64 61 74 61 29 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 73 73 65 72 74 53 69 7a 65 28 65 29 7b 69 66 28 22 6e 75 Data Ascii: =e}(t.length)?createBuffer(e,0):fromArrayLike(e,t);if("Buffer"===t.type&&i(t.data))return fromArrayLike(e,t.data)}throw new TypeError("First argument must be a string, Buffer, ArrayBuffer, Array, or array-like object.")}(e,t)}function assertSize(e){if("nu
2024-05-23 13:50:59 UTC	15360	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 65 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 65 26 26 28 65 3d 22 22 2b 65 29 3b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 6e 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 72 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 3a 72 65 74 75 72 6e 20 6e 3b 63 61 73 65 22 75 74 66 38 22 3a 63 61 73 65 22 75 74 66 2d 38 22 3a 63 61 73 65 20 76 6f 69 64 20 30 3a 72 65 74 75 72 6e 20 75 74 66 38 54 6f 42 79 74 65 73 28 65 29 2e 6c 65 6e 67 74 68 3b 63 61 73 65 22 75 63 73 32 22 3a 63 61 73 65 22 75 63 73 2d 32 22 3a 63 61 73 65 22 75 74 66 31 36 6c Data Ascii: ))return e.byteLength;"string"!==typeof e&&(e=""+e);var n=e.length;if(0===n)return 0;for(var r=!1;;)switch(t){case"ascii":case"latin1":case"binary":return n;case"utf8":case"utf-8":case void 0:return utf8ToBytes(e).length;case"ucs2":case"ucs-2":case"utf16l
2024-05-23 13:50:59 UTC	16384	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 49 6e 74 42 45 3d 66 75 6e 63 74 69 6f 6e 20 77 72 69 74 65 49 6e 74 42 45 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 3d 2b 65 2c 74 7c 3d 30 2c 21 72 29 7b 76 61 72 20 6f 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 38 2a 6e 2d 31 29 3b 63 68 65 63 6b 49 6e 74 28 74 68 69 73 2c 65 2c 74 2c 6e 2c 6f 2d 31 2c 2d 6f 29 7d 76 61 72 20 69 3d 6e 2d 31 2c 61 3d 31 2c 73 3d 30 3b 66 6f 72 28 74 68 69 73 5b 74 2b 69 5d 3d 32 35 35 26 65 3b 2d 2d 69 3e 3d 30 26 26 28 61 2a 3d 32 35 36 29 3b 29 65 3c 30 26 26 30 3d 3d 3d 73 26 26 30 21 3d 3d 74 68 69 73 5b 74 2b 69 2b 31 5d 26 26 28 73 3d 31 29 2c 74 68 69 73 5b 74 2b 69 5d 3d 28 65 2f 61 3e 3e 30 29 2d 73 26 32 35 35 3b 72 65 74 75 72 6e 20 74 2b 6e 7d 2c 42 75 66 66 65 72 2e 70 Data Ascii: prototype.writeIntBE=function writeIntBE(e,t,n,r){if(e=+e,t\|=0,!r){var o=Math.pow(2,8n-1);checkInt(this,e,t,n,o-1,-o)}var i=n-1,a=1,s=0;for(this[t+i]=255&e;--i>=0&&(a=256);)e<0&&0===s&&0!==this[t+i+1]&&(s=1),this[t+i]=(e/a>>0)-s&255;return t+n},Buffer.p
2024-05-23 13:50:59 UTC	1024	IN	Data Raw: 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 76 61 72 20 74 3d 63 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 3e 3d 30 26 26 63 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 74 74 72 73 2e 74 79 70 65 26 26 28 65 2e 61 74 74 72 73 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 74 74 72 73 2e 6e 6f 6e 63 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 4e 6f 6e 63 65 28 29 7b 30 3b 72 65 74 75 72 6e 20 6e 2e 6e 63 7d 28 29 3b 72 26 26 28 65 2e Data Ascii: ntNode.removeChild(e);var t=c.indexOf(e);t>=0&&c.splice(t,1)}function createStyleElement(e){var t=document.createElement("style");if(void 0===e.attrs.type&&(e.attrs.type="text/css"),void 0===e.attrs.nonce){var r=function getNonce(){0;return n.nc}();r&&(e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49955	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:58 UTC	612	OUT	GET /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:50:58 UTC	634	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 13:50:58 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584a17eb5c333-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:50:58 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49960	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:59 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:50:59 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:50:59 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49959	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:59 UTC	754	OUT	GET /gw1/trw?aid=spglobal&trwv.uid=spglobal-1716472255215-3a36b654&trwv.vc=1&trwsa.sid=spglobal-1716472255217-b61b91f1&trwsb.cpv=1&ctzo=-04:00&uri=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&pm=&viewedTypes=&rts=1716472255219 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:59 UTC	435	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:59 GMT Server: Jetty(9.4.45.v20220203) Content-Type: application/x-javascript;charset=utf-8 Cache-Control: no-cache Content-Length: 0 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!cueS7pzb/h8jOaKJMaUfYxEamMjeMiGYSw3DJVj/D3HxgExazKHuOadd/80c0N1oI9gAwtfdJ8zgfR4=; expires=Thu, 23-May-2024 14:25:59 GMT; path=/; Httponly; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49958	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:59 UTC	697	OUT	GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.45853412486275036&rts=1716472256075 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:59 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:50:59 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/javascript;charset=utf-8 Cache-Control: no-cache Content-Length: 0 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!npzdi7Di0MUguvaJMaUfYxEamMjeMtQEkMw+kdTMgbNdVzc8Fsaibf9Hg4bV+TSA68sQNWS5GwSk1O4=; expires=Thu, 23-May-2024 14:25:59 GMT; path=/; Httponly; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49962	192.28.144.124	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:50:59 UTC	822	OUT	POST /webevents/visitWebPage?_mchNc=1716472256003&_mchCn=&_mchId=565-BDO-100&_mchTk=_mch-spglobal.com-1716472256002-46107&_mchHo=www.spglobal.com&_mchPo=&_mchRu=%2Fmarketintelligence%2Fen%2F&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 Host: 565-bdo-100.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:50:59 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 23 May 2024 13:50:59 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 8f8f142d-e624-44fc-9fe1-d90d740af633 Access-Control-Allow-Origin: *
2024-05-23 13:50:59 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49964	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:00 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 1918 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:00 UTC	1918	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:00 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49963	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:00 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:00 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:00 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49965	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:00 UTC	1087	OUT	GET /core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:00 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:00 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 9eea50524ba9fbd8bbcad3e7048d3dac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: ijGHuhmmj1WsBW3VMvu82FDvQZMwT--0pfnO_V2mgM1DN3bLrF6GnQ==
2024-05-23 13:51:00 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49971	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:00 UTC	696	OUT	GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.8736560985077646&rts=1716472258112 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:00 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:00 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/javascript;charset=utf-8 Cache-Control: no-cache Content-Length: 0 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!yAbHwYeL3Qv4lECJMaUfYxEamMjeMpKpJBTSxD8xBr/HavtuzVdDk2UubupSeRUxii5Z8PGfeS+Zwhk=; expires=Thu, 23-May-2024 14:26:00 GMT; path=/; Httponly; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49969	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:00 UTC	752	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:01 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:01 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 2ed8b710d99a964ef414e41b544ffb2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: 0rLuBAwjDl2rGINTbN3xz9XfJ8U33tfk93u5oGzddqxLKtoaM7PeMw==
2024-05-23 13:51:01 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49974	172.64.144.214	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:01 UTC	708	OUT	GET /visualisation/15507338/embed?auto=1 HTTP/1.1 Host: flo.uri.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:01 UTC	500	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: 1kx5hSRmu9HQ/fNz4zABBJzmob1G7LsW8cMe8+VdfwUX88Pb/I5lAHjbjbHT0RIN19EY0bp0/eU= x-amz-request-id: H9XVK95JHG30CKK6 Cache-Control: max-age=0 Last-Modified: Thu, 26 Oct 2023 17:28:16 GMT x-amz-version-id: 0DVgINLOWbvVYYInYad9elETS8lwYPcH CF-Cache-Status: HIT Age: 756204 Accept-Ranges: bytes Server: cloudflare CF-RAY: 888584b3992fc47c-EWR
2024-05-23 13:51:01 UTC	869	IN	Data Raw: 37 39 62 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6c 6f 2e 75 72 69 2e 73 68 2f 74 65 6d 70 6c 61 74 65 2f 32 30 37 36 32 2f 76 32 31 2f 73 74 61 74 69 63 2f 63 68 6f 69 63 65 73 2f 73 74 79 6c 65 73 2f 63 73 73 2f 63 68 6f 69 63 65 73 2e 6d 69 6e 2e 63 73 73 22 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d Data Ascii: 79b4<!DOCTYPE html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="stylesheet" href="https://flo.uri.sh/template/20762/v21/static/choices/styles/css/choices.min.css"><link rel=
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 74 65 6d 70 6c 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: ;</script><script>var template=function(t){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function n(t){return t&&t.__esModule&&Object.proto
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 65 45 72 72 6f 72 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6b 28 74 29 29 74 68 72 6f 77 20 41 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 2c 49 3d 6a 2c 4e 3d 4f 62 6a 65 63 74 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4e 28 49 28 74 29 29 7d 2c 7a 3d 54 2c 45 3d 77 28 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 29 2c 53 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 45 28 7a 28 74 29 2c 65 29 7d 2c 44 3d 77 2c 43 3d 30 2c 4c 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 4f 3d 44 28 31 2e 2e 74 6f 53 74 72 69 6e 67 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 Data Ascii: eError,j=function(t){if(k(t))throw A("Can't call method on "+t);return t},I=j,N=Object,T=function(t){return N(I(t))},z=T,E=w({}.hasOwnProperty),S=Object.hasOwn\|\|function(t,e){return E(z(t),e)},D=w,C=0,L=Math.random(),O=D(1..toString),P=function(t){return"
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 66 74 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 2c 5f 74 3d 7b 7d 2c 79 74 3d 21 5f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 7b 7d 2c 31 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 37 7d 7d 29 5b 31 5d 7d 29 29 2c 6d 74 3d 79 74 26 26 5f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 34 32 21 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 76 61 6c 75 65 3a 34 32 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 2e 70 72 6f 74 6f 74 79 70 65 7d 29 29 2c 76 74 3d 7b 7d 2c 62 74 3d 68 74 2c 78 74 Data Ascii: ft(t)+" is not an object")},_t={},yt=!_((function(){return 7!=Object.defineProperty({},1,{get:function(){return 7}})[1]})),mt=yt&&_((function(){return 42!=Object.defineProperty((function(){}),"prototype",{value:42,writable:!1}).prototype})),vt={},bt=ht,xt
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 29 2c 69 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 21 4a 74 28 74 29 7c 7c 4b 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 6e 2c 72 3d 74 65 28 74 2c 72 65 29 3b 69 66 28 72 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 22 64 65 66 61 75 6c 74 22 29 2c 6e 3d 58 74 28 72 2c 74 2c 65 29 2c 21 4a 74 28 6e 29 7c 7c 4b 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 3b 74 68 72 6f 77 20 6e 65 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 22 6e 75 6d 62 65 72 22 29 2c 65 65 28 74 2c 65 29 7d 2c 6f 65 3d 69 65 2c 61 65 3d 50 74 2c 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 Data Ascii: ),ie=function(t,e){if(!Jt(t)\|\|Kt(t))return t;var n,r=te(t,re);if(r){if(void 0===e&&(e="default"),n=Xt(r,t,e),!Jt(n)\|\|Kt(n))return n;throw ne("Can't convert object to primitive value")}return void 0===e&&(e="number"),ee(t,e)},oe=ie,ae=Pt,se=function(t){var
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 30 29 3a 55 65 28 6e 2c 65 29 7d 2c 42 65 3d 4c 65 2c 52 65 3d 4d 61 74 68 2e 6d 69 6e 2c 46 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3e 30 3f 52 65 28 42 65 28 74 29 2c 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 3a 30 7d 2c 5a 65 3d 46 65 2c 48 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 65 28 74 2e 6c 65 6e 67 74 68 29 7d 2c 51 65 3d 7a 65 2c 47 65 3d 59 65 2c 71 65 3d 48 65 2c 57 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3d 51 65 28 65 29 2c 61 3d 71 65 28 6f 29 2c 73 3d 47 65 28 72 2c 61 29 3b 69 66 28 74 26 26 6e 21 3d 6e 29 7b 66 6f 72 28 3b 61 3e 73 3b 29 69 66 28 28 69 3d 6f 5b 73 2b 2b 5d 29 21 3d 69 29 Data Ascii: 0):Ue(n,e)},Be=Le,Re=Math.min,Fe=function(t){return t>0?Re(Be(t),9007199254740991):0},Ze=Fe,He=function(t){return Ze(t.length)},Qe=ze,Ge=Ye,qe=He,We=function(t){return function(e,n,r){var i,o=Qe(e),a=qe(o),s=Ge(r,a);if(t&&n!=n){for(;a>s;)if((i=o[s++])!=i)
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 6e 29 3a 28 65 3d 6b 6e 28 22 69 66 72 61 6d 65 22 29 2c 6e 3d 22 6a 61 76 61 22 2b 6a 6e 2b 22 3a 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 4d 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2c 65 2e 73 72 63 3d 53 74 72 69 6e 67 28 6e 29 2c 28 74 3d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 6f 70 65 6e 28 29 2c 74 2e 77 72 69 74 65 28 54 6e 28 22 64 6f 63 75 6d 65 6e 74 2e 46 3d 4f 62 6a 65 63 74 22 29 29 2c 74 2e 63 6c 6f 73 65 28 29 2c 74 2e 46 29 3a 7a 6e 28 70 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 78 6e 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 64 65 6c 65 74 65 20 45 6e 5b 41 6e 5d 5b 78 6e 5b 72 5d 5d 3b 72 65 74 75 72 6e 20 45 6e 28 29 7d 3b 77 6e 5b 49 6e 5d 3d 21 30 3b 76 61 72 Data Ascii: n):(e=kn("iframe"),n="java"+jn+":",e.style.display="none",Mn.appendChild(e),e.src=String(n),(t=e.contentWindow.document).open(),t.write(Tn("document.F=Object")),t.close(),t.F):zn(pn);for(var r=xn.length;r--;)delete En[An][xn[r]];return En()};wn[In]=!0;var
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 61 62 6c 65 29 7d 2c 68 72 3d 6c 74 2c 64 72 3d 64 2c 66 72 3d 77 28 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 29 3b 68 72 28 64 72 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 29 7c 7c 28 64 72 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 72 28 74 29 7d 29 3b 76 61 72 20 70 72 2c 67 72 2c 5f 72 2c 79 72 3d 64 72 2e 69 6e 73 70 65 63 74 53 6f 75 72 63 65 2c 6d 72 3d 6c 74 2c 76 72 3d 69 2e 57 65 61 6b 4d 61 70 2c 62 72 3d 6d 72 28 76 72 29 26 26 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 53 74 72 69 6e 67 28 76 72 29 29 2c 78 72 3d 69 2c 77 72 3d 68 74 2c 4d 72 3d 6e 72 2c 6b 72 3d 53 2c 41 72 3d 64 2c 6a 72 3d 6d 6e 2c 49 72 3d 24 65 2c 4e 72 3d 22 4f 62 6a 65 63 74 20 61 6c Data Ascii: able)},hr=lt,dr=d,fr=w(Function.toString);hr(dr.inspectSource)\|\|(dr.inspectSource=function(t){return fr(t)});var pr,gr,_r,yr=dr.inspectSource,mr=lt,vr=i.WeakMap,br=mr(vr)&&/native code/.test(String(vr)),xr=i,wr=ht,Mr=nr,kr=S,Ar=d,jr=mn,Ir=$e,Nr="Object al
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 20 22 2b 65 29 2c 28 21 50 72 28 74 2c 22 6e 61 6d 65 22 29 7c 7c 59 72 26 26 74 2e 6e 61 6d 65 21 3d 3d 65 29 26 26 28 55 72 3f 48 72 28 74 2c 22 6e 61 6d 65 22 2c 7b 76 61 6c 75 65 3a 65 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 3a 74 2e 6e 61 6d 65 3d 65 29 2c 57 72 26 26 6e 26 26 50 72 28 6e 2c 22 61 72 69 74 79 22 29 26 26 74 2e 6c 65 6e 67 74 68 21 3d 3d 6e 2e 61 72 69 74 79 26 26 48 72 28 74 2c 22 6c 65 6e 67 74 68 22 2c 7b 76 61 6c 75 65 3a 6e 2e 61 72 69 74 79 7d 29 3b 74 72 79 7b 6e 26 26 50 72 28 6e 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 55 72 26 26 48 72 28 74 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 3a 74 2e 70 72 6f 74 6f 74 79 70 65 26 Data Ascii: "+e),(!Pr(t,"name")\|\|Yr&&t.name!==e)&&(Ur?Hr(t,"name",{value:e,configurable:!0}):t.name=e),Wr&&n&&Pr(n,"arity")&&t.length!==n.arity&&Hr(t,"length",{value:n.arity});try{n&&Pr(n,"constructor")&&n.constructor?Ur&&Hr(t,"prototype",{writable:!1}):t.prototype&
2024-05-23 13:51:01 UTC	1369	IN	Data Raw: 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 66 69 28 65 29 2c 69 3d 67 69 2e 66 2c 6f 3d 70 69 2e 66 2c 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 61 5d 3b 64 69 28 74 2c 73 29 7c 7c 6e 26 26 64 69 28 6e 2c 73 29 7c 7c 69 28 74 2c 73 2c 6f 28 65 2c 73 29 29 7d 7d 2c 45 69 3d 6b 69 2c 53 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 3d 74 2e 74 61 72 67 65 74 2c 6c 3d 74 2e 67 6c 6f 62 61 6c 2c 63 3d 74 2e 73 74 61 74 3b 69 66 28 6e 3d 6c 3f 41 69 3a 63 3f 41 69 5b 73 5d 7c 7c 54 69 28 73 2c 7b 7d 29 3a 28 41 69 5b 73 5d 7c 7c 7b 7d 29 2e 70 72 6f 74 6f 74 79 70 65 29 66 6f 72 28 72 20 69 6e 20 65 29 7b 69 66 28 6f 3d 65 5b 72 5d 2c 69 3d 74 2e 64 6f 6e 74 43 61 6c 6c 47 Data Ascii: ,n){for(var r=fi(e),i=gi.f,o=pi.f,a=0;a<r.length;a++){var s=r[a];di(t,s)\|\|n&&di(n,s)\|\|i(t,s,o(e,s))}},Ei=ki,Si=function(t,e){var n,r,i,o,a,s=t.target,l=t.global,c=t.stat;if(n=l?Ai:c?Ai[s]\|\|Ti(s,{}):(Ai[s]\|\|{}).prototype)for(r in e){if(o=e[r],i=t.dontCallG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49976	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:01 UTC	989	OUT	GET /core/assets/js/runtime~main.96c083f3.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:02 UTC	990	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 6145 Connection: close Server: istio-envoy Date: Wed, 22 May 2024 13:35:24 GMT Last-Modified: Tue, 21 May 2024 13:05:15 GMT ETag: "26d5c6c952637bee2e6c46f746ff2c9a" x-amz-server-side-encryption: AES256 x-amz-version-id: zKRODu.trFkYzYR2rxQLajGESdKEn508 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cdb788e74ed90a1fcf07b00f1ca2f544.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: NiIVoqwViKEb5ixSF4MksC7oFocVkl9dtxyETtv4S-3GSIespROnDg== Age: 87338
2024-05-23 13:51:02 UTC	6145	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 72 2c 64 2c 74 3d 63 5b 30 5d 2c 6e 3d 63 5b 31 5d 2c 5f 3d 63 5b 32 5d 2c 75 3d 30 2c 69 3d 5b 5d 3b 75 3c 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 64 3d 74 5b 75 5d 2c 61 5b 64 5d 26 26 69 2e 70 75 73 68 28 61 5b 64 5d 5b 30 5d 29 2c 61 5b 64 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 3b 66 6f 72 28 6f 26 26 6f 28 63 29 3b 69 2e 6c 65 6e 67 74 68 3b 29 69 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 66 2e 70 75 73 68 2e 61 70 Data Ascii: !function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49975	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:01 UTC	984	OUT	GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:02 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 35552 Connection: close Server: istio-envoy Date: Mon, 25 Sep 2023 06:40:26 GMT Last-Modified: Fri, 22 Sep 2023 19:55:12 GMT ETag: "c6f58dd3d60f07462254b842dd4f9ca1" x-amz-server-side-encryption: AES256 x-amz-version-id: F1MjOIB9tfAaHWTRcFTS28OPF5C0SV9y Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 46 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 69a5590783a34ecc5f59d50426925736.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: rfRAeLtQBV4qBDbnN4jUOGQXSQoeeCShs_wcoF_XTgK4agSZuPSBeQ== Age: 20848236
2024-05-23 13:51:02 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 5d 2c 7b 22 2b 4d 4c 78 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 48 41 75 4d 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 72 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 7d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 6e 29 7d 3b 63 61 73 65 20 32 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2
2024-05-23 13:51:02 UTC	16384	IN	Data Raw: 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 2c 69 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 69 74 2e 73 65 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 65 2c 76 6f 69 64 20 30 29 7d 2c 69 74 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 74 2e 73 65 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 5b 30 5d 2c 65 2c 6e 2c 74 5b 30 5d 29 7d 3b 76 61 72 20 75 74 3d 6e 65 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 74 68 69 73 2e 67 3d 48 2c 74 68 69 73 2e 46 3d 21 30 2c 74 68 69 73 2e 70 72 6f 64 75 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b Data Ascii: ,e.apply(this,arguments)}}),it.deleteProperty=function(t,e){return it.set.call(this,t,e,void 0)},it.set=function(t,e,n){return ot.set.call(this,t[0],e,n,t[0])};var ut=new(function(){function e(e){var r=this;this.g=H,this.F=!0,this.produce=function(e,o,i){
2024-05-23 13:51:02 UTC	2784	IN	Data Raw: 72 74 69 65 73 3a 75 74 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 66 74 7d 29 2c 72 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 63 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 61 74 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 73 74 7d 29 2c 72 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 2e 66 28 31 29 7d 29 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 7b 72 65 74 75 72 6e 20 77 2e 66 28 76 28 Data Ascii: rties:ut,getOwnPropertyDescriptor:ft}),r({target:"Object",stat:!0,forced:!c},{getOwnPropertyNames:at,getOwnPropertySymbols:st}),r({target:"Object",stat:!0,forced:f(function(){w.f(1)})},{getOwnPropertySymbols:function getOwnPropertySymbols(t){return w.f(v(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49979	108.156.60.33	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:02 UTC	588	OUT	GET /rollbarjs/refs/tags/v2.26.2/rollbar.min.js HTTP/1.1 Host: cdn.rollbar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.spglobal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:02 UTC	673	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 80320 Connection: close Date: Wed, 22 May 2024 09:29:47 GMT Last-Modified: Thu, 29 Jun 2023 19:28:22 GMT ETag: "0cdff83b84a49cc1f4703065f11602ab" x-amz-server-side-encryption: AES256 Cache-Control: max-age=30672000,public Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Hit from cloudfront Via: 1.1 e345c29560592087623dbe75e8d765d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P2 X-Amz-Cf-Id: xtNMJ3lcWtCRohUHzY0_r3K1ZV_v3PWW3LLHvGhvM8pX_OWhSYI-uw== Age: 102076 Access-Control-Allow-Origin: *
2024-05-23 13:51:02 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function r(n){if(e[n])return e[n].exports;var o=e[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=fun
2024-05-23 13:51:02 UTC	16384	IN	Data Raw: 28 61 72 67 75 6d 65 6e 74 73 29 3b 76 28 74 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 65 6d 28 61 72 67 75 6d 65 6e 74 73 29 2c 65 3d 74 2e 75 75 69 64 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 69 65 6e 74 2e 69 6e 66 6f 28 74 29 2c 7b 75 75 69 64 3a 65 7d 7d 2c 6d 2e 69 6e 66 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 29 72 65 74 75 72 6e 20 67 2e 69 6e 66 6f 2e 61 70 70 6c 79 28 67 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 79 28 61 72 67 75 6d 65 6e 74 73 29 3b 76 28 74 29 7d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 49 74 Data Ascii: (arguments);v(t)},m.prototype.info=function(){var t=this._createItem(arguments),e=t.uuid;return this.client.info(t),{uuid:e}},m.info=function(){if(g)return g.info.apply(g,arguments);var t=y(arguments);v(t)},m.prototype.warn=function(){var t=this._createIt
2024-05-23 13:51:02 UTC	16384	IN	Data Raw: 73 2e 74 72 61 6e 73 70 6f 72 74 4f 70 74 69 6f 6e 73 2c 22 50 4f 53 54 22 29 3b 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 2e 70 6f 73 74 4a 73 6f 6e 50 61 79 6c 6f 61 64 28 74 68 69 73 2e 61 63 63 65 73 73 54 6f 6b 65 6e 2c 72 2c 74 2c 65 29 7d 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 75 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 6c 64 4f 70 74 69 6f 6e 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 6e 2e 6d 65 72 67 65 28 65 2c 74 29 2c 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 4f 70 74 69 6f 6e 73 3d 61 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 74 68 69 73 2e 75 72 6c 29 2c 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 63 63 65 73 73 54 6f 6b 65 6e 26 26 28 Data Ascii: s.transportOptions,"POST");this.transport.postJsonPayload(this.accessToken,r,t,e)},s.prototype.configure=function(t){var e=this.oldOptions;return this.options=n.merge(e,t),this.transportOptions=a(this.options,this.url),void 0!==this.options.accessToken&&(
2024-05-23 13:51:02 UTC	14808	IN	Data Raw: 29 2c 72 28 6e 75 6c 6c 2c 74 29 7d 2c 61 64 64 54 65 6c 65 6d 65 74 72 79 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 74 2e 74 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 73 26 26 6e 2e 73 65 74 28 74 2c 22 64 61 74 61 2e 62 6f 64 79 2e 74 65 6c 65 6d 65 74 72 79 22 2c 74 2e 74 65 6c 65 6d 65 74 72 79 45 76 65 6e 74 73 29 2c 72 28 6e 75 6c 6c 2c 74 29 7d 2c 61 64 64 4d 65 73 73 61 67 65 57 69 74 68 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 74 2e 6d 65 73 73 61 67 65 29 7b 76 61 72 20 6f 3d 22 64 61 74 61 2e 62 6f 64 79 2e 74 72 61 63 65 5f 63 68 61 69 6e 2e 30 22 2c 69 3d 6e 2e 67 65 74 28 74 2c 6f 29 3b 69 66 28 69 7c 7c 28 6f 3d 22 64 61 74 61 2e 62 6f 64 79 2e 74 72 61 63 65 22 2c 69 3d 6e 2e 67 65 74 28 Data Ascii: ),r(null,t)},addTelemetryData:function(t,e,r){t.telemetryEvents&&n.set(t,"data.body.telemetry",t.telemetryEvents),r(null,t)},addMessageWithError:function(t,e,r){if(t.message){var o="data.body.trace_chain.0",i=n.get(t,o);if(i\|\|(o="data.body.trace",i=n.get(
2024-05-23 13:51:02 UTC	16360	IN	Data Raw: 75 65 73 74 29 29 2c 74 68 69 73 2e 74 65 6c 65 6d 65 74 65 72 2e 63 61 70 74 75 72 65 4e 65 74 77 6f 72 6b 28 74 2c 65 2c 72 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 4a 73 6f 6e 43 6f 6e 74 65 6e 74 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 21 28 74 26 26 6e 2e 69 73 54 79 70 65 28 74 2c 22 73 74 72 69 6e 67 22 29 26 26 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 6a 73 6f 6e 22 29 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 75 62 4a 73 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 28 4a 53 4f 4e 2e 70 61 72 73 65 28 74 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 63 72 75 62 46 69 65 6c 64 73 29 29 7d Data Ascii: uest)),this.telemeter.captureNetwork(t,e,r)},p.prototype.isJsonContentType=function(t){return!!(t&&n.isType(t,"string")&&t.toLowerCase().includes("json"))},p.prototype.scrubJson=function(t){return JSON.stringify(i(JSON.parse(t),this.options.scrubFields))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49991	172.64.144.214	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:02 UTC	614	OUT	GET /template/20762/v21/static/choices/styles/css/choices.min.css HTTP/1.1 Host: flo.uri.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://flo.uri.sh/visualisation/15507338/embed?auto=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:02 UTC	539	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:02 GMT Content-Type: text/css Content-Length: 5566 Connection: close x-amz-id-2: bFlzXr1CCd22ksAICW/SYAeGcXryycYu13qbNJWkJ4J+5YbIdoeapGFR3i6qyWWvERqEA0b2Jnw= x-amz-request-id: MSZJ9RXBFESTA2NV Cache-Control: max-age=31536000, immutable Last-Modified: Wed, 25 Oct 2023 12:42:10 GMT x-amz-version-id: EQ3rhDySq_p3EOJgtg8X7wpx6wVuZgkt ETag: "ac45b0abe30007c417750608d660cf6b" CF-Cache-Status: HIT Age: 3558320 Accept-Ranges: bytes Server: cloudflare CF-RAY: 888584b82ae443da-EWR
2024-05-23 13:51:02 UTC	830	IN	Data Raw: 2e 63 68 6f 69 63 65 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 63 68 6f 69 63 65 73 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 63 68 6f 69 63 65 73 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 63 68 6f 69 63 65 73 2e 69 73 2d 64 69 73 61 62 6c 65 64 20 2e 63 68 6f 69 63 65 73 5f 5f 69 6e 6e 65 72 2c 2e 63 68 6f 69 63 65 73 2e 69 73 2d 64 69 73 61 62 6c 65 64 20 2e 63 68 6f 69 63 65 73 5f 5f 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 61 65 61 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 Data Ascii: .choices{position:relative;margin-bottom:24px;font-size:16px}.choices:focus{outline:none}.choices:last-child{margin-bottom:0}.choices.is-disabled .choices__inner,.choices.is-disabled .choices__input{background-color:#eaeaea;cursor:not-allowed;-webkit-user
2024-05-23 13:51:02 UTC	1369	IN	Data Raw: 67 69 6e 2d 72 69 67 68 74 3a 32 35 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 65 6d 3b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 63 68 6f 69 63 65 73 5b 64 61 74 61 2d 74 79 70 65 2a 3d 73 65 6c 65 63 74 2d 6f 6e 65 5d 20 2e 63 68 6f 69 63 65 73 5f 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 63 68 6f 69 63 65 73 5b 64 61 74 61 2d 74 79 70 65 2a 3d 73 65 6c 65 63 74 2d 6f 6e 65 5d 20 2e 63 68 6f 69 63 65 73 5f 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 63 68 6f 69 63 65 73 5b 64 61 74 61 2d 74 79 70 65 2a 3d 73 65 6c 65 63 74 2d 6f 6e 65 5d 20 2e 63 68 6f 69 63 65 73 5f 5f 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 Data Ascii: gin-right:25px;height:20px;width:20px;border-radius:10em;opacity:.5}.choices[data-type=select-one] .choices__button:focus,.choices[data-type=select-one] .choices__button:hover{opacity:1}.choices[data-type*=select-one] .choices__button:focus{box-shadow:0
2024-05-23 13:51:02 UTC	1369	IN	Data Raw: 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 63 68 6f 69 63 65 73 5b 64 61 74 61 2d 74 79 70 65 2a 3d 74 65 78 74 5d 20 2e 63 68 6f 69 63 65 73 5f 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 63 68 6f 69 63 65 73 5f 5f 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 39 66 39 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 37 2e 35 70 78 20 33 2e 37 35 70 78 3b 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 Data Ascii: utton:focus,.choices[data-type*=text] .choices__button:hover{opacity:1}.choices__inner{display:inline-block;vertical-align:top;width:100%;background-color:#f9f9f9;padding:7.5px 7.5px 3.75px;;border-radius:2.5px;font-size:14px;min-height:44px;overflow:hidd
2024-05-23 13:51:02 UTC	1369	IN	Data Raw: 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 6f 70 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 32 2e 35 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 61 6c 6c 7d 2e 63 68 6f 69 63 65 73 5f 5f 6c 69 73 74 2d 2d 64 72 6f 70 64 6f 77 6e 2e 69 73 2d 61 63 74 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 69 73 2d 66 6c 69 70 70 65 64 20 2e 63 68 6f 69 63 65 73 5f 5f 6c 69 73 74 2d 2d 64 72 6f 70 64 6f 77 6e 7b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 31 30 30 25 3b 6d 61 72 67 69 Data Ascii: lute;width:100%;top:100%;margin-top:-1px;border-bottom-left-radius:2.5px;border-bottom-right-radius:2.5px;overflow:hidden;word-break:break-all}.choices__list--dropdown.is-active{display:block}.is-flipped .choices__list--dropdown{top:auto;bottom:100%;margi
2024-05-23 13:51:02 UTC	629	IN	Data Raw: 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 37 66 37 66 37 3b 63 6f 6c 6f 72 3a 67 72 61 79 7d 2e 63 68 6f 69 63 65 73 5f 5f 62 75 74 74 6f 6e 7b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 39 39 39 39 70 78 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e Data Ascii: weight:600;font-size:12px;padding:10px;border-bottom:1px solid #f7f7f7;color:gray}.choices__button{text-indent:-9999px;-webkit-appearance:none;-moz-appearance:none;appearance:none;border:0;background-color:transparent;background-repeat:no-repeat;backgroun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49990	172.64.144.214	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:02 UTC	590	OUT	GET /template/20762/v21/static/bundle.css HTTP/1.1 Host: flo.uri.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://flo.uri.sh/visualisation/15507338/embed?auto=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:02 UTC	539	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:02 GMT Content-Type: text/css Content-Length: 1657 Connection: close x-amz-id-2: tseUd9ejksrGECwAfXa2XGopJHP+3FBCMwrZ7f2GmD0IHlQGsVmdED4L0zqC5D1FcP1x92GmPyQ= x-amz-request-id: R8982S6BG7YNC258 Cache-Control: max-age=31536000, immutable Last-Modified: Wed, 25 Oct 2023 12:42:10 GMT x-amz-version-id: T1m.vISYncYvgRSvh7jHq0auvWgOScjM ETag: "b49aa2d66a0b1eb8fc849605abb0528e" CF-Cache-Status: HIT Age: 6128086 Accept-Ranges: bytes Server: cloudflare CF-RAY: 888584b8096a1784-EWR
2024-05-23 13:51:02 UTC	830	IN	Data Raw: 68 74 6d 6c 2c 0a 62 6f 64 79 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 30 2e 35 73 20 65 61 73 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 2e 66 6c 2d 63 6f 6e 74 72 6f 6c 73 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 6d Data Ascii: html,body { height: 100%; margin: 0; margin-left: auto; margin-right: auto; transition: background-color 0.5s ease; overflow: hidden; font-family: sans-serif;}.fl-controls-container { vertical-align: middle; margin-right: 0.75rem; m
2024-05-23 13:51:02 UTC	827	IN	Data Raw: 20 66 69 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 72 65 63 74 2e 73 65 6c 65 63 74 69 6f 6e 20 7b 0a 20 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3a 20 30 2e 31 3b 0a 20 20 66 69 6c 6c 3a 20 6f 72 61 6e 67 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 78 2d 68 69 67 68 6c 69 67 68 74 65 72 2c 0a 2e 64 61 74 61 2d 65 6c 65 6d 65 6e 74 73 20 2e 73 65 72 69 65 73 20 2e 6c 69 6e 65 2c 0a 2e 74 69 63 6b 20 7b 0a 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 64 61 74 61 2d 65 6c 65 6d 65 6e 74 73 20 2e 73 65 72 69 65 73 20 2e 64 61 74 61 2d 70 6f 69 6e 74 73 20 70 61 74 68 20 7b 0a 20 20 73 68 61 70 65 2d 72 65 6e 64 65 72 69 6e 67 3a 20 67 65 6f 6d 65 74 72 69 63 50 72 65 63 69 73 69 6f 6e 3b 0a 7d 0a 2e 61 6e 6e 6f Data Ascii: fill 0.5s ease;}rect.selection { fill-opacity: 0.1; fill: orange !important;}.x-highlighter,.data-elements .series .line,.tick { pointer-events: none;}.data-elements .series .data-points path { shape-rendering: geometricPrecision;}.anno

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49988	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:02 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 1918 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:02 UTC	1918	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:02 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49989	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:02 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:02 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:02 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49995	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:03 UTC	996	OUT	GET /core/assets/js/main~493df0b3.8510c064.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:03 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7215 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:07 GMT Last-Modified: Mon, 29 Apr 2024 17:35:46 GMT ETag: "1c6a1d59a85dc5cc5c7e07197599e9ce" x-amz-server-side-encryption: AES256 x-amz-version-id: u5mCjAIPVeJ8VfVt1S5N322XbNIE6lr4 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 45 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 049d2187ec4ec8f6312a4e2661cd4678.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: qHvGwb-cL2NNY4qEBS8Vf-erZL0dWW6YxNbhhPJE7vUUeudGo3H3PQ== Age: 1978736
2024-05-23 13:51:03 UTC	7215	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 5d 2c 7b 22 2f 37 51 41 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 45 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 45 2e 72 28 69 29 2c 22 70 72 6f 64 75 63 74 69 6f 6e 22 21 3d 3d 45 28 22 4c 65 4a 30 22 29 2e 61 2e 45 4e 56 26 26 45 28 22 43 70 34 31 22 29 3b 76 61 72 20 41 3d 45 28 22 39 45 57 48 22 29 2c 5f 3d 45 28 22 41 44 47 43 22 29 3b 4f 62 6a 65 63 74 28 5f 2e 62 29 28 29 26 26 4f 62 6a 65 63 74 28 41 2e 62 29 28 29 3b 21 66 75 6e 63 74 69 6f 6e 20 70 6f 6c 79 66 69 6c 6c 4b 69 63 6b 6f 66 66 28 74 29 7b 74 72 79 7b 5b 31 5d 2e 69 6e 63 6c 75 64 65 73 28 31 29 26 26 74 28 29 7d 63 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	50006	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:04 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:04 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:04 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 888584c63ebf1a40-EWR
2024-05-23 13:51:04 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	50011	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:04 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:04 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	50008	52.208.202.34	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:04 UTC	656	OUT	GET /match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863 HTTP/1.1 Host: ad.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:05 UTC	634	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:05 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: tuuid=08facf54-2b74-422f-96ff-028f64cd56b8; Expires=Wed, 21 Aug 2024 13:51:05 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: tuuid_lu=1716472265; Expires=Wed, 21 Aug 2024 13:51:05 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://ad.360yield.com/ul_cb/match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	50010	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:04 UTC	957	OUT	GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:05 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23897 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:22 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "cd29b9bc973e48a7fcd0ee7153bdf03b" x-amz-server-side-encryption: AES256 x-amz-version-id: O2lV9BfAoMGuWCy5h2KZx1r2hHWHdRQH Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2ed8b710d99a964ef414e41b544ffb2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: Tz8Hws3yOMX_tP2AV7uaUgvnLmFxU5IO7YC_WzWdZkvH8HyT5S3Ykg== Age: 6535663
2024-05-23 13:51:05 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 5d 2c 7b 6a 72 76 45 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6e 66 62 41 22 29 2c 61 3d 6e 28 22 63 67 66 43 22 29 2c 69 3d 6e 28 22 61 34 67 62 22 29 2c 6f 3d 6e 28 22 2b 6e 78 76 22 29 2c 63 3d 6e 28 22 75 73 69 5a 22 29 2c 73 3d 6e 28 22 6e 62 34 72 22 29 2c 75 3d 6e 28 22 32 6e 50 2b 22 29 2c 6c 3d 6e 28 22 41 48 51 66 22 29 2c 64 3d 6e 28 22 6a 69 59 50 22 29 2c 70 3d 6e 28 22 7a 67 64 4f 22 29 2c 66 3d 6e 28 22 62 54 7a 4e 22 29 2c 76 3d 6e 28 22 6a 6e 69 43 22 29 2c 5f 3d 6e 28 22 75 49 4a 53 22 29 2c 68 3d 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n
2024-05-23 13:51:05 UTC	7513	IN	Data Raw: 76 6f 69 64 20 30 2c 69 2c 21 30 29 3b 63 2e 6c 65 76 65 6c 3d 22 65 72 72 6f 72 22 2c 61 64 64 4d 65 63 68 61 6e 69 73 6d 41 6e 64 43 61 70 74 75 72 65 28 72 2c 6f 2c 63 2c 22 6f 6e 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 6e 68 61 6e 63 65 45 76 65 6e 74 57 69 74 68 49 6e 69 74 69 61 6c 46 72 61 6d 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 65 2e 65 78 63 65 70 74 69 6f 6e 3d 65 2e 65 78 63 65 70 74 69 6f 6e 7c 7c 7b 7d 2c 69 3d 61 2e 76 61 6c 75 65 73 3d 61 2e 76 61 6c 75 65 73 7c 7c 5b 5d 2c 6f 3d 69 5b 30 5d 3d 69 5b 30 5d 7c 7c 7b 7d 2c 63 3d 6f 2e 73 74 61 63 6b 74 72 61 63 65 3d 6f 2e 73 74 61 63 6b 74 72 61 63 65 7c 7c 7b 7d 2c 73 3d 63 2e 66 72 61 6d 65 73 3d 63 2e 66 72 61 Data Ascii: void 0,i,!0);c.level="error",addMechanismAndCapture(r,o,c,"onunhandledrejection")}})}function _enhanceEventWithInitialFrame(e,t,n,r){var a=e.exception=e.exception\|\|{},i=a.values=a.values\|\|[],o=i[0]=i[0]\|\|{},c=o.stacktrace=o.stacktrace\|\|{},s=c.frames=c.fra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	50009	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:05 UTC	957	OUT	GET /core/assets/js/37.b6614199.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:05 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 36995 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:07 GMT Last-Modified: Mon, 29 Apr 2024 20:23:50 GMT ETag: "7b7e39fca61e2fc0b605db6b496695f1" x-amz-server-side-encryption: AES256 x-amz-version-id: 5N3L9ojHxS2wSjPxNNutTjDjeuuLS5GP Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3479e400df017e0f31c5d6c2d353931e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: -pPZciiyVqj1s1gwefEa7gn2p06MBNs8kqoplHSsQ411JyEJcob44g== Age: 1978738
2024-05-23 13:51:05 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 37 5d 2c 7b 22 2b 6e 78 76 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 7d 29 3b 76 61 72 20 72 3d 6e 28 22 7a 67 64 4f 22 29 2c 69 3d 6e 28 22 75 73 69 5a 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 28 65 2c 74 29 7b 21 30 3d 3d 3d 74 2e 64 65 62 75 67 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DE
2024-05-23 13:51:05 UTC	16384	IN	Data Raw: 29 2c 30 3d 3d 3d 75 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 63 29 28 29 3b 76 61 72 20 64 3d 4f 62 6a 65 63 74 28 69 2e 63 29 28 72 5b 30 5d 2c 75 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 72 65 63 6f 72 64 45 6e 76 65 6c 6f 70 65 4c 6f 73 73 28 74 29 7b 4f 62 6a 65 63 74 28 69 2e 65 29 28 64 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 65 2e 72 65 63 6f 72 64 44 72 6f 70 70 65 64 45 76 65 6e 74 28 74 2c 4f 62 6a 65 63 74 28 69 2e 64 29 28 72 29 29 7d 29 7d 3b 72 65 74 75 72 6e 20 6e 2e 61 64 64 28 66 75 6e 63 74 69 6f 6e 20 72 65 71 75 65 73 74 54 61 73 6b 28 29 7b 72 65 74 75 72 6e 20 74 28 7b 62 6f 64 79 3a 4f 62 6a 65 63 74 28 69 2e 66 29 28 64 2c 65 2e 74 65 78 74 45 6e 63 6f 64 65 72 29 7d 29 2e 74 68 65 6e 28 66 75 6e Data Ascii: ),0===u.length)return Object(a.c)();var d=Object(i.c)(r[0],u),l=function recordEnvelopeLoss(t){Object(i.e)(d,function(n,r){e.recordDroppedEvent(t,Object(i.d)(r))})};return n.add(function requestTask(){return t({body:Object(i.f)(d,e.textEncoder)}).then(fun
2024-05-23 13:51:05 UTC	4227	IN	Data Raw: 61 64 64 42 72 65 61 64 63 72 75 6d 62 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 67 65 74 53 74 61 63 6b 54 6f 70 28 29 2c 69 3d 6e 2e 73 63 6f 70 65 2c 73 3d 6e 2e 63 6c 69 65 6e 74 3b 69 66 28 69 26 26 73 29 7b 76 61 72 20 61 3d 73 2e 67 65 74 4f 70 74 69 6f 6e 73 26 26 73 2e 67 65 74 4f 70 74 69 6f 6e 73 28 29 7c 7c 7b 7d 2c 75 3d 61 2e 62 65 66 6f 72 65 42 72 65 61 64 63 72 75 6d 62 2c 5f 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f 6e 75 6c 6c 3a 75 2c 64 3d 61 2e 6d 61 78 42 72 65 61 64 63 72 75 6d 62 73 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 31 30 30 3a 64 3b 69 66 28 21 28 6c 3c 3d 30 29 29 7b 76 61 72 20 70 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 29 2c 66 3d 4f 62 6a 65 63 74 28 72 2e 61 29 28 7b 74 69 6d 65 73 74 61 6d 70 3a 70 7d 2c 65 29 2c Data Ascii: addBreadcrumb(e,t){var n=this.getStackTop(),i=n.scope,s=n.client;if(i&&s){var a=s.getOptions&&s.getOptions()\|\|{},u=a.beforeBreadcrumb,_=void 0===u?null:u,d=a.maxBreadcrumbs,l=void 0===d?100:d;if(!(l<=0)){var p=Object(o.a)(),f=Object(r.a)({timestamp:p},e),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	50023	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:05 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:05 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:05 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 888584cddef943ed-EWR
2024-05-23 13:51:05 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	50022	52.208.202.34	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:06 UTC	735	OUT	GET /ul_cb/match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863 HTTP/1.1 Host: ad.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=08facf54-2b74-422f-96ff-028f64cd56b8; tuuid_lu=1716472265
2024-05-23 13:51:06 UTC	530	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close access-control-allow-origin: * set-cookie: um=!42,ZSrbma4RjwcEaasVwZ4vV6KeHiFsfi5qnbLj46mvKjY.,1717681863; Expires=Wed, 21 Aug 2024 13:51:06 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!42,0,1778680266,-1; Expires=Wed, 21 Aug 2024 13:51:06 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
2024-05-23 13:51:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	50025	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:06 UTC	972	OUT	GET /core/assets/css/8.ab226b4a.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:06 UTC	965	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31339 Connection: close Server: istio-envoy Date: Fri, 26 Jan 2024 21:39:06 GMT Last-Modified: Fri, 26 Jan 2024 18:11:46 GMT ETag: "1e97f00f07b87f701d0bf06259f954e4" x-amz-server-side-encryption: AES256 x-amz-version-id: Iy50rWLvnka9klYMF5qa_8hsgho0e_uB Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 69a5590783a34ecc5f59d50426925736.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: v2DSIAHzVTp1Hlkdc1NysU7-uSTsX9Xo11Rxyu9dAui8s6JDupg6xw== Age: 10167120
2024-05-23 13:51:06 UTC	16384	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 61 76 61 74 61 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 7d 2e 64 72 Data Ascii: .drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.dr
2024-05-23 13:51:06 UTC	14955	IN	Data Raw: 61 62 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6a 73 2e 64 72 69 66 74 74 2e 63 6f 6d 2f 64 65 70 6c 6f 79 2f 61 73 73 65 74 73 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 42 6e 67 4d 55 58 5a 59 54 58 50 49 76 49 42 67 4a 4a 53 62 36 75 66 42 35 71 57 72 34 78 43 43 51 5f 6b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 20 53 6c 61 62 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: ab;font-style:normal;font-weight:700;font-display:swap;src:url(https://js.driftt.com/deploy/assets/static/fonts/BngMUXZYTXPIvIBgJJSb6ufB5qWr4xCCQ_k.woff2) format("woff2");unicode-range:U+1f??}@font-face{font-family:Roboto Slab;font-style:normal;font-weigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	50029	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:06 UTC	973	OUT	GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:06 UTC	939	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 24 Connection: close Server: istio-envoy Date: Mon, 20 Nov 2023 17:09:39 GMT Last-Modified: Wed, 15 Nov 2023 22:15:43 GMT ETag: "0c5dad92482d9a7c7c253510f5082465" x-amz-server-side-encryption: AES256 x-amz-version-id: hV.C71l3ZyVodgrbwzPIVkRlfRkrVGpN Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 X-Cache: Hit from cloudfront Via: 1.1 4f02e80a6fa43c1c48cfe770bb183bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: cdhZm0dmrUG7r4YOy6uIZ6GM67PoyCyOVEL-rIF_A0f6FUYEeTwwfw== Age: 15972087
2024-05-23 13:51:06 UTC	24	IN	Data Raw: 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: body{margin:0;padding:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	50033	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 1920 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:07 UTC	1920	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:07 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	50042	104.18.36.155	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	657	OUT	GET /rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	1194	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:07 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863&C=1 CF-Ray: 888584d599a48cda-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 23 May 2025 13:51:07 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=1297; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 13:51:07 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=1297; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 13:51:07 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FVMAA%2Fa4omuPCZbpuSD%2B9omzdOEAK6WYjUJ8Vm5DTB5athAg5PTm7FcsSBT%2BtGfTrztfT%2F9v2QR3O6lWfDuk7Wh%2FmMN1w27rjPOYBK6ATRlIYHvmRoQjVpnWMVRb0tj1QBDNBBHxgFumqQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	50032	54.246.180.244	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	592	OUT	GET /ul_cb/match?publisher_dsp_id=42&external_user_id=6252180897247519748&Expiration=1717681863 HTTP/1.1 Host: ad.360yield.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=08facf54-2b74-422f-96ff-028f64cd56b8; tuuid_lu=1716472265; um=!42,ZSrbma4RjwcEaasVwZ4vV6KeHiFsfi5qnbLj46mvKjY.,1717681863; umeh=!42,0,1778680266,-1
2024-05-23 13:51:07 UTC	530	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close access-control-allow-origin: * set-cookie: um=!42,ZSrbmfE5pwWO7w39rQtHP62V1Z.-rAql.U.bNQz0d3cv,1717681863; Expires=Wed, 21 Aug 2024 13:51:07 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!42,0,1778680267,-1; Expires=Wed, 21 Aug 2024 13:51:07 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA"
2024-05-23 13:51:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	50041	5.135.209.104	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	736	OUT	GET /redir/?partnerid=22&partneruserid=6252180897247519748&redirurl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d10%26cid%3DSMART_USER_ID HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	684	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 13:51:07 GMT cache-control: no-cache,no-store location: https://c1.adform.net/serving/cookie/match?party=10&cid=27186976071466792 pragma: no-cache set-cookie: pid=27186976071466792; expires=Mon, 23 Jun 2025 13:51:07 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: TestIfCookieP=ok; expires=Mon, 23 Jun 2025 13:51:07 GMT; domain=smartadserver.com; path=/; SameSite=None; secure set-cookie: csync=22:6252180897247519748; expires=Fri, 23 May 2025 13:51:07 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	50044	77.243.51.121	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	653	OUT	GET /adform/1/info?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	267	IN	HTTP/1.1 302 Found location: https://uipus.semasio.net/adform/1/info?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external date: Thu, 23 May 2024 13:51:07 GMT content-length: 0 routing-server-id: -1 access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	50034	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	622	OUT	GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 33094 Connection: close Server: istio-envoy Date: Mon, 20 Nov 2023 08:20:00 GMT Last-Modified: Wed, 15 Nov 2023 22:15:46 GMT ETag: "d8739a9fe9a3a42936f5cd86c8727494" x-amz-server-side-encryption: AES256 x-amz-version-id: w17ybyrPIsxYJjS6hIU6zqtuCrWZNsUH Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 24 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7c46840615f4a9403945d2fc5f3f0502.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: KZrOQnBFHnCvqSzBoPcdOlbcQjCe6FMDF8_DWMyUPRkIOmFbQV5IOg== Age: 16003867
2024-05-23 13:51:07 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 5d 2c 7b 22 2b 4f 53 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 7d 29 3b 76 61 72 20 72 3d 65 28 22 38 64 56 64 22 29 2c 69 3d 65 28 22 78 71 46 54 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 28 74 2c 6e 2c 65 29 7b 76 61 72 20 6f 3d 5b 7b 74 79 70 65 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 2c 7b 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{ti
2024-05-23 13:51:07 UTC	15596	IN	Data Raw: 45 53 4f 4c 56 45 44 2c 6e 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 5f 69 6e 69 74 34 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 5f 69 6e 69 74 34 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 2e 5f 73 65 74 52 65 73 75 6c 74 28 72 2e 52 45 4a 45 43 54 45 44 2c 6e 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 5f 69 6e 69 74 35 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 5f 69 6e 69 74 35 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 5f 73 65 74 52 65 73 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 3d 3d 72 2e 50 45 4e 44 49 4e 47 26 26 28 4f 62 6a 65 63 74 28 61 2e 6e 29 28 65 29 3f 65 2e 74 68 65 6e 28 74 2e 5f 72 65 73 6f 6c 76 Data Ascii: ESOLVED,n)}}},{key:"__init4",value:function __init4(){var t=this;this._reject=function(n){t._setResult(r.REJECTED,n)}}},{key:"__init5",value:function __init5(){var t=this;this._setResult=function(n,e){t._state===r.PENDING&&(Object(a.n)(e)?e.then(t._resolv
2024-05-23 13:51:07 UTC	1114	IN	Data Raw: 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 44 61 74 65 2e 6e 6f 77 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 64 69 73 61 62 6c 65 64 55 6e 74 69 6c 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 7c 7c 74 2e 61 6c 6c 7c 7c 30 7d 28 74 2c 6e 29 3e 65 7d 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 52 61 74 65 4c 69 6d 69 74 73 28 74 2c 6e 29 7b 76 61 72 20 65 3d 6e 2e 73 74 61 74 75 73 43 6f 64 65 2c 61 3d 6e 2e 68 65 61 64 65 72 73 2c 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 44 61 74 65 2e 6e 6f 77 28 29 2c 75 Data Ascii: ts.length>2&&void 0!==arguments[2]?arguments[2]:Date.now();return function disabledUntil(t,n){return t[n]\|\|t.all\|\|0}(t,n)>e}function updateRateLimits(t,n){var e=n.statusCode,a=n.headers,c=arguments.length>2&&void 0!==arguments[2]?arguments[2]:Date.now(),u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	50037	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	622	OUT	GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17065 Connection: close Server: istio-envoy Date: Fri, 29 Sep 2023 10:59:14 GMT Last-Modified: Thu, 28 Sep 2023 23:26:32 GMT ETag: "e28ebc3391b56e8f01ea063dc089e9d3" x-amz-server-side-encryption: AES256 x-amz-version-id: RmVXqB5z6HC1OBhVcA1PlZCaD.VaaHgo Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 36b8a3237e73adf35903f8db7f11bca2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: -CCM4bMOa4iSw36POVLqTQrVg8a9wA3Mhbo-ZHdxD6nJcJQjBUHhpw== Age: 20487113
2024-05-23 13:51:07 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 5d 2c 7b 22 31 4a 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 7d 7d 2c 22 32 6a 62 67 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototyp
2024-05-23 13:51:07 UTC	681	IN	Data Raw: 74 22 3d 3d 3d 72 3f 41 72 72 61 79 2e 66 72 6f 6d 28 72 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 72 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 72 29 3f 6e 28 74 2c 65 29 3a 76 6f 69 64 20 30 7d 7d 7d 2c 78 63 63 59 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 72 28 22 61 57 4f 78 22 29 2c 6f 3d 72 28 22 65 36 31 32 22 29 2c 69 3d 72 28 22 78 42 33 76 22 29 2c 61 3d 72 28 22 73 7a 4e 61 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 74 6f 43 6f 6e 73 75 6d 61 62 6c 65 41 72 72 61 79 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 74 29 7c 7c 6f 28 74 29 7c 7c 69 28 74 29 7c 7c 61 28 29 7d 7d 2c 79 76 44 75 Data Ascii: t"===r?Array.from(r):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?n(t,e):void 0}}},xccY:function(t,e,r){var n=r("aWOx"),o=r("e612"),i=r("xB3v"),a=r("szNa");t.exports=function _toConsumableArray(t){return n(t)\|\|o(t)\|\|i(t)\|\|a()}},yvDu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	50047	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	957	OUT	GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:08 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 25600 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:23 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "48be1563378f7c36bdadc0f2eb616856" x-amz-server-side-encryption: AES256 x-amz-version-id: kSQfBnXe3RrQ76A7.epJ9X5L3Vb2TouI Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 cdb788e74ed90a1fcf07b00f1ca2f544.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: RJWkL5iRq4aLJs8D2ucIikn0rmZCXLSkssmyo5D4Gw7V0RYRuPtX8w== Age: 6535664
2024-05-23 13:51:08 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 22 31 46 6f 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 22 2c 22 67 69 22 29 2c 66 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 2b 22 2c 22 67 69 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 43 6f 6d 70 6f 6e 65 6e 74 73 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 6a 6f 69 6e 28 22 22 29 29 7d 63 61 74 63 68 28 66 29 7b 7d 69 66 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(
2024-05-23 13:51:08 UTC	10209	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 5b 74 5d 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 55 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 55 49 6e 74 31 36 4c 45 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 55 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 55 49 6e 74 31 36 42 45 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 32 2c 74 68 69 73 Data Ascii: ){return e\|\|checkOffset(t,1,this.length),this[t]},Buffer.prototype.readUInt16LE=function readUInt16LE(t,e){return e\|\|checkOffset(t,2,this.length),this[t]\|this[t+1]<<8},Buffer.prototype.readUInt16BE=function readUInt16BE(t,e){return e\|\|checkOffset(t,2,this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	50039	35.214.149.91	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	614	OUT	GET /sync?dsp_id=70&user_id=6252180897247519748 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	773	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 13:51:07 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?dsp_id=70&user_id=6252180897247519748 Set-Cookie: tuuid=9326d0b9-3a0d-4d01-bbb3-688e8f328e75; path=/; expires=Fri, 23-May-2025 13:51:07 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716472267; path=/; expires=Fri, 23-May-2025 13:51:07 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716472267; path=/; expires=Fri, 23-May-2025 13:51:07 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716472267; path=/; expires=Fri, 23-May-2025 13:51:07 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	50045	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	957	OUT	GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:08 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 75961 Connection: close Server: istio-envoy Date: Thu, 02 Nov 2023 07:38:47 GMT Last-Modified: Wed, 01 Nov 2023 17:45:49 GMT ETag: "6d77a76055d81227033363af2f18caf8" x-amz-server-side-encryption: AES256 x-amz-version-id: kB.UX_eeeOseur681MWJzOOhcwpe5wCG Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 43 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 51af81e043ccc832110abdd207ad168a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: 1HLRjhLGkHbfFVu0JwcLYMqXOEx9glNHB3RfKKi-uBWTVdqKfO6CLQ== Age: 17561540
2024-05-23 13:51:08 UTC	15390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 5d 2c 7b 22 31 31 48 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 65 78 74 65 6e 64 73 28 29 7b 72 65 74 75 72 6e 28 5f 65 78 74 65 6e 64 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnPrope
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 64 65 28 61 2c 65 2c 30 2c 30 2c 74 2e 69 67 6e 6f 72 65 57 68 69 74 65 73 70 61 63 65 29 2c 61 7d 7d 2c 48 30 44 57 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 61 73 73 65 74 73 2f 6d 65 64 69 61 2f 67 65 74 46 65 74 63 68 2e 30 31 33 66 30 62 39 30 2e 63 6a 73 22 7d 2c 49 39 69 52 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 6e 76 61 72 69 61 6e 74 28 65 2c 74 2c 6e 2c 6f 2c 72 2c 69 2c 61 2c 73 29 7b 69 66 28 21 65 29 7b 76 61 72 20 63 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 63 3d 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 6e 69 66 69 65 64 20 65 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 Data Ascii: de(a,e,0,0,t.ignoreWhitespace),a}},H0DW:function(e,t,n){e.exports=n.p+"assets/media/getFetch.013f0b90.cjs"},I9iR:function(e,t,n){"use strict";e.exports=function invariant(e,t,n,o,r,i,a,s){if(!e){var c;if(void 0===t)c=new Error("Minified exception occurred
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 7b 66 75 6e 63 74 69 6f 6e 20 54 72 61 6e 73 6c 61 74 6f 72 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 54 72 61 6e 73 6c 61 74 6f 72 29 2c 74 3d 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 68 69 73 2c 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 54 72 61 6e 73 6c 61 74 6f 72 29 2e 63 61 6c 6c 28 74 68 69 73 29 29 2c 69 2e 63 61 6c 6c 28 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 74 29 29 2c 66 75 6e 63 74 69 6f 6e 20 63 6f 70 79 28 65 2c 74 Data Ascii: {function Translator(e){var t,n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return _classCallCheck(this,Translator),t=_possibleConstructorReturn(this,_getPrototypeOf(Translator).call(this)),i.call(_assertThisInitialized(t)),function copy(e,t
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 69 6f 6e 20 68 61 6e 64 6c 65 46 6f 72 6d 61 74 28 65 29 7b 69 66 28 65 2e 69 6e 64 65 78 4f 66 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 3c 30 29 7b 76 61 72 20 72 3d 67 65 74 50 61 74 68 57 69 74 68 44 65 66 61 75 6c 74 73 28 74 2c 63 2c 65 29 3b 72 65 74 75 72 6e 20 73 2e 61 6c 77 61 79 73 46 6f 72 6d 61 74 3f 73 2e 66 6f 72 6d 61 74 28 72 2c 76 6f 69 64 20 30 2c 6e 29 3a 72 7d 76 61 72 20 69 3d 65 2e 73 70 6c 69 74 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2c 61 3d 69 2e 73 68 69 66 74 28 29 2e 74 72 69 6d 28 29 2c 75 3d 69 2e 6a 6f 69 6e 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 73 2e 66 6f 72 6d 61 74 28 67 65 74 50 61 74 68 57 69 74 68 44 65 66 61 75 6c 74 73 Data Ascii: ion handleFormat(e){if(e.indexOf(s.formatSeparator)<0){var r=getPathWithDefaults(t,c,e);return s.alwaysFormat?s.format(r,void 0,n):r}var i=e.split(s.formatSeparator),a=i.shift().trim(),u=i.join(s.formatSeparator).trim();return s.format(getPathWithDefaults
2024-05-23 13:51:08 UTC	11419	IN	Data Raw: 2e 64 65 66 61 75 6c 74 3d 6d 7d 2c 67 6e 7a 78 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 73 7d 29 3b 76 61 72 20 6f 3d 5b 5d 2c 72 3d 6f 2e 66 6f 72 45 61 63 68 2c 69 3d 6f 2e 73 6c 69 63 65 3b 66 75 6e 63 74 69 6f 6e 20 64 65 66 61 75 6c 74 73 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 69 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 76 6f 69 64 20 30 3d 3d 3d 65 5b 6e 5d 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 29 2c 65 7d 7d 2c 6c 66 75 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b Data Ascii: .default=m},gnzx:function(e,t,n){"use strict";n.d(t,"a",function(){return defaults});var o=[],r=o.forEach,i=o.slice;function defaults(e){return r.call(i.call(arguments,1),function(t){if(t)for(var n in t)void 0===e[n]&&(e[n]=t[n])}),e}},lfu7:function(e,t){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	50048	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	957	OUT	GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:08 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 68076 Connection: close Server: istio-envoy Date: Sun, 26 Nov 2023 19:14:09 GMT Last-Modified: Tue, 21 Nov 2023 16:21:41 GMT ETag: "49ce5445ddcf5d24ef3badc4eb1a11dd" x-amz-server-side-encryption: AES256 x-amz-version-id: vWLMHlUZ2N1cEBvj7bKxL6VV2JgNhA.J Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 54 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 570306b58d73d0b0659b9020185bbefa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: CHt-fM37u53ksfzbLe9S2O2QWupkyDro58tHgz_y0ZwOb_DNyQNdXA== Age: 15446218
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 5d 2c 7b 22 38 53 79 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2c 61 3d 69 26 26 69 2e 6e 6f 77 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 6e 6f 77 28 29 7d 3a 66 75 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:fun
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 75 3b 64 2e 72 65 73 6f 6c 76 65 64 3f 63 2e 72 65 73 6f 6c 76 65 28 64 2e 76 61 6c 75 65 29 3a 63 2e 72 65 6a 65 63 74 28 64 2e 65 72 72 6f 72 29 2c 64 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 3d 21 30 7d 65 6c 73 65 20 75 74 69 6c 73 5f 69 73 50 72 6f 6d 69 73 65 28 75 29 3f 75 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 26 26 28 75 2e 72 65 73 6f 6c 76 65 64 7c 7c 75 2e 72 65 6a 65 63 74 65 64 29 3f 75 2e 72 65 73 6f 6c 76 65 64 3f 63 2e 72 65 73 6f 6c 76 65 28 75 2e 76 61 6c 75 65 29 3a 63 2e 72 65 6a 65 63 74 28 75 2e 65 72 72 6f 72 29 3a 72 28 75 2c 63 29 3a 63 2e 72 65 73 6f 6c 76 65 28 75 29 7d 6e 2e 6c 65 6e 67 74 68 3d 30 2c 74 68 69 73 2e 64 69 73 70 61 74 63 68 69 6e 67 3d 21 31 2c 65 6e 64 41 63 74 69 76 65 28 29 7d Data Ascii: u;d.resolved?c.resolve(d.value):c.reject(d.error),d.errorHandled=!0}else utils_isPromise(u)?u instanceof ZalgoPromise&&(u.resolved\|\|u.rejected)?u.resolved?c.resolve(u.value):c.reject(u.error):r(u,c):c.resolve(u)}n.length=0,this.dispatching=!1,endActive()}
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 73 73 65 72 74 53 61 6d 65 44 6f 6d 61 69 6e 28 65 29 2e 6e 61 6d 65 3d 74 2c 72 26 26 72 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 74 29 2c 69 3d 66 2e 72 65 73 6f 6c 76 65 28 74 29 7d 29 7d 7d 7d 6e 65 77 20 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 26 26 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 65 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 3b 76 61 72 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 26 26 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 Data Ascii: ssertSameDomain(e).name=t,r&&r.setAttribute("name",t),i=f.resolve(t)})}}}new f(function(e){if(window.document&&window.document.body)return e(window.document.body);var t=setInterval(function(){if(window.document&&window.document.body)return clearInterval(t
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6d 61 74 63 68 44 6f 6d 61 69 6e 28 74 2c 74 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 44 6f 6d 61 69 6e 20 22 2b 73 74 72 69 6e 67 69 66 79 28 74 29 2b 22 20 64 6f 65 73 20 6e 6f 74 20 6d 61 74 63 68 20 22 2b 73 74 72 69 6e 67 69 66 79 28 74 29 29 3b 72 65 74 75 72 6e 20 65 7d 29 7d 29 7d 28 65 2c 6f 2c 28 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 29 2e 64 6f 6d 61 69 6e 2c 7b 73 65 6e 64 3a 73 65 6e 64 7d 29 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 3d 72 2c 61 3d 22 70 6f 73 74 72 6f 62 6f 74 5f 6d 65 74 68 6f 64 22 3d 3d 3d 74 26 26 6e 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 6e 61 6d 65 3f 6e 2e 6e 61 Data Ascii: })}).then(function(e){if(!matchDomain(t,t))throw new Error("Domain "+stringify(t)+" does not match "+stringify(t));return e})})}(e,o,(void 0===t?{}:t).domain,{send:send})}).then(function(r){var o=r,a="postrobot_method"===t&&n&&"string"==typeof n.name?n.na
2024-05-23 13:51:08 UTC	2540	IN	Data Raw: 43 63 2b 27 7c 5b 7d 5d 29 2e 29 2a 5c 5c 7d 7c 5c 5c 22 28 3f 3a 28 3f 21 27 2b 74 2e 73 72 63 5f 5a 43 63 2b 27 7c 5b 22 5d 29 2e 29 2b 5c 5c 22 7c 5c 5c 5c 27 28 3f 3a 28 3f 21 27 2b 74 2e 73 72 63 5f 5a 43 63 2b 22 7c 5b 27 5d 29 2e 29 2b 5c 5c 27 7c 5c 5c 27 28 3f 3d 22 2b 74 2e 73 72 63 5f 70 73 65 75 64 6f 5f 6c 65 74 74 65 72 2b 22 7c 5b 2d 5d 29 2e 7c 5c 5c 2e 7b 32 2c 7d 5b 61 2d 7a 41 2d 5a 30 2d 39 25 2f 26 5d 7c 5c 5c 2e 28 3f 21 22 2b 74 2e 73 72 63 5f 5a 43 63 2b 22 7c 5b 2e 5d 29 2e 7c 22 2b 28 65 26 26 65 5b 22 2d 2d 2d 22 5d 3f 22 5c 5c 2d 28 3f 21 2d 2d 28 3f 3a 5b 5e 2d 5d 7c 24 29 29 28 3f 3a 2d 2a 29 7c 22 3a 22 5c 5c 2d 2b 7c 22 29 2b 22 5c 5c 2c 28 3f 21 22 2b 74 2e 73 72 63 5f 5a 43 63 2b 22 29 2e 7c 5c 5c 21 2b 28 3f 21 22 2b 74 Data Ascii: Cc+'\|[}]).)\\}\|\\"(?:(?!'+t.src_ZCc+'\|["]).)+\\"\|\\\'(?:(?!'+t.src_ZCc+"\|[']).)+\\'\|\\'(?="+t.src_pseudo_letter+"\|[-]).\|\\.{2,}[a-zA-Z0-9%/&]\|\\.(?!"+t.src_ZCc+"\|[.]).\|"+(e&&e["---"]?"\\-(?!--(?:[^-]\|$))(?:-)\|":"\\-+\|")+"\\,(?!"+t.src_ZCc+").\|\\!+(?!"+t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	50043	18.184.216.10	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	611	OUT	GET /match?uid=6252180897247519748&bid=9gdtmu1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	717	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=18fa5b84457-17050000010f5454; Domain=eyeota.net; Path=/; Expires=Fri, 23 May 2025 13:51:07 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=21588~DM; Domain=eyeota.net; Path=/; Expires=Thu, 23 May 2024 14:01:07 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /match/bounce/?uid=6252180897247519748&bid=9gdtmu1 Content-Length: 0 Date: Thu, 23 May 2024 13:51:07 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	50046	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	957	OUT	GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:08 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 92674 Connection: close Server: istio-envoy Date: Sun, 17 Dec 2023 12:58:18 GMT Last-Modified: Thu, 14 Dec 2023 17:12:06 GMT ETag: "16d7ae86e21434a32157d3226ac9bb77" x-amz-server-side-encryption: AES256 x-amz-version-id: MMb_AaM.LrxXMwjfnBwyXBEPJVIEgJPe Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ab64c679fdb7c2d0e0b257682357317c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: tlyNPmeAxOqjuO0u2jxIFszAlJ2SPEx-1PS1HGKlmDGBPh_78vDL1A== Age: 13654369
2024-05-23 13:51:08 UTC	15390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 5d 2c 7b 22 2b 57 61 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 72 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 46 75 6e 63 74 69 6f 6e 7d 29 7d 2c 22 2f 56 33 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 31 33 57 53 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){fu
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 31 31 2f 73 61 6d 6f 61 22 2c 22 2d 31 30 7c 6e 22 3a 22 31 31 2f 68 6f 6e 6f 6c 75 6c 75 2c 31 31 2f 6a 6f 68 6e 73 74 6f 6e 2c 31 31 2f 72 61 72 6f 74 6f 6e 67 61 2c 31 31 2f 74 61 68 69 74 69 22 7d 7d 29 29 2c 73 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 75 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 7b 6f 66 66 73 65 74 3a 4e 75 6d 62 65 72 28 74 5b 30 5d 29 2c 68 65 6d 3a 74 5b 31 5d 7d 3b 74 5b 32 5d 26 26 28 72 2e 64 73 74 3d 74 5b 32 5d 29 2c 75 5b 65 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5b 30 2d 39 5d 2b 29 5c 2f 2f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c Data Ascii: 11/samoa","-10\|n":"11/honolulu,11/johnston,11/rarotonga,11/tahiti"}})),s={};Object.keys(u).forEach(function(e){var t=e.split("\|"),r={offset:Number(t[0]),hem:t[1]};t[2]&&(r.dst=t[2]),u[e].split(",").forEach(function(e){e=e.replace(/(^[0-9]+)\//,function(e,
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 2c 73 3d 74 65 28 65 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 54 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 75 29 2e 63 6f 6e 63 61 74 28 73 29 7d 2c 22 69 73 6f 2d 73 68 6f 72 74 22 3a 66 75 6e 63 74 69 6f 6e 20 69 73 6f 53 68 6f 72 74 28 65 29 7b 76 61 72 20 74 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 6d 6f 6e 74 68 28 29 2b 31 29 2c 72 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 64 61 74 65 28 29 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 65 2e 79 65 61 72 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 Data Ascii: ,s=te(e);return"".concat(t,"-").concat(r,"-").concat(n,"T").concat(o,":").concat(i,":").concat(a,".").concat(u).concat(s)},"iso-short":function isoShort(e){var t=C.zeroPad(e.month()+1),r=C.zeroPad(e.date());return"".concat(e.year(),"-").concat(t,"-").conc
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 72 31 32 3d 74 2e 67 65 74 48 6f 75 72 73 28 29 3b 72 65 74 75 72 6e 20 68 6f 75 72 31 32 3e 31 32 26 26 28 68 6f 75 72 31 32 2d 3d 31 32 29 2c 30 3d 3d 3d 68 6f 75 72 31 32 26 26 28 68 6f 75 72 31 32 3d 31 32 29 2c 68 6f 75 72 31 32 7d 2c 74 69 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 74 69 6d 65 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 29 3b 72 65 74 75 72 6e 20 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 2c 74 2e 65 70 6f 63 68 3d 59 65 28 74 2c 65 29 2c 74 7d 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 68 31 32 28 29 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 43 2e 7a 65 72 6f 50 61 64 28 74 68 69 73 2e 6d 69 6e 75 74 65 28 29 29 29 2e 63 6f 6e 63 Data Ascii: r12=t.getHours();return hour12>12&&(hour12-=12),0===hour12&&(hour12=12),hour12},time:function time(e){if(void 0!==e){var t=this.clone();return e=e.toLowerCase().trim(),t.epoch=Ye(t,e),t}return"".concat(this.h12(),":").concat(C.zeroPad(this.minute())).conc
2024-05-23 13:51:08 UTC	16384	IN	Data Raw: 69 73 53 74 6f 70 70 65 64 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 53 75 62 73 63 72 69 62 65 72 2c 72 3d 73 2e 61 2e 75 73 65 44 65 70 72 65 63 61 74 65 64 53 79 6e 63 68 72 6f 6e 6f 75 73 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 3b 69 66 28 74 68 69 73 2e 5f 65 72 72 6f 72 29 72 26 26 74 2e 73 79 6e 63 45 72 72 6f 72 54 68 72 6f 77 61 62 6c 65 3f 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 53 65 74 45 72 72 6f 72 28 74 2c 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3a 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 55 6e 73 75 62 28 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3b 65 6c 73 65 20 69 66 28 74 2e 73 79 6e 63 45 72 72 6f 72 Data Ascii: isStopped){var t=this._parentSubscriber,r=s.a.useDeprecatedSynchronousErrorHandling;if(this._error)r&&t.syncErrorThrowable?(this.__tryOrSetError(t,this._error,e),this.unsubscribe()):(this.__tryOrUnsub(this._error,e),this.unsubscribe());else if(t.syncError
2024-05-23 13:51:08 UTC	11748	IN	Data Raw: 29 2c 61 2e 61 2e 45 4d 50 54 59 29 3a 74 68 69 73 2e 69 73 53 74 6f 70 70 65 64 3f 28 65 2e 63 6f 6d 70 6c 65 74 65 28 29 2c 61 2e 61 2e 45 4d 50 54 59 29 3a 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 2e 70 75 73 68 28 65 29 2c 6e 65 77 20 73 28 74 68 69 73 2c 65 29 29 7d 2c 53 75 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 73 4f 62 73 65 72 76 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 6f 2e 61 3b 72 65 74 75 72 6e 20 65 2e 73 6f 75 72 63 65 3d 74 68 69 73 2c 65 7d 2c 53 75 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 68 28 65 2c 74 29 7d 2c 53 75 62 6a 65 63 74 7d 28 6f 2e 61 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 Data Ascii: ),a.a.EMPTY):this.isStopped?(e.complete(),a.a.EMPTY):(this.observers.push(e),new s(this,e))},Subject.prototype.asObservable=function(){var e=new o.a;return e.source=this,e},Subject.create=function(e,t){return new h(e,t)},Subject}(o.a),h=function(e){functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	50040	18.198.150.232	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	720	OUT	GET /adscale-ih/tpui?tpid=42&tpuid=6252180897247519748&cburl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d9%26uid%3D__ADSCALE_USER_ID__ HTTP/1.1 Host: ih.adscale.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:07 UTC	92	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 13:51:07 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	50049	104.18.36.155	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	723	OUT	GET /rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; CMPS=1297; CMPRO=1297
2024-05-23 13:51:07 UTC	992	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:07 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 888584d9ecd25e70-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 23 May 2025 13:51:07 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1297; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 13:51:07 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dP3YdG2gwPvx2pFEGU4PkEzXGoRIh3AfmsDH4Doexj8aLjMWYm8m1WgD%2F8deZc0Xzzh%2BMW2Tk%2FTbhQ%2BVIxz4d3PShwbBgw%2BjmW%2FDvAt0LM9VtU8kavPx9xvmzrVpnrz69E%2BYJ4YNcCXzgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	50050	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:07 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:08 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:08 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	50055	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:08 UTC	570	OUT	OPTIONS /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: _zitok,authorization,content-type,visited_url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:08 UTC	607	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 13:51:08 GMT Connection: close apigw-requestid: YOh4BhK1vHcEScw= x-powered-by: Express vary: Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 0 x-cache: Miss from cloudfront via: 1.1 54a56da0fe0bae919389c7d572d4720e.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: kubFCyffZlxq0J1fN7FXt_qaAMJD0xAOD3SisbrFmOwYJJ-ae6ZPUQ== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584defa000f55-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	50056	35.244.174.68	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:08 UTC	615	OUT	GET /398366.gif?partner_uid=6252180897247519748 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:08 UTC	711	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CJ6oGBIeChoIARCUdRoTNjI1MjE4MDg5NzI0NzUxOTc0OBAAGg0IzJO9sgYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=u3mdUNp9EDnOqJPN3yx0QhirN6N+uLH3XSLqV53NrAM=; Path=/; Domain=rlcdn.com; Expires=Fri, 23 May 2025 13:51:08 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 22 Jul 2024 13:51:08 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 23 May 2024 13:51:08 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	50052	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:08 UTC	622	OUT	GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23865 Connection: close Server: istio-envoy Date: Mon, 20 Nov 2023 08:20:00 GMT Last-Modified: Wed, 15 Nov 2023 22:15:45 GMT ETag: "4049f38c00add1738dc4806148ff8829" x-amz-server-side-encryption: AES256 x-amz-version-id: 93exQYqSpZuM6DwIMRRPW2tnCQ8HMxXa Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4f02e80a6fa43c1c48cfe770bb183bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: NTvPG7mFIXC8suiHlAWfY_85mDf3tbsA4tO25ZphaabD2RpX8vLYlw== Age: 16003868
2024-05-23 13:51:09 UTC	15390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 5d 2c 7b 22 30 42 38 45 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 22 72 41 63 31 22 29 2c 75 3d 65 28 22 50 59 63 48 22 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 73 4f 72 41 64 64 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 2c 63 3d 74 79 70 65 6f 66 20 74 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 30 3d 3d 3d 74 26 26 31 2f 74 3d 3d 3d 2d 31 2f 30 3f 21 21 65 2e 5f 69 74 65 6d 73 5b 22 2d 30 22 5d 7c 7c 28 6e 26 26 28 65 2e 5f 69 74 65 6d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._item
2024-05-23 13:51:09 UTC	8475	IN	Data Raw: 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 64 75 63 65 64 22 5d 29 7b 6e 3d 6e 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 76 61 6c 75 65 22 5d 3b 62 72 65 61 6b 7d 72 3d 65 2e 6e 65 78 74 28 29 7d 72 65 74 75 72 6e 20 74 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 73 75 6c 74 22 5d 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 6d 65 74 68 6f 64 52 65 64 75 63 65 28 74 2c 6e 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 73 75 6c 74 22 5d 28 65 5b 72 5d 28 69 28 74 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 73 74 65 70 22 5d 2c 74 29 2c 6e 29 29 7d 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 72 65 64 75 63 65 7d 29 3b 76 61 72 20 6f 3d 22 75 6e 64 65 66 69 Data Ascii: "@@transducer/reduced"]){n=n["@@transducer/value"];break}r=e.next()}return t["@@transducer/result"](n)}function _methodReduce(t,n,e,r){return t["@@transducer/result"](e[r](i(t["@@transducer/step"],t),n))}e.d(n,"a",function(){return _reduce});var o="undefi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	50051	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:08 UTC	622	OUT	GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 63529 Connection: close Server: istio-envoy Date: Mon, 20 Nov 2023 08:20:00 GMT Last-Modified: Wed, 15 Nov 2023 22:15:46 GMT ETag: "02f09379c544befa413d22eb57ed41de" x-amz-server-side-encryption: AES256 x-amz-version-id: J5cf.H2J3VQ1sneNGCVXqvE8IX_XhfLt Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 31 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 940363b5827b3bf7b877f66b1584003e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: COmriKbaMeeI1UYUTmT-ymlbCazxrktlUAcY2hNRqKYeGrqvIfvF_w== Age: 16003868
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 5d 2c 7b 22 30 4f 39 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6c 45 61 71 22 29 2c 6f 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 22 45 52 6b 50 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 63 3d 6e 28 22 61 57 7a 7a 22 29 2c 73 3d 6e 2e 6e 28 63 29 2c 75 3d 6e 28 22 31 31 48 6d 22 29 2c 6c 3d 6e 28 22 49 39 69 52 22 29 2c 70 3d 6e 2e 6e 28 6c 29 2c 66 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 20 69 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 73 63 61 70 65 53 74 72 69 6e 67 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 2e 2b 2a 3f 3d 5e 21 3a 24 7b 7d 28 29 5b 5c 5d 7c 5c 2f 5c 5c 5d 29 2f 67 2c 22 5c 5c 24 31 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 73 63 61 70 65 47 72 6f 75 70 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 28 5b 3d 21 3a 24 5c 2f 28 29 5d 29 2f 67 2c 22 5c 5c 24 31 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 74 61 63 68 4b 65 79 73 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6b 65 79 73 3d 74 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 6c 61 67 73 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 65 6e 73 69 74 69 76 65 3f 22 22 3a 22 69 22 7d 66 75 6e 63 74 69 6f 6e 20 74 6f 6b 65 6e 73 54 6f 52 65 67 Data Ascii: i}}function escapeString(e){return e.replace(/([.+*?=^!:${}()[\]\|\/\\])/g,"\\$1")}function escapeGroup(e){return e.replace(/([=!:$\/()])/g,"\\$1")}function attachKeys(e,t){return e.keys=t,e}function flags(e){return e.sensitive?"":"i"}function tokensToReg
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 78 3d 6e 75 6c 6c 2c 65 2e 66 75 6e 63 3d 6e 75 6c 6c 2c 65 2e 63 6f 6e 74 65 78 74 3d 6e 75 6c 6c 2c 65 2e 63 6f 75 6e 74 3d 30 2c 31 30 3e 6b 2e 6c 65 6e 67 74 68 26 26 6b 2e 70 75 73 68 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 30 3a 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 3d 74 79 70 65 6f 66 20 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 6f 26 26 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 6f 7c 7c 28 65 3d 6e 75 6c 6c 29 3b 76 61 72 20 63 3d 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 29 63 3d 21 30 3b 65 6c 73 65 20 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 63 3d 21 30 3b 62 72 65 61 6b Data Ascii: x=null,e.func=null,e.context=null,e.count=0,10>k.length&&k.push(e)}function U(e,t,n){return null==e?0:function S(e,t,n,r){var o=typeof e;"undefined"!==o&&"boolean"!==o\|\|(e=null);var c=!1;if(null===e)c=!0;else switch(o){case"string":case"number":c=!0;break
2024-05-23 13:51:09 UTC	14377	IN	Data Raw: 50 72 6f 70 73 3f 65 2e 67 65 74 49 6e 69 74 69 61 6c 50 72 6f 70 73 28 74 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 5f 6f 62 6a 65 63 74 53 70 72 65 61 64 28 5f 6f 62 6a 65 63 74 53 70 72 65 61 64 28 7b 7d 2c 65 29 2c 72 29 29 7d 29 3a 6e 28 72 29 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 69 74 69 61 6c 50 72 6f 70 73 28 29 7b 76 61 72 20 65 3d 67 65 74 49 31 38 6e 28 29 2c 74 3d 65 2e 72 65 70 6f 72 74 4e 61 6d 65 73 70 61 63 65 73 3f 65 2e 72 65 70 6f 72 74 4e 61 6d 65 73 70 61 63 65 73 2e 67 65 74 55 73 65 64 4e 61 6d 65 73 70 61 63 65 73 28 29 3a 5b 5d 2c 6e 3d 7b 7d 2c 72 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 6c 61 6e 67 75 61 67 65 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 5b 6e 5d 3d 7b Data Ascii: Props?e.getInitialProps(t).then(function(e){n(_objectSpread(_objectSpread({},e),r))}):n(r)})}}function getInitialProps(){var e=getI18n(),t=e.reportNamespaces?e.reportNamespaces.getUsedNamespaces():[],n={},r={};return e.languages.forEach(function(n){r[n]={

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	50053	54.78.254.47	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	621	OUT	GET /load/?p=204&g=710&j=0&buid=6252180897247519748 HTTP/1.1 Host: loadm.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	980	IN	HTTP/1.1 302 server: nginx date: Thu, 23 May 2024 13:51:09 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="c4692e41261fd428073242b026cfe1d8"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 20-Sep-2024 01:51:09 GMT; SameSite=None; Secure; set-cookie: ud="eJxrXxzq6XKLQSHZxMzSKNXE0MjMMC3FxMjCwNzYyMQoycDILDkt1TDFYnFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo9fugMAGVonlQ%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 20-Sep-2024 01:51:09 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://loadm.exelator.com/load/?p=204&g=710&j=0&buid=6252180897247519748&xl8blockcheck=1 access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	50058	52.17.40.72	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	638	OUT	GET /map/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	441	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:09 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.14.224 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/map/ct=y/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent= Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	50061	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	957	OUT	GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 107348 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:23 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "114785899ceb423273fcc17aaad202e9" x-amz-server-side-encryption: AES256 x-amz-version-id: BecLvOdVAWkrJUptshR_Vz6xe2maTdmW Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 25 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 520549a669d81a34ee645a4ccf596042.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: SS3Xr8AmglqhjnYYLAI4tQrj4e9uiuk0EbSNaUQ6b8hit4xSHcXaig== Age: 6535666
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 5d 2c 7b 22 37 6e 6d 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 44 43 45 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 2e 63 68 65 63 6b 44 43 45 29 74 72 79 7b 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLO
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 26 26 28 6e 75 6c 6c 21 3d 3d 6e 3f 21 6e 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3a 22 64 61 74 61 2d 22 21 3d 3d 28 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 30 2c 35 29 29 26 26 22 61 72 69 61 2d 22 21 3d 3d 65 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 28 65 2c 74 2c 6e 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 73 77 69 74 63 68 28 6e 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 74 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 74 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 7c 7c 31 3e 74 7d 72 65 74 75 Data Ascii: &&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)\|\|1>t}retu
2024-05-23 13:51:09 UTC	2410	IN	Data Raw: 65 7c 7c 22 75 72 6c 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 65 2e 74 79 70 65 29 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 74 7c 7c 22 74 72 75 65 22 3d 3d 3d 65 2e 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 64 28 65 29 7b 76 61 72 20 74 3d 4e 64 28 29 2c 6e 3d 65 2e 66 6f 63 75 73 65 64 45 6c 65 6d 2c 72 3d 65 2e 73 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 3b 69 66 28 74 21 3d 3d 6e 26 26 6e 26 26 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 66 75 6e 63 74 69 6f 6e 20 4d 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 74 29 26 26 28 65 3d 3d 3d 74 7c 7c 28 21 65 7c 7c 33 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 26 26 28 74 26 26 33 3d 3d 3d 74 2e 6e 6f 64 65 54 Data Ascii: e\|\|"url"===e.type\|\|"password"===e.type)\|\|"textarea"===t\|\|"true"===e.contentEditable)}function Qd(e){var t=Nd(),n=e.focusedElem,r=e.selectionRange;if(t!==n&&n&&n.ownerDocument&&function Md(e,t){return!(!e\|\|!t)&&(e===t\|\|(!e\|\|3!==e.nodeType)&&(t&&3===t.nodeT
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 67 6e 3d 6e 75 6c 6c 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 6c 75 72 22 3a 67 6e 3d 68 6e 3d 6d 6e 3d 6e 75 6c 6c 3b 62 72 65 61 6b 3b 63 61 73 65 22 6d 6f 75 73 65 64 6f 77 6e 22 3a 76 6e 3d 21 30 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 3a 63 61 73 65 22 6d 6f 75 73 65 75 70 22 3a 63 61 73 65 22 64 72 61 67 65 6e 64 22 3a 72 65 74 75 72 6e 20 76 6e 3d 21 31 2c 58 64 28 6e 2c 72 29 3b 63 61 73 65 22 73 65 6c 65 63 74 69 6f 6e 63 68 61 6e 67 65 22 3a 69 66 28 64 6e 29 62 72 65 61 6b 3b 63 61 73 65 22 6b 65 79 64 6f 77 6e 22 3a 63 61 73 65 22 6b 65 79 75 70 22 3a 72 65 74 75 72 6e 20 58 64 28 6e 2c 72 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 24 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: gn=null);break;case"blur":gn=hn=mn=null;break;case"mousedown":vn=!0;break;case"contextmenu":case"mouseup":case"dragend":return vn=!1,Xd(n,r);case"selectionchange":if(dn)break;case"keydown":case"keyup":return Xd(n,r)}return null}};function $d(e,t){return e
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 26 26 6e 75 6c 6c 3d 3d 3d 67 2e 61 6c 74 65 72 6e 61 74 65 26 26 62 28 65 2c 75 29 2c 72 3d 66 28 67 2c 72 2c 73 29 2c 6e 75 6c 6c 3d 3d 3d 6f 3f 69 3d 67 3a 6f 2e 73 69 62 6c 69 6e 67 3d 67 2c 6f 3d 67 2c 75 3d 6d 7d 69 66 28 68 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 63 28 65 2c 75 29 2c 69 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 75 29 7b 66 6f 72 28 3b 21 68 2e 64 6f 6e 65 3b 73 2b 2b 2c 68 3d 6c 2e 6e 65 78 74 28 29 29 6e 75 6c 6c 21 3d 3d 28 68 3d 70 28 65 2c 68 2e 76 61 6c 75 65 2c 61 29 29 26 26 28 72 3d 66 28 68 2c 72 2c 73 29 2c 6e 75 6c 6c 3d 3d 3d 6f 3f 69 3d 68 3a 6f 2e 73 69 62 6c 69 6e 67 3d 68 2c 6f 3d 68 29 3b 72 65 74 75 72 6e 20 69 7d 66 6f 72 28 75 3d 64 28 65 2c 75 29 3b 21 68 2e 64 6f 6e 65 3b 73 2b 2b 2c 68 3d 6c 2e 6e 65 78 74 28 29 29 6e Data Ascii: &&null===g.alternate&&b(e,u),r=f(g,r,s),null===o?i=g:o.sibling=g,o=g,u=m}if(h.done)return c(e,u),i;if(null===u){for(;!h.done;s++,h=l.next())null!==(h=p(e,h.value,a))&&(r=f(h,r,s),null===o?i=h:o.sibling=h,o=h);return i}for(u=d(e,u);!h.done;s++,h=l.next())n
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 69 6e 67 50 72 6f 70 73 2c 4f 67 28 65 2c 74 2c 72 2c 6c 3d 74 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 3d 3d 72 3f 6c 3a 4c 28 72 2c 6c 29 2c 6e 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 52 67 28 74 29 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 2e 75 70 64 61 74 65 51 75 65 75 65 29 26 26 78 28 22 32 38 32 22 29 2c 6c 3d 6e 75 6c 6c 21 3d 3d 28 6c 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 29 3f 6c 2e 65 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 2c 79 66 28 74 2c 72 2c 74 2e 70 65 6e 64 69 6e 67 50 72 6f 70 73 2c 6e 75 6c 6c 2c 6e 29 2c 28 72 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2e 65 6c 65 6d 65 6e 74 29 3d 3d 3d 6c 3f 28 46 67 28 29 2c 74 3d 4a 67 28 65 2c 74 2c 6e 29 29 3a 28 6c 3d 74 2e 73 74 61 74 65 4e 6f 64 65 2c 28 6c 3d 28 6e 75 6c 6c 3d 3d Data Ascii: ingProps,Og(e,t,r,l=t.elementType===r?l:L(r,l),n);case 3:return Rg(t),null===(r=t.updateQueue)&&x("282"),l=null!==(l=t.memoizedState)?l.element:null,yf(t,r,t.pendingProps,null,n),(r=t.memoizedState.element)===l?(Fg(),t=Jg(e,t,n)):(l=t.stateNode,(l=(null==
2024-05-23 13:51:09 UTC	16384	IN	Data Raw: 72 2e 72 65 66 29 26 26 28 61 3d 47 72 2e 73 74 61 74 65 4e 6f 64 65 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 3f 6c 28 61 29 3a 6c 2e 63 75 72 72 65 6e 74 3d 61 29 29 2c 35 31 32 26 6e 26 26 28 58 72 3d 65 29 2c 47 72 3d 47 72 2e 6e 65 78 74 45 66 66 65 63 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 66 28 29 7b 6e 75 6c 6c 21 3d 3d 24 72 26 26 4d 6e 28 24 72 29 2c 6e 75 6c 6c 21 3d 3d 5a 72 26 26 5a 72 28 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 68 28 65 2c 74 29 7b 59 72 3d 56 72 3d 21 30 2c 65 2e 63 75 72 72 65 6e 74 3d 3d 3d 74 26 26 78 28 22 31 37 37 22 29 3b 76 61 72 20 6e 3d 65 2e 70 65 6e 64 69 6e 67 43 6f 6d 6d 69 74 45 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3b 30 3d 3d 3d 6e 26 26 78 28 22 32 36 31 22 29 2c 65 2e 70 65 6e 64 69 6e Data Ascii: r.ref)&&(a=Gr.stateNode,"function"===typeof l?l(a):l.current=a)),512&n&&(Xr=e),Gr=Gr.nextEffect}}function of(){null!==$r&&Mn($r),null!==Zr&&Zr()}function Zh(e,t){Yr=Vr=!0,e.current===t&&x("177");var n=e.pendingCommitExpirationTime;0===n&&x("261"),e.pendin
2024-05-23 13:51:09 UTC	6634	IN	Data Raw: 66 28 29 2c 6c 29 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 69 28 65 29 7b 69 66 28 21 28 65 3d 65 2e 63 75 72 72 65 6e 74 29 2e 63 68 69 6c 64 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 73 77 69 74 63 68 28 65 2e 63 68 69 6c 64 2e 74 61 67 29 7b 63 61 73 65 20 35 3a 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 2e 63 68 69 6c 64 2e 73 74 61 74 65 4e 6f 64 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 69 28 65 29 7b 76 61 72 20 74 3d 31 30 37 33 37 34 31 38 32 32 2d 32 35 2a 28 31 2b 28 28 31 30 37 33 37 34 31 38 32 32 2d 6c 66 28 29 2b 35 30 30 29 2f 32 35 7c 30 29 29 3b 74 3e 3d 6a 72 26 26 28 74 3d 6a 72 2d 31 29 2c 74 68 69 73 2e 5f 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3d 6a 72 3d 74 2c 74 68 69 73 2e 5f 72 6f 6f 74 3d 65 2c 74 68 69 73 2e 5f 63 61 6c 6c Data Ascii: f(),l),r)}function Li(e){if(!(e=e.current).child)return null;switch(e.child.tag){case 5:default:return e.child.stateNode}}function Ni(e){var t=1073741822-25*(1+((1073741822-lf()+500)/25\|0));t>=jr&&(t=jr-1),this._expirationTime=jr=t,this._root=e,this._call

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	50059	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	957	OUT	GET /core/assets/js/42.f634da7c.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 11808 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:23 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "c65db597e762d33246cfbec56b886523" x-amz-server-side-encryption: AES256 x-amz-version-id: vXeKg.tGpOUOXbODWyYzAbmB8cSGPgwQ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 69a5590783a34ecc5f59d50426925736.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: Ksucg8JjnUQ1VHSWXL5ws1-C5__WkxR2QARf8kvhWiAwOUIudY556w== Age: 6535666
2024-05-23 13:51:09 UTC	11808	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 5d 2c 7b 22 39 4f 55 4e 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 53 74 6f 72 65 7d 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 6f 6d 62 69 6e 65 52 65 64 75 63 65 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 69 6e 64 41 63 74 69 6f 6e 43 72 65 61 74 6f 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	50065	18.184.216.10	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	685	OUT	GET /match/bounce/?uid=6252180897247519748&bid=9gdtmu1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa5b84457-17050000010f5454; SERVERID=21588~DM
2024-05-23 13:51:09 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=21588~DM; Domain=eyeota.net; Path=/; Expires=Thu, 23 May 2024 14:01:09 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Thu, 23 May 2024 13:51:09 GMT
2024-05-23 13:51:09 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	50060	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	957	OUT	GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 13063 Connection: close Server: istio-envoy Date: Sun, 15 Oct 2023 19:58:58 GMT Last-Modified: Thu, 21 Sep 2023 18:21:36 GMT ETag: "455157cb49065fb85fed54901ddaeb0e" x-amz-server-side-encryption: AES256 x-amz-version-id: PyawGVolC84hpcWm6OWVT0dG84hVjB6f Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f51291c5ce592ab699c2b2ead5e58134.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: 5w8cwa9_ncqTL_2KGA0FwrifPWZNOLSAKZRIsOJGNY17OVDCCb-RRw== Age: 19072331
2024-05-23 13:51:09 UTC	13063	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 5d 2c 7b 22 37 45 41 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 30 2d 5c 75 44 37 46 46 5c 75 45 30 30 30 2d 5c 75 46 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 7c 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 2f 7d 2c 43 6b 69 75 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 20 5c 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	50062	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	957	OUT	GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17003 Connection: close Server: istio-envoy Date: Sun, 17 Dec 2023 12:58:19 GMT Last-Modified: Thu, 14 Dec 2023 17:12:07 GMT ETag: "65e5c965272e021ae33ff8bc39565ef5" x-amz-server-side-encryption: AES256 x-amz-version-id: hsN.sW1_cGhHrJpjsB.h4g44k0urT_Q_ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ccf3e60556af74328f117e2d57cba560.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: SpB8x7vjAG01iYUhV8sCaJudxJR8qtqL1tT3MEOTlbQ8dCfn90WELA== Age: 13654370
2024-05-23 13:51:09 UTC	15390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 5d 2c 7b 22 32 53 56 64 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 73 41 62 73 6f 6c 75 74 65 55 52 4c 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 5b 61 2d 7a 5d 5b 61 2d 7a 5c 64 5c 2b 5c 2d 5c 2e 5d 2a 3a 29 3f 5c 2f 5c 2f 2f 69 2e 74 65 73 74 28 65 29 7d 7d 2c 22 35 6f 4d 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 65 55 52 4c 73 28 65 2c 74 29 7b 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){retur
2024-05-23 13:51:09 UTC	600	IN	Data Raw: 28 65 29 7d 2c 69 73 46 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 20 69 73 46 69 6c 65 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 69 6c 65 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 42 6c 6f 62 3a 66 75 6e 63 74 69 6f 6e 20 69 73 42 6c 6f 62 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 42 6c 6f 62 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 69 73 46 75 6e 63 74 69 6f 6e 2c 69 73 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 20 69 73 53 74 72 65 61 6d 28 65 29 7b 72 65 74 75 72 6e 20 69 73 4f 62 6a 65 63 74 28 65 29 26 26 69 73 46 75 6e 63 74 69 6f 6e 28 65 2e 70 69 70 65 29 7d 2c 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 20 69 73 55 52 4c 53 65 61 72 Data Ascii: (e)},isFile:function isFile(e){return"[object File]"===a.call(e)},isBlob:function isBlob(e){return"[object Blob]"===a.call(e)},isFunction:isFunction,isStream:function isStream(e){return isObject(e)&&isFunction(e.pipe)},isURLSearchParams:function isURLSear
2024-05-23 13:51:09 UTC	1013	IN	Data Raw: 72 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 5b 72 5d 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 74 3f 65 5b 72 5d 3d 6d 65 72 67 65 28 65 5b 72 5d 2c 74 29 3a 65 5b 72 5d 3d 74 7d 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 66 6f 72 45 61 63 68 28 61 72 67 75 6d 65 6e 74 73 5b 74 5d 2c 61 73 73 69 67 6e 56 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 65 78 74 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 65 2c 74 2c 72 29 7b 72 65 74 75 72 6e 20 66 6f 72 45 61 63 68 28 74 2c 66 75 6e 63 74 69 6f 6e 20 61 73 73 69 67 6e 56 61 6c 75 65 28 74 2c 6f 29 7b 65 5b 6f 5d 3d 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f Data Ascii: r){"object"===typeof e[r]&&"object"===typeof t?e[r]=merge(e[r],t):e[r]=t}for(var t=0,r=arguments.length;t<r;t++)forEach(arguments[t],assignValue);return e},extend:function extend(e,t,r){return forEach(t,function assignValue(t,o){e[o]=r&&"function"===typeo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	50066	50.57.31.206	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	651	OUT	GET /adform/1/info?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:09 UTC	648	IN	HTTP/1.1 302 Found Location: /adform/1/info2?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external UIP-Response-Status: Ok Frontend-ID: 2 Set-Cookie: SEUNCY=3A07A931BD2D6041; Expires=Fri, 23 May 2025 13:51:09 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Thu, 23 May 2024 13:51:09 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	50067	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	790	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" visited_url: https://www.spglobal.com/en sec-ch-ua-mobile: ?0 Authorization: Bearer 1edd5669f11674524557 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json _zitok: ac746a0716b51e6738171716472254 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc"
2024-05-23 13:51:09 UTC	618	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 13:51:09 GMT Content-Type: text/plain; charset=utf-8 Connection: close vary: Accept-Encoding apigw-requestid: YOh4JholPHcEMoQ= x-powered-by: Express etag: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc" access-control-allow-origin: * access-control-expose-headers: * x-cache: Miss from cloudfront via: 1.1 7c55514b62254664b7255cfc5da6dc92.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: TQ6efxd5WdRQKRSaUdqvi2y8R5yCIoBOp_R30MU8r2eN53mcCh1gHQ== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584e39f6a43e3-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	50064	35.214.149.91	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	707	OUT	GET /ul_cb/sync?dsp_id=70&user_id=6252180897247519748 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9326d0b9-3a0d-4d01-bbb3-688e8f328e75; c=1716472267; tuuid_lu=1716472267
2024-05-23 13:51:09 UTC	564	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 13:51:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //sync.1rx.io/usersync/bidswitch/9326d0b9-3a0d-4d01-bbb3-688e8f328e75?gdpr=&gdpr_consent=&us_privacy= Set-Cookie: tuuid=9326d0b9-3a0d-4d01-bbb3-688e8f328e75; path=/; expires=Fri, 23-May-2025 13:51:09 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716472269; path=/; expires=Fri, 23-May-2025 13:51:09 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	50068	35.244.174.68	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:09 UTC	732	OUT	GET /1000.gif?memo=CJ6oGBIeChoIARCUdRoTNjI1MjE4MDg5NzI0NzUxOTc0OBAAGg0IzJO9sgYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=u3mdUNp9EDnOqJPN3yx0QhirN6N+uLH3XSLqV53NrAM=; pxrc=CAA=
2024-05-23 13:51:09 UTC	751	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://pippio.com/api/sync?pid=5324&it=1&iv=cf8bef7f1bcd0321b7a679017e3d01786da7f5487e160d688e05dff7606569f8791426b5417dce21&_=2 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=zc1d838tqq3OqJPN3yx0QhirN6N+uLH3XSLqV53NrAM=; Path=/; Domain=rlcdn.com; Expires=Fri, 23 May 2025 13:51:09 GMT; Secure; SameSite=None Set-Cookie: pxrc=CM2TvbIGEgUI6AcQABIFCOhHEAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 22 Jul 2024 13:51:09 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 23 May 2024 13:51:09 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	50072	172.64.151.101	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	490	OUT	GET /rum?cm_dsp_id=111&external_user_id=6252180897247519748&expiration=1717681863&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; CMPS=1297; CMPRO=1297
2024-05-23 13:51:10 UTC	990	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:10 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 888584e9c8f60cb4-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 23 May 2025 13:51:10 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1297; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 13:51:10 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5HzEoha%2FiS9F5cvWh5gS19hrxIglyStp%2FEayo4f0AgeWdbZ4v%2BQWqE10xvlz%2BSRYSOTFCiX%2FGH6SSOXI0E93WR7A33KrCbC5ZbtUuTZzjmKHpX9cDDLlJqj9JWu2de4EHf%2BLjjjJJXTFjQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	50078	54.78.254.47	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	851	OUT	GET /load/?p=204&g=710&j=0&buid=6252180897247519748&xl8blockcheck=1 HTTP/1.1 Host: loadm.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="c4692e41261fd428073242b026cfe1d8"; ud="eJxrXxzq6XKLQSHZxMzSKNXE0MjMMC3FxMjCwNzYyMQoycDILDkt1TDFYnFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVywAswJcw1asCS%252FKDN9UWjw4qKUNMZFJcWngo9fugMAGVonlQ%253D%253D"
2024-05-23 13:51:10 UTC	2291	IN	HTTP/1.1 302 server: nginx date: Thu, 23 May 2024 13:51:10 GMT content-type: image/gif content-length: 0 cache-control: no-cache x-powered-by: Undertow/1 set-cookie: EE="c4692e41261fd428073242b026cfe1d8"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 20-Sep-2024 01:51:10 GMT; SameSite=None; Secure; set-cookie: udo="gAAAAAQAAASeKLUv%252FWCeA80YAHbrn0YQa6oOAAAAANwpAHBoQFQQwft5oMKaHdFoADBKsIEEKo%252Fpm7d9JtfX3KZRbr6brPiSeLf6aHCyLFpkVwwkK5luiGQ0PBZTjQCKAIwAHLdVPFISzWRMnmJoQrSNIj94WZfEAAQ1eTjyue6lNx6JHp9NiRFmeOjhswv1rD5nyvGY4uuyN7g7NmGKmh0LGHCV4Zgi%252F6SlyE1Sw2cMBj5Ea2pRLBhq7vQ%252FgNSXEjaS9WO%252FCbHh%252FyU%252Fm81mP%252BD%252FIxL8yMbcadSzEpHilyXicOioIPn%252FIJtWBeI%252B0xQC6huDWinJaWkZ4i4%252FeGOLlubt7XHd5m0gpjmGNdZTfdE%252BmhxNkYfkGb4%252BzgM3jMdtD%252Fy0b9uY3W3IjCGnbZSzpJOry60a6khNC%252FPkaPla25ZicnuswpQLpe1zbzVoTrNVoTrJ8jxDlQQqndp3%252FQAhywvTFD3Gcg6BX5OG3Mea7HxSToplBjnycNQCHSJERCrZRIRVxWKwasJWRUh9wpFv0pRrSNSVuuCaDs%252FY1BVQfNVxGDrEGDHeZrnszdJxls8C2ik5g%252FDkc6uDliK64pilhjw%252FduuhtdsaaHP74mnf5tjQ1u2N6xvsuJXyI2Ppob1to08y46NC9Wlgnp0aNWsOVCxDV9xNJ7j0rpRWdV857p0MIayrgtjfIeI%252F9h9kE9nEA4EHwYpgGgaXSHQKXlewUAhEw2SZpSUgVP7%252FQIAX8JKXSED4iQ2CGAoWNLFpI5kiNLHgR9qX%252FXBxtECLRuFAgdsRoJ6K2y9oOOGGh556ZHLfkgumMZJHLBg6lrKJyIY6xvLJtTGXjvW1qMpGS1LZVqr%252Bh8mu2luxVUlrh%252BUXB6e04KboCjsgQAJCkEPGG%252FSFs5jk7Cs [TRUNCATED] set-cookie: ud="eJxrXxzq6XKLQSHZxMzSKNXE0MjMMC3FxMjCwNzYyMQoycDILDkt1TDFYnFZatGCpaXFqSlJh5ZU5JTkNK0uiw91jHdz9PX0iVzmnFGUn5u6AiwU5hq02NDQfEl%252BUWb6otDgxUUpaQyLSopPBR%252B%252FdAcAbZ0qlA%253D%253D"; Domain=.exelator.com; Path=/; Max-Age=10368000; Expires=Fri, 20-Sep-2024 01:51:10 GMT; SameSite=None; Secure; p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA location: https://load77.exelator.com/pixel.gif access-control-allow-credentials: true p3p: policyref=/w3c/p3p.xml, CP=NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	50079	50.57.31.206	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	685	OUT	GET /adform/1/info2?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=3A07A931BD2D6041
2024-05-23 13:51:10 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 3 Set-Cookie: SEUNCY=3A07A931BD2D6041; Expires=Fri, 23 May 2025 13:51:10 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Thu, 23 May 2024 13:51:10 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-05-23 13:51:10 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	50070	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	621	OUT	GET /core/assets/js/8.c896b87e.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 90612 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:07 GMT Last-Modified: Mon, 29 Apr 2024 17:35:46 GMT ETag: "8dcd3b672c0c47891a05c8fc0ebcd99a" x-amz-server-side-encryption: AES256 x-amz-version-id: lR_3ihoUmhLvRTVSmcEL7KqwrKiORA7y Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 41 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2ed8b710d99a964ef414e41b544ffb2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: JgyMRMoSb9kvpqtYrVt1dVlzDGZ-bXLHzaPH4AevGCop7Ok6jzyGAA== Age: 1978743
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 5d 2c 7b 22 2b 2f 4a 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 2d 31 2c 61 3d 22 50 52 45 2d 52 45 4e 44 45 52 22 7d 2c 22 2b 4b 62 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 59 57 68 70 22 29 2c 61 3d 6e 28 22 53 30 69 67 22 29 2c 6f 3d 6e 28 22 45 52 6b 50 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 2e 36 38 37 35 20 35 2e 32 32 32 36 36 20 31 32 2e 32 32 32 37 43 34 2e 38 39 34 35 33 20 31 32 2e 34 31 34 31 20 34 2e 35 36 36 34 31 20 31 32 2e 36 33 32 38 20 34 2e 33 32 30 33 31 20 31 32 2e 39 30 36 32 43 34 2e 32 39 32 39 37 20 31 32 2e 39 33 33 36 20 34 2e 32 36 35 36 32 20 31 32 2e 39 36 30 39 20 34 2e 32 36 35 36 32 20 31 33 2e 30 31 35 36 43 34 2e 32 36 35 36 32 20 31 33 2e 32 33 34 34 20 34 2e 35 31 31 37 32 20 31 33 2e 32 38 39 31 20 34 2e 36 32 31 30 39 20 31 33 2e 31 35 32 33 5a 4d 36 2e 35 38 39 38 34 20 37 2e 37 39 32 39 37 43 36 2e 34 38 30 34 37 20 37 2e 37 39 32 39 37 20 36 2e 33 39 38 34 34 20 37 2e 38 37 35 20 36 2e 33 39 38 34 34 20 37 2e 39 38 34 33 38 43 36 2e 33 39 38 34 34 20 38 2e 30 31 31 37 32 20 36 2e 33 39 38 34 34 20 38 2e Data Ascii: .6875 5.22266 12.2227C4.89453 12.4141 4.56641 12.6328 4.32031 12.9062C4.29297 12.9336 4.26562 12.9609 4.26562 13.0156C4.26562 13.2344 4.51172 13.2891 4.62109 13.1523ZM6.58984 7.79297C6.48047 7.79297 6.39844 7.875 6.39844 7.98438C6.39844 8.01172 6.39844 8.
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 29 2c 6e 2e 64 28 74 2c 22 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 7d 29 2c 6e 2e 64 28 74 2c 22 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 3b 76 61 72 20 72 3d 6e 28 22 6e 66 62 41 22 29 2c 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 6f 3d 6e 2e 6e 28 61 29 2c 69 3d 6e 28 22 37 53 4d 31 22 29 2c 63 3d 6e 28 22 65 66 62 45 22 29 2c 73 3d 6e 28 22 53 73 5a 4e 22 29 2c 75 3d 6e 28 22 48 76 68 67 22 29 2c 6c 3d 6e 28 22 53 46 6f 61 22 29 2c 64 3d 6e 28 22 2b 6f 49 4b 22 29 2c 66 3d 6e 28 22 30 6c 66 76 22 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 42 79 49 64 28 65 29 7b 72 65 74 75 72 6e 20 63 2e 63 2e Data Ascii: g",function(){return y}),n.d(t,"k",function(){return j}),n.d(t,"l",function(){return w});var r=n("nfbA"),a=n("mj2O"),o=n.n(a),i=n("7SM1"),c=n("efbE"),s=n("SsZN"),u=n("Hvhg"),l=n("SFoa"),d=n("+oIK"),f=n("0lfv"),v=function getConversationById(e){return c.c.
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 2c 75 3d 73 5b 30 5d 2c 6c 3d 73 5b 31 5d 2c 64 3d 65 2e 72 65 73 70 6f 6e 73 65 2e 73 74 61 74 75 73 3b 69 66 28 64 3e 3d 75 26 26 64 3c 3d 6c 29 7b 6e 3d 21 30 3b 62 72 65 61 6b 7d 7d 7d 63 61 74 63 68 28 65 29 7b 61 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 7c 7c 6e 75 6c 6c 3d 3d 63 2e 72 65 74 75 72 6e 7c 7c 63 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 6f 7d 7d 69 66 28 21 6e 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 20 74 2e 63 75 72 72 65 6e 74 52 65 74 72 79 41 74 74 65 6d 70 74 3d 74 2e 63 75 72 72 65 6e 74 52 65 74 72 79 41 74 74 65 6d 70 74 7c 7c 30 2c 21 28 74 2e 63 75 72 72 65 6e 74 52 65 74 72 79 41 74 74 65 6d 70 74 3e 3d 74 2e 72 65 74 72 79 29 7d 66 75 6e 63 74 69 6f Data Ascii: ,u=s[0],l=s[1],d=e.response.status;if(d>=u&&d<=l){n=!0;break}}}catch(e){a=!0,o=e}finally{try{r\|\|null==c.return\|\|c.return()}finally{if(a)throw o}}if(!n)return!1}return t.currentRetryAttempt=t.currentRetryAttempt\|\|0,!(t.currentRetryAttempt>=t.retry)}functio
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 68 3f 5b 65 5b 30 5d 5d 3a 6e 75 6c 6c 7d 28 70 2c 68 2c 4f 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 20 75 73 65 41 63 74 69 76 65 53 65 6e 64 65 72 49 64 28 29 7b 72 65 74 75 72 6e 20 6d 28 29 5b 30 5d 7d 7d 2c 6d 73 73 46 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 29 2c 6e 2e 64 28 74 2c 22 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: h?[e[0]]:null}(p,h,O)},g=function useActiveSenderId(){return m()[0]}},mssF:function(e,t,n){"use strict";n.d(t,"b",function(){return o}),n.d(t,"a",function(){return i}),n.d(t,"c",function(){return c}),n.d(t,"d",function(){return s}),n.d(t,"e",function(){re
2024-05-23 13:51:10 UTC	8692	IN	Data Raw: 6f 26 26 69 21 3d 3d 55 2e 61 2e 43 48 41 54 5f 52 45 53 50 4f 4e 53 45 26 26 76 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 44 65 66 61 75 6c 74 43 54 41 2c 7b 63 6f 70 79 3a 6f 2c 74 79 70 65 3a 69 2c 75 72 6c 3a 63 7d 29 29 3a 6e 75 6c 6c 7d 3b 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 65 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 7d 29 3b 76 61 72 20 74 65 3d 7b 47 52 45 45 54 49 4e 47 3a 22 47 52 45 45 54 49 4e 47 22 2c 43 48 41 54 5f 54 41 4b 45 4f 56 45 52 3a 22 43 48 41 54 5f 54 41 4b 45 4f 56 45 52 22 2c 43 4f 4e 56 45 52 53 41 54 49 4f 4e 3a 22 43 4f 4e 56 45 52 53 41 54 49 4f 4e 22 2c 47 44 50 52 3a 22 47 44 50 52 22 2c 57 45 4c 43 4f 4d Data Ascii: o&&i!==U.a.CHAT_RESPONSE&&v.a.createElement(DefaultCTA,{copy:o,type:i,url:c})):null};n.d(t,"b",function(){return te}),n.d(t,"a",function(){return ne});var te={GREETING:"GREETING",CHAT_TAKEOVER:"CHAT_TAKEOVER",CONVERSATION:"CONVERSATION",GDPR:"GDPR",WELCOM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	50077	52.17.40.72	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	664	OUT	GET /map/ct=y/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-05-23 13:51:10 UTC	693	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:10 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.5.206 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Mon, 17-Feb-2025 13:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=ead1c4978695489dadb5610506d96b01;Path=/;Domain=crwdcntrl.net;Expires=Mon, 17-Feb-2025 13:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-23 13:51:10 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	50073	52.28.144.188	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	487	OUT	GET /adscale-ih/tpui?tpid=42&tpuid=6252180897247519748&cburl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d9%26uid%3D__ADSCALE_USER_ID__ HTTP/1.1 Host: ih.adscale.de Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	92	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 13:51:10 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	50076	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	622	OUT	GET /core/assets/js/16.968cf6f5.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94897 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:07 GMT Last-Modified: Mon, 29 Apr 2024 17:35:44 GMT ETag: "bd6daa27d04becd4a59ecc467a315864" x-amz-server-side-encryption: AES256 x-amz-version-id: BjY_E8NvQ.ccFeDlvkcpwOiK50vm_2OH Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 50 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c998e38ed4ce49918421e82943649a88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: pH6VzncVmpPNXcRfMC2tS0HBpAGGTv1z1-ub4tasoxT02nJxJNcHUg== Age: 1978743
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 5d 2c 7b 22 2b 52 79 39 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 69 3d 6e 28 22 6e 66 62 41 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 75 3d 6e 28 22 53 73 5a 4e 22 29 2c 73 3d 6e 28 22 42 38 4a 59 22 29 2c 64 3d 6e 28 22 48 76 68 67 22 29 2c 6c 3d 6e 28 22 53 46 6f 61 22 29 2c 62 3d 6e 28 22 54 44 55 45 22 29 2c 66 3d 6e 28 22 64 61 34 4c 22 29 2c 76 3d 6e 28 22 68 6d 38 62 22 29 2c 70 3d 6e 28 22 4c 56 63 58 22 29 2c 4f 3d 6e 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n(
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2e 69 64 5d 3d 74 2e 70 61 79 6c 6f 61 64 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 7d 2c 52 45 43 45 49 56 45 5f 4d 45 53 53 41 47 45 5f 53 45 4e 44 5f 46 41 49 4c 55 52 45 3a 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 65 4d 65 73 73 61 67 65 53 65 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 6f 6e 2c 6e 3d 65 2e 64 72 61 66 74 2c 61 3d 74 2e 70 61 79 6c 6f 61 64 2c 72 3d 6e 75 6c 6c 3d 3d 3d 61 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 6d 65 73 73 61 67 65 2c 69 3d 4f 62 6a 65 63 74 28 6d 2e 62 29 28 72 29 3b 4f 62 6a 65 63 74 28 70 2e 6d 29 28 6e 2e 6d 65 73 73 61 67 65 73 29 26 26 28 6e 2e 6d 65 73 73 61 Data Ascii: conversation.conversation.id]=t.payload.conversation},RECEIVE_MESSAGE_SEND_FAILURE:function receiveMessageSendFailureHandler(e){var t=e.action,n=e.draft,a=t.payload,r=null===a\|\|void 0===a?void 0:a.message,i=Object(m.b)(r);Object(p.m)(n.messages)&&(n.messa
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 62 6a 65 63 74 28 44 2e 65 29 28 65 29 29 2c 72 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 61 2c 5b 22 64 69 73 70 6c 61 79 54 79 70 65 22 5d 29 2c 69 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 61 2c 5b 22 70 6c 61 79 62 6f 6f 6b 49 64 22 5d 29 2c 75 2e 6e 65 78 74 3d 31 30 2c 59 28 61 29 3b 63 61 73 65 20 31 30 3a 6f 3d 75 2e 73 65 6e 74 2c 73 3d 6f 2e 6d 65 73 73 61 67 65 2c 64 3d 6f 2e 73 65 6e 64 65 72 49 64 2c 62 3d 6f 2e 73 65 6e 64 65 72 49 6e 66 6f 2c 76 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 4f 62 6a 65 63 74 28 63 2e 61 29 28 4f 62 6a 65 63 74 28 63 2e 61 29 28 7b 7d 2c 61 29 2c 7b 7d 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 4f 62 6a 65 63 74 28 63 2e 61 29 28 4f 62 6a 65 63 74 28 63 2e 61 29 28 7b 7d 2c 61 2e 61 74 74 72 69 62 75 74 65 73 Data Ascii: bject(D.e)(e)),r=Object(P.a)(a,["displayType"]),i=Object(P.a)(a,["playbookId"]),u.next=10,Y(a);case 10:o=u.sent,s=o.message,d=o.senderId,b=o.senderInfo,v=Object.assign({},Object(c.a)(Object(c.a)({},a),{},{attributes:Object(c.a)(Object(c.a)({},a.attributes
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 29 2c 6e 2e 64 28 74 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 29 2c 6e 2e 64 28 74 2c 22 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 7d 29 2c 6e 2e 64 28 74 2c 22 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 7d 29 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 69 3d 6e 28 22 4f 45 32 71 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 75 3d 6e 28 22 30 48 43 57 22 29 2c 73 3d 6e 28 22 78 77 54 6f 22 29 2c 64 3d 6e 28 22 64 61 34 4c 22 29 2c 6c 3d 6e 28 22 2b 66 31 41 22 29 2c 62 3d 6e 28 22 4a 42 74 6d 22 29 2c 66 3d 6e 2e 6e 28 62 29 2c 76 3d 6e 28 Data Ascii: i",function(){return N}),n.d(t,"e",function(){return D}),n.d(t,"l",function(){return w}),n.d(t,"m",function(){return L});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("OE2q"),o=n("QtlZ"),u=n("0HCW"),s=n("xwTo"),d=n("da4L"),l=n("+f1A"),b=n("JBtm"),f=n.n(b),v=n(
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 54 5f 53 45 4e 44 45 52 5f 49 44 3a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 41 63 74 69 76 65 43 61 6d 70 61 69 67 6e 45 78 63 65 70 74 53 65 6e 64 65 72 49 64 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 3d 65 2e 64 72 61 66 74 3b 61 2e 61 63 74 69 76 65 43 61 6d 70 61 69 67 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 73 65 6e 64 65 72 49 64 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 61 2e 61 63 74 69 76 65 43 61 6d 70 61 69 67 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 3d 28 6e 3d 74 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 73 65 6e 64 65 72 49 64 7d 7d 29 7d 2c 52 45 43 45 49 56 45 5f 43 Data Ascii: T_SENDER_ID:function clearActiveCampaignExceptSenderIdHandler(e){var t,n,a=e.draft;a.activeCampaign=Object.assign({},c,{attributes:{senderId:null===(t=a.activeCampaign)\|\|void 0===t?void 0:null===(n=t.attributes)\|\|void 0===n?void 0:n.senderId}})},RECEIVE_C
2024-05-23 13:51:10 UTC	12977	IN	Data Raw: 49 47 4e 3a 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 65 4e 65 77 42 6f 74 43 61 6d 70 61 69 67 6e 4d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 6f 6e 2c 6e 3d 65 2e 64 72 61 66 74 2c 6f 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 7b 7d 2c 5b 22 64 61 74 61 22 5d 2c 74 2e 70 61 79 6c 6f 61 64 29 2c 75 3d 4f 62 6a 65 63 74 28 72 2e 61 29 28 6f 2c 22 70 6c 61 79 62 6f 6f 6b 49 64 22 29 3b 6e 2e 61 63 74 69 76 65 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 5b 5d 2e 63 6f 6e 63 61 74 28 4f 62 6a 65 63 74 28 61 2e 61 29 28 6e 2e 61 63 74 69 76 65 29 2c 5b 75 5d 29 29 7d 2c 52 45 43 45 49 56 45 5f 49 4e 49 54 49 41 4c 5f 41 43 54 49 56 45 5f 43 4f 4e 56 45 52 53 41 54 49 4f 4e 3a 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 Data Ascii: IGN:function receiveNewBotCampaignMessageHandler(e){var t=e.action,n=e.draft,o=Object(c.a)({},["data"],t.payload),u=Object(r.a)(o,"playbookId");n.active=Object(i.a)([].concat(Object(a.a)(n.active),[u]))},RECEIVE_INITIAL_ACTIVE_CONVERSATION:function receiv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	50086	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	572	OUT	OPTIONS /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: _vtok,_zitok,content-type,visited-url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	1089	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: GET,HEAD via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=_cx6K0nzDsfXqXue5gUPJP9DGEQEkusruIv5zgk9tMw-1716472270-1.0.1.1-yZICV6g.EB0aKc_lj3zlVB2A3Kx4kkuQyWHC18D76WMkuQ8NTiFH8rDyP0yKZIotR4ZZcaFweJT_NDtW045eYQ; path=/; expires=Thu, 23-May-24 14:21:10 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=iJeQNpoDSPjToKLNfMw01xiMdPAKx_0wZtYqz9nluG0-1716472270446-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 888584e9f8521809-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:10 UTC	13	IN	Data Raw: 38 0d 0a 47 45 54 2c 48 45 41 44 0d 0a Data Ascii: 8GET,HEAD
2024-05-23 13:51:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	50082	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	957	OUT	GET /core/assets/js/24.091525a5.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	991	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 52343 Connection: close Server: istio-envoy Date: Wed, 22 May 2024 13:35:46 GMT Last-Modified: Tue, 21 May 2024 13:05:13 GMT ETag: "b6e556bb3ee9ddda1170ddfed0457042" x-amz-server-side-encryption: AES256 x-amz-version-id: KGCLQ63jrw_pELR3bRKxTrF31wYoW7KC Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 27dcd9aaf05c8fa7daa5723173f38eba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: ZYrtSE9XH3XMcLRf2Cy5lgDq6nIGEGZJug3otRFLifvu0P-pD6O3qQ== Age: 87324
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 5d 2c 7b 22 2b 66 31 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 71 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 2c 6e 2e 64 28 74 2c 22 77 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 2c 6e 2e 64 28 74 2c 22 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 2c 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 65 6e 64 55 73 65 72 2e 65 6d 61 69 6c 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 2e 70 61 79 6c 6f 61 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 6d 61 69 6c 7d 2c 52 45 43 45 49 56 45 5f 47 45 4f 3a 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 65 47 65 6f 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 6f 6e 3b 65 2e 64 72 61 66 74 2e 67 65 6f 3d 74 2e 70 61 79 6c 6f 61 64 7d 2c 52 45 43 45 49 56 45 5f 41 43 43 45 53 53 5f 54 4f 4b 45 4e 3a 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 65 41 63 63 65 73 73 54 6f 6b 65 6e 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 6f 6e 3b 65 2e 64 72 61 66 74 2e 61 75 74 68 2e 61 63 63 65 73 73 54 6f 6b 65 6e 3d 74 2e 70 61 79 6c 6f 61 64 2e 61 63 63 Data Ascii: endUser.email=null===(t=n.payload)\|\|void 0===t?void 0:t.email},RECEIVE_GEO:function receiveGeoHandler(e){var t=e.action;e.draft.geo=t.payload},RECEIVE_ACCESS_TOKEN:function receiveAccessTokenHandler(e){var t=e.action;e.draft.auth.accessToken=t.payload.acc
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 4d 3d 66 75 6e 63 74 69 6f 6e 20 69 73 50 65 72 6d 61 43 6c 6f 73 65 4d 65 73 73 61 67 65 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 65 2c 22 70 65 72 6d 61 63 6c 6f 73 65 4d 65 73 73 61 67 65 22 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 20 74 72 75 6e 63 61 74 65 4d 65 73 73 61 67 65 54 65 78 74 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 76 2e 61 29 28 31 30 30 2c 65 29 5b 30 5d 2e 74 72 69 6d 28 29 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 20 74 72 75 6e 63 61 74 65 4d 65 73 73 61 67 65 50 72 65 76 69 65 77 28 65 2c 74 29 7b 76 61 72 20 6e 3d 41 28 65 2c 22 70 72 65 76 69 65 77 22 29 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 74 29 7b 76 61 72 20 61 3d 6b 28 6e 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 72 2e 61 29 28 4f 62 6a 65 63 74 28 72 2e Data Ascii: M=function isPermaCloseMessage(e){return N(e,"permacloseMessage")},k=function truncateMessageText(e){return Object(v.a)(100,e)[0].trim()},H=function truncateMessagePreview(e,t){var n=A(e,"preview");if(n&&n.length>t){var a=k(n);return Object(r.a)(Object(r.
2024-05-23 13:51:10 UTC	3191	IN	Data Raw: 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 69 2e 61 2e 64 69 73 70 61 74 63 68 28 6f 2e 62 28 29 29 2c 65 2e 6e 65 78 74 3d 33 2c 6a 28 29 3b 63 61 73 65 20 33 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 35 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 55 73 65 72 4a 77 74 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 43 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 45 78 74 65 72 6e 61 6c 45 6d 61 69 6c 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 69 2e 62 29 28 29 2e 73 65 73 73 69 6f 6e 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 75 2e 61 29 28 22 22 Data Ascii: e.prev=e.next){case 0:return i.a.dispatch(o.b()),e.next=3,j();case 3:case"end":return e.stop()}},_callee5)}));return function clearUserJwt(){return e.apply(this,arguments)}}(),C=function getExternalEmail(){var e=Object(i.b)().session;return Object(u.a)(""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	50075	192.28.144.124	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	798	OUT	POST /webevents/visitWebPage?_mchNc=1716472267842&_mchCn=&_mchId=491-VNG-790&_mchTk=_mch-spglobal.com-1716472256002-46107&_mchHo=www.spglobal.com&_mchPo=&_mchRu=%2Fen&_mchPc=https%3A&_mchVr=163&_mchEcid=&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 Host: 491-vng-790.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 23 May 2024 13:51:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 56127678-e090-4839-9558-c7d637e3eeb9 Access-Control-Allow-Origin: *
2024-05-23 13:51:10 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	50080	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	957	OUT	GET /core/assets/js/17.3c8edd3c.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	991	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 41495 Connection: close Server: istio-envoy Date: Wed, 22 May 2024 13:35:46 GMT Last-Modified: Tue, 21 May 2024 13:05:13 GMT ETag: "45c74d3fa24b8a401396ba502d4fae48" x-amz-server-side-encryption: AES256 x-amz-version-id: 9i7mM8Jb2H7lLVM9HBOhgKVFdDwkhAv4 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fbd6f3355665969685cfc6020598488c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: T4gjzT54FtdhvSsfgWhy02_4YTpAHXxy1w-j27kLd_9irpRV9n7E5g== Age: 87324
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 5d 2c 7b 22 2b 44 35 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 48 41 54 3a 22 63 68 61 74 22 2c 55 53 45 52 3a 22 75 73 65 72 22 2c 50 52 45 53 45 4e 43 45 3a 22 70 72 65 73 65 6e 63 65 22 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",
2024-05-23 13:51:10 UTC	16384	IN	Data Raw: 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 66 75 6e 63 74 69 6f 6e 20 65 6d 61 69 6c 48 61 73 41 6c 6c 6f 77 65 64 50 61 72 74 73 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 40 22 29 3b 72 65 74 75 72 6e 21 28 74 5b 30 5d 2e 6c 65 6e 67 74 68 3e 36 34 29 26 26 21 74 5b 31 5d 2e 73 70 6c 69 74 28 22 2e 22 29 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3e 36 33 7d 29 7d 28 65 29 7c 7c 21 66 75 6e 63 74 69 6f 6e 20 65 6d 61 69 6c 48 61 73 43 6f 72 72 65 63 74 4c 65 6e 67 74 68 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3c 32 35 34 7d 28 65 29 29 72 65 74 75 72 6e 21 31 7d 29 2c 21 30 29 7d 7d 2c 48 53 51 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: forEach(function(e){if(!function emailHasAllowedParts(e){var t=e.split("@");return!(t[0].length>64)&&!t[1].split(".").some(function(e){return e.length>63})}(e)\|\|!function emailHasCorrectLength(e){return e.length<254}(e))return!1}),!0)}},HSQL:function(e,t,
2024-05-23 13:51:10 UTC	8727	IN	Data Raw: 65 63 74 28 61 2e 61 29 28 6f 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 32 28 65 29 7b 76 61 72 20 74 2c 72 2c 75 2c 6c 2c 66 3b 72 65 74 75 72 6e 20 6f 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 32 24 28 70 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 70 2e 70 72 65 76 3d 70 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 6e 28 22 64 35 67 4d 22 29 2c 72 3d 74 2e 64 65 66 61 75 6c 74 2c 75 3d 6e 28 22 6c 69 45 37 22 29 2c 6c 3d 75 2e 69 6e 69 74 52 65 61 63 74 49 31 38 6e 65 78 74 2c 66 3d 64 28 65 29 2c 70 2e 6e 65 78 74 3d 35 2c 72 2e 75 73 65 28 63 2e 61 29 2e 75 73 65 28 6c 29 2e 69 6e 69 74 28 7b 6c 6e 67 3a 66 2c 66 61 6c 6c 62 61 63 6b 4c 6e 67 3a 22 65 6e 22 2c 6e Data Ascii: ect(a.a)(o.a.mark(function _callee2(e){var t,r,u,l,f;return o.a.wrap(function _callee2$(p){for(;;)switch(p.prev=p.next){case 0:return t=n("d5gM"),r=t.default,u=n("liE7"),l=u.initReactI18next,f=d(e),p.next=5,r.use(c.a).use(l).init({lng:f,fallbackLng:"en",n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	50085	34.98.64.218	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	616	OUT	GET /w/1.0/sd?id=537113484&val=6252180897247519748 HTTP/1.1 Host: eu-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	504	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270; Version=1; Expires=Fri, 23-May-2025 13:51:10 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://eu-u.openx.net/w/1.0/sd?cc=1&id=537113484&val=6252180897247519748 Date: Thu, 23 May 2024 13:51:10 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	50084	52.17.118.57	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	593	OUT	GET /thirdparty/click?p=adfo HTTP/1.1 Host: api.adrtx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	375	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 Date: Thu, 23 May 2024 13:51:10 GMT Location: https://s3-eu-west-1.amazonaws.com/adality-cdn-content/pixel.gif P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" X-Error-Reason: Missing UserId Content-Length: 137 Connection: Close
2024-05-23 13:51:10 UTC	137	IN	Data Raw: 54 68 65 20 72 65 71 75 65 73 74 65 64 20 72 65 73 6f 75 72 63 65 20 74 65 6d 70 6f 72 61 72 69 6c 79 20 72 65 73 69 64 65 73 20 75 6e 64 65 72 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 33 2d 65 75 2d 77 65 73 74 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 61 64 61 6c 69 74 79 2d 63 64 6e 2d 63 6f 6e 74 65 6e 74 2f 70 69 78 65 6c 2e 67 69 66 22 3e 74 68 69 73 20 55 52 49 3c 2f 61 3e 2e Data Ascii: The requested resource temporarily resides under <a href="https://s3-eu-west-1.amazonaws.com/adality-cdn-content/pixel.gif">this URI</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	50087	217.79.178.221	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:10 UTC	619	OUT	GET /?_cmsrc=adformx&idt=100&did=6252180897247519748 HTTP/1.1 Host: cm.adsafety.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:10 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 13:51:10 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close
2024-05-23 13:51:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	50088	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	981	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/javascript visited-url: https://www.spglobal.com/en _vtok: OC40Ni4xMjMuMTc1 _zitok: ac746a0716b51e6738171716472254 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:11 UTC	656	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:11 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584ef9e8a72ab-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:11 UTC	713	IN	Data Raw: 31 32 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 1209(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-05-23 13:51:11 UTC	1369	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e Data Ascii: rentNode.insertBefore(d,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...
2024-05-23 13:51:11 UTC	1369	IN	Data Raw: 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 70 2b 22 53 65 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 Data Ascii: onStorage.setItem(p+"Session",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.ha
2024-05-23 13:51:11 UTC	1174	IN	Data Raw: 28 6e 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 65 29 29 3a 74 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 Data Ascii: (n),clearInterval(e)):t++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystat
2024-05-23 13:51:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	50091	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	563	OUT	OPTIONS /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:11 UTC	1052	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,Authorization,visitorId,_zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: POST via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=gMbCSIYRUPvn2BJpQLvF8TpEKd0vzN_2hr6fbti8WKE-1716472271-1.0.1.1-qfNj74ZmHpkF5vu1Gs_YMuQEBw88EvVADapo1rX.YB1ENo2WcMFKkmdSN60Li9VHnkPgqj7PQDzx3NYaldlk2A; path=/; expires=Thu, 23-May-24 14:21:11 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=rDwXTSG_jhLHe4BuHU1e..dDnns6C0ohPgH1ZYMCXeU-1716472271465-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 888584f05a574344-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:11 UTC	9	IN	Data Raw: 34 0d 0a 50 4f 53 54 0d 0a Data Ascii: 4POST
2024-05-23 13:51:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	50095	34.98.64.218	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	680	OUT	GET /w/1.0/sd?cc=1&id=537113484&val=6252180897247519748 HTTP/1.1 Host: eu-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
2024-05-23 13:51:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 13:51:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	50092	18.245.86.77	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	550	OUT	GET /include/1716472500000/px2iwrcmfxwz.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	973	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225885 Connection: close Server: istio-envoy Date: Thu, 23 May 2024 13:51:11 GMT Last-Modified: Wed, 22 May 2024 13:34:06 GMT ETag: "7c4c8a7061350329f108e3f92f2b6acc" x-amz-server-side-encryption: AES256 x-amz-version-id: XYnjHdjtoHL3LHbO4aoVXXJc8JG50RFv Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 33 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 218c6128df18321f9758e53ccc351448.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: zJIwDhKbUBhDjjPC4P-nMubGBPTSP6I8Byw77sbEYbeiGtpJmZpVMA==
2024-05-23 13:51:12 UTC	10878	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 63 3d 30 2c 75 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 69 5b 63 5d 2c 6e 5b 6f 5d 26 26 75 2e 70 75 73 68 28 6e 5b 6f 5d 5b 30 5d 29 2c 6e 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 61 26 26 61 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 7d 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 30 3a 30 7d 3b 66 75 6e 63 74 69 Data Ascii: !function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};functi
2024-05-23 13:51:12 UTC	929	IN	Data Raw: 72 3d 3d 3d 6c 29 7b 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6f 29 74 68 72 6f 77 20 69 3b 72 65 74 75 72 6e 20 64 6f 6e 65 52 65 73 75 6c 74 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 6f 2c 6e 2e 61 72 67 3d 69 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 73 3d 6d 61 79 62 65 49 6e 76 6f 6b 65 44 65 6c 65 67 61 74 65 28 61 2c 6e 29 3b 69 66 28 73 29 7b 69 66 28 73 3d 3d 3d 64 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 73 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 72 3d 3d 3d 63 29 74 68 72 6f 77 20 72 3d 6c 2c 6e 2e Data Ascii: r===l){if("throw"===o)throw i;return doneResult()}for(n.method=o,n.arg=i;;){var a=n.delegate;if(a){var s=maybeInvokeDelegate(a,n);if(s){if(s===d)continue;return s}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if(r===c)throw r=l,n.
2024-05-23 13:51:12 UTC	16384	IN	Data Raw: 72 46 75 6e 63 74 69 6f 6e 50 72 6f 74 6f 74 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 3d 47 65 6e 65 72 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 70 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 49 74 65 72 61 74 6f 72 4d 65 74 68 6f 64 73 28 65 29 7b 5b 22 6e 65 78 74 22 2c 22 74 68 72 6f 77 22 2c 22 72 65 74 75 72 6e 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 28 74 2c 65 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 41 73 79 6e 63 49 74 65 72 61 74 6f 72 28 65 2c 74 29 7b 76 61 72 20 6e 3b 74 68 69 73 2e 5f 69 6e 76 6f 6b 65 3d 66 75 6e 63 74 69 6f 6e 20 65 6e 71 75 65 75 65 28 Data Ascii: rFunctionPrototype.prototype=Generator.prototype=Object.create(p);function defineIteratorMethods(e){["next","throw","return"].forEach(function(t){e[t]=function(e){return this._invoke(t,e)}})}function AsyncIterator(e,t){var n;this._invoke=function enqueue(
2024-05-23 13:51:12 UTC	2300	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 28 74 68 69 73 29 7d 2c 65 2e 6c 61 7a 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 3d 21 30 2c 74 68 69 73 7d 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 3f 65 3a 75 74 69 6c 73 5f 69 73 50 72 6f 6d 69 73 65 28 65 29 3f 6e 65 77 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2e 74 68 65 6e 28 74 2c 6e 29 7d 29 3a 28 6e 65 77 20 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 29 2e 72 65 73 6f 6c 76 65 28 65 29 7d 2c 5a 61 6c 67 6f 50 72 6f 6d 69 73 65 2e 72 65 6a Data Ascii: e.resolve(this)},e.lazy=function(){return this.errorHandled=!0,this},ZalgoPromise.resolve=function(e){return e instanceof ZalgoPromise?e:utils_isPromise(e)?new ZalgoPromise(function(t,n){return e.then(t,n)}):(new ZalgoPromise).resolve(e)},ZalgoPromise.rej
2024-05-23 13:51:12 UTC	9988	IN	Data Raw: 74 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 74 72 79 7b 74 68 69 73 2e 77 65 61 6b 6d 61 70 3d 6e 65 77 20 57 65 61 6b 4d 61 70 7d 63 61 74 63 68 28 65 29 7b 7d 74 68 69 73 2e 6b 65 79 73 3d 5b 5d 2c 74 68 69 73 2e 76 61 6c 75 65 73 3d 5b 5d 7d 76 61 72 20 65 3d 43 72 6f 73 73 44 6f 6d 61 69 6e 53 61 66 65 57 65 61 6b 4d 61 70 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 65 2e 5f 63 6c 65 61 6e 75 70 43 6c 6f 73 65 64 57 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 77 65 61 6b 6d 61 70 2c 74 3d 74 68 69 73 2e 6b 65 79 73 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 69 66 28 69 73 57 69 6e 64 6f 77 28 72 29 Data Ascii: t(t)}catch(n){return!1}}())try{this.weakmap=new WeakMap}catch(e){}this.keys=[],this.values=[]}var e=CrossDomainSafeWeakMap.prototype;return e._cleanupClosedWindows=function(){for(var e=this.weakmap,t=this.keys,n=0;n<t.length;n++){var r=t[n];if(isWindow(r)
2024-05-23 13:51:12 UTC	8192	IN	Data Raw: 3d 6e 65 77 20 45 72 72 6f 72 28 65 2e 6d 65 73 73 61 67 65 29 3b 72 65 74 75 72 6e 20 6f 2e 63 6f 64 65 3d 6e 2c 72 26 26 28 6f 2e 64 61 74 61 3d 72 29 2c 6f 2e 73 74 61 63 6b 3d 74 2b 22 5c 6e 5c 6e 22 2b 6f 2e 73 74 61 63 6b 2c 6f 7d 2c 45 2e 70 72 6f 6d 69 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 20 73 65 72 69 61 6c 69 7a 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 69 6d 70 6c 65 6d 65 6e 74 65 64 3b 20 6e 6f 74 68 69 6e 67 20 74 6f 20 64 65 73 65 72 69 61 6c 69 7a 65 22 29 7d 2c 45 2e 72 65 67 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 65 29 7d 2c 45 2e 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: =new Error(e.message);return o.code=n,r&&(o.data=r),o.stack=t+"\n\n"+o.stack,o},E.promise=function(){throw new Error("Promise serialization is not implemented; nothing to deserialize")},E.regex=function(e){return new RegExp(e)},E.date=function(e){return n
2024-05-23 13:51:12 UTC	16384	IN	Data Raw: 65 72 69 61 6c 69 7a 65 54 79 70 65 28 22 63 72 6f 73 73 5f 64 6f 6d 61 69 6e 5f 66 75 6e 63 74 69 6f 6e 22 2c 7b 69 64 3a 63 2c 6e 61 6d 65 3a 75 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 72 69 61 6c 69 7a 65 4d 65 73 73 61 67 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 6f 2c 69 3d 72 2e 6f 6e 2c 61 3d 72 2e 73 65 6e 64 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 41 29 3b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 5b 65 5d 3b 69 66 28 69 73 53 65 72 69 61 6c 69 7a 65 64 54 79 70 65 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 72 3d 64 65 74 65 72 6d 69 6e 65 54 79 70 65 28 6e 29 3b Data Ascii: erializeType("cross_domain_function",{id:c,name:u})}function serializeMessage(e,t,n,r){var o,i=r.on,a=r.send;return function(e,t){void 0===t&&(t=A);var n=JSON.stringify(e,function(e){var n=this[e];if(isSerializedType(this))return n;var r=determineType(n);
2024-05-23 13:51:12 UTC	16384	IN	Data Raw: 3d 65 7d 28 74 2e 6c 65 6e 67 74 68 29 3f 63 72 65 61 74 65 42 75 66 66 65 72 28 65 2c 30 29 3a 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 29 3b 69 66 28 22 42 75 66 66 65 72 22 3d 3d 3d 74 2e 74 79 70 65 26 26 69 28 74 2e 64 61 74 61 29 29 72 65 74 75 72 6e 20 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 2e 64 61 74 61 29 7d 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 73 73 65 72 74 53 69 7a 65 28 65 29 7b 69 66 28 22 6e 75 Data Ascii: =e}(t.length)?createBuffer(e,0):fromArrayLike(e,t);if("Buffer"===t.type&&i(t.data))return fromArrayLike(e,t.data)}throw new TypeError("First argument must be a string, Buffer, ArrayBuffer, Array, or array-like object.")}(e,t)}function assertSize(e){if("nu
2024-05-23 13:51:12 UTC	16384	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 49 6e 74 42 45 3d 66 75 6e 63 74 69 6f 6e 20 77 72 69 74 65 49 6e 74 42 45 28 65 2c 74 2c 6e 2c 72 29 7b 69 66 28 65 3d 2b 65 2c 74 7c 3d 30 2c 21 72 29 7b 76 61 72 20 6f 3d 4d 61 74 68 2e 70 6f 77 28 32 2c 38 2a 6e 2d 31 29 3b 63 68 65 63 6b 49 6e 74 28 74 68 69 73 2c 65 2c 74 2c 6e 2c 6f 2d 31 2c 2d 6f 29 7d 76 61 72 20 69 3d 6e 2d 31 2c 61 3d 31 2c 73 3d 30 3b 66 6f 72 28 74 68 69 73 5b 74 2b 69 5d 3d 32 35 35 26 65 3b 2d 2d 69 3e 3d 30 26 26 28 61 2a 3d 32 35 36 29 3b 29 65 3c 30 26 26 30 3d 3d 3d 73 26 26 30 21 3d 3d 74 68 69 73 5b 74 2b 69 2b 31 5d 26 26 28 73 3d 31 29 2c 74 68 69 73 5b 74 2b 69 5d 3d 28 65 2f 61 3e 3e 30 29 2d 73 26 32 35 35 3b 72 65 74 75 72 6e 20 74 2b 6e 7d 2c 42 75 66 66 65 72 2e 70 Data Ascii: prototype.writeIntBE=function writeIntBE(e,t,n,r){if(e=+e,t\|=0,!r){var o=Math.pow(2,8n-1);checkInt(this,e,t,n,o-1,-o)}var i=n-1,a=1,s=0;for(this[t+i]=255&e;--i>=0&&(a=256);)e<0&&0===s&&0!==this[t+i+1]&&(s=1),this[t+i]=(e/a>>0)-s&255;return t+n},Buffer.p
2024-05-23 13:51:12 UTC	16384	IN	Data Raw: 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 29 3b 76 61 72 20 74 3d 63 2e 69 6e 64 65 78 4f 66 28 65 29 3b 74 3e 3d 30 26 26 63 2e 73 70 6c 69 63 65 28 74 2c 31 29 7d 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 65 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 74 74 72 73 2e 74 79 70 65 26 26 28 65 2e 61 74 74 72 73 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 2e 61 74 74 72 73 2e 6e 6f 6e 63 65 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 4e 6f 6e 63 65 28 29 7b 30 3b 72 65 74 75 72 6e 20 6e 2e 6e 63 7d 28 29 3b 72 26 26 28 65 2e Data Ascii: ntNode.removeChild(e);var t=c.indexOf(e);t>=0&&c.splice(t,1)}function createStyleElement(e){var t=document.createElement("style");if(void 0===e.attrs.type&&(e.attrs.type="text/css"),void 0===e.attrs.nonce){var r=function getNonce(){0;return n.nc}();r&&(e.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	50100	172.64.150.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	375	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:11 UTC	555	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 13:51:11 GMT Content-Type: application/json; charset=utf-8 Content-Length: 34 Connection: close apigw-requestid: YOh4ggK2vHcEM2A= x-powered-by: Express etag: W/"22-rSbFy3+q7HC5w4g2QQFk/dDLFDo" x-cache: Error from cloudfront via: 1.1 54a56da0fe0bae919389c7d572d4720e.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: OZm54-kmHB0qB6t7j7-ClCwvyGoc4qXJ9LPWh7domU1fXkuOf1vByA== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584f1d99f42d4-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:11 UTC	34	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 22 7d Data Ascii: {"error":"Failed to authenticate"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	50090	142.250.185.130	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	859	OUT	GET /pixel?google_nid=1024&google_cm&google_ula=1641347&party=1&google_hm=NjI1MjE4MDg5NzI0NzUxOTc0OA HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:11 UTC	695	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://c1.adform.net/serving/cookie/match/?party=1&google_gid=CAESEI4H-57ICqGr0fRlBVSwUug&google_cver=1&google_ula=1641347,0 Date: Thu, 23 May 2024 13:51:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 334 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:11 UTC	334	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 31 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 2f 3f 70 61 72 74 79 3d 31 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 49 34 48 2d 35 37 49 43 71 47 72 30 66 52 6c Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://c1.adform.net/serving/cookie/match/?party=1&google_gid=CAESEI4H-57ICqGr0fRl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	50093	63.140.62.17	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	747	OUT	POST /ee/v1/interact?configId=a09783d4-f2df-4c99-9355-5ed608d27275&requestId=64b49639-6189-4d6f-8d44-3c9d847fb6d8 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive Content-Length: 2255 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:11 UTC	2255	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 65 76 65 6e 74 73 22 3a 5b 7b 22 78 64 6d 22 3a 7b 22 65 76 65 6e 74 54 79 70 65 22 3a 22 77 65 62 2e 77 65 62 70 61 67 65 64 65 74 61 69 6c 73 2e 70 61 67 65 56 69 65 77 73 22 2c 22 77 65 62 22 3a 7b 22 77 65 62 50 61 67 65 44 65 74 61 69 6c 73 22 3a 7b 22 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 65 6e 22 2c 22 6e 61 6d 65 22 3a 22 73 70 67 6c 6f 62 61 6c 3a 63 Data Ascii: {"meta":{"configOverrides":{},"target":{"migration":true},"state":{"domain":"spglobal.com","cookiesEnabled":true}},"events":[{"xdm":{"eventType":"web.webpagedetails.pageViews","web":{"webPageDetails":{"URL":"https://www.spglobal.com/en","name":"spglobal:c
2024-05-23 13:51:11 UTC	782	IN	HTTP/1.1 200 OK x-request-id: 64b49639-6189-4d6f-8d44-3c9d847fb6d8 vary: Origin access-control-allow-origin: https://www.spglobal.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 23 May 2024 13:51:11 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag set-cookie: demdex=65333287272203360842745703209020999402; Max-Age=15552000; Domain=demdex.net; Path=/; Secure; SameSite=None; $x-enc=URI_ENCODING content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-23 13:51:11 UTC	1110	IN	Data Raw: 34 34 66 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 34 62 34 39 36 33 39 2d 36 31 38 39 2d 34 64 36 66 2d 38 64 34 34 2d 33 63 39 64 38 34 37 66 62 36 64 38 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 36 31 34 32 36 38 36 36 34 32 34 39 35 39 36 35 35 35 37 32 39 39 34 34 38 36 35 37 36 36 35 32 32 33 37 33 38 37 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 5d 2c 22 74 79 70 65 22 3a 22 61 63 74 69 76 61 74 69 6f 6e 3a 70 75 6c 6c 22 2c 22 65 76 65 6e 74 49 6e 64 65 78 22 3a 30 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 5d 2c 22 74 79 70 Data Ascii: 44f{"requestId":"64b49639-6189-4d6f-8d44-3c9d847fb6d8","handle":[{"payload":[{"id":"61426866424959655572994486576652237387","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[],"type":"activation:pull","eventIndex":0},{"payload":[],"typ
2024-05-23 13:51:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	50096	107.178.254.65	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	677	OUT	GET /api/sync?pid=5324&it=1&iv=cf8bef7f1bcd0321b7a679017e3d01786da7f5487e160d688e05dff7606569f8791426b5417dce21&_=2 HTTP/1.1 Host: pippio.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:11 UTC	959	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://px.ads.linkedin.com/db_sync?pid=10339&puuid=cf8bef7f1bcd0321b7a679017e3d01786da7f5487e160d688e05dff7606569f8791426b5417dce21&rand=04257684 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: did=tETMl9ZfSJQJSzTu; Path=/; Domain=pippio.com; Expires=Fri, 23 May 2025 13:51:11 GMT; Secure; SameSite=None Set-Cookie: didts=1716472271; Path=/; Domain=pippio.com; Expires=Fri, 23 May 2025 13:51:11 GMT; Secure; SameSite=None Set-Cookie: nnls=; Path=/; Domain=pippio.com; Expires=Mon, 22 Jul 2024 13:51:11 GMT; Secure; SameSite=None Set-Cookie: pxrc=CM+TvbIGEgYIgr0rEAA=; Path=/; Domain=pippio.com; Expires=Mon, 22 Jul 2024 13:51:11 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 23 May 2024 13:51:11 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	50104	50.57.31.206	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	452	OUT	GET /adform/1/info2?sType=sync&sExtCookieId=6252180897247519748&sInitiator=external HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=3A07A931BD2D6041
2024-05-23 13:51:11 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 3 Set-Cookie: SEUNCY=3A07A931BD2D6041; Expires=Fri, 23 May 2025 13:51:11 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Thu, 23 May 2024 13:51:11 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-05-23 13:51:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	50098	156.146.33.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	2039	OUT	GET /pixel.gif HTTP/1.1 Host: load77.exelator.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="c4692e41261fd428073242b026cfe1d8"; udo="gAAAAAQAAASeKLUv%252FWCeA80YAHbrn0YQa6oOAAAAANwpAHBoQFQQwft5oMKaHdFoADBKsIEEKo%252Fpm7d9JtfX3KZRbr6brPiSeLf6aHCyLFpkVwwkK5luiGQ0PBZTjQCKAIwAHLdVPFISzWRMnmJoQrSNIj94WZfEAAQ1eTjyue6lNx6JHp9NiRFmeOjhswv1rD5nyvGY4uuyN7g7NmGKmh0LGHCV4Zgi%252F6SlyE1Sw2cMBj5Ea2pRLBhq7vQ%252FgNSXEjaS9WO%252FCbHh%252FyU%252Fm81mP%252BD%252FIxL8yMbcadSzEpHilyXicOioIPn%252FIJtWBeI%252B0xQC6huDWinJaWkZ4i4%252FeGOLlubt7XHd5m0gpjmGNdZTfdE%252BmhxNkYfkGb4%252BzgM3jMdtD%252Fy0b9uY3W3IjCGnbZSzpJOry60a6khNC%252FPkaPla25ZicnuswpQLpe1zbzVoTrNVoTrJ8jxDlQQqndp3%252FQAhywvTFD3Gcg6BX5OG3Mea7HxSToplBjnycNQCHSJERCrZRIRVxWKwasJWRUh9wpFv0pRrSNSVuuCaDs%252FY1BVQfNVxGDrEGDHeZrnszdJxls8C2ik5g%252FDkc6uDliK64pilhjw%252FduuhtdsaaHP74mnf5tjQ1u2N6xvsuJXyI2Ppob1to08y46NC9Wlgnp0aNWsOVCxDV9xNJ7j0rpRWdV857p0MIayrgtjfIeI%252F9h9kE9nEA4EHwYpgGgaXSHQKXlewUAhEw2SZpSUgVP7%252FQIAX8JKXSED4iQ2CGAoWNLFpI5kiNLHgR9qX%252FXBxtECLRuFAgdsRoJ6K2y9oOOGGh556ZHLfkgumMZJHLBg6lrKJyIY6xvLJtTGXjvW1qMpGS1LZVqr%252Bh8mu2luxVUlrh%252BUX [TRUNCATED]
2024-05-23 13:51:11 UTC	616	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:11 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Sat, 30 Dec 2023 22:32:08 GMT x-rgw-object-type: Normal ETag: "fc94fb0c3ed8a8f909dbc7630a0987ff" x-amz-request-id: tx00000b79ebde3cf115971-0065909fa8-5134150-nyc X-77-NZT: A5ySIYg3Nzf/eOsDACUTwjE3Nzexz9PUZl7O7AA X-77-NZT-Ray: f6587a1d21f4d9a1cf494f6681e83d32 X-77-Cache: HIT Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Accel-Expires: @1717252183 X-Accel-Date: 1716215383 X-Cache: HIT X-Age: 256888 X-77-POP: frankfurtDE X-77-Age: 256888 Accept-Ranges: bytes
2024-05-23 13:51:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	50102	142.250.185.226	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	517	OUT	GET /pixel?google_nid=bluekai&google_cm&google_sc&google_hm=ckxSTXZUSGQ5OU9HeEEyWg%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:12 UTC	661	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://tags.bluekai.com/site/2981?id=&google_gid=CAESEJruwB3RBe8qRZc-bh9qe3k&google_cver=1 Date: Thu, 23 May 2024 13:51:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 296 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:12 UTC	296	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 32 39 38 31 3f 69 64 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 4a 72 75 77 42 33 52 42 65 38 71 52 5a 63 2d 62 68 39 71 65 33 6b 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://tags.bluekai.com/site/2981?id=&google_gid=CAESEJruwB3RBe8qRZc-bh9qe3k&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	50107	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 2065 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:11 UTC	2065	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:11 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	50094	37.252.171.21	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	649	OUT	GET /getuid?https://c1.adform.net/serving/cookie/match?party=3&id=$UID&redirect=1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	1511	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:11 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc1.adform.net%2Fserving%2Fcookie%2Fmatch%3Fparty%3D3%26id%3D%24UID%26redirect%3D1 AN-X-Request-Uuid: 887d77d8-d430-4a18-8cf8-d26a12f25bfa Set-Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:11 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:11 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:11 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	50097	46.228.174.117	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	655	OUT	GET /usersync/bidswitch/9326d0b9-3a0d-4d01-bbb3-688e8f328e75?gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	641	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 13:51:12 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D; path=/; expires=Fri, 23 May 2025 13:51:12 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync/bidswitch/9326d0b9-3a0d-4d01-bbb3-688e8f328e75?zcc=1&cb=1716472272007 etag: RX19036548604e400a8f7c3c0534f34a8e003 connection: close
2024-05-23 13:51:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	50106	139.162.185.124	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	386	OUT	GET /?_cmsrc=adformx&idt=100&did=6252180897247519748 HTTP/1.1 Host: cm.adsafety.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 13:51:12 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close
2024-05-23 13:51:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	50099	52.218.44.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	612	OUT	GET /adality-cdn-content/pixel.gif HTTP/1.1 Host: s3-eu-west-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	374	IN	HTTP/1.1 200 OK x-amz-id-2: YA/fhdWmZlJRbbxguMwotEgbL/tgQ2PQq+FEQofRLyZ2tiZS2A3bdGGBAdvD8dSI+gVO4v7kca0= x-amz-request-id: 87PEDQ0ZD00P4STB Date: Thu, 23 May 2024 13:51:13 GMT Last-Modified: Thu, 29 Oct 2015 16:41:57 GMT ETag: "c2196de8ba412c60c22ab491af7b1409" Accept-Ranges: bytes Content-Type: image/gif Server: AmazonS3 Content-Length: 35 Connection: close
2024-05-23 13:51:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	50103	52.57.150.20	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:11 UTC	452	OUT	GET /match/bounce/?uid=6252180897247519748&bid=9gdtmu1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa5b84457-17050000010f5454; SERVERID=21588~DM
2024-05-23 13:51:12 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=21588~DM; Domain=eyeota.net; Path=/; Expires=Thu, 23 May 2024 14:01:12 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Thu, 23 May 2024 13:51:12 GMT
2024-05-23 13:51:12 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	50108	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	951	OUT	POST /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Content-Length: 37 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: bearer e8a59e45996cead00c71c0093304a0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:12 UTC	37	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 65 6e 22 7d Data Ascii: {"url":"https://www.spglobal.com/en"}
2024-05-23 13:51:12 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:12 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow etag: W/"e00-UQmDY9qLYZ5Nt6UCwN8iJWYEwus" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584f4bda16a5b-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:12 UTC	685	IN	Data Raw: 65 30 30 0d 0a 5b 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 66 66 65 33 66 32 63 33 2d 65 30 66 63 2d 34 32 62 30 2d 61 61 61 32 2d 62 66 32 34 63 31 39 63 65 65 34 62 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 76 2e 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 2f 65 6e 2f 63 61 6d 70 61 69 67 6e 73 2f 63 6f 6d 6d 65 72 63 69 61 6c 2d 6c 65 6e 64 69 6e 67 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 72 65 71 75 65 73 74 46 6f 72 6d 5f 65 6d 62 65 64 64 65 64 5f 32 27 5d 22 2c 22 66 6f 72 6d 49 66 72 61 6d 65 57 72 61 70 70 65 72 53 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 Data Ascii: e00[{"inputs":null,"formId":"ffe3f2c3-e0fc-42b0-aaa2-bf24c19cee4b","url":"https://dev.www.spglobal.com/marketintelligence/en/campaigns/commercial-lending","selector":"form[id='requestForm_embedded_2']","formIframeWrapperSelector":null,"isManual":true,"s
2024-05-23 13:51:12 UTC	1369	IN	Data Raw: 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 34 66 66 65 65 64 38 66 2d 31 63 30 63 2d 34 39 30 37 2d 62 36 37 33 2d 66 30 62 62 33 38 31 39 65 36 36 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 67 65 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 70 67 6c 6f 62 61 6c 2f 63 6f 72 70 6f 72 61 74 65 2f 75 73 2f 65 6e 2d 74 65 73 74 2f 66 6f 72 6d 73 2d 74 65 73 74 69 6e 67 2e 68 74 6d 6c 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 67 75 69 64 65 43 6f 6e 74 61 69 6e 65 72 46 6f 72 6d 27 5d 22 2c 22 66 6f 72 6d 49 66 Data Ascii: formLoadTimeout":4000},"isDevelopmentMode":false},{"inputs":null,"formId":"4ffeed8f-1c0c-4907-b673-f0bb3819e66e","url":"https://stage.spglobal.com/content/spglobal/corporate/us/en-test/forms-testing.html","selector":"form[id='guideContainerForm']","formIf
2024-05-23 13:51:12 UTC	1369	IN	Data Raw: 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 43 69 74 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 69 74 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 69 65 6c 64 22 3a 22 63 6f 6e 74 61 63 74 43 69 74 79 22 2c 22 61 74 74 72 53 65 6c 65 63 74 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 Data Ascii: or":"name"},{"complete":false,"nameAttr":"City","displayName":"City","elementType":"input","mappedField":"contactCity","attrSelector":"name"},{"complete":false,"nameAttr":"complianceCountry","displayName":"complianceCountry","elementType":"input","mappedF
2024-05-23 13:51:12 UTC	168	IN	Data Raw: 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 61 6d 65 4d 61 70 70 69 6e 67 4f 74 68 65 72 50 61 67 65 73 22 3a 74 72 75 65 2c 22 61 64 64 69 74 69 6f 6e 61 6c 53 65 74 74 69 6e 67 73 22 3a 7b 22 6e 6f 46 6f 63 75 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 45 6d 61 69 6c 56 65 72 69 66 79 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 5d 0d 0a Data Ascii: tor":null,"isManual":true,"sameMappingOtherPages":true,"additionalSettings":{"noFocus":false,"noEmailVerify":false,"formLoadTimeout":4000},"isDevelopmentMode":false}]
2024-05-23 13:51:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	50105	54.77.98.227	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	469	OUT	GET /map/ct=y/c=6466/tp=ADFM/tpid=6252180897247519748/gdpr=/gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
2024-05-23 13:51:12 UTC	313	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:12 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.3.89 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-23 13:51:12 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	50119	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	635	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:12 UTC	570	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:12 GMT Content-Length: 0 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888584f69ba5c481-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	50114	18.65.39.64	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	542	OUT	GET /data.js?rnd=62fe5c0e6ad95 HTTP/1.1 Host: tags.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	810	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 36801 Connection: close Last-Modified: Thu, 16 May 2024 15:18:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 3UgkqRNMVlhsjmEQXKndI4WYIM8oGRsR Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 23 May 2024 13:36:37 GMT ETag: "55e11e01d3474d5bc19d85efaa1648ce" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9500c58b11c15528d15f2ca9add5bc00.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS1-P1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: z4IyG6Iktces2ONy5mvnS2tGXTTDMAOdn_94KwWGKrUWw13MmuuSEA== Age: 1315 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-05-23 13:51:12 UTC	15574	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 69 66 28 65 5b 61 5d 29 72 65 74 75 72 6e 20 65 5b 61 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 65 5b 61 5d 3d 7b 69 3a 61 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 61 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 69 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 65 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 69 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 61 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function i(a){if(e[a])return e[a].exports;var n=e[a]={i:a,l:!1,exports:{}};return t[a].call(n.exports,n,n.exports,i),n.l=!0,n.exports}i.m=t,i.c=e,i.d=function(t,e,a){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},i.r=fun
2024-05-23 13:51:12 UTC	16384	IN	Data Raw: 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 74 68 69 73 2e 65 72 72 6f 72 3d 61 2e 6c 6f 67 28 22 43 6c 69 63 6b 61 67 79 20 45 72 72 6f 72 20 5b 41 64 47 65 6e 65 72 61 74 6f 72 5d 3a 20 22 29 7d 6c 65 74 20 72 2c 73 2c 63 2c 64 2c 6c 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 41 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 74 68 69 73 2c 6f 3d 22 63 6f 75 6e 74 3d 33 26 61 63 63 6f 75 6e 74 5f 69 64 3d 22 2b 61 2e 65 6e 63 6f 64 65 55 72 69 28 74 68 69 73 2e 61 63 63 6f 75 6e 74 5f 69 64 29 3b 6f 3d 6f 2e 63 6f 6e 63 61 74 28 22 26 75 3d 22 2b 61 2e 65 6e 63 6f 64 65 55 72 69 28 74 68 69 73 2e 75 72 6c 29 29 2c 74 68 69 73 2e 72 65 71 75 65 73 74 4e 61 74 69 76 65 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: ply(e,arguments)},this.error=a.log("Clickagy Error [AdGenerator]: ")}let r,s,c,d,l;o.prototype.loadAd=function(t,e){var i,n=this,o="count=3&account_id="+a.encodeUri(this.account_id);o=o.concat("&u="+a.encodeUri(this.url)),this.requestNative(o,(function(a)
2024-05-23 13:51:12 UTC	4843	IN	Data Raw: 69 73 4e 61 4e 28 61 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 26 26 28 61 2b 3d 22 70 78 22 29 2c 21 69 73 4e 61 4e 28 69 29 26 26 69 73 46 69 6e 69 74 65 28 69 29 26 26 28 69 2b 3d 22 70 78 22 29 2c 72 2e 6d 61 72 67 69 6e 48 65 69 67 68 74 3d 22 30 22 2c 72 2e 6d 61 72 67 69 6e 57 69 64 74 68 3d 22 30 22 2c 72 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 61 2c 72 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 69 2c 72 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 46 46 46 22 2c 72 Data Ascii: isNaN(a)&&isFinite(a)&&(a+="px"),!isNaN(i)&&isFinite(i)&&(i+="px"),r.marginHeight="0",r.marginWidth="0",r.style.width=a,r.style.height=i,r.style.padding="0px",r.style.margin="0px",r.style.border="0px",r.style.borderWidth="0px",r.style.borderColor="#FFF",r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	50109	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	638	OUT	GET /core/assets/css/39.eeb001f3.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2783 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:08 GMT Last-Modified: Mon, 29 Apr 2024 20:23:48 GMT ETag: "87532c4db85f1429fa6d759bc3332f36" x-amz-server-side-encryption: AES256 x-amz-version-id: .yjHQG8nnQArx4qSD.wcrxflf0gmmjSp Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 171bb757dbace2edc36bdddbfaf7e13c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: l4TlAdqzyd8fkaLFMh6HzzltpPWcL9p-bUouubMlHZQC9SMRRBwK4w== Age: 1978744
2024-05-23 13:51:12 UTC	2783	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 7b 77 69 64 74 68 3a 32 38 70 78 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 3e 63 69 72 63 6c 65 7b 66 69 6c 6c 3a 23 34 37 34 36 34 37 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 20 63 69 72 63 6c 65 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 Data Ascii: .drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	50121	35.244.159.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	447	OUT	GET /w/1.0/sd?cc=1&id=537113484&val=6252180897247519748 HTTP/1.1 Host: eu-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
2024-05-23 13:51:12 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 13:51:12 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	50112	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	956	OUT	GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 8798 Connection: close Server: istio-envoy Date: Sun, 24 Sep 2023 12:40:47 GMT Last-Modified: Fri, 22 Sep 2023 19:55:09 GMT ETag: "c5efcdc9e465604f32cf24af10fd6c13" x-amz-server-side-encryption: AES256 x-amz-version-id: PzO6bH1zle7yWAMh.GAjW87C3Cbitz98 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 25 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fbd6f3355665969685cfc6020598488c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: c2zLA5J4kCSBu551JOmfspND9i_2yedG2T27CG5GxauX1RreuxW0UQ== Age: 20913025
2024-05-23 13:51:12 UTC	8798	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 4c 61 47 41 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 64 65 78 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 3b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 5b 30 5d 3d 3d 3d 74 26 26 28 6e 3d 72 2c 21 30 29 7d 29 2c 6e 7d 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	50111	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	957	OUT	GET /core/assets/js/32.1bf39f41.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 27881 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:08 GMT Last-Modified: Mon, 29 Apr 2024 20:23:50 GMT ETag: "366dc41e5e2b72c8c3e73fbe8ddbfcae" x-amz-server-side-encryption: AES256 x-amz-version-id: Z5TshXN7pimRcvog09MNoi8s5PqNzytT Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 171bb757dbace2edc36bdddbfaf7e13c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: EuvydbsK9tQDQ9whgHtq1q36Xq1h-hP9QlHVxxcijVMt6CYjZXHTVg== Age: 1978744
2024-05-23 13:51:12 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 32 5d 2c 7b 22 33 37 58 6a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 6d 61 6b 65 46 6c 61 74 7d 29 3b 76 61 72 20 72 3d 6e 28 22 77 42 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 6d 61 6b 65 46 6c 61 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 66 6c 61 74 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 69 2c 73 3d 5b 5d 2c 61 3d 30 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 61 3c 63 3b 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 2e 61 29 28 74 5b 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[32],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a
2024-05-23 13:51:12 UTC	10193	IN	Data Raw: 74 72 75 63 74 6f 72 3d 3d 3d 41 72 72 61 79 42 75 66 66 65 72 29 72 65 74 75 72 6e 20 74 28 74 68 69 73 2e 62 69 6e 61 72 79 44 65 63 6f 64 65 28 65 29 29 3b 76 61 72 20 6e 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 2c 6f 3d 4f 62 6a 65 63 74 28 72 2e 61 29 28 6e 2c 35 29 3b 72 65 74 75 72 6e 20 74 28 7b 6a 6f 69 6e 5f 72 65 66 3a 6f 5b 30 5d 2c 72 65 66 3a 6f 5b 31 5d 2c 74 6f 70 69 63 3a 6f 5b 32 5d 2c 65 76 65 6e 74 3a 6f 5b 33 5d 2c 70 61 79 6c 6f 61 64 3a 6f 5b 34 5d 7d 29 7d 2c 62 69 6e 61 72 79 45 6e 63 6f 64 65 3a 66 75 6e 63 74 69 6f 6e 20 62 69 6e 61 72 79 45 6e 63 6f 64 65 28 65 29 7b 76 61 72 20 74 3d 65 2e 6a 6f 69 6e 5f 72 65 66 2c 6e 3d 65 2e 72 65 66 2c 72 3d 65 2e 65 76 65 6e 74 2c 6f 3d 65 2e 74 6f 70 69 63 2c 69 3d 65 2e 70 61 79 6c 6f Data Ascii: tructor===ArrayBuffer)return t(this.binaryDecode(e));var n=JSON.parse(e),o=Object(r.a)(n,5);return t({join_ref:o[0],ref:o[1],topic:o[2],event:o[3],payload:o[4]})},binaryEncode:function binaryEncode(e){var t=e.join_ref,n=e.ref,r=e.event,o=e.topic,i=e.paylo
2024-05-23 13:51:12 UTC	2297	IN	Data Raw: 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 68 65 61 72 74 62 65 61 74 54 69 6d 65 6f 75 74 28 29 7d 2c 74 68 69 73 2e 68 65 61 72 74 62 65 61 74 49 6e 74 65 72 76 61 6c 4d 73 29 29 7d 7d 2c 7b 6b 65 79 3a 22 66 6c 75 73 68 53 65 6e 64 42 75 66 66 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 66 6c 75 73 68 53 65 6e 64 42 75 66 66 65 72 28 29 7b 74 68 69 73 2e 69 73 43 6f 6e 6e 65 63 74 65 64 28 29 26 26 74 68 69 73 2e 73 65 6e 64 42 75 66 66 65 72 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 73 65 6e 64 42 75 66 66 65 72 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 2c 74 68 69 73 2e 73 65 6e 64 42 75 66 66 65 72 3d 5b 5d 29 7d 7d 2c Data Ascii: =setTimeout(function(){return e.heartbeatTimeout()},this.heartbeatIntervalMs))}},{key:"flushSendBuffer",value:function flushSendBuffer(){this.isConnected()&&this.sendBuffer.length>0&&(this.sendBuffer.forEach(function(e){return e()}),this.sendBuffer=[])}},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	50110	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	622	OUT	GET /core/assets/js/39.f1d268f5.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3114 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:27 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "b5201ff04da30312910b71e1da072dd2" x-amz-server-side-encryption: AES256 x-amz-version-id: uVEyZ5tRXLdtqtE229DGMUJWzGeJV7TR Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9eea50524ba9fbd8bbcad3e7048d3dac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: _K4vX46SF4Sh8cmXoJZKIaVpNINALnup_gU5Y716uMq5ieVucM_6ug== Age: 6535665
2024-05-23 13:51:12 UTC	3114	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 5d 2c 7b 22 32 41 4f 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 63 3d 61 28 22 6d 6a 32 4f 22 29 2c 6e 3d 61 2e 6e 28 63 29 2c 72 3d 61 28 22 37 53 4d 31 22 29 2c 69 3d 61 28 22 52 71 77 78 22 29 2c 6c 3d 61 28 22 51 74 6c 5a 22 29 2c 6f 3d 61 28 22 4d 79 38 55 22 29 2c 73 3d 61 28 22 42 6a 72 65 22 29 2c 75 3d 61 28 22 49 4c 51 46 22 29 2c 64 3d 61 28 22 4b 37 69 30 22 29 2c 66 3d 61 28 22 45 52 6b 50 22 29 2c 62 3d 61 2e 6e 28 66 29 2c 70 3d 61 28 22 75 44 66 49 22 29 2c 6d 3d 61 28 22 41 44 47 43 22 29 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	50115	198.47.127.205	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	672	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=6252180897247519748 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 13:51:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-6252180897247519748&KRTB&23263-6252180897247519748&KRTB&23481-6252180897247519748; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 13:51:11 GMT; path=/ Set-Cookie: PugT=1716472271; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 13:51:11 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 13:51:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	50116	52.222.214.118	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	581	OUT	GET /cs HTTP/1.1 Host: pdw-adf.userreport.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:12 UTC	385	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 13:51:12 GMT Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Server: nginx/1.24.0 X-Cache: Miss from cloudfront Via: 1.1 f3e00d74aa4544d776f78a159416d17a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P3 X-Amz-Cf-Id: D2JpyMDvl5JXvBkrsIdu_-C31r4rgbnMoZqmRWZLKTjWiJF29DnVOQ==
2024-05-23 13:51:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	50124	37.252.171.21	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	874	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fc1.adform.net%2Fserving%2Fcookie%2Fmatch%3Fparty%3D3%26id%3D%24UID%26redirect%3D1 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572
2024-05-23 13:51:13 UTC	1450	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://c1.adform.net/serving/cookie/match?party=3&id=3507891500191884572&redirect=1 AN-X-Request-Uuid: 4c56f45b-12e6-4b88-ad20-f56e5c58b8e5 Set-Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:12 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:12 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:12 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	50125	108.128.197.68	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	784	OUT	GET /ibs:dpid=1586&dpuuid=6252180897247519748&redir=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1007%26cid%3D%24%7BDD_UUID%7D%26noredirect%3D1 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=65333287272203360842745703209020999402
2024-05-23 13:51:13 UTC	956	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:12 GMT Content-Length: 0 Connection: close X-TID: LtmNAtMRRRI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://c1.adform.net/serving/cookie/match?party=1007&cid=65333287272203360842745703209020999402&noredirect=1 DCS: dcs-prod-irl1-2-v061-0bba5b8dc.edge-irl1.demdex.com 2 ms set-cookie: dpm=65333287272203360842745703209020999402; Max-Age=15552000; Expires=Tue, 19 Nov 2024 13:51:12 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=65333287272203360842745703209020999402; Max-Age=15552000; Expires=Tue, 19 Nov 2024 13:51:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	50123	18.172.103.101	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:12 UTC	531	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:13 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 12157 Connection: close Last-Modified: Mon, 20 May 2024 07:02:23 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 23 May 2024 07:07:58 GMT ETag: "a60a4e2650f94da6f243b9518761b381" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d60e84ebd0183f97f50eb1677fb4b7be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: X4efRuyveJRXp60wHq8pzjLVHa25kEPiHT6ofDIq63T3LhrTo1ctjw== Age: 24195
2024-05-23 13:51:13 UTC	12157	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 6c 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 73 3d 6c 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 6c 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const l=["debug","info","warn","error"];let s=l.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=l.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	50127	46.228.174.117	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	735	OUT	GET /usersync/bidswitch/9326d0b9-3a0d-4d01-bbb3-688e8f328e75?zcc=1&cb=1716472272007 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
2024-05-23 13:51:13 UTC	313	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 13:51:13 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 connection: close
2024-05-23 13:51:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	50128	3.65.80.227	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	625	OUT	GET /adscores/g.pixel?sid=9212269628&_puid=6252180897247519748 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:13 UTC	716	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:13 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A4HQI6oJZtTgiuGR4djSvMxQZPxapYawk; Path=/; Domain=.agkn.com; Expires=Fri, 23-May-2025 13:51:13 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://dmp.adform.net/serving/cookie/match/?party=1014&cid=217163104891002579221
2024-05-23 13:51:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	50130	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	1044	OUT	GET /core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=29685749-a200-4e71-bbe5-055ace8a158d&sessionStarted=1716472271.413&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472259218&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:13 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 7c46840615f4a9403945d2fc5f3f0502.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: 58Ujbl-ZW7ZxYC6LQHsunYxGuKyxhvhG48fR4YgabK_h6786tBKcPA==
2024-05-23 13:51:14 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	50129	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	752	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:13 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 469dc5bcdade6fbc3eb82a70fb41aeea.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: CWgP5J5yzjA9_lb0AkPwzz-yhhQ8X16tOAU_xcH_iGeOErx-Zs1C2w==
2024-05-23 13:51:14 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	50133	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	623	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:13 UTC	217	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 32 34 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 33 39 36 37 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 65 6e 26 61 63 63 6f 75 6e 74 5f 69 64 3d 6d 78 32 38 6f 36 32 75 7a 71 62 62 66 26 6c 69 73 74 3d 39 35 76 35 32 67 32 78 76 63 36 71 67 26 63 68 3d 32 37 38 26 63 6d 3d 61 63 37 34 36 61 30 37 31 36 62 35 31 65 36 37 33 38 31 37 31 37 31 36 34 37 32 32 35 34 26 63 73 3d 66 61 6c 73 65 Data Ascii: ws=1&lang=en-US&cookies=true&tz=240&screen_res=1280x1024&browser_res=1280x3967&ref=&url=https%3A%2F%2Fwww.spglobal.com%2Fen&account_id=mx28o62uzqbbf&list=95v52g2xvc6qg&ch=278&cm=ac746a0716b51e6738171716472254&cs=false
2024-05-23 13:51:13 UTC	882	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:13 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 39e965e6e4d1 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://www.spglobal.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:37 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:37 GMT; SameSite=None; Secure
2024-05-23 13:51:13 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	50134	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	606	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:13 UTC	904	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:13 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://aa.agkn.com/adscores/g.pixel?sid=9212289188&_puid=Zk9J0WKLLYCxiR0_W-siGM2w&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D set-cookie: cb=Zk9J0WKLLYCxiR0_W-siGM2w; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:37 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	50135	52.59.78.67	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	688	OUT	GET /ping_match.gif?st=adform&rurl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1084%26cid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	663	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 23 May 2024 13:51:13 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&st=adform&rurl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1084%26cid%3D_wfivefivec_ Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-001c45a0648e2a03d@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=UvkZkbdd1Sa8QF5; Domain=.w55c.net; Expires=Sun, 22 Jun 2025 23:51:13 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	50132	85.114.159.118	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	697	OUT	GET /cookie/?redirect=https%3A%2F%2Fdmp.adform.net%2Fserving%2Fcookie%2Fmatch%2F%3Fparty%3D1049%26cid%3D%25%25COOKIE%25%25 HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	451	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 23 May 2024 13:51:13 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7372192277053438112; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://dmp.adform.net/serving/cookie/match/?party=1049&cid=7372192277053438112
2024-05-23 13:51:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	50149	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:13 UTC	612	OUT	GET /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:14 UTC	634	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 13:51:14 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885850119af435b-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:14 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	50143	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:14 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:14 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50146	3.33.220.150	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	772	OUT	GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	391	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:14 GMT Content-Length: 287 Connection: close server: Kestrel location: https://match.adsrvr.org/track/upb/?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1 set-cookie: TDID=ee1d19da-b392-4999-9970-4936ac51b124; expires=Fri, 23 May 2025 13:51:14 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:14 UTC	287	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 52 65 64 69 72 65 63 74 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 39 6f 35 39 33 71 77 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 65 6e 26 75 70 69 64 3d 62 32 62 6d 64 6a 32 26 75 70 76 3d 31 2e 31 2e 30 26 70 61 61 70 69 3d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 62 2f 3f 61 64 76 3d 39 6f 35 39 33 71 77 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 65 6e 26 75 70 69 64 3d 62 32 62 6d 64 6a 32 26 75 70 76 Data Ascii: <html><body>Redirect: <a href="https://match.adsrvr.org/track/upb/?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1">https://match.adsrvr.org/track/upb/?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50148	54.159.240.171	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	590	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	422	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:14 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://www.spglobal.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-05-23 13:51:14 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50152	185.64.191.210	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	568	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&piggybackCookie=6252180897247519748 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KRTBCOOKIE_391=22924-6252180897247519748&KRTB&23263-6252180897247519748&KRTB&23481-6252180897247519748; PugT=1716472271
2024-05-23 13:51:14 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 13:51:14 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-6252180897247519748&KRTB&23263-6252180897247519748&KRTB&23481-6252180897247519748; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 13:51:14 GMT; path=/ Set-Cookie: PugT=1716472274; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 13:51:14 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 13:51:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	50147	3.162.38.11	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	517	OUT	GET /1272.js HTTP/1.1 Host: js.idio.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	578	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 15200 Connection: close Date: Wed, 22 May 2024 16:50:30 GMT Last-Modified: Thu, 28 Mar 2024 15:55:50 GMT ETag: "3005f66b68e577af1dc37fac16aa04d4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 670b7fc2dd3052d71cc169230b289e08.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P6 X-Amz-Cf-Id: -434uDFsl5wZx1iiwSFIYYXPPhPdZuS02djeXMXNUR7ALuX_GEq34A== Age: 75645
2024-05-23 13:51:14 UTC	15200	IN	Data Raw: 2f 2a 20 32 30 32 34 2d 30 33 2d 32 38 20 2a 2f 66 75 6e 63 74 69 6f 6e 20 64 65 66 65 72 55 6e 74 69 6c 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 31 30 3b 61 28 29 3f 62 28 29 3a 63 3e 30 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 66 65 72 55 6e 74 69 6c 28 61 2c 62 2c 63 2d 31 29 7d 2c 35 30 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 57 69 74 68 45 78 70 69 72 79 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 7b 76 61 6c 75 65 3a 62 2c 65 78 70 69 72 79 3a 44 61 74 65 2e 6e 6f 77 28 29 2b 31 65 33 2a 63 7d 3b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 Data Ascii: /* 2024-03-28 /function deferUntil(a,b){var c=arguments.length>2&&void 0!==arguments[2]?arguments[2]:10;a()?b():c>0&&setTimeout(function(){deferUntil(a,b,c-1)},500)}function setWithExpiry(a,b,c){var d={value:b,expiry:Date.now()+1e3c};localStorage.setIte

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	50144	63.140.62.17	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	504	OUT	GET /ee/v1/interact?configId=a09783d4-f2df-4c99-9355-5ed608d27275&requestId=64b49639-6189-4d6f-8d44-3c9d847fb6d8 HTTP/1.1 Host: adobedc.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=65333287272203360842745703209020999402
2024-05-23 13:51:14 UTC	419	IN	HTTP/1.1 404 Not Found x-request-id: 64b49639-6189-4d6f-8d44-3c9d847fb6d8 vary: Origin date: Thu, 23 May 2024 13:51:14 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	50145	212.102.56.182	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	1806	OUT	GET /pixel.gif HTTP/1.1 Host: load77.exelator.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: EE="c4692e41261fd428073242b026cfe1d8"; udo="gAAAAAQAAASeKLUv%252FWCeA80YAHbrn0YQa6oOAAAAANwpAHBoQFQQwft5oMKaHdFoADBKsIEEKo%252Fpm7d9JtfX3KZRbr6brPiSeLf6aHCyLFpkVwwkK5luiGQ0PBZTjQCKAIwAHLdVPFISzWRMnmJoQrSNIj94WZfEAAQ1eTjyue6lNx6JHp9NiRFmeOjhswv1rD5nyvGY4uuyN7g7NmGKmh0LGHCV4Zgi%252F6SlyE1Sw2cMBj5Ea2pRLBhq7vQ%252FgNSXEjaS9WO%252FCbHh%252FyU%252Fm81mP%252BD%252FIxL8yMbcadSzEpHilyXicOioIPn%252FIJtWBeI%252B0xQC6huDWinJaWkZ4i4%252FeGOLlubt7XHd5m0gpjmGNdZTfdE%252BmhxNkYfkGb4%252BzgM3jMdtD%252Fy0b9uY3W3IjCGnbZSzpJOry60a6khNC%252FPkaPla25ZicnuswpQLpe1zbzVoTrNVoTrJ8jxDlQQqndp3%252FQAhywvTFD3Gcg6BX5OG3Mea7HxSToplBjnycNQCHSJERCrZRIRVxWKwasJWRUh9wpFv0pRrSNSVuuCaDs%252FY1BVQfNVxGDrEGDHeZrnszdJxls8C2ik5g%252FDkc6uDliK64pilhjw%252FduuhtdsaaHP74mnf5tjQ1u2N6xvsuJXyI2Ppob1to08y46NC9Wlgnp0aNWsOVCxDV9xNJ7j0rpRWdV857p0MIayrgtjfIeI%252F9h9kE9nEA4EHwYpgGgaXSHQKXlewUAhEw2SZpSUgVP7%252FQIAX8JKXSED4iQ2CGAoWNLFpI5kiNLHgR9qX%252FXBxtECLRuFAgdsRoJ6K2y9oOOGGh556ZHLfkgumMZJHLBg6lrKJyIY6xvLJtTGXjvW1qMpGS1LZVqr%252Bh8mu2luxVUlrh%252BUX [TRUNCATED]
2024-05-23 13:51:14 UTC	616	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close Last-Modified: Sat, 30 Dec 2023 22:32:08 GMT x-rgw-object-type: Normal ETag: "fc94fb0c3ed8a8f909dbc7630a0987ff" x-amz-request-id: tx00000c5cc302da9b09107-0065909fa7-5134150-nyc X-77-NZT: A9RmOLQ3Nzf/e+sDACUTwjE3Nzexz9PUZsL7wAA X-77-NZT-Ray: 6d204d11b8eb9b9cd2494f66cef71712 X-77-Cache: HIT Server: CDN77-Turbo Alt-Svc: h3=":443"; ma=86400 X-Accel-Expires: @1717252183 X-Accel-Date: 1716215383 X-Cache: HIT X-Age: 256891 X-77-POP: frankfurtDE X-77-Age: 256891 Accept-Ranges: bytes
2024-05-23 13:51:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	50140	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	973	OUT	GET /core/assets/css/27.b5e8f5e1.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8586 Connection: close Server: istio-envoy Date: Wed, 28 Feb 2024 20:52:41 GMT Last-Modified: Wed, 28 Feb 2024 20:09:21 GMT ETag: "e7107bc29ccb3c6d928f0f8f10a0f22d" x-amz-server-side-encryption: AES256 x-amz-version-id: zyzXY0HiUV0Kx0xDA0irOuT14sRG0uSI Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 049d2187ec4ec8f6312a4e2661cd4678.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: oqERslKq-_HKqlHE2PGWsfvJ05eF3BblZYofZRu5MTnShLT_AZN3mQ== Age: 7318713
2024-05-23 13:51:14 UTC	8586	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 38 37 38 38 32 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 2d 77 65 62 6b 69 74 2d Data Ascii: .drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	50142	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	973	OUT	GET /core/assets/css/25.c695453b.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=c5246ae4-fc21-4915-94ec-acc0358b72b0&sessionStarted=1716472258.183&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472231319&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	940	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 365 Connection: close Server: istio-envoy Date: Mon, 20 Nov 2023 08:20:01 GMT Last-Modified: Wed, 15 Nov 2023 22:15:44 GMT ETag: "06b2963b029c0824382815165bfea73e" x-amz-server-side-encryption: AES256 x-amz-version-id: W_e1jIKutz6IwniGA8CJPqCSr1LjF7ij Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 X-Cache: Hit from cloudfront Via: 1.1 3bbd9c639a192694d597e09ea3006bce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: xh6UxvgQRwhESi6QnZCQUaCmBej2YWlx4d96N4wdrbW8UFy0es-HLA== Age: 16003873
2024-05-23 13:51:14 UTC	365	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6e 74 72 6f 6c 6c 65 72 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 72 69 67 68 74 3a 31 32 70 78 3b 62 6f 74 74 6f 6d 3a 31 32 Data Ascii: .drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	50139	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	637	OUT	GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 7555 Connection: close Server: istio-envoy Date: Sun, 29 Oct 2023 13:39:25 GMT Last-Modified: Fri, 27 Oct 2023 17:57:46 GMT ETag: "189aeffd571884559dababa22c66d75a" x-amz-server-side-encryption: AES256 x-amz-version-id: a1UQUy.lLL7juXePcEcwVnAR0rnAtUUt Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 21 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c998e38ed4ce49918421e82943649a88.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: WKcY-60ks8-gPnipi83Z-BGDOLaC25HYxtO5JL320eTm6enMAaW9Zg== Age: 17885509
2024-05-23 13:51:14 UTC	7555	IN	Data Raw: 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2c 2e 65 6d 6f 6a 69 2d 6d 61 72 74 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 2e 65 6d 6f 6a 69 2d 6d 61 72 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 32 32 32 34 32 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 Data Ascii: .emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	50141	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	621	OUT	GET /core/assets/js/3.2a4c7561.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472231319 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 47358 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:28 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "2d79b64b95d2aa829a460e0d02cca148" x-amz-server-side-encryption: AES256 x-amz-version-id: Ij0e.e6AkWNNfAhEvnGK4qzljUH2ysS9 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f0503dd1ece22a88692fda1dd995e2e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: 8ZygomHbwmsomUTZMU_xOy-QsaABagnLf20V7cgu20mzPwSzAOIiFQ== Age: 6535666
2024-05-23 13:51:14 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 22 2f 6d 44 47 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 22 56 42 6c 42 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 6f 53 70 61 63 65 43 61 73 65 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 57 5f 5d 2b 28 2e 7c 24 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 20 22 2b 74 3a 22 22 7d 29 2e 74 72 69 6d 28 29 7d 7d 2c 22 2f 76 66 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defi
2024-05-23 13:51:14 UTC	16384	IN	Data Raw: 61 62 65 6c 3d 6f 5b 31 5d 2c 6f 3d 69 3b 62 72 65 61 6b 7d 69 66 28 6f 26 26 61 2e 6c 61 62 65 6c 3c 6f 5b 32 5d 29 7b 61 2e 6c 61 62 65 6c 3d 6f 5b 32 5d 2c 61 2e 6f 70 73 2e 70 75 73 68 28 69 29 3b 62 72 65 61 6b 7d 6f 5b 32 5d 26 26 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 3d 74 2e 63 61 6c 6c 28 65 2c 61 29 7d 63 61 74 63 68 28 6c 29 7b 69 3d 5b 36 2c 6c 5d 2c 6e 3d 30 7d 66 69 6e 61 6c 6c 79 7b 72 3d 6f 3d 30 7d 69 66 28 35 26 69 5b 30 5d 29 74 68 72 6f 77 20 69 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 69 5b 30 5d 3f 69 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 28 5b 69 2c 6c 5d 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 5f 72 65 61 64 28 65 2c 74 29 7b 76 61 Data Ascii: abel=o[1],o=i;break}if(o&&a.label<o[2]){a.label=o[2],a.ops.push(i);break}o[2]&&a.ops.pop(),a.trys.pop();continue}i=t.call(e,a)}catch(l){i=[6,l],n=0}finally{r=o=0}if(5&i[0])throw i[1];return{value:i[0]?i[1]:void 0,done:!0}}([i,l])}}}function __read(e,t){va
2024-05-23 13:51:14 UTC	15583	IN	Data Raw: 2c 69 2e 68 61 6e 64 6c 65 48 6f 72 69 7a 6f 6e 74 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 3d 69 2e 68 61 6e 64 6c 65 48 6f 72 69 7a 6f 6e 74 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 56 65 72 74 69 63 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 3d 69 2e 68 61 6e 64 6c 65 56 65 72 74 69 63 61 6c 54 68 75 6d 62 4d 6f 75 73 65 44 6f 77 6e 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 57 69 6e 64 6f 77 52 65 73 69 7a 65 3d 69 2e 68 61 6e 64 6c 65 57 69 6e 64 6f 77 52 65 73 69 7a 65 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 3d 69 2e 68 61 6e 64 6c 65 53 63 72 6f 6c 6c 2e 62 69 6e 64 28 69 29 2c 69 2e 68 61 6e 64 6c 65 44 72 61 67 3d 69 2e 68 61 6e 64 6c 65 44 Data Ascii: ,i.handleHorizontalThumbMouseDown=i.handleHorizontalThumbMouseDown.bind(i),i.handleVerticalThumbMouseDown=i.handleVerticalThumbMouseDown.bind(i),i.handleWindowResize=i.handleWindowResize.bind(i),i.handleScroll=i.handleScroll.bind(i),i.handleDrag=i.handleD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	50156	108.138.233.103	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	348	OUT	GET /cs HTTP/1.1 Host: pdw-adf.userreport.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	385	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 13:51:14 GMT Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Server: nginx/1.24.0 X-Cache: Miss from cloudfront Via: 1.1 bba99a59a85c763f7dd5d6e519a3dfbc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR61-P4 X-Amz-Cf-Id: cyDNkcpn1XTp2GdW9u7F_nqCteMHxZb866Eyv0IxgGo3Ucxb4CkZEQ==
2024-05-23 13:51:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50155	46.228.174.117	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	636	OUT	GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:14 UTC	387	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:14 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D; path=/; expires=Fri, 23 May 2025 13:51:14 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-05-23 13:51:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50151	52.218.100.51	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:14 UTC	379	OUT	GET /adality-cdn-content/pixel.gif HTTP/1.1 Host: s3-eu-west-1.amazonaws.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:15 UTC	374	IN	HTTP/1.1 200 OK x-amz-id-2: HCaRZPN080piLK0sJyWOn7k2l0zAUYq8PaKsWU8k/MgFt9DH4boIlWqpdrWPBkJ+HNw/fSKktQM= x-amz-request-id: 84E9VF1BT6AH8K34 Date: Thu, 23 May 2024 13:51:15 GMT Last-Modified: Thu, 29 Oct 2015 16:41:57 GMT ETag: "c2196de8ba412c60c22ab491af7b1409" Accept-Ranges: bytes Content-Type: image/gif Server: AmazonS3 Content-Length: 35 Connection: close
2024-05-23 13:51:15 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50158	34.252.112.229	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:15 UTC	772	OUT	GET /adscores/g.pixel?sid=9212289188&_puid=Zk9J0WKLLYCxiR0_W-siGM2w&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A4HQI6oJZtTgiuGR4djSvMxQZPxapYawk
2024-05-23 13:51:15 UTC	804	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:15 GMT Transfer-Encoding: chunked Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3A4HQI6oJZtTgiuGR4djSvMxQZPxapYawk; Path=/; Domain=.agkn.com; Expires=Fri, 23-May-2025 13:51:15 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://d.agkn.com/pixel/10751/?che=1716472275220&ip=8.46.123.175&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D217163104891002579221
2024-05-23 13:51:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50161	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:15 UTC	616	OUT	GET /track/cmf/generic?ttd_pid=71ei9rr&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:15 UTC	479	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:15 GMT Content-Length: 167 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=71ei9rr&ttd_tpi=1 set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI2OPb0cTO_TwQBTgB; expires=Fri, 23 May 2025 13:51:15 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:15 UTC	167	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 37 31 65 69 39 72 72 26 74 74 64 5f 74 70 69 3d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 37 31 65 69 39 72 72 26 74 74 64 5f 74 70 69 3d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=71ei9rr&ttd_tpi=1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=71ei9rr&ttd_tpi=1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	50159	23.20.26.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:15 UTC	429	OUT	GET /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"}]
2024-05-23 13:51:15 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:15 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:39 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:15 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50169	35.190.24.218	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:15 UTC	704	OUT	GET /redirect/standard?url=https%3A%2F%2Fdmp.adform.net%2Fserving%2Fcookie%2Fmatch%2F%3Fparty%3D1145%26cid%3D%7BWEBO_CID%7D HTTP/1.1 Host: redirect.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	837	IN	HTTP/1.1 307 Temporary Redirect Server: Weborama Collect Frontend Date: Thu, 23 May 2024 13:51:15 GMT Content-Length: 0 Location: https://redirect.frontend.weborama.fr/redirect/standard?url=https%3A%2F%2Fdmp.adform.net%2Fserving%2Fcookie%2Fmatch%2F%3Fparty%3D1145%26cid%3D%7BWEBO_CID%7D&bounce=1&random=3764634676 Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Thu, 23 May 2024 13:51:15 GMT Set-Cookie: AFFICHE_W=CaecarcOISEJ68; expires=Fri, 20 Jun 2025 13:51:15 GMT; domain=.weborama.fr; path=/; secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50166	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:15 UTC	859	OUT	GET /track/upb/?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSgCMgsI2OPb0cTO_TwQBTgB
2024-05-23 13:51:16 UTC	553	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:16 GMT Content-Type: text/html Content-Length: 938 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIYXBwbmV4dXMSCwjo5cGsrs79PBAFEhUKBmdvb2dsZRILCL6Dwqyuzv08EAUSFgoHcnViaWNvbhILCNqfwqyuzv08EAUYBSgDMgsI9sPE2cTO_TwQBUIPIg0IARIJCgV0aWVyMxABWgc5bzU5M3F3YAE.; expires=Fri, 23 May 2025 13:51:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:16 UTC	938	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50163	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	637	OUT	GET /core/assets/css/1.196b564b.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 45155 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:09 GMT Last-Modified: Mon, 29 Apr 2024 20:23:47 GMT ETag: "4896eb2b1d334fa2aafb779f16734b3d" x-amz-server-side-encryption: AES256 x-amz-version-id: CT684tK6K.KThb5CYt6HLBktmcULXRA6 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 49 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ccf3e60556af74328f117e2d57cba560.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: AO8JyUaT1Sxl3KmeTMqoeCmLe34miucykN6UAKruhgao5ZZUgJTAww== Age: 1978747
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6e 61 6b 65 64 2d 62 75 74 74 6f 6e 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 65 6d 6f 6a 69 2d 62 61 63 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 36 70 78 3b 74 6f 70 3a 2d 31 30 30 30 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f 6a 69 2d 70 69 63 6b 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 35 38 70 78 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d Data Ascii: .drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 73 65 6e 64 2d 62 75 74 74 6f 6e 29 3a 64 69 73 61 62 6c 65 64 7b 63 75 72 73 6f 72 3a 61 75 74 6f 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 20 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 73 65 6e 64 2d 62 75 74 74 6f 6e 29 3a 64 69 73 61 62 6c 65 64 3e 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 36 38 37 38 38 32 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 61 67 65 6e 74 2d 74 79 70 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 7b 70 6f 73 69 Data Ascii: -composer-actions button:not(.drift-widget-composer-send-button):disabled{cursor:auto}.drift-widget-composer-actions button:not(.drift-widget-composer-send-button):disabled>svg path{fill:#687882}.drift-widget-composer--default .agent-typing-indicator{posi
2024-05-23 13:51:16 UTC	12004	IN	Data Raw: 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 62 6f 74 3e 64 69 76 3e 70 7b 6d 61 72 67 69 6e 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 35 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 62 6f 78 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 48 54 4d 4c 20 69 66 72 61 6d 65 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 62 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 Data Ascii: widget-message--bot>div>p{margin:0;line-height:1.45}.drift-widget-message--box.drift-widget-message--HTML iframe{max-width:100%}.drift-widget-message--box{position:relative;-webkit-border-radius:10px;-moz-border-radius:10px;border-radius:10px;padding:8px
2024-05-23 13:51:16 UTC	383	IN	Data Raw: 74 6f 6e 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 72 61 74 65 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2d 2d 72 61 74 69 6e 67 2d 2d 73 65 6c 65 63 74 65 64 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 63 75 72 73 6f 72 3a 6e 6f 6e 65 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 72 61 74 65 2d 63 6f 6e 76 65 72 73 61 74 69 6f 6e 2d 2d 63 6f 6d 70 6f 73 65 72 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 39 70 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 Data Ascii: ton.drift-widget-rate-conversation--rating--selected{-webkit-transform:scale(1);-moz-transform:scale(1);-ms-transform:scale(1);-o-transform:scale(1);transform:scale(1);cursor:none}.drift-widget-rate-conversation--composer{padding-bottom:19px}.drift-widget

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50165	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	638	OUT	GET /core/assets/css/28.812d5a7c.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 16436 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:27 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "6f779260053e30787f84dfa7ba6743e5" x-amz-server-side-encryption: AES256 x-amz-version-id: 4DKwArnsEad_45FTV7lDarWR0I2cfneh Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 940363b5827b3bf7b877f66b1584003e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: qtf_qTKyjuGMybBqQAQ5TIC7RV4vWlBSigv-pBu_OAtqiP6tto9lwg== Age: 6535669
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 32 30 32 31 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 33 70 78 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 38 70 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2c 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 7d 2e 64 72 69 66 74 2d 77 Data Ascii: .drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-w
2024-05-23 13:51:16 UTC	52	IN	Data Raw: 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d Data Ascii: orm:translateX(0);transform:translateX(0);opacity:1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50168	162.19.138.83	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	604	OUT	GET /s/10/0.gif?puid=6252180897247519748 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	1412	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#1; Max-Age=300; Expires=Thu, 23-May-2024 13:56:16 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/10/10/2/1.gif?puid=6252180897247519748&gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Thu, 23 May 2024 13:51:15 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-23 13:51:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50162	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	621	OUT	GET /core/assets/js/1.8afeb691.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 74516 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:08 GMT Last-Modified: Mon, 29 Apr 2024 20:23:49 GMT ETag: "8105bbc539c669095d01380da7335b29" x-amz-server-side-encryption: AES256 x-amz-version-id: 1XR8kJZn5J6cJL6aDb8Hc4misAZVL_k2 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 26 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7e5d12e915857fb2d78e5869a77d7b1c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: xcZWXyhZ1O7FOTXDUmkhIuw9KLFF_njzVr88fuR7egumff3ZXOETng== Age: 1978747
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 47 5a 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 7d 2c 22 2b 71 47 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 69 6e 67 4d 65 73 73 61 67 65 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 65 64 4d 65 73 73 61 67 65 7d 29 3b 76 61 72 20 61 3d 6e 28 22 64 61 34 4c 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 65 3a 4f 2c 63 6c 61 73 73 4e 61 6d 65 3a 73 28 29 28 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 61 74 74 61 63 68 6d 65 6e 74 20 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 62 6f 78 22 2c 7b 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 61 74 74 61 63 68 6d 65 6e 74 2d 2d 6d 75 6c 74 69 22 3a 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 31 7d 29 7d 2c 6a 29 7d 29 2c 75 65 3d 28 6e 28 22 6d 51 32 43 22 29 2c 66 75 6e 63 74 69 6f 6e 20 55 6e 66 75 72 6c 4d 65 73 73 61 67 65 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 6e 66 75 72 6c 44 61 74 61 2c 6e 3d 65 2e 73 74 79 6c 65 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 2c 72 3d 65 2e 72 65 73 6f 6c 76 65 4d 65 73 73 61 67 65 48 65 69 67 68 74 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 66 75 6e 63 Data Ascii: e:O,className:s()("drift-widget-attachment drift-widget-message--box",{"drift-widget-attachment--multi":n&&n.length>1})},j)}),ue=(n("mQ2C"),function UnfurlMessage(e){var t=e.unfurlData,n=e.style,a=void 0===n?{}:n,r=e.resolveMessageHeight,i=void 0===r?func
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 76 61 72 20 74 3d 65 2e 61 72 69 61 4c 61 62 65 6c 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 22 3a 74 2c 72 3d 65 2e 61 72 69 61 4c 61 62 65 6c 6c 65 64 42 79 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 22 22 3a 72 2c 6c 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 75 3d 76 6f 69 64 20 30 3d 3d 3d 6c 3f 22 22 3a 6c 2c 64 3d 65 2e 68 74 6d 6c 46 6f 72 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 22 22 3a 64 3b 72 65 74 75 72 6e 20 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 61 62 65 6c 22 2c 7b 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 6e 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 6f 2c 63 6c 61 73 73 4e 61 6d 65 3a 69 28 29 28 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 2d 73 65 61 72 63 68 2d 6c 61 62 65 6c 22 2c 4f 62 6a 65 63 74 28 61 Data Ascii: var t=e.ariaLabel,n=void 0===t?"":t,r=e.ariaLabelledBy,o=void 0===r?"":r,l=e.className,u=void 0===l?"":l,d=e.htmlFor,f=void 0===d?"":d;return s.a.createElement("label",{"aria-label":n,"aria-labelledby":o,className:i()("drift-widget--search-label",Object(a
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 65 6e 64 54 79 70 69 6e 67 53 74 61 72 74 65 64 3a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 54 79 70 69 6e 67 53 74 61 72 74 65 64 28 29 7b 6f 28 29 2c 61 2e 63 75 72 72 65 6e 74 26 26 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 2e 63 75 72 72 65 6e 74 29 2c 61 2e 63 75 72 72 65 6e 74 3d 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 22 66 69 6e 69 73 68 65 64 22 29 7d 2c 35 65 33 29 7d 2c 73 65 6e 64 54 79 70 69 6e 67 46 69 6e 69 73 68 65 64 3a 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 54 79 70 69 6e 67 46 69 6e 69 73 68 65 64 28 29 7b 61 2e 63 75 72 72 65 6e 74 26 26 28 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 2e 63 75 72 72 65 6e 74 29 2c 61 2e 63 75 Data Ascii: endTypingStarted:function sendTypingStarted(){o(),a.current&&window.clearTimeout(a.current),a.current=window.setTimeout(function(){return c("finished")},5e3)},sendTypingFinished:function sendTypingFinished(){a.current&&(window.clearTimeout(a.current),a.cu
2024-05-23 13:51:16 UTC	8980	IN	Data Raw: 2d 77 69 64 67 65 74 2d 63 61 72 64 2d 68 65 61 64 65 72 22 2c 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 73 74 79 6c 65 3a 4f 62 6a 65 63 74 28 61 2e 61 29 28 4f 62 6a 65 63 74 28 61 2e 61 29 28 7b 7d 2c 74 29 2c 65 2e 73 74 79 6c 65 29 7d 29 2c 73 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 61 72 64 2d 68 65 61 64 65 72 2d 2d 63 6f 6e 74 65 6e 74 22 7d 2c 65 2e 63 68 69 6c 64 72 65 6e 29 29 7d 7d 2c 73 6c 59 50 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 73 38 44 49 22 29 2c 72 3d 6e 28 22 4f 39 34 72 22 29 2c 69 3d 6e 2e 6e 28 72 29 2c 63 3d 6e 28 22 72 6d 51 30 22 29 2c 6f 3d 6e 28 Data Ascii: -widget-card-header",e.className),style:Object(a.a)(Object(a.a)({},t),e.style)}),s.a.createElement("div",{className:"drift-widget-card-header--content"},e.children))}},slYP:function(e,t,n){"use strict";var a=n("s8DI"),r=n("O94r"),i=n.n(r),c=n("rmQ0"),o=n(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50164	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	914	OUT	GET /core/assets/js/27.530d2daf.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=29685749-a200-4e71-bbe5-055ace8a158d&sessionStarted=1716472271.413&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472259218&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 15387 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:08 GMT Last-Modified: Mon, 29 Apr 2024 20:23:50 GMT ETag: "361a8136f5c21c5c88c363cc5bc9c409" x-amz-server-side-encryption: AES256 x-amz-version-id: wANoGY3tG4HUKpg8kQ05G20bCARcKR3u Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 22 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f0503dd1ece22a88692fda1dd995e2e0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: BeLrOx5coWGQIAKpgY2ExFrr7PbTpnaO0a5x5ZdZ-3y3l9xMmEFCiw== Age: 1978748
2024-05-23 13:51:16 UTC	15387	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 5d 2c 7b 22 2b 4d 48 77 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 6e 28 22 45 52 6b 50 22 29 2c 6f 3d 6e 2e 6e 28 63 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 46 69 6c 6c 65 72 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 21 30 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 65 78 69 74 69 6e 67 20 64 72 69 66 74 20 77 69 64 67 65 74 22 2c 72 6f 6c 65 3a 22 62 75 74 74 6f 6e 22 2c 74 61 62 49 6e 64 65 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),o=n.n(c);t.a=function FillerElement(){return o.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50167	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	914	OUT	GET /core/assets/js/25.6f7efac1.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=29685749-a200-4e71-bbe5-055ace8a158d&sessionStarted=1716472271.413&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472259218&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94361 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:08 GMT Last-Modified: Mon, 29 Apr 2024 20:23:50 GMT ETag: "3078deff8baebb3a457dcb7148270388" x-amz-server-side-encryption: AES256 x-amz-version-id: CHPcsxrxKVZ50E.U4ee2FGcaTBT03XxZ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 25 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 195b923a1c82c96d843c757f80ce2a18.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: iJ_6DAgswsp7kQMDxQf3_gjl4czLMXBV-9l3fwTsJuR0OL3MIhQsTw== Age: 1978747
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 5d 2c 7b 22 31 6b 75 78 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 69 3d 6e 28 22 49 4c 51 46 22 29 2c 73 3d 6e 28 22 78 77 54 6f 22 29 2c 75 3d 6e 28 22 32 58 59 36 22 29 2c 6c 3d 6e 28 22 4c 56 63 58 22 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 65 69 67 68 74 22 7d 29 3b 63 61 73 65 20 32 30 3a 72 65 74 75 72 6e 20 4f 3d 63 2e 73 65 6e 74 2c 6a 3d 4f 2e 64 61 74 61 2c 6d 3d 7b 5f 77 69 6e 64 6f 77 3a 64 2c 76 69 73 69 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 3a 6e 2e 76 69 73 69 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 66 2c 67 65 6f 3a 6e 2e 67 65 6f 2c 65 6d 62 65 64 3a 74 2c 72 65 66 65 72 72 65 72 3a 67 2c 61 75 74 6f 41 73 73 69 67 6e 65 65 49 64 3a 6f 2c 73 63 72 6f 6c 6c 61 62 6c 65 48 65 69 67 68 74 3a 6a 2c 68 61 73 45 78 69 74 49 6e 74 65 6e 74 3a 72 2e 68 61 73 45 78 69 74 49 6e 74 65 6e 74 7d 2c 63 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6d 29 29 3b 63 61 73 65 20 32 34 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 Data Ascii: eight"});case 20:return O=c.sent,j=O.data,m={_window:d,visitInformation:n.visitInformation,cookies:f,geo:n.geo,embed:t,referrer:g,autoAssigneeId:o,scrollableHeight:j,hasExitIntent:r.hasExitIntent},c.abrupt("return",Promise.resolve(m));case 24:case"end":re
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 6e 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 6e 2e 70 72 65 76 3d 6e 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 66 28 21 74 68 69 73 2e 5f 72 75 6e 6e 69 6e 67 26 26 30 21 3d 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 6c 65 6e 67 74 68 29 7b 6e 2e 6e 65 78 74 3d 32 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 29 3b 63 61 73 65 20 32 3a 74 68 69 73 2e 5f 72 75 6e 6e 69 6e 67 3d 21 30 3b 63 61 73 65 20 33 3a 69 66 28 21 28 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 6c 65 6e 67 74 68 3e 30 29 29 7b 6e 2e 6e 65 78 74 3d 31 31 3b 62 72 65 61 6b 7d 69 66 28 65 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 73 68 69 66 74 28 29 2c 21 28 74 3d Data Ascii: nction _callee$(n){for(;;)switch(n.prev=n.next){case 0:if(!this._running&&0!==this._callbacks.length){n.next=2;break}return n.abrupt("return");case 2:this._running=!0;case 3:if(!(this._callbacks.length>0)){n.next=11;break}if(e=this._callbacks.shift(),!(t=
2024-05-23 13:51:16 UTC	14808	IN	Data Raw: 22 61 74 74 72 69 62 75 74 65 73 22 2c 22 70 6c 61 79 62 6f 6f 6b 49 64 22 5d 2c 62 29 2c 75 26 26 4f 62 6a 65 63 74 28 58 65 2e 63 29 28 22 46 6f 72 6d 20 44 61 74 61 20 53 75 62 6d 69 74 74 65 64 22 2c 7b 63 61 6d 70 61 69 67 6e 49 64 3a 6e 2c 70 6c 61 79 62 6f 6f 6b 49 64 3a 70 2c 65 6e 64 55 73 65 72 49 64 3a 6f 7d 29 2c 21 64 29 7b 63 2e 6e 65 78 74 3d 33 31 3b 62 72 65 61 6b 7d 69 66 28 4f 62 6a 65 63 74 28 76 74 2e 61 29 28 22 70 6f 73 74 5f 66 6f 72 6d 5f 74 61 6b 65 6f 76 65 72 5f 65 6e 72 6f 6c 6c 22 29 2c 21 4f 62 6a 65 63 74 28 57 2e 63 29 28 4f 62 6a 65 63 74 28 73 2e 62 29 28 29 29 29 7b 63 2e 6e 65 78 74 3d 32 30 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 65 6e 28 29 2c 63 2e 6e 65 78 74 3d 32 30 2c 4f 62 6a 65 63 74 28 58 2e 72 29 28 34 30 Data Ascii: "attributes","playbookId"],b),u&&Object(Xe.c)("Form Data Submitted",{campaignId:n,playbookId:p,endUserId:o}),!d){c.next=31;break}if(Object(vt.a)("post_form_takeover_enroll"),!Object(W.c)(Object(s.b)())){c.next=20;break}return en(),c.next=20,Object(X.r)(40
2024-05-23 13:51:16 UTC	16384	IN	Data Raw: 28 63 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 36 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 72 3b 72 65 74 75 72 6e 20 63 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 36 24 28 63 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 63 2e 70 72 65 76 3d 63 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 66 28 74 3d 65 2e 6f 72 67 49 64 2c 6e 3d 65 2e 61 75 74 68 2c 74 68 69 73 2e 63 61 6e 43 6f 6e 6e 65 63 74 28 29 29 7b 63 2e 6e 65 78 74 3d 33 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 63 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 6e 75 6c 6c 29 3b 63 61 73 65 20 33 3a 69 66 28 63 2e 74 30 3d 6e 2c 63 2e 74 30 29 7b 63 2e 6e 65 78 74 3d 38 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 63 2e 6e 65 78 74 Data Ascii: (c.a.mark(function _callee6(e){var t,n,a,r;return c.a.wrap(function _callee6$(c){for(;;)switch(c.prev=c.next){case 0:if(t=e.orgId,n=e.auth,this.canConnect()){c.next=3;break}return c.abrupt("return",null);case 3:if(c.t0=n,c.t0){c.next=8;break}return c.next
2024-05-23 13:51:16 UTC	14017	IN	Data Raw: 63 74 29 72 65 74 75 72 6e 21 31 3b 69 66 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 50 72 6f 78 79 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 44 61 74 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 44 61 74 65 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 28 6d 6e 2e 61 29 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 74 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6e 2c 61 72 67 75 Data Ascii: ct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(mn.a)(this).constructor;t=Reflect.construct(n,argu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50174	3.162.38.39	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	514	OUT	GET /ia.js HTTP/1.1 Host: s.idio.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	562	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 2176 Connection: close Last-Modified: Wed, 05 Aug 2020 11:08:42 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 23 May 2024 05:27:23 GMT Cache-Control: max-age=86400 ETag: "46727094ad49ed02b04a5f128b993736" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c47a2112f2ba11dfde1f02cf42a6b3f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: CDG52-P6 X-Amz-Cf-Id: tB-a86TluW4LqbFFoBvqXCRLBKWT7xZWixOTwZ7ERfhu0vxhk9tBwQ== Age: 38917
2024-05-23 13:51:16 UTC	2176	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 63 28 74 29 2c 6f 3d 6e 2e 67 65 74 28 29 7c 7c 5b 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 2e 72 65 70 6c 61 63 65 28 2f 5b 78 79 5d 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 3b 72 65 74 75 72 6e 28 22 78 22 3d 3d 74 3f 65 3a 33 26 65 7c 38 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 29 5d 3b 72 65 74 75 72 6e 20 6e 2e 73 65 74 28 6f 5b 30 5d 2c 65 29 2c 6f 7d 66 6f 72 28 76 61 72 20 6e 2c 69 3d 72 2e 68 6f 73 74 6e 61 6d 65 2c 61 3d 5b 22 22 Data Ascii: !function(t,o,r){"use strict";function e(t,e){var n=new c(t),o=n.get()\|\|["xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(t){var e=16*Math.random()\|0;return("x"==t?e:3&e\|8).toString(16)})];return n.set(o[0],e),o}for(var n,i=r.hostname,a=[""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50171	108.156.39.69	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	620	OUT	GET /c/?dspInit=1001213&dspCookie=6252180897247519748 HTTP/1.1 Host: s.ad.smaato.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	743	IN	HTTP/1.1 302 Moved Temporarily Content-Length: 0 Connection: close Server: CloudFront Date: Thu, 23 May 2024 13:51:16 GMT Cache-Control: no-cache, must-revalidate Set-Cookie: SCM=285cc7b641; Max-Age=1814400; Domain=.smaato.net; SameSite=None; Path=/; Secure Set-Cookie: SCMu=285cc7b641; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Set-Cookie: SCM1001213=285cc7b641; Max-Age=1814400; Domain=.smaato.net; Path=/; SameSite=None; Secure Location: https://sync.1rx.io/usersync/smaato/285cc7b641?gdpr=0&gdpr_consent= X-Cache: Miss from cloudfront Via: 1.1 76cca2ef798b9dc955bb151bf3bff218.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR50-P1 X-Amz-Cf-Id: 4va0LTzDrjWUus0n_TSzP9NLs7I8IykBgOgKNs3DhIlMrkL4UwyYpw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50172	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	622	OUT	GET /core/assets/js/28.9cf73a22.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472259218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 20426 Connection: close Server: istio-envoy Date: Tue, 30 Apr 2024 16:12:08 GMT Last-Modified: Mon, 29 Apr 2024 20:23:50 GMT ETag: "14bf45603d57315e67d3b3088e7cb089" x-amz-server-side-encryption: AES256 x-amz-version-id: BslVPcBO1jZCnM9aIcTprEx.BTqKwKWS Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 18 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0eff2818c4b79b630461542cc0251178.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: OOVcSwWcAz2ngN3WV2332FR15twX0jWblWAZ_pu_39t-GHrPBctYUA== Age: 1978747
2024-05-23 13:51:16 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 5d 2c 7b 22 31 53 63 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 52 65 66 6c 6f 77 46 72 61 6d 65 43 6c 61 73 73 4e 61 6d 65 7d 29 3b 76 61 72 20 72 3d 6e 28 22 73 38 44 49 22 29 2c 61 3d 6e 28 22 51 74 6c 5a 22 29 2c 63 3d 6e 28 22 49 4c 51 46 22 29 2c 6f 3d 6e 28 22 67 36 65 44 22 29 2c 73 3d 6e 28 22 4a 42 74 6d 22 29 2c 69 3d 6e 2e 6e 28 73 29 2c 75 3d 6e 28 22 45 52 6b 50 22 29 2c 6c 3d 6e 28 22 45 51 78 69 22 29 2c 66 3d 21 31 3b 66 75 6e 63 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;funct
2024-05-23 13:51:16 UTC	3797	IN	Data Raw: 2c 75 3d 65 2e 61 73 73 65 72 74 69 76 65 4d 65 73 73 61 67 65 49 64 3b 72 65 74 75 72 6e 20 6e 21 3d 3d 6f 7c 7c 72 21 3d 3d 73 3f 7b 70 6f 6c 69 74 65 4d 65 73 73 61 67 65 31 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3f 22 22 3a 6f 2c 70 6f 6c 69 74 65 4d 65 73 73 61 67 65 32 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3f 6f 3a 22 22 2c 6f 6c 64 50 6f 6c 69 74 65 6d 65 73 73 61 67 65 3a 6f 2c 6f 6c 64 50 6f 6c 69 74 65 4d 65 73 73 61 67 65 49 64 3a 73 2c 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3a 21 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 7d 3a 61 21 3d 3d 69 7c 7c 63 21 3d 3d 75 3f 7b 61 73 73 65 72 74 69 76 65 4d 65 73 73 61 67 65 31 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 Data Ascii: ,u=e.assertiveMessageId;return n!==o\|\|r!==s?{politeMessage1:t.setAlternatePolite?"":o,politeMessage2:t.setAlternatePolite?o:"",oldPolitemessage:o,oldPoliteMessageId:s,setAlternatePolite:!t.setAlternatePolite}:a!==i\|\|c!==u?{assertiveMessage1:t.setAlternate
2024-05-23 13:51:16 UTC	1238	IN	Data Raw: 72 4d 65 73 73 61 67 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 28 29 7b 74 68 69 73 2e 61 6e 6e 6f 75 6e 63 65 28 29 7d 2c 41 6e 6e 6f 75 6e 63 65 72 4d 65 73 73 61 67 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 28 65 29 7b 74 68 69 73 2e 70 72 6f 70 73 2e 6d 65 73 73 61 67 65 21 3d 3d 65 2e 6d 65 73 73 61 67 65 26 26 74 68 69 73 2e 61 6e 6e 6f 75 6e 63 65 28 29 7d 2c 41 6e 6e 6f 75 6e 63 65 72 4d 65 73 73 61 67 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 6e 6d 6f 75 6e Data Ascii: rMessage.prototype.componentDidMount=function componentDidMount(){this.announce()},AnnouncerMessage.prototype.componentDidUpdate=function componentDidUpdate(e){this.props.message!==e.message&&this.announce()},AnnouncerMessage.prototype.componentWillUnmoun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50179	54.92.244.178	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	421	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
2024-05-23 13:51:16 UTC	135	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:16 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close
2024-05-23 13:51:16 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50173	3.76.144.165	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	772	OUT	GET /pixel/10751/?che=1716472275220&ip=8.46.123.175&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D217163104891002579221 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3A4HQI6oJZtTgiuGR4djSvMxQZPxapYawk
2024-05-23 13:51:16 UTC	572	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 23 May 2024 13:51:15 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=128&cm=217163104891002579221 P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3A4HQI6oJZtTgiuGR4djSvMxQZPxapYawk;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0AAAAAAAALeIGVAAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50175	52.48.246.250	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	387	OUT	GET /cookie-sync/stv?gdpr=&gdpr_consent=&gdpr=null HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:16 UTC	398	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 13:51:16 GMT location: https://match.prod.bidr.io/cookie-sync/stv?gdpr=&gdpr_consent=&gdpr=null&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 23 May 2024 14:01:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	50189	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	703	OUT	GET /track/cmb/generic?ttd_pid=71ei9rr&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSgCMgsI2OPb0cTO_TwQBTgB
2024-05-23 13:51:16 UTC	512	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:16 GMT Content-Length: 225 Connection: close server: Kestrel location: https://dmp.adform.net/serving/cookie/match/?party=1144&tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwjY49vRxM79PBAFOAE.; expires=Fri, 23 May 2025 13:51:16 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:16 UTC	225	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 6d 70 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 2f 3f 70 61 72 74 79 3d 31 31 34 34 26 74 64 69 64 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 22 3e 68 74 74 70 73 3a 2f 2f 64 6d 70 2e 61 64 66 6f 72 6d 2e 6e 65 74 2f 73 65 72 76 69 6e 67 2f 63 6f 6f 6b 69 65 2f 6d 61 74 63 68 2f 3f 70 61 72 74 79 3d 31 31 34 34 26 74 64 69 64 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://dmp.adform.net/serving/cookie/match/?party=1144&tdid=f03aae80-b45c-40b7-8c7a-418b39367c97">https://dmp.adform.net/serving/cookie/match/?party=1144&tdid=f03aae80-b45c-40b7-8c7a-418b39367c97</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50188	37.252.171.21	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	801	OUT	GET /setuid?entity=91&code=6252180897247519748 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572
2024-05-23 13:51:16 UTC	1499	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: e8dc4c34-6f8b-4cbb-8c58-9a4752dc811b Set-Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:16 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tbPl1M66+q([OUezrC[OIr1NZFw5Sgu[NXw$?ZOywyvLX26%3If)y3KL9D3I?+is1HX!; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:16 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:16 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-23 13:51:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	50190	35.190.24.218	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	765	OUT	GET /redirect/standard?url=https%3A%2F%2Fdmp.adform.net%2Fserving%2Fcookie%2Fmatch%2F%3Fparty%3D1145%26cid%3D%7BWEBO_CID%7D&bounce=1&random=3764634676 HTTP/1.1 Host: redirect.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AFFICHE_W=CaecarcOISEJ68
2024-05-23 13:51:16 UTC	594	IN	HTTP/1.1 302 Found Server: Weborama Collect Frontend Date: Thu, 23 May 2024 13:51:15 GMT Content-Length: 0 Location: https://dmp.adform.net/serving/cookie/match/?party=1145&cid=jJ13XNjU.0RS4RqOXhjo5. Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Thu, 23 May 2024 13:51:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50187	52.59.78.67	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	730	OUT	GET /ping_match.gif?scc=1&st=adform&rurl=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1084%26cid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=UvkZkbdd1Sa8QF5
2024-05-23 13:51:16 UTC	705	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 23 May 2024 13:51:16 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://c1.adform.net/serving/cookie/match?party=1084&cid=UvkZkbdd1Sa8QF5 Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-001c45a0648e2a03d@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=UvkZkbdd1Sa8QF5; Domain=.w55c.net; Expires=Mon, 23 Jun 2025 13:51:16 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchadform=5; Domain=.w55c.net; Expires=Sat, 22 Jun 2024 13:51:16 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50180	46.228.174.117	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	492	OUT	GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
2024-05-23 13:51:16 UTC	387	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:16 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D; path=/; expires=Fri, 23 May 2025 13:51:16 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-05-23 13:51:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50191	18.172.103.101	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	755	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFwoIYXBwbmV4dXMSCwjo5cGsrs79PBAFEhUKBmdvb2dsZRILCL6Dwqyuzv08EAUSFgoHcnViaWNvbhILCNqfwqyuzv08EAUYBSgDMgsI9sPE2cTO_TwQBUIPIg0IARIJCgV0aWVyMxABWgc5bzU5M3F3YAE.
2024-05-23 13:51:17 UTC	533	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 488 Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 23 May 2024 07:33:30 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1fa5d8f57b04797d33d03ff93cb7543e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: HVntfqdpcFajX66DUk57XngiKBltJgh-gJMvbIEAU5xPAeZB5Cs-mQ== Age: 32559
2024-05-23 13:51:17 UTC	488	IN	Data Raw: 76 61 72 20 54 54 44 43 4d 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 20 7b 20 76 61 72 20 65 20 3d 20 22 69 66 72 61 6d 65 5f 22 20 2b 20 74 68 69 73 2e 6d 61 70 49 6e 64 65 78 2b 2b 2c 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 20 65 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 54 72 61 6e 73 70 61 72 65 6e 63 79 22 2c 20 21 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 20 30 29 2c 20 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: var TTDCM = function () { function n(t) { var e = "iframe_" + this.mapIndex++, i = document.createElement("iframe"); i.setAttribute("id", e), i.setAttribute("allowTransparency", !0), i.setAttribute("height", 0), i.setAttribute("width", 0), i.setAttribute(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50192	162.19.138.83	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:16 UTC	708	OUT	GET /c/10/10/2/1.gif?puid=6252180897247519748&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#1
2024-05-23 13:51:17 UTC	1758	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#2; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=10#1716472277163#-141909363#6252180897247519748; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:17 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ice.360yield.com/match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-d3a0ENM4oaGFs_ptrDIsW_yrMkpzpkQgJcHbSvHOQQ&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F10%2F124%2F1%2F2.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Thu, 23 May 2024 13:51:16 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-23 13:51:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50198	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	714	OUT	GET /pixel.gif?clkgypv=pxl&ch=128&cm=217163104891002579221 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"}]
2024-05-23 13:51:17 UTC	1113	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:17 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: a595a19e5c67 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://sync.crwdcntrl.net/map/c=8545/tp=CKGY/tpid=Zk9J0cMGPKkzOkJE-hOvl2TE/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:41 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:41 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50194	54.208.138.231	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	781	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.5839695299827767 HTTP/1.1 Host: a.idio.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:17 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:17 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:17 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50195	54.208.138.231	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	846	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.07091976468957428 HTTP/1.1 Host: a.idio.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:17 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:17 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:17 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50193	46.228.174.117	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	704	OUT	GET /usersync/smaato/285cc7b641?gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
2024-05-23 13:51:17 UTC	313	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 13:51:17 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 connection: close
2024-05-23 13:51:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50200	52.48.246.250	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	429	OUT	GET /cookie-sync/stv?gdpr=&gdpr_consent=&gdpr=null&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-05-23 13:51:17 UTC	660	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 13:51:17 GMT location: https://ads.stickyadstv.com/user-registering?userId=AADnfE7MnpQAABUVUhdmCg&dataProviderId=817&gdpr=null Server: gunicorn set-cookie: bito=AADnfE7MnpQAABUVUhdmCg; Domain=bidr.io; expires=Sun, 22 Jun 2025 09:51:17 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sun, 22 Jun 2025 09:51:17 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50202	15.235.15.221	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	615	OUT	GET /?mapped=6252180897247519748&partner=68 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:17 UTC	487	IN	HTTP/1.1 302 Found set-cookie: cookie=c4e190252a3ef1b7; Max-Age=31536000; Expires=Fri, 23 May 2025 13:51:17 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects109=1; Max-Age=86400; Expires=Fri, 24 May 2024 13:51:17 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://pixel.onaudience.com/?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50197	46.19.11.36	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	690	OUT	GET /adform/6252180897247519748?redirect_url=https%3a%2f%2fc1.adform.net%2fserving%2fcookie%2fmatch%3fparty%3d1219 HTTP/1.1 Host: match.contentexchange.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:17 UTC	152	IN	HTTP/1.1 502 Bad Gateway Server: nginx/1.16.1 Date: Thu, 23 May 2024 13:51:17 GMT Content-Type: text/html Content-Length: 559 Connection: close
2024-05-23 13:51:17 UTC	559	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 35 30 32 20 42 61 64 20 47 61 74 65 77 61 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 34 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 Data Ascii: <html><head><title>502 Bad Gateway</title></head><body><center><h1>502 Bad Gateway</h1></center><hr><center>nginx/1.24.0</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50208	172.64.144.214	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	758	OUT	GET /visualisation/15507338/embed?auto=1 HTTP/1.1 Host: flo.uri.sh Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 26 Oct 2023 17:28:16 GMT
2024-05-23 13:51:17 UTC	462	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 13:51:17 GMT Connection: close x-amz-id-2: 1kx5hSRmu9HQ/fNz4zABBJzmob1G7LsW8cMe8+VdfwUX88Pb/I5lAHjbjbHT0RIN19EY0bp0/eU= x-amz-request-id: H9XVK95JHG30CKK6 Cache-Control: max-age=0 Last-Modified: Thu, 26 Oct 2023 17:28:16 GMT x-amz-version-id: 0DVgINLOWbvVYYInYad9elETS8lwYPcH ETag: "41b241f829d0f5ca648192192850ed76" CF-Cache-Status: HIT Age: 756220 Server: cloudflare CF-RAY: 88858517caf92363-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50204	76.223.111.18	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	620	OUT	GET /xuid?mid=7354&xuid=6252180897247519748&dongle=AD20 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:17 UTC	682	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:17 GMT Content-Length: 0 Connection: close Location: /xuid?ld=1&mid=7354&xuid=6252180897247519748&dongle=AD20&gdpr=0&cmp_cs=&us_privacy= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=241663095295977393984; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 13:51:17 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=241663095295977393984; Max-Age=7776000; Expires=Wed, 21 Aug 2024 13:51:17 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50207	37.252.171.149	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:17 UTC	522	OUT	GET /setuid?entity=91&code=6252180897247519748 HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tbPl1M66+q([OUezrC[OIr1NZFw5Sgu[NXw$?ZOywyvLX26%3If)y3KL9D3I?+is1HX!
2024-05-23 13:51:18 UTC	1498	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 60bffa82-5fc8-4242-8e37-5cd076e735de Set-Cookie: XANDR_PANID=25ibNVgOTkSHEsG1FNznYrsK2urJcSEbv4MPPaz-uGdreY2S-9Mdv_M0SMHpUxudc6PhWTxCLrLuhyXImxtoqbx1zHSsKj4Ln9kO50RceJc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tb[8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<xTD._PlZ[C[-kX-G!rXw; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:18 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 984.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-23 13:51:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50209	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:18 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:18 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8885851a4f318c45-EWR
2024-05-23 13:51:18 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50212	15.235.15.221	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	726	OUT	GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=c4e190252a3ef1b7; done_redirects109=1
2024-05-23 13:51:18 UTC	277	IN	HTTP/1.1 302 Found set-cookie: cookie=c4e190252a3ef1b7; Max-Age=31536000; Expires=Fri, 23 May 2025 13:51:18 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://tags.bluekai.com/site/33141?&id=0560a7e651b3abcb content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50211	52.212.132.56	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	974	OUT	GET /match?publisher_dsp_id=79&dsp_callback=1&external_user_id=ID5-d3a0ENM4oaGFs_ptrDIsW_yrMkpzpkQgJcHbSvHOQQ&r=https%3A%2F%2Fid5-sync.com%2Fcq%2F10%2F124%2F1%2F2.gif%3Fpuid%3D%7BPUB_USER_ID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ice.360yield.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=08facf54-2b74-422f-96ff-028f64cd56b8; tuuid_lu=1716472265; um=!42,ZSrbmfE5pwWO7w39rQtHP62V1Z.-rAql.U.bNQz0d3cv,1717681863; umeh=!42,0,1778680267,-1
2024-05-23 13:51:18 UTC	781	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:18 GMT Content-Type: text/plain Content-Length: 0 Connection: close access-control-allow-origin: * set-cookie: um=!42,ZSrbmfE5pwWO7w39rQtHP62V1Z.-rAql.U.bNQz0d3cv,1717681863!79,.kmL4vo6t-BeYs3DuL7xZ63Dm8csPZc.Uk9U.aNDrjv0.dAJYl6uZzVUWB8GCedwKpHwEsBVjUS531-6,1724248278; Expires=Wed, 21 Aug 2024 13:51:18 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure set-cookie: umeh=!42,0,1778680267,-1!79,0,1778680278,-1; Expires=Wed, 21 Aug 2024 13:51:18 GMT; Domain=.360yield.com; Path=/; SameSite=None; Secure p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" location: https://id5-sync.com/cq/10/124/1/2.gif?puid=08facf54-2b74-422f-96ff-028f64cd56b8&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50214	15.235.15.221	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	670	OUT	GET /?partner=290&mapped=6252180897247519748 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=c4e190252a3ef1b7; done_redirects109=1
2024-05-23 13:51:18 UTC	572	IN	HTTP/1.1 302 Found set-cookie: cookie=c4e190252a3ef1b7; Max-Age=31536000; Expires=Fri, 23 May 2025 13:51:18 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects104=1; Max-Age=86400; Expires=Fri, 24 May 2024 13:51:18 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=c4e190252a3ef1b7/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50210	46.228.174.117	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	725	OUT	GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
2024-05-23 13:51:18 UTC	387	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:18 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D; path=/; expires=Fri, 23 May 2025 13:51:18 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-05-23 13:51:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50218	142.250.185.130	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	1045	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:18 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1 Date: Thu, 23 May 2024 13:51:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:18 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50217	185.89.211.116	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	1102	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tbPl1M66+q([OUezrC[OIr1NZFw5Sgu[NXw$?ZOywyvLX26%3If)y3KL9D3I?+is1HX!
2024-05-23 13:51:19 UTC	1485	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 AN-X-Request-Uuid: 5c538766-6f53-4b9b-8d2c-56257e456fda Set-Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50220	76.223.111.18	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	719	OUT	GET /xuid?ld=1&mid=7354&xuid=6252180897247519748&dongle=AD20&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=241663095295977393984; tluid=241663095295977393984
2024-05-23 13:51:18 UTC	610	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:18 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=241663095295977393984; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 13:51:18 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=241663095295977393984; Max-Age=7776000; Expires=Wed, 21 Aug 2024 13:51:18 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 13:51:18 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50213	52.49.45.15	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	811	OUT	GET /map/c=8545/tp=CKGY/tpid=Zk9J0cMGPKkzOkJE-hOvl2TE/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
2024-05-23 13:51:18 UTC	363	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:18 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.15.127 Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=120&cm=ead1c4978695489dadb5610506d96b01 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50215	52.29.164.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	603	OUT	GET /put?d=d52&uid=6252180897247519748 HTTP/1.1 Host: e1.emxdgt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:19 UTC	103	IN	HTTP/1.1 204 No Content Server: awselb/2.0 Date: Thu, 23 May 2024 13:51:18 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50224	52.54.153.98	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	545	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.5839695299827767 HTTP/1.1 Host: a.idio.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:18 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:18 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:18 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50223	52.54.153.98	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	610	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472275153&z=0.07091976468957428 HTTP/1.1 Host: a.idio.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:18 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:18 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:18 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50221	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 137 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:18 UTC	137	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 36 6b 32 79 75 62 72 36 66 77 37 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 25 32 46 65 6e 25 32 46 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%22n6k2yubr6fw7%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F%22%7D
2024-05-23 13:51:19 UTC	888	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 208 Connection: close date: Thu, 23 May 2024 13:51:18 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 489c8d2875e850cc vary: Accept-Encoding x-envoy-upstream-service-time: 2 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 6cbc993371a5407a8b834ea22f7fcbd2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: K1aj31LkCnCRwW-oDbv15nl-t5oC1XgCmZgn8RbVYVF-OTRWsqqSzg==
2024-05-23 13:51:19 UTC	208	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 6e 36 6b 32 79 75 62 72 36 66 77 37 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 52 45 51 55 49 52 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 6f 6e 55 55 49 44 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"embedId":"n6k2yubr6fw7","fallback":true,"targetingEvaluated":false,"signedIdentityStatus":"REQUIRED","demandBaseToken":null,"cookieDomains":null,"driftEngageVerificationUUID":null,"driftEngageDomains":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50222	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:18 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:18 UTC	113	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 70 78 32 69 77 72 63 6d 66 78 77 7a 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 65 6e 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%22px2iwrcmfxwz%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.spglobal.com%2Fen%22%7D
2024-05-23 13:51:19 UTC	888	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 208 Connection: close date: Thu, 23 May 2024 13:51:19 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 507db3b6337a1d19 vary: Accept-Encoding x-envoy-upstream-service-time: 4 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 9bc84c94880403a2bdfe0bc8f1800e4e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: ABAwM39962jk8qm46Uoi0JdeXp8HyBfu7aJJLtXYgeDJOwcy7_6reg==
2024-05-23 13:51:19 UTC	208	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 70 78 32 69 77 72 63 6d 66 78 77 7a 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 6f 6e 55 55 49 44 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"embedId":"px2iwrcmfxwz","fallback":true,"targetingEvaluated":false,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":null,"driftEngageVerificationUUID":null,"driftEngageDomains":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50227	52.17.40.72	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	816	OUT	GET /map/c=8587/tp=CLOD/tpid=c4e190252a3ef1b7/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
2024-05-23 13:51:19 UTC	367	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:19 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.6.49 Location: https://pixel.onaudience.com/?partner=104&icm&cver&mapped=ead1c4978695489dadb5610506d96b01&gdpr=0 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50228	162.19.138.83	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	789	OUT	GET /cq/10/124/1/2.gif?puid=08facf54-2b74-422f-96ff-028f64cd56b8&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#2; 3pi=10#1716472277163#-141909363#6252180897247519748
2024-05-23 13:51:20 UTC	1440	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=10#1716472277163#-141909363#6252180897247519748\|124#1716472279908#-487590125; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:19 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ib.adnxs.com/getuid?https://id5-sync.com/c/10/2/0/3.gif?puid=$UID&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Thu, 23 May 2024 13:51:19 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-23 13:51:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50233	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	860	OUT	GET /embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:19 UTC	374	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:19 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 1148 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/html connection: close
2024-05-23 13:51:19 UTC	1086	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 69 62 73 79 6e 20 50 6f 64 63 61 73 74 20 50 6c 61 79 65 Data Ascii: <!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" href="/assets/favicon.ico" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="description" content="Libsyn Podcast Playe
2024-05-23 13:51:19 UTC	62	IN	Data Raw: 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ad> <body> <div id="root"></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50236	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	764	OUT	GET /pixel.gif?clkgypv=pxl&ch=120&cm=ead1c4978695489dadb5610506d96b01 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"}]
2024-05-23 13:51:19 UTC	1108	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:19 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: a595a19e5c67 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://pixel-sync.sitescout.com/connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:43 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:43 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50234	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	861	OUT	GET /embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:19 UTC	374	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:19 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 1148 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/html connection: close
2024-05-23 13:51:19 UTC	1086	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 69 62 73 79 6e 20 50 6f 64 63 61 73 74 20 50 6c 61 79 65 Data Ascii: <!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" href="/assets/favicon.ico" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="description" content="Libsyn Podcast Playe
2024-05-23 13:51:19 UTC	62	IN	Data Raw: 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ad> <body> <div id="root"></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50242	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:19 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:19 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 888585252c84433f-EWR
2024-05-23 13:51:19 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50240	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	914	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSABKAIyCwjY49vRxM79PBAFOAE.
2024-05-23 13:51:19 UTC	643	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:19 GMT Content-Length: 423 Connection: close server: Kestrel location: https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&google_push&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFQoGZ29vZ2xlEgsIrJq10a7O_TwQBRgFIAIoAjILCNjj29HEzv08EAU4AQ..; expires=Fri, 23 May 2025 13:51:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:19 UTC	423	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 54 68 65 54 72 61 64 65 44 65 73 6b 26 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 6a 41 7a 59 57 46 6c 4f 44 41 74 59 6a 51 31 59 79 30 30 4d 47 49 33 4c 54 68 6a 4e 32 45 74 4e 44 45 34 59 6a 4d 35 4d 7a 59 33 59 7a 6b 33 26 67 6f 6f 67 6c 65 5f 70 75 73 68 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 74 74 64 5f 74 64 69 64 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 22 3e 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 Data Ascii: Redirecting to: <a href="https://cm.g.doubleclick.net/pixel?google_nid=TheTradeDesk&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&google_push&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97">https://cm.g.doubleclick.net/pix

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50235	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	865	OUT	GET /track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSABKAIyCwjY49vRxM79PBAFOAE.
2024-05-23 13:51:19 UTC	547	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:19 GMT Content-Length: 231 Connection: close server: Kestrel location: https://ib.adnxs.com/setuid?entity=82&code=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent= set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIYXBwbmV4dXMSCwiO0cXRrs79PBAFGAUgAigCMgsI2OPb0cTO_TwQBTgB; expires=Fri, 23 May 2025 13:51:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:19 UTC	231	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 38 32 26 63 6f 64 65 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 69 62 2e 61 64 6e 78 73 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 65 6e 74 69 74 79 3d 38 32 26 63 6f 64 65 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://ib.adnxs.com/setuid?entity=82&code=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=">https://ib.adnxs.com/setuid?entity=82&code=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50241	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:19 UTC	794	OUT	GET /track/cmf/rubicon?gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAEYBSABKAIyCwjY49vRxM79PBAFOAE.
2024-05-23 13:51:20 UTC	576	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:19 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYBSACKAIyCwjY49vRxM79PBAFOAE.; expires=Fri, 23 May 2025 13:51:19 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:20 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=f03aae80-b45c-40b7-8c7a-418b39367c97&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50244	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	860	OUT	GET /embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	374	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:20 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 1148 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/html connection: close
2024-05-23 13:51:20 UTC	1086	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 61 73 73 65 74 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 69 62 73 79 6e 20 50 6f 64 63 61 73 74 20 50 6c 61 79 65 Data Ascii: <!doctype html><html lang="en"> <head> <meta charset="UTF-8" /> <link rel="icon" href="/assets/favicon.ico" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="description" content="Libsyn Podcast Playe
2024-05-23 13:51:20 UTC	62	IN	Data Raw: 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ad> <body> <div id="root"></div> </body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50246	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	737	OUT	GET /assets/index-7d834d9e.css HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	374	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:20 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 84339 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/css connection: close
2024-05-23 13:51:20 UTC	1086	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 33 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 Data Ascii: /! Font Awesome Free 5.13.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 62 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 6c 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 33 65 6d 7d 2e 66 61 2d 73 70 69 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 32 73 20 6c 69 6e Data Ascii: a-pull-left,.far.fa-pull-left,.fas.fa-pull-left{margin-right:.3em}.fa.fa-pull-right,.fab.fa-pull-right,.fal.fa-pull-right,.far.fa-pull-right,.fas.fa-pull-right{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s linear infinite;animation:fa-spin 2s lin
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 6e 74 61 6c 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 7d 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 2c 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2c 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 6e 6f 6e 65 3b 66 69 6c 74 65 72 3a 6e 6f 6e 65 7d 2e 66 61 2d 73 74 61 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c Data Ascii: ntal.fa-flip-vertical{-webkit-transform:scale(-1);transform:scale(-1)}:root .fa-flip-both,:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270{-webkit-filter:none;filter:none}.fa-stack{display:inl
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 bd 22 7d 2e 66 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 85 bb 22 7d 2e 66 61 2d 61 6e 67 65 6c 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 89 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 83 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 80 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 81 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: r:before{content:""}.fa-android:before{content:""}.fa-angellist:before{content:""}.fa-angle-double-down:before{content:""}.fa-angle-double-left:before{content:""}.fa-angle-double-right:before{content:""}.fa-angle-double-up:before{content
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 66 61 2d 61 73 73 69 73 74 69 76 65 2d 6c 69 73 74 65 6e 69 6e 67 2d 73 79 73 74 65 6d 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8a a2 22 7d 2e 66 61 2d 61 73 74 65 72 69 73 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 81 a9 22 7d 2e 66 61 2d 61 73 79 6d 6d 65 74 72 69 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d b2 22 7d 2e 66 61 2d 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 ba 22 7d 2e 66 61 2d 61 74 6c 61 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 98 22 7d 2e 66 61 2d 61 74 6c 61 73 73 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9d bb 22 7d 2e 66 61 2d 61 74 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 92 22 7d 2e 66 61 2d 61 75 64 69 62 Data Ascii: fa-assistive-listening-systems:before{content:""}.fa-asterisk:before{content:""}.fa-asymmetrik:before{content:""}.fa-at:before{content:""}.fa-atlas:before{content:""}.fa-atlassian:before{content:""}.fa-atom:before{content:""}.fa-audib
2024-05-23 13:51:20 UTC	4	IN	Data Raw: 63 65 3a 62 Data Ascii: ce:b
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 b4 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 b5 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 b3 22 7d 2e 66 61 2d 62 65 6c 6c 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 b6 22 7d 2e 66 61 2d 62 65 7a 69 65 72 2d 63 75 72 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 9b 22 7d 2e 66 61 2d 62 69 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 99 87 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 86 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: efore{content:""}.fa-behance-square:before{content:""}.fa-bell:before{content:""}.fa-bell-slash:before{content:""}.fa-bezier-curve:before{content:""}.fa-bible:before{content:""}.fa-bicycle:before{content:""}.fa-biking:before{content:"
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 2d 74 69 73 73 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a5 9b 22 7d 2e 66 61 2d 62 6f 78 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a8 22 7d 2e 66 61 2d 62 72 61 69 6c 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8a a1 22 7d 2e 66 61 2d 62 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 9c 22 7d 2e 66 61 2d 62 72 65 61 64 2d 73 6c 69 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9f ac 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 82 b1 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a9 22 7d 2e 66 61 2d 62 72 6f 61 64 63 61 73 74 2d 74 6f Data Ascii: -tissue:before{content:""}.fa-boxes:before{content:""}.fa-braille:before{content:""}.fa-brain:before{content:""}.fa-bread-slice:before{content:""}.fa-briefcase:before{content:""}.fa-briefcase-medical:before{content:""}.fa-broadcast-to
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 9f 22 7d 2e 66 61 2d 63 61 72 2d 63 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 a1 22 7d 2e 66 61 2d 63 61 72 2d 73 69 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 a4 22 7d 2e 66 61 2d 63 61 72 61 76 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a3 bf 22 7d 2e 66 61 2d 63 61 72 65 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 97 22 7d 2e 66 61 2d 63 61 72 65 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 99 22 7d 2e 66 61 2d 63 61 72 65 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 9a 22 7d 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 64 6f 77 6e 3a 62 65 66 6f Data Ascii: ore{content:""}.fa-car-crash:before{content:""}.fa-car-side:before{content:""}.fa-caravan:before{content:""}.fa-caret-down:before{content:""}.fa-caret-left:before{content:""}.fa-caret-right:before{content:""}.fa-caret-square-down:befo
2024-05-23 13:51:20 UTC	1412	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 a0 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 85 8a 22 7d 2e 66 61 2d 63 68 65 65 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9f af 22 7d 2e 66 61 2d 63 68 65 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 b9 22 7d 2e 66 61 2d 63 68 65 73 73 2d 62 69 73 68 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 ba 22 7d 2e 66 61 2d 63 68 65 73 73 2d 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 bc 22 7d 2e 66 61 2d 63 68 65 73 73 2d 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 bf 22 7d 2e 66 61 2d 63 68 65 73 73 2d 6b 6e 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ore{content:""}.fa-check-square:before{content:""}.fa-cheese:before{content:""}.fa-chess:before{content:""}.fa-chess-bishop:before{content:""}.fa-chess-board:before{content:""}.fa-chess-king:before{content:""}.fa-chess-knight:before{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50243	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	752	OUT	GET /assets/index-12250e24.js HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://play.libsyn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	382	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:20 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 669543 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/javascript connection: close
2024-05-23 13:51:20 UTC	1078	IN	Data Raw: 76 61 72 20 45 6d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 41 6d 3d 28 65 2c 74 2c 72 29 3d 3e 74 20 69 6e 20 65 3f 45 6d 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 3a 65 5b 74 5d 3d 72 3b 76 61 72 20 54 75 3d 28 65 2c 74 2c 72 29 3d 3e 28 41 6d 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 72 29 2c 72 29 3b 69 6d 70 6f 72 74 7b 72 20 61 73 20 7a 2c 61 20 61 73 20 6b 6d 2c 63 20 61 73 20 59 2c 67 20 61 73 20 50 69 2c 62 20 61 73 20 66 74 2c 52 20 61 73 20 52 65 2c 5f 20 61 73 20 6b 65 2c 64 20 61 73 20 76 64 7d 66 72 6f 6d 22 2e 2f 76 65 6e 64 6f 72 Data Ascii: var Em=Object.defineProperty;var Am=(e,t,r)=>t in e?Em(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Tu=(e,t,r)=>(Am(e,typeof t!="symbol"?t+"":t,r),r);import{r as z,a as km,c as Y,g as Pi,b as ft,R as Re,_ as ke,d as vd}from"./vendor
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 76 61 72 20 44 6d 3d 7a 2c 43 6d 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 24 6d 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 49 6d 3d 4f 62 6a 65 63 Data Ascii: ght (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */var Dm=z,Cm=Symbol.for("react.element"),$m=Symbol.for("react.fragment"),Im=Objec
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 20 50 6c 65 61 73 65 20 75 73 65 20 60 70 61 72 73 65 49 53 4f 60 20 74 6f 20 70 61 72 73 65 20 73 74 72 69 6e 67 73 2e 20 53 65 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 2e 69 6f 2f 66 6a 75 6c 65 22 29 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 6e 65 77 20 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 29 29 2c 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 6d 28 65 2c 74 29 7b 48 65 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 72 3d 6b 74 28 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 6e 3d 75 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 72 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 6d 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 44 61 74 65 2e 55 54 43 28 65 2e 67 65 74 46 Data Ascii: rguments. Please use `parseISO` to parse strings. See: https://git.io/fjule"),console.warn(new Error().stack)),new Date(NaN))}function Mm(e,t){He(2,arguments);var r=kt(e).getTime(),n=ut(t);return new Date(r+n)}function Nm(e){var t=new Date(Date.UTC(e.getF
2024-05-23 13:51:20 UTC	1412	IN	Data Raw: 76 65 72 58 59 65 61 72 73 3a 7b 6f 6e 65 3a 22 6f 76 65 72 20 31 20 79 65 61 72 22 2c 6f 74 68 65 72 3a 22 6f 76 65 72 20 7b 7b 63 6f 75 6e 74 7d 7d 20 79 65 61 72 73 22 7d 2c 61 6c 6d 6f 73 74 58 59 65 61 72 73 3a 7b 6f 6e 65 3a 22 61 6c 6d 6f 73 74 20 31 20 79 65 61 72 22 2c 6f 74 68 65 72 3a 22 61 6c 6d 6f 73 74 20 7b 7b 63 6f 75 6e 74 7d 7d 20 79 65 61 72 73 22 7d 7d 2c 42 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 61 3d 6a 6d 5b 65 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 3f 6e 3d 61 3a 74 3d 3d 3d 31 3f 6e 3d 61 2e 6f 6e 65 3a 6e 3d 61 2e 6f 74 68 65 72 2e 72 65 70 6c 61 63 65 28 22 7b 7b 63 6f 75 6e 74 7d 7d 22 2c 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 72 21 3d 6e 75 6c 6c 26 Data Ascii: verXYears:{one:"over 1 year",other:"over {{count}} years"},almostXYears:{one:"almost 1 year",other:"almost {{count}} years"}},Bm=function(e,t,r){var n,a=jm[e];return typeof a=="string"?n=a:t===1?n=a.one:n=a.other.replace("{{count}}",t.toString()),r!=null&
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 61 72 20 73 3d 65 2e 64 65 66 61 75 6c 74 57 69 64 74 68 2c 6c 3d 6e 2e 77 69 64 74 68 3f 53 74 72 69 6e 67 28 6e 2e 77 69 64 74 68 29 3a 65 2e 64 65 66 61 75 6c 74 57 69 64 74 68 3b 69 3d 65 2e 76 61 6c 75 65 73 5b 6c 5d 7c 7c 65 2e 76 61 6c 75 65 73 5b 73 5d 7d 76 61 72 20 63 3d 65 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 3f 65 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 28 74 29 3a 74 3b 72 65 74 75 72 6e 20 69 5b 63 5d 7d 7d 76 61 72 20 51 6d 3d 7b 6e 61 72 72 6f 77 3a 5b 22 42 22 2c 22 41 22 5d 2c 61 62 62 72 65 76 69 61 74 65 64 3a 5b 22 42 43 22 2c 22 41 44 22 5d 2c 77 69 64 65 3a 5b 22 42 65 66 6f 72 65 20 43 68 72 69 73 74 22 2c 22 41 6e 6e 6f 20 44 6f 6d 69 6e 69 22 5d 7d 2c 4a 6d 3d 7b 6e 61 72 72 6f 77 3a 5b 22 31 22 2c 22 32 Data Ascii: ar s=e.defaultWidth,l=n.width?String(n.width):e.defaultWidth;i=e.values[l]\|\|e.values[s]}var c=e.argumentCallback?e.argumentCallback(t):t;return i[c]}}var Qm={narrow:["B","A"],abbreviated:["BC","AD"],wide:["Before Christ","Anno Domini"]},Jm={narrow:["1","2
2024-05-23 13:51:20 UTC	52	IN	Data Raw: 6f 72 6e 69 6e 67 22 2c 61 66 74 65 72 6e 6f 6f 6e 3a 22 69 6e 20 74 68 65 20 61 66 74 65 72 6e 6f 6f 6e 22 2c 65 76 65 6e 69 6e 67 3a 22 69 6e 20 74 68 65 Data Ascii: orning",afternoon:"in the afternoon",evening:"in the
2024-05-23 13:51:20 UTC	1448	IN	Data Raw: 20 65 76 65 6e 69 6e 67 22 2c 6e 69 67 68 74 3a 22 61 74 20 6e 69 67 68 74 22 7d 2c 77 69 64 65 3a 7b 61 6d 3a 22 61 2e 6d 2e 22 2c 70 6d 3a 22 70 2e 6d 2e 22 2c 6d 69 64 6e 69 67 68 74 3a 22 6d 69 64 6e 69 67 68 74 22 2c 6e 6f 6f 6e 3a 22 6e 6f 6f 6e 22 2c 6d 6f 72 6e 69 6e 67 3a 22 69 6e 20 74 68 65 20 6d 6f 72 6e 69 6e 67 22 2c 61 66 74 65 72 6e 6f 6f 6e 3a 22 69 6e 20 74 68 65 20 61 66 74 65 72 6e 6f 6f 6e 22 2c 65 76 65 6e 69 6e 67 3a 22 69 6e 20 74 68 65 20 65 76 65 6e 69 6e 67 22 2c 6e 69 67 68 74 3a 22 61 74 20 6e 69 67 68 74 22 7d 7d 2c 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 65 29 2c 6e 3d 72 25 31 30 30 3b 69 66 28 6e 3e 32 30 7c 7c 6e 3c 31 30 29 73 77 69 74 63 68 28 6e 25 31 30 29 7b 63 61 73 Data Ascii: evening",night:"at night"},wide:{am:"a.m.",pm:"p.m.",midnight:"midnight",noon:"noon",morning:"in the morning",afternoon:"in the afternoon",evening:"in the evening",night:"at night"}},ng=function(e,t){var r=Number(e),n=r%100;if(n>20\|\|n<10)switch(n%10){cas
2024-05-23 13:51:20 UTC	1448	IN	Data Raw: 5d 2c 69 3d 74 2e 6d 61 74 63 68 28 65 2e 70 61 72 73 65 50 61 74 74 65 72 6e 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 75 3d 65 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3f 65 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 28 69 5b 30 5d 29 3a 69 5b 30 5d 3b 75 3d 72 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3f 72 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 28 75 29 3a 75 3b 76 61 72 20 6f 3d 74 2e 73 6c 69 63 65 28 61 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 75 2c 72 65 73 74 3a 6f 7d 7d 7d 76 61 72 20 73 67 3d 2f 5e 28 5c 64 2b 29 28 74 68 7c 73 74 7c 6e 64 7c 72 64 29 3f 2f 69 2c 6c 67 3d 2f 5c 64 2b 2f 69 2c 63 67 3d 7b 6e 61 72 72 6f 77 3a 2f 5e 28 62 7c 61 29 2f 69 2c 61 62 62 72 65 76 69 61 74 65 64 Data Ascii: ],i=t.match(e.parsePattern);if(!i)return null;var u=e.valueCallback?e.valueCallback(i[0]):i[0];u=r.valueCallback?r.valueCallback(u):u;var o=t.slice(a.length);return{value:u,rest:o}}}var sg=/^(\d+)(th\|st\|nd\|rd)?/i,lg=/\d+/i,cg={narrow:/^(b\|a)/i,abbreviated
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 68 74 3a 2f 6e 69 67 68 74 2f 69 7d 7d 2c 77 67 3d 7b 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 3a 53 64 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 3a 73 67 2c 70 61 72 73 65 50 61 74 74 65 72 6e 3a 6c 67 2c 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 7d 29 2c 65 72 61 3a 4f 74 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 73 3a 63 67 2c 64 65 66 61 75 6c 74 4d 61 74 63 68 57 69 64 74 68 3a 22 77 69 64 65 22 2c 70 61 72 73 65 50 61 74 74 65 72 6e 73 3a 66 67 2c 64 65 66 61 75 6c 74 50 61 72 73 65 57 69 64 74 68 3a 22 61 6e 79 22 7d 29 2c 71 75 61 72 74 65 72 3a 4f 74 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 73 3a 64 67 2c 64 65 66 61 75 6c 74 4d 61 74 63 68 57 69 Data Ascii: ht:/night/i}},wg={ordinalNumber:Sd({matchPattern:sg,parsePattern:lg,valueCallback:function(e){return parseInt(e,10)}}),era:Ot({matchPatterns:cg,defaultMatchWidth:"wide",parsePatterns:fg,defaultParseWidth:"any"}),quarter:Ot({matchPatterns:dg,defaultMatchWi
2024-05-23 13:51:20 UTC	1436	IN	Data Raw: 65 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 54 64 28 65 29 2c 72 3d 6e 65 77 20 44 61 74 65 28 30 29 3b 72 2e 73 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 74 2c 30 2c 34 29 2c 72 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 3b 76 61 72 20 6e 3d 57 61 28 72 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 45 67 3d 36 30 34 38 65 35 3b 66 75 6e 63 74 69 6f 6e 20 41 67 28 65 29 7b 48 65 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 6b 74 28 65 29 2c 72 3d 57 61 28 74 29 2e 67 65 74 54 69 6d 65 28 29 2d 50 67 28 74 29 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2f 45 67 29 2b 31 7d 66 75 6e 63 74 69 6f 6e 20 47 61 28 65 2c 74 29 7b 48 65 28 31 2c 61 72 67 75 6d 65 6e Data Ascii: e(1,arguments);var t=Td(e),r=new Date(0);r.setUTCFullYear(t,0,4),r.setUTCHours(0,0,0,0);var n=Wa(r);return n}var Eg=6048e5;function Ag(e){He(1,arguments);var t=kt(e),r=Wa(t).getTime()-Pg(t).getTime();return Math.round(r/Eg)+1}function Ga(e,t){He(1,argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50245	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	753	OUT	GET /assets/vendor-c69516f0.js HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://play.libsyn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	382	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:20 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 243841 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/javascript connection: close
2024-05-23 13:51:20 UTC	1078	IN	Data Raw: 76 61 72 20 75 75 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3c 22 75 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 67 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 22 64 65 66 61 75 6c 74 22 29 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 72 52 28 65 29 7b 69 66 28 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b Data Ascii: var uu=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function lg(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function rR(e){if(e.__esModule)return e;
2024-05-23 13:51:20 UTC	1436	IN	Data Raw: 2e 70 72 6f 66 69 6c 65 72 22 29 2c 54 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 6f 76 69 64 65 72 22 29 2c 52 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 74 65 78 74 22 29 2c 50 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 2c 4f 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 2c 41 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 4c 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 2c 24 68 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 4e 32 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 Data Ascii: .profiler"),T2=Symbol.for("react.provider"),R2=Symbol.for("react.context"),P2=Symbol.for("react.forward_ref"),O2=Symbol.for("react.suspense"),A2=Symbol.for("react.memo"),L2=Symbol.for("react.lazy"),$h=Symbol.iterator;function N2(e){return e===null\|\|typeof
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 28 75 29 26 26 28 6f 5b 75 5d 3d 6e 5b 75 5d 29 3b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 64 3d 3d 3d 31 29 6f 2e 63 68 69 6c 64 72 65 6e 3d 74 3b 65 6c 73 65 20 69 66 28 31 3c 64 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 64 29 2c 76 3d 30 3b 76 3c 64 3b 76 2b 2b 29 67 5b 76 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 76 2b 32 5d 3b 6f 2e 63 68 69 6c 64 72 65 6e 3d 67 7d 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 75 20 69 6e 20 64 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 64 29 6f 5b 75 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6f 5b 75 5d 3d 64 5b 75 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 51 75 2c 74 79 70 65 3a 65 2c 6b 65 Data Ascii: wnProperty(u)&&(o[u]=n[u]);var d=arguments.length-2;if(d===1)o.children=t;else if(1<d){for(var g=Array(d),v=0;v<d;v++)g[v]=arguments[v+2];o.children=g}if(e&&e.defaultProps)for(u in d=e.defaultProps,d)o[u]===void 0&&(o[u]=d[u]);return{$$typeof:Qu,type:e,ke
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 79 73 20 7b 22 2b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 6e 29 2b 22 29 2e 20 49 66 20 79 6f 75 20 6d 65 61 6e 74 20 74 6f 20 72 65 6e 64 65 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 63 68 69 6c 64 72 65 6e 2c 20 75 73 65 20 61 6e 20 61 72 72 61 79 20 69 6e 73 74 65 61 64 2e 22 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 4b 6c 28 65 2c 6e 2c 74 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 75 3d 5b 5d 2c 6f 3d 30 3b 72 65 74 75 72 6e 20 6f 6f 28 65 2c 75 2c 22 22 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 73 2c 6f 2b 2b 29 7d 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 44 32 28 65 29 7b 69 66 28 65 Data Ascii: ys {"+Object.keys(e).join(", ")+"}":n)+"). If you meant to render a collection of children, use an array instead.");return f}function Kl(e,n,t){if(e==null)return e;var u=[],o=0;return oo(e,u,"","",function(s){return n.call(t,s,o++)}),u}function D2(e){if(e
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 2e 74 79 70 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3b 66 6f 72 28 67 20 69 6e 20 6e 29 64 67 2e 63 61 6c 6c 28 6e 2c 67 29 26 26 21 70 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 67 29 26 26 28 75 5b 67 5d 3d 6e 5b 67 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 64 21 3d 3d 76 6f 69 64 20 30 3f 64 5b 67 5d 3a 6e 5b 67 5d 29 7d 76 61 72 20 67 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 67 3d 3d 3d 31 29 75 2e 63 68 69 6c 64 72 65 6e 3d 74 3b 65 6c 73 65 20 69 66 28 31 3c 67 29 7b 64 3d 41 72 72 61 79 28 67 29 3b 66 6f 72 28 76 61 72 20 76 3d 30 3b 76 3c 67 3b 76 2b 2b 29 64 5b 76 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 76 2b 32 5d 3b 75 2e 63 68 69 6c 64 72 65 6e 3d 64 7d 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 51 75 2c 74 79 Data Ascii: .type.defaultProps;for(g in n)dg.call(n,g)&&!pg.hasOwnProperty(g)&&(u[g]=n[g]===void 0&&d!==void 0?d[g]:n[g])}var g=arguments.length-2;if(g===1)u.children=t;else if(1<g){d=Array(g);for(var v=0;v<g;v++)d[v]=arguments[v+2];u.children=d}return{$$typeof:Qu,ty
2024-05-23 13:51:20 UTC	28	IN	Data Raw: 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 Data Ascii: n on.current.useImperativeHa
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 6e 64 6c 65 28 65 2c 6e 2c 74 29 7d 3b 6f 65 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 4d 65 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 4d 65 6d 6f 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 52 65 64 75 63 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 Data Ascii: ndle(e,n,t)};oe.useInsertionEffect=function(e,n){return on.current.useInsertionEffect(e,n)};oe.useLayoutEffect=function(e,n){return on.current.useLayoutEffect(e,n)};oe.useMemo=function(e,n){return on.current.useMemo(e,n)};oe.useReducer=function(e,n,t){ret
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 3d 3d 30 3f 62 3a 57 2e 69 64 2d 5a 2e 69 64 7d 69 66 28 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 73 3d 70 65 72 66 6f 72 6d 61 6e 63 65 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 6e 6f 77 28 29 7d 7d 65 6c 73 65 7b 76 61 72 20 66 3d 44 61 74 65 2c 64 3d 66 2e 6e 6f 77 28 29 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 2e 6e 6f 77 28 29 2d 64 7d 7d 76 61 72 20 67 3d 5b 5d 2c 76 3d 5b 5d 2c 43 3d 31 2c 6b 3d 6e 75 6c 6c 2c 54 3d 33 2c 46 3d 21 31 2c 50 3d 21 31 2c 49 Data Ascii: ==0?b:W.id-Z.id}if(typeof performance=="object"&&typeof performance.now=="function"){var s=performance;e.unstable_now=function(){return s.now()}}else{var f=Date,d=f.now();e.unstable_now=function(){return f.now()-d}}var g=[],v=[],C=1,k=null,T=3,F=!1,P=!1,I
2024-05-23 13:51:20 UTC	1460	IN	Data Raw: 6f 66 20 5f 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 28 76 72 29 7d 3b 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 3c 22 75 22 29 7b 76 61 72 20 44 69 3d 6e 65 77 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 2c 6d 73 3d 44 69 2e 70 6f 72 74 32 3b 44 69 2e 70 6f 72 74 31 2e 6f 6e 6d 65 73 73 61 67 65 3d 76 72 2c 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 75 6c 6c 29 7d 7d 65 6c 73 65 20 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 71 28 76 72 2c 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 69 28 57 29 7b 48 3d 57 2c 4b 7c 7c 28 4b 3d 21 30 2c 6d 72 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 47 6e 28 57 2c 5a 29 7b 51 3d 71 28 66 75 6e Data Ascii: of _=="function")mr=function(){_(vr)};else if(typeof MessageChannel<"u"){var Di=new MessageChannel,ms=Di.port2;Di.port1.onmessage=vr,mr=function(){ms.postMessage(null)}}else mr=function(){q(vr,0)};function zi(W){H=W,K\|\|(K=!0,mr())}function Gn(W,Z){Q=q(fun
2024-05-23 13:51:20 UTC	1412	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 34 3a 46 65 3d 31 65 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 46 65 3d 35 65 33 7d 72 65 74 75 72 6e 20 46 65 3d 62 2b 46 65 2c 57 3d 7b 69 64 3a 43 2b 2b 2c 63 61 6c 6c 62 61 63 6b 3a 5a 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 57 2c 73 74 61 72 74 54 69 6d 65 3a 62 2c 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3a 46 65 2c 73 6f 72 74 49 6e 64 65 78 3a 2d 31 7d 2c 62 3e 63 65 3f 28 57 2e 73 6f 72 74 49 6e 64 65 78 3d 62 2c 6e 28 76 2c 57 29 2c 74 28 67 29 3d 3d 3d 6e 75 6c 6c 26 26 57 3d 3d 3d 74 28 76 29 26 26 28 49 3f 28 77 28 51 29 2c 51 3d 2d 31 29 3a 49 3d 21 30 2c 47 6e 28 7a 2c 62 2d 63 65 29 29 29 3a 28 57 2e 73 6f 72 74 49 6e 64 65 78 3d 46 65 2c 6e 28 67 2c 57 29 2c 50 7c 7c 46 7c 7c 28 50 3d 21 30 2c 7a Data Ascii: reak;case 4:Fe=1e4;break;default:Fe=5e3}return Fe=b+Fe,W={id:C++,callback:Z,priorityLevel:W,startTime:b,expirationTime:Fe,sortIndex:-1},b>ce?(W.sortIndex=b,n(v,W),t(g)===null&&W===t(v)&&(I?(w(Q),Q=-1):I=!0,Gn(z,b-ce))):(W.sortIndex=Fe,n(g,W),P\|\|F\|\|(P=!0,z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50250	34.36.216.150	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	708	OUT	GET /connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	522	IN	HTTP/1.1 302 Found set-cookie: ssi=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f#1716472280674; Domain=.sitescout.com; Expires=Fri, 23-May-2025 13:51:20 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/connectors/clickagy/usersync?cookieQ=1&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D Content-Length: 0 date: Thu, 23 May 2024 13:51:19 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50251	15.235.15.221	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	720	OUT	GET /?partner=104&icm&cver&mapped=ead1c4978695489dadb5610506d96b01&gdpr=0 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=c4e190252a3ef1b7; done_redirects109=1; done_redirects104=1
2024-05-23 13:51:20 UTC	419	IN	HTTP/1.1 302 Found set-cookie: cookie=c4e190252a3ef1b7; Max-Age=31536000; Expires=Fri, 23 May 2025 13:51:20 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects219=1; Max-Age=86400; Expires=Fri, 24 May 2024 13:51:20 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://spl.zeotap.com?zdid=1332&zcluid=c4e190252a3ef1b7 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50248	185.89.211.116	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	1047	OUT	GET /setuid?entity=82&code=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tb[8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<xTD._PlZ[C[-kX-G!rXw
2024-05-23 13:51:20 UTC	1563	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:20 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 1886cbd0-bf89-466f-a317-f6ccb0de3721 Set-Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40<E:2jUF']wIg2GTtv9+21!]taa8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<x*TD4YQp$kNOZ<tIvErm0wUyl)(Vv/zx]H?>/ECOc4GsDWDDZGr:Gm`byWsw-sI!+leN3FR@PsXH%!5NOuewL+B; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:20 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-23 13:51:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50247	142.250.185.130	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	940	OUT	GET /pixel?google_nid=TheTradeDesk&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&google_push&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://match.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 13:51:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50252	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	729	OUT	GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYBSACKAIyCwjY49vRxM79PBAFOAE.
2024-05-23 13:51:20 UTC	574	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:20 GMT Content-Length: 221 Connection: close server: Kestrel location: https://tags.bluekai.com/site/5386?id=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent= set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFgoHYmx1ZWthaRILCPjH3tmuzv08EAUYBSADKAIyCwjY49vRxM79PBAFOAE.; expires=Fri, 23 May 2025 13:51:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:20 UTC	221	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 62 6c 75 65 6b 61 69 2e 63 6f 6d 2f 73 69 74 65 2f 35 33 38 36 3f 69 64 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://tags.bluekai.com/site/5386?id=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=">https://tags.bluekai.com/site/5386?id=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50253	185.89.211.116	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	935	OUT	GET /getuid?https://id5-sync.com/c/10/2/0/3.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M4/YD>6NRF']wIg2GTtv9+21!]tb[8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<xTD._*PlZ[C[-kX-G!rXw
2024-05-23 13:51:21 UTC	1446	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://id5-sync.com/c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent= AN-X-Request-Uuid: c37a8ed1-2f55-4a4a-994d-db466baa8ba2 Set-Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:20 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:20 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:20 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50260	13.248.245.213	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	456	OUT	GET /xuid?ld=1&mid=7354&xuid=6252180897247519748&dongle=AD20&gdpr=0&cmp_cs=&us_privacy= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=241663095295977393984
2024-05-23 13:51:20 UTC	610	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:20 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=241663095295977393984; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 13:51:20 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=241663095295977393984; Max-Age=7776000; Expires=Wed, 21 Aug 2024 13:51:20 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 13:51:20 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50254	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 571 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	571	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 70 78 32 69 77 72 63 6d 66 78 77 7a 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 32 39 36 38 35 37 34 39 2d 61 32 30 30 2d 34 65 37 31 2d 62 62 65 35 2d 30 35 35 61 63 65 38 61 31 35 38 64 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 36 62 62 34 36 61 64 64 2d 31 36 35 38 2d 34 62 37 62 2d 62 33 31 39 2d 39 33 32 33 30 33 34 34 36 34 31 37 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%22px2iwrcmfxwz%22%2C%22sessionId%22%3A%2229685749-a200-4e71-bbe5-055ace8a158d%22%2C%22instanceId%22%3A%226bb46add-1658-4b7b-b319-932303446417%22%2C%22context%22%3A%7B%22url%22%3A
2024-05-23 13:51:20 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:20 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 2d7119043f49c15c vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-05-23 13:51:20 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50261	35.71.131.137	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	518	OUT	GET /track/cmf/generic?ttd_pid=stickyads&ttd_tpi=1&gdpr=null HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYBSACKAIyCwjY49vRxM79PBAFOAE.
2024-05-23 13:51:20 UTC	591	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:20 GMT Content-Length: 287 Connection: close server: Kestrel location: https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent= set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYASABKAIyCwj2iIqIxc79PBAFOAFaCXN0aWNreWFkc2AC; expires=Fri, 23 May 2025 13:51:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:20 UTC	287	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 39 33 36 37 63 39 37 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 32 30 38 26 75 73 65 72 49 64 3d 66 30 33 61 61 65 38 30 2d 62 34 35 63 2d 34 30 62 37 2d 38 63 37 61 2d 34 31 38 62 33 Data Ascii: Redirecting to: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=f03aae80-b45c-40b7-8c7a-418b39367c97&gdpr=0&gdpr_consent=">https://ads.stickyadstv.com/user-registering?dataProviderId=208&userId=f03aae80-b45c-40b7-8c7a-418b3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50255	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 624 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	624	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 70 78 32 69 77 72 63 6d 66 78 77 7a 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 6c 65 61 64 5f 69 64 3d 64 62 63 61 35 37 38 39 2d 33 36 63 30 2d 34 38 65 33 2d 39 33 64 35 2d 65 64 39 61 36 35 65 37 37 36 61 65 26 6d 61 72 6b 65 74 6f 5f 63 6f 6f 6b 69 65 3d 69 64 25 33 41 34 39 31 2d 56 4e 47 2d 37 39 30 25 32 36 74 6f 6b 65 6e 25 33 41 5f 6d 63 68 2d 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2d 31 37 31 36 34 37 32 32 35 36 30 30 32 2d 34 36 31 30 37 26 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 6f 25 32 32 25 33 41 25 32 32 69 64 25 33 41 34 39 31 2d 56 4e 47 2d 37 39 30 25 32 36 74 6f 6b 65 6e 25 Data Ascii: embed_id=px2iwrcmfxwz&client_id=f6zuizdyhxrm7r&consent_id=has_consent&lead_id=dbca5789-36c0-48e3-93d5-ed9a65e776ae&marketo_cookie=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&integrations=%7B%22marketo%22%3A%22id%3A491-VNG-790%26token%
2024-05-23 13:51:21 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Thu, 23 May 2024 13:51:21 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 678f02b1e5f8d24f vary: Accept-Encoding x-envoy-upstream-service-time: 269 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 a7f9178d47a7241f2ecd6c65877f7100.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: 9N9Wi952q7lqzy1JleBxnIyQW2hIHCEpmA3cIbGeg8LU2LD6ILXWHQ==
2024-05-23 13:51:21 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 30 31 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 38 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 6e Data Ascii: 4151{"location":{"ip":"8.46.123.175","city":"New York","subdivision":"New York","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":501,"postalCode":"10118","latitude":40.7123,"longitude":-74.0068},"tokenResult":{"accessToken
2024-05-23 13:51:21 UTC	1242	IN	Data Raw: 6c 73 65 2c 22 77 65 65 6b 64 61 79 73 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 74 68 72 65 61 64 65 64 57 69 74 68 50 72 65 76 69 6f 75 73 22 3a 66 61 6c 73 65 2c 22 63 61 6d 70 61 69 67 6e 52 65 65 6e 72 6f 6c 6c 6d 65 6e 74 54 79 70 65 22 3a 22 41 4c 57 41 59 53 22 2c 22 61 63 63 6f 75 6e 74 4c 69 73 74 49 64 73 22 3a 5b 5d 2c 22 65 78 63 6c 75 64 65 64 41 63 63 6f 75 6e 74 4c 69 73 74 49 64 73 22 3a 5b 5d 2c 22 6f 72 64 65 72 49 6e 50 6c 61 79 62 6f 6f 6b 22 3a 6e 75 6c 6c 2c 22 61 6c 6c 6f 77 54 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 22 3a 74 72 75 65 2c 22 69 73 44 72 69 66 74 56 69 64 65 6f 43 61 6d 70 61 69 67 6e 22 3a 66 61 6c 73 65 2c 22 75 70 64 61 74 65 64 41 74 22 3a 31 37 31 35 38 38 33 30 32 30 33 39 32 2c 22 69 73 45 78 70 65 72 69 6d Data Ascii: lse,"weekdaysOnly":false,"threadedWithPrevious":false,"campaignReenrollmentType":"ALWAYS","accountListIds":[],"excludedAccountListIds":[],"orderInPlaybook":null,"allowTeamAvailability":true,"isDriftVideoCampaign":false,"updatedAt":1715883020392,"isExperim
2024-05-23 13:51:21 UTC	16384	IN	Data Raw: 36 31 64 66 0d 0a 68 65 72 65 21 20 57 65 6c 63 6f 6d 65 20 74 6f 20 6f 75 72 20 73 69 74 65 2e 20 4f 75 72 20 74 65 61 6d 20 69 73 20 61 77 61 79 20 6e 6f 77 20 61 6e 64 20 75 6e 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 61 74 74 65 6e 64 20 74 6f 20 6d 65 73 73 61 67 65 73 2e 20 59 6f 75 20 63 61 6e 20 76 69 73 69 74 20 74 68 65 20 43 6f 6e 74 61 63 74 20 55 73 20 70 61 67 65 20 66 6f 72 20 66 75 72 74 68 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 61 77 61 79 4d 65 73 73 61 67 65 53 65 6e 64 65 72 49 64 22 3a 30 2c 22 65 6d 61 69 6c 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 61 77 61 79 49 6d 61 67 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e Data Ascii: 61dfhere! Welcome to our site. Our team is away now and unavailable to attend to messages. You can visit the Contact Us page for further information.","awayMessageSenderId":0,"emailCaptureMessage":null,"awayImageUrl":null,"confirmationMessage":null,"con
2024-05-23 13:51:21 UTC	8679	IN	Data Raw: 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 49 64 22 3a 39 30 35 30 31 33 7d 2c 7b 22 69 64 22 3a 39 34 37 33 38 38 2c 22 6d 65 6d 62 65 72 73 22 3a 5b 32 31 37 34 35 38 39 2c 32 31 38 35 38 35 31 2c 32 32 32 39 39 32 35 2c 35 31 31 31 31 38 32 2c 35 31 35 32 30 31 36 2c 35 31 37 36 38 39 39 2c 35 31 37 37 32 35 38 2c 35 32 38 34 32 37 35 5d 2c 22 61 75 74 6f 4f 66 66 6c 69 6e 65 22 3a 74 72 75 65 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 4d 6f 64 65 22 3a 22 41 4c 57 41 59 53 5f 4f 4e 4c 49 4e 45 22 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 49 64 22 3a 39 30 35 35 35 38 7d 2c 7b 22 69 64 22 3a 39 35 33 38 38 33 2c 22 6d 65 6d 62 65 72 73 22 3a 5b 35 31 34 30 39 30 34 5d 2c 22 61 75 74 6f 4f 66 66 6c 69 6e 65 22 3a 74 72 Data Ascii: ,"teamAvailabilityId":905013},{"id":947388,"members":[2174589,2185851,2229925,5111182,5152016,5176899,5177258,5284275],"autoOffline":true,"teamAvailabilityMode":"ALWAYS_ONLINE","teamAvailabilityId":905558},{"id":953883,"members":[5140904],"autoOffline":tr
2024-05-23 13:51:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50257	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 648 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	648	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 6e 36 6b 32 79 75 62 72 36 66 77 37 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 6c 65 61 64 5f 69 64 3d 64 62 63 61 35 37 38 39 2d 33 36 63 30 2d 34 38 65 33 2d 39 33 64 35 2d 65 64 39 61 36 35 65 37 37 36 61 65 26 6d 61 72 6b 65 74 6f 5f 63 6f 6f 6b 69 65 3d 69 64 25 33 41 34 39 31 2d 56 4e 47 2d 37 39 30 25 32 36 74 6f 6b 65 6e 25 33 41 5f 6d 63 68 2d 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2d 31 37 31 36 34 37 32 32 35 36 30 30 32 2d 34 36 31 30 37 26 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 6f 25 32 32 25 33 41 25 32 32 69 64 25 33 41 34 39 31 2d 56 4e 47 2d 37 39 30 25 32 36 74 6f 6b 65 6e 25 Data Ascii: embed_id=n6k2yubr6fw7&client_id=f6zuizdyhxrm7r&consent_id=has_consent&lead_id=dbca5789-36c0-48e3-93d5-ed9a65e776ae&marketo_cookie=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&integrations=%7B%22marketo%22%3A%22id%3A491-VNG-790%26token%
2024-05-23 13:51:21 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Thu, 23 May 2024 13:51:21 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: a34adfa5d07e66a3 vary: Accept-Encoding x-envoy-upstream-service-time: 445 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 4c691f43539bb56ddcaef755730a6e86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: 7rv7EKQZmmtXUJ8i4UrN0gpNLlhXQmaAe6x1M31X84x3xI9u9-m-aQ==
2024-05-23 13:51:21 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 30 31 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 38 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 6e Data Ascii: 4151{"location":{"ip":"8.46.123.175","city":"New York","subdivision":"New York","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":501,"postalCode":"10118","latitude":40.7123,"longitude":-74.0068},"tokenResult":{"accessToken
2024-05-23 13:51:21 UTC	1242	IN	Data Raw: 65 78 70 65 72 69 6d 65 6e 74 22 3a 32 39 32 32 36 30 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 31 32 4b 6c 50 6f 65 33 22 3a 33 32 32 37 33 32 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 4a 38 62 6d 37 47 52 7a 22 3a 33 34 38 33 35 33 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 6f 42 33 54 38 45 59 44 22 3a 32 39 38 36 32 32 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 71 52 41 6b 56 4b 39 36 22 3a 32 36 35 35 36 34 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 56 41 50 65 41 31 55 55 2d 65 78 70 65 72 69 6d 65 6e 74 22 3a 33 32 33 30 32 31 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 45 54 69 36 36 47 71 58 22 3a 33 36 30 34 36 33 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 Data Ascii: experiment":292260,"bot_test-1510748-12KlPoe3":322732,"bot_test-1510748-J8bm7GRz":348353,"bot_test-1510748-oB3T8EYD":298622,"bot_test-1510748-qRAkVK96":265564,"bot_test-1510748-VAPeA1UU-experiment":323021,"bot_test-1510748-ETi66GqX":360463,"bot_test-15107
2024-05-23 13:51:22 UTC	11505	IN	Data Raw: 32 63 65 39 0d 0a 4f 69 53 69 2d 65 78 70 65 72 69 6d 65 6e 74 22 3a 33 34 33 30 35 39 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 48 45 49 4b 45 59 6c 70 22 3a 33 36 36 33 34 35 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 55 78 77 31 57 76 45 72 22 3a 33 34 35 34 33 31 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 7a 47 6d 42 48 6a 64 55 22 3a 33 32 34 33 30 33 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 75 45 42 6d 38 33 4f 6e 22 3a 33 31 31 38 35 35 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 6a 66 6d 6a 41 71 77 46 22 3a 33 31 39 37 39 31 2c 22 62 6f 74 5f 74 65 73 74 2d 31 35 31 30 37 34 38 2d 32 74 43 4f 68 32 71 33 22 3a 32 35 30 38 37 35 7d 2c 22 73 68 6f 77 42 72 61 6e 64 69 6e 67 22 Data Ascii: 2ce9OiSi-experiment":343059,"bot_test-1510748-HEIKEYlp":366345,"bot_test-1510748-Uxw1WvEr":345431,"bot_test-1510748-zGmBHjdU":324303,"bot_test-1510748-uEBm83On":311855,"bot_test-1510748-jfmjAqwF":319791,"bot_test-1510748-2tCOh2q3":250875},"showBranding"
2024-05-23 13:51:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50256	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 592 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:20 UTC	592	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 36 6b 32 79 75 62 72 36 66 77 37 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 63 35 32 34 36 61 65 34 2d 66 63 32 31 2d 34 39 31 35 2d 39 34 65 63 2d 61 63 63 30 33 35 38 62 37 32 62 30 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 66 35 36 62 34 61 35 38 2d 63 30 34 64 2d 34 61 32 61 2d 39 32 37 31 2d 63 38 62 31 31 64 31 38 31 38 33 32 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%22n6k2yubr6fw7%22%2C%22sessionId%22%3A%22c5246ae4-fc21-4915-94ec-acc0358b72b0%22%2C%22instanceId%22%3A%22f56b4a58-c04d-4a2a-9271-c8b11d181832%22%2C%22context%22%3A%7B%22url%22%3A
2024-05-23 13:51:21 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:20 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: fb2e223f00e1e256 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 12 server: istio-envoy connection: close
2024-05-23 13:51:21 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50258	46.228.174.117	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:20 UTC	492	OUT	GET /csync/RX-19036548-604e-400a-8f7c-3c0534f34a8e-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D
2024-05-23 13:51:21 UTC	387	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:21 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-19036548-604e-400a-8f7c-3c0534f34a8e-003%22%7D; path=/; expires=Fri, 23 May 2025 13:51:21 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-05-23 13:51:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50271	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:21 UTC	736	OUT	GET /assets/index-7d834d9e.css HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:21 UTC	374	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:21 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 84339 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/css connection: close
2024-05-23 13:51:21 UTC	1086	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 33 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 Data Ascii: /! Font Awesome Free 5.13.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 62 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 6c 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 33 65 6d 7d 2e 66 61 2d 73 70 69 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 32 73 20 6c 69 6e Data Ascii: a-pull-left,.far.fa-pull-left,.fas.fa-pull-left{margin-right:.3em}.fa.fa-pull-right,.fab.fa-pull-right,.fal.fa-pull-right,.far.fa-pull-right,.fas.fa-pull-right{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s linear infinite;animation:fa-spin 2s lin
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 6e 74 61 6c 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 7d 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 2c 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2c 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 6e 6f 6e 65 3b 66 69 6c 74 65 72 3a 6e 6f 6e 65 7d 2e 66 61 2d 73 74 61 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c Data Ascii: ntal.fa-flip-vertical{-webkit-transform:scale(-1);transform:scale(-1)}:root .fa-flip-both,:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270{-webkit-filter:none;filter:none}.fa-stack{display:inl
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 bd 22 7d 2e 66 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 85 bb 22 7d 2e 66 61 2d 61 6e 67 65 6c 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 89 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 83 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 80 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 81 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: r:before{content:""}.fa-android:before{content:""}.fa-angellist:before{content:""}.fa-angle-double-down:before{content:""}.fa-angle-double-left:before{content:""}.fa-angle-double-right:before{content:""}.fa-angle-double-up:before{content
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 66 61 2d 61 73 73 69 73 74 69 76 65 2d 6c 69 73 74 65 6e 69 6e 67 2d 73 79 73 74 65 6d 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8a a2 22 7d 2e 66 61 2d 61 73 74 65 72 69 73 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 81 a9 22 7d 2e 66 61 2d 61 73 79 6d 6d 65 74 72 69 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d b2 22 7d 2e 66 61 2d 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 ba 22 7d 2e 66 61 2d 61 74 6c 61 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 98 22 7d 2e 66 61 2d 61 74 6c 61 73 73 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9d bb 22 7d 2e 66 61 2d 61 74 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 92 22 7d 2e 66 61 2d 61 75 64 69 62 Data Ascii: fa-assistive-listening-systems:before{content:""}.fa-asterisk:before{content:""}.fa-asymmetrik:before{content:""}.fa-at:before{content:""}.fa-atlas:before{content:""}.fa-atlassian:before{content:""}.fa-atom:before{content:""}.fa-audib
2024-05-23 13:51:21 UTC	4	IN	Data Raw: 63 65 3a 62 Data Ascii: ce:b
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 b4 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 b5 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 b3 22 7d 2e 66 61 2d 62 65 6c 6c 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 b6 22 7d 2e 66 61 2d 62 65 7a 69 65 72 2d 63 75 72 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 9b 22 7d 2e 66 61 2d 62 69 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 99 87 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 86 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: efore{content:""}.fa-behance-square:before{content:""}.fa-bell:before{content:""}.fa-bell-slash:before{content:""}.fa-bezier-curve:before{content:""}.fa-bible:before{content:""}.fa-bicycle:before{content:""}.fa-biking:before{content:"
2024-05-23 13:51:21 UTC	932	IN	Data Raw: 2d 74 69 73 73 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a5 9b 22 7d 2e 66 61 2d 62 6f 78 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a8 22 7d 2e 66 61 2d 62 72 61 69 6c 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8a a1 22 7d 2e 66 61 2d 62 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 9c 22 7d 2e 66 61 2d 62 72 65 61 64 2d 73 6c 69 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9f ac 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 82 b1 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a9 22 7d 2e 66 61 2d 62 72 6f 61 64 63 61 73 74 2d 74 6f Data Ascii: -tissue:before{content:""}.fa-boxes:before{content:""}.fa-braille:before{content:""}.fa-brain:before{content:""}.fa-bread-slice:before{content:""}.fa-briefcase:before{content:""}.fa-briefcase-medical:before{content:""}.fa-broadcast-to
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 63 61 6c 65 6e 64 61 72 2d 64 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9e 83 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 89 b2 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 89 b1 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 89 b3 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 77 65 65 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9e 84 22 7d 2e 66 61 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 80 b0 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: calendar-day:before{content:""}.fa-calendar-minus:before{content:""}.fa-calendar-plus:before{content:""}.fa-calendar-times:before{content:""}.fa-calendar-week:before{content:""}.fa-camera:before{content:""}.fa-camera-retro:before{content
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 22 ef 87 b5 22 7d 2e 66 61 2d 63 63 2d 76 69 73 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 b0 22 7d 2e 66 61 2d 63 65 6e 74 65 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8e 80 22 7d 2e 66 61 2d 63 65 6e 74 6f 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9e 89 22 7d 2e 66 61 2d 63 65 72 74 69 66 69 63 61 74 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 82 a3 22 7d 2e 66 61 2d 63 68 61 69 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9b 80 22 7d 2e 66 61 2d 63 68 61 6c 6b 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 94 9b 22 7d 2e 66 61 2d 63 68 61 6c 6b 62 6f 61 72 64 2d 74 65 61 63 68 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 94 9c 22 7d Data Ascii: ""}.fa-cc-visa:before{content:""}.fa-centercode:before{content:""}.fa-centos:before{content:""}.fa-certificate:before{content:""}.fa-chair:before{content:""}.fa-chalkboard:before{content:""}.fa-chalkboard-teacher:before{content:""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50272	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:21 UTC	751	OUT	GET /assets/index-12250e24.js HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://play.libsyn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:21 UTC	382	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:21 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 669543 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/javascript connection: close
2024-05-23 13:51:21 UTC	1078	IN	Data Raw: 76 61 72 20 45 6d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 41 6d 3d 28 65 2c 74 2c 72 29 3d 3e 74 20 69 6e 20 65 3f 45 6d 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 3a 65 5b 74 5d 3d 72 3b 76 61 72 20 54 75 3d 28 65 2c 74 2c 72 29 3d 3e 28 41 6d 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 72 29 2c 72 29 3b 69 6d 70 6f 72 74 7b 72 20 61 73 20 7a 2c 61 20 61 73 20 6b 6d 2c 63 20 61 73 20 59 2c 67 20 61 73 20 50 69 2c 62 20 61 73 20 66 74 2c 52 20 61 73 20 52 65 2c 5f 20 61 73 20 6b 65 2c 64 20 61 73 20 76 64 7d 66 72 6f 6d 22 2e 2f 76 65 6e 64 6f 72 Data Ascii: var Em=Object.defineProperty;var Am=(e,t,r)=>t in e?Em(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Tu=(e,t,r)=>(Am(e,typeof t!="symbol"?t+"":t,r),r);import{r as z,a as km,c as Y,g as Pi,b as ft,R as Re,_ as ke,d as vd}from"./vendor
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 76 61 72 20 44 6d 3d 7a 2c 43 6d 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 24 6d 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 49 6d 3d 4f 62 6a 65 63 Data Ascii: ght (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */var Dm=z,Cm=Symbol.for("react.element"),$m=Symbol.for("react.fragment"),Im=Objec
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 20 50 6c 65 61 73 65 20 75 73 65 20 60 70 61 72 73 65 49 53 4f 60 20 74 6f 20 70 61 72 73 65 20 73 74 72 69 6e 67 73 2e 20 53 65 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 2e 69 6f 2f 66 6a 75 6c 65 22 29 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 6e 65 77 20 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 29 29 2c 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 6d 28 65 2c 74 29 7b 48 65 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 72 3d 6b 74 28 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 6e 3d 75 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 72 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 6d 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 44 61 74 65 2e 55 54 43 28 65 2e 67 65 74 46 Data Ascii: rguments. Please use `parseISO` to parse strings. See: https://git.io/fjule"),console.warn(new Error().stack)),new Date(NaN))}function Mm(e,t){He(2,arguments);var r=kt(e).getTime(),n=ut(t);return new Date(r+n)}function Nm(e){var t=new Date(Date.UTC(e.getF
2024-05-23 13:51:21 UTC	1412	IN	Data Raw: 76 65 72 58 59 65 61 72 73 3a 7b 6f 6e 65 3a 22 6f 76 65 72 20 31 20 79 65 61 72 22 2c 6f 74 68 65 72 3a 22 6f 76 65 72 20 7b 7b 63 6f 75 6e 74 7d 7d 20 79 65 61 72 73 22 7d 2c 61 6c 6d 6f 73 74 58 59 65 61 72 73 3a 7b 6f 6e 65 3a 22 61 6c 6d 6f 73 74 20 31 20 79 65 61 72 22 2c 6f 74 68 65 72 3a 22 61 6c 6d 6f 73 74 20 7b 7b 63 6f 75 6e 74 7d 7d 20 79 65 61 72 73 22 7d 7d 2c 42 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 61 3d 6a 6d 5b 65 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 3f 6e 3d 61 3a 74 3d 3d 3d 31 3f 6e 3d 61 2e 6f 6e 65 3a 6e 3d 61 2e 6f 74 68 65 72 2e 72 65 70 6c 61 63 65 28 22 7b 7b 63 6f 75 6e 74 7d 7d 22 2c 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 72 21 3d 6e 75 6c 6c 26 Data Ascii: verXYears:{one:"over 1 year",other:"over {{count}} years"},almostXYears:{one:"almost 1 year",other:"almost {{count}} years"}},Bm=function(e,t,r){var n,a=jm[e];return typeof a=="string"?n=a:t===1?n=a.one:n=a.other.replace("{{count}}",t.toString()),r!=null&
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 61 72 20 73 3d 65 2e 64 65 66 61 75 6c 74 57 69 64 74 68 2c 6c 3d 6e 2e 77 69 64 74 68 3f 53 74 72 69 6e 67 28 6e 2e 77 69 64 74 68 29 3a 65 2e 64 65 66 61 75 6c 74 57 69 64 74 68 3b 69 3d 65 2e 76 61 6c 75 65 73 5b 6c 5d 7c 7c 65 2e 76 61 6c 75 65 73 5b 73 5d 7d 76 61 72 20 63 3d 65 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 3f 65 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 28 74 29 3a 74 3b 72 65 74 75 72 6e 20 69 5b 63 5d 7d 7d 76 61 72 20 51 6d 3d 7b 6e 61 72 72 6f 77 3a 5b 22 42 22 2c 22 41 22 5d 2c 61 62 62 72 65 76 69 61 74 65 64 3a 5b 22 42 43 22 2c 22 41 44 22 5d 2c 77 69 64 65 3a 5b 22 42 65 66 6f 72 65 20 43 68 72 69 73 74 22 2c 22 41 6e 6e 6f 20 44 6f 6d 69 6e 69 22 5d 7d 2c 4a 6d 3d 7b 6e 61 72 72 6f 77 3a 5b 22 31 22 2c 22 32 Data Ascii: ar s=e.defaultWidth,l=n.width?String(n.width):e.defaultWidth;i=e.values[l]\|\|e.values[s]}var c=e.argumentCallback?e.argumentCallback(t):t;return i[c]}}var Qm={narrow:["B","A"],abbreviated:["BC","AD"],wide:["Before Christ","Anno Domini"]},Jm={narrow:["1","2
2024-05-23 13:51:21 UTC	52	IN	Data Raw: 6f 72 6e 69 6e 67 22 2c 61 66 74 65 72 6e 6f 6f 6e 3a 22 69 6e 20 74 68 65 20 61 66 74 65 72 6e 6f 6f 6e 22 2c 65 76 65 6e 69 6e 67 3a 22 69 6e 20 74 68 65 Data Ascii: orning",afternoon:"in the afternoon",evening:"in the
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 20 65 76 65 6e 69 6e 67 22 2c 6e 69 67 68 74 3a 22 61 74 20 6e 69 67 68 74 22 7d 2c 77 69 64 65 3a 7b 61 6d 3a 22 61 2e 6d 2e 22 2c 70 6d 3a 22 70 2e 6d 2e 22 2c 6d 69 64 6e 69 67 68 74 3a 22 6d 69 64 6e 69 67 68 74 22 2c 6e 6f 6f 6e 3a 22 6e 6f 6f 6e 22 2c 6d 6f 72 6e 69 6e 67 3a 22 69 6e 20 74 68 65 20 6d 6f 72 6e 69 6e 67 22 2c 61 66 74 65 72 6e 6f 6f 6e 3a 22 69 6e 20 74 68 65 20 61 66 74 65 72 6e 6f 6f 6e 22 2c 65 76 65 6e 69 6e 67 3a 22 69 6e 20 74 68 65 20 65 76 65 6e 69 6e 67 22 2c 6e 69 67 68 74 3a 22 61 74 20 6e 69 67 68 74 22 7d 7d 2c 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 65 29 2c 6e 3d 72 25 31 30 30 3b 69 66 28 6e 3e 32 30 7c 7c 6e 3c 31 30 29 73 77 69 74 63 68 28 6e 25 31 30 29 7b 63 61 73 Data Ascii: evening",night:"at night"},wide:{am:"a.m.",pm:"p.m.",midnight:"midnight",noon:"noon",morning:"in the morning",afternoon:"in the afternoon",evening:"in the evening",night:"at night"}},ng=function(e,t){var r=Number(e),n=r%100;if(n>20\|\|n<10)switch(n%10){cas
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 65 2e 70 61 72 73 65 50 61 74 74 65 72 6e 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 75 3d 65 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3f 65 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 28 69 5b 30 5d 29 3a 69 5b 30 5d 3b 75 3d 72 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3f 72 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 28 75 29 3a 75 3b 76 61 72 20 6f 3d 74 2e 73 6c 69 63 65 28 61 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 75 2c 72 65 73 74 3a 6f 7d 7d 7d 76 61 72 20 73 67 3d 2f 5e 28 5c 64 2b 29 28 74 68 7c 73 74 7c 6e 64 7c 72 64 29 3f 2f 69 2c 6c 67 3d 2f 5c 64 2b 2f 69 2c 63 67 3d 7b 6e 61 72 72 6f 77 3a 2f 5e 28 62 7c 61 29 2f 69 2c 61 62 62 72 65 76 69 61 74 65 64 3a 2f 5e 28 62 5c 2e 3f 5c 73 3f 63 Data Ascii: e.parsePattern);if(!i)return null;var u=e.valueCallback?e.valueCallback(i[0]):i[0];u=r.valueCallback?r.valueCallback(u):u;var o=t.slice(a.length);return{value:u,rest:o}}}var sg=/^(\d+)(th\|st\|nd\|rd)?/i,lg=/\d+/i,cg={narrow:/^(b\|a)/i,abbreviated:/^(b\.?\s?c
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 6c 4e 75 6d 62 65 72 3a 53 64 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 3a 73 67 2c 70 61 72 73 65 50 61 74 74 65 72 6e 3a 6c 67 2c 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 7d 29 2c 65 72 61 3a 4f 74 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 73 3a 63 67 2c 64 65 66 61 75 6c 74 4d 61 74 63 68 57 69 64 74 68 3a 22 77 69 64 65 22 2c 70 61 72 73 65 50 61 74 74 65 72 6e 73 3a 66 67 2c 64 65 66 61 75 6c 74 50 61 72 73 65 57 69 64 74 68 3a 22 61 6e 79 22 7d 29 2c 71 75 61 72 74 65 72 3a 4f 74 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 73 3a 64 67 2c 64 65 66 61 75 6c 74 4d 61 74 63 68 57 69 64 74 68 3a 22 77 69 64 65 22 2c 70 61 72 73 65 50 61 74 74 65 72 6e 73 Data Ascii: lNumber:Sd({matchPattern:sg,parsePattern:lg,valueCallback:function(e){return parseInt(e,10)}}),era:Ot({matchPatterns:cg,defaultMatchWidth:"wide",parsePatterns:fg,defaultParseWidth:"any"}),quarter:Ot({matchPatterns:dg,defaultMatchWidth:"wide",parsePatterns
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 65 29 2c 72 3d 6e 65 77 20 44 61 74 65 28 30 29 3b 72 2e 73 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 74 2c 30 2c 34 29 2c 72 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 3b 76 61 72 20 6e 3d 57 61 28 72 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 45 67 3d 36 30 34 38 65 35 3b 66 75 6e 63 74 69 6f 6e 20 41 67 28 65 29 7b 48 65 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 6b 74 28 65 29 2c 72 3d 57 61 28 74 29 2e 67 65 74 54 69 6d 65 28 29 2d 50 67 28 74 29 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2f 45 67 29 2b 31 7d 66 75 6e 63 74 69 6f 6e 20 47 61 28 65 2c 74 29 7b 48 65 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 72 3d 74 7c 7c 7b 7d 2c 6e 3d 72 2e 6c 6f 63 61 Data Ascii: e),r=new Date(0);r.setUTCFullYear(t,0,4),r.setUTCHours(0,0,0,0);var n=Wa(r);return n}var Eg=6048e5;function Ag(e){He(1,arguments);var t=kt(e),r=Wa(t).getTime()-Pg(t).getTime();return Math.round(r/Eg)+1}function Ga(e,t){He(1,arguments);var r=t\|\|{},n=r.loca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50273	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:21 UTC	752	OUT	GET /assets/vendor-c69516f0.js HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://play.libsyn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:21 UTC	382	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:21 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 243841 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/javascript connection: close
2024-05-23 13:51:21 UTC	1066	IN	Data Raw: 76 61 72 20 75 75 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3c 22 75 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 67 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 22 64 65 66 61 75 6c 74 22 29 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 72 52 28 65 29 7b 69 66 28 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b Data Ascii: var uu=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function lg(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function rR(e){if(e.__esModule)return e;
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 6f 66 69 6c 65 72 22 29 2c 54 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 6f 76 69 64 65 72 22 29 2c 52 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 74 65 78 74 22 29 2c 50 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 2c 4f 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 2c 41 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 4c 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 2c 24 68 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 4e 32 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d Data Ascii: l.for("react.profiler"),T2=Symbol.for("react.provider"),R2=Symbol.for("react.context"),P2=Symbol.for("react.forward_ref"),O2=Symbol.for("react.suspense"),A2=Symbol.for("react.memo"),L2=Symbol.for("react.lazy"),$h=Symbol.iterator;function N2(e){return e===
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 29 26 26 28 6f 5b 75 5d 3d 6e 5b 75 5d 29 3b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 64 3d 3d 3d 31 29 6f 2e 63 68 69 6c 64 72 65 6e 3d 74 3b 65 6c 73 65 20 69 66 28 31 3c 64 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 64 29 2c 76 3d 30 3b 76 3c 64 3b 76 2b 2b 29 67 5b 76 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 76 2b 32 5d 3b 6f 2e 63 68 69 6c 64 72 65 6e 3d 67 7d 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 75 20 69 6e 20 64 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 64 29 6f 5b 75 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6f 5b 75 5d 3d 64 5b 75 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 51 75 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 73 2c 72 65 66 3a 66 2c 70 72 Data Ascii: )&&(o[u]=n[u]);var d=arguments.length-2;if(d===1)o.children=t;else if(1<d){for(var g=Array(d),v=0;v<d;v++)g[v]=arguments[v+2];o.children=g}if(e&&e.defaultProps)for(u in d=e.defaultProps,d)o[u]===void 0&&(o[u]=d[u]);return{$$typeof:Qu,type:e,key:s,ref:f,pr
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 2e 6b 65 79 73 28 65 29 2e 6a 6f 69 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 6e 29 2b 22 29 2e 20 49 66 20 79 6f 75 20 6d 65 61 6e 74 20 74 6f 20 72 65 6e 64 65 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 63 68 69 6c 64 72 65 6e 2c 20 75 73 65 20 61 6e 20 61 72 72 61 79 20 69 6e 73 74 65 61 64 2e 22 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 4b 6c 28 65 2c 6e 2c 74 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 75 3d 5b 5d 2c 6f 3d 30 3b 72 65 74 75 72 6e 20 6f 6f 28 65 2c 75 2c 22 22 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 73 2c 6f 2b 2b 29 7d 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 44 32 28 65 29 7b 69 66 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d Data Ascii: .keys(e).join(", ")+"}":n)+"). If you meant to render a collection of children, use an array instead.");return f}function Kl(e,n,t){if(e==null)return e;var u=[],o=0;return oo(e,u,"","",function(s){return n.call(t,s,o++)}),u}function D2(e){if(e._status===-
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 74 50 72 6f 70 73 3b 66 6f 72 28 67 20 69 6e 20 6e 29 64 67 2e 63 61 6c 6c 28 6e 2c 67 29 26 26 21 70 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 67 29 26 26 28 75 5b 67 5d 3d 6e 5b 67 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 64 21 3d 3d 76 6f 69 64 20 30 3f 64 5b 67 5d 3a 6e 5b 67 5d 29 7d 76 61 72 20 67 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 67 3d 3d 3d 31 29 75 2e 63 68 69 6c 64 72 65 6e 3d 74 3b 65 6c 73 65 20 69 66 28 31 3c 67 29 7b 64 3d 41 72 72 61 79 28 67 29 3b 66 6f 72 28 76 61 72 20 76 3d 30 3b 76 3c 67 3b 76 2b 2b 29 64 5b 76 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 76 2b 32 5d 3b 75 2e 63 68 69 6c 64 72 65 6e 3d 64 7d 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 51 75 2c 74 79 70 65 3a 65 2e 74 79 70 65 2c 6b 65 Data Ascii: tProps;for(g in n)dg.call(n,g)&&!pg.hasOwnProperty(g)&&(u[g]=n[g]===void 0&&d!==void 0?d[g]:n[g])}var g=arguments.length-2;if(g===1)u.children=t;else if(1<g){d=Array(g);for(var v=0;v<g;v++)d[v]=arguments[v+2];u.children=d}return{$$typeof:Qu,type:e.type,ke
2024-05-23 13:51:21 UTC	16	IN	Data Raw: 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 Data Ascii: .useImperativeHa
2024-05-23 13:51:21 UTC	1448	IN	Data Raw: 6e 64 6c 65 28 65 2c 6e 2c 74 29 7d 3b 6f 65 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 4d 65 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 4d 65 6d 6f 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 52 65 64 75 63 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 Data Ascii: ndle(e,n,t)};oe.useInsertionEffect=function(e,n){return on.current.useInsertionEffect(e,n)};oe.useLayoutEffect=function(e,n){return on.current.useLayoutEffect(e,n)};oe.useMemo=function(e,n){return on.current.useMemo(e,n)};oe.useReducer=function(e,n,t){ret
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 65 78 3b 72 65 74 75 72 6e 20 62 21 3d 3d 30 3f 62 3a 57 2e 69 64 2d 5a 2e 69 64 7d 69 66 28 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 73 3d 70 65 72 66 6f 72 6d 61 6e 63 65 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 6e 6f 77 28 29 7d 7d 65 6c 73 65 7b 76 61 72 20 66 3d 44 61 74 65 2c 64 3d 66 2e 6e 6f 77 28 29 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 2e 6e 6f 77 28 29 2d 64 7d 7d 76 61 72 20 67 3d 5b 5d 2c 76 3d 5b 5d 2c 43 3d 31 2c 6b 3d 6e 75 6c 6c 2c 54 3d 33 Data Ascii: ex;return b!==0?b:W.id-Z.id}if(typeof performance=="object"&&typeof performance.now=="function"){var s=performance;e.unstable_now=function(){return s.now()}}else{var f=Date,d=f.now();e.unstable_now=function(){return f.now()-d}}var g=[],v=[],C=1,k=null,T=3
2024-05-23 13:51:21 UTC	1460	IN	Data Raw: 72 20 6d 72 3b 69 66 28 74 79 70 65 6f 66 20 5f 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 28 76 72 29 7d 3b 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 3c 22 75 22 29 7b 76 61 72 20 44 69 3d 6e 65 77 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 2c 6d 73 3d 44 69 2e 70 6f 72 74 32 3b 44 69 2e 70 6f 72 74 31 2e 6f 6e 6d 65 73 73 61 67 65 3d 76 72 2c 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 75 6c 6c 29 7d 7d 65 6c 73 65 20 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 71 28 76 72 2c 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 69 28 57 29 7b 48 3d 57 2c 4b 7c 7c 28 4b 3d 21 30 2c 6d 72 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 47 6e 28 Data Ascii: r mr;if(typeof _=="function")mr=function(){_(vr)};else if(typeof MessageChannel<"u"){var Di=new MessageChannel,ms=Di.port2;Di.port1.onmessage=vr,mr=function(){ms.postMessage(null)}}else mr=function(){q(vr,0)};function zi(W){H=W,K\|\|(K=!0,mr())}function Gn(
2024-05-23 13:51:21 UTC	1424	IN	Data Raw: 31 30 37 33 37 34 31 38 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 46 65 3d 31 65 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 46 65 3d 35 65 33 7d 72 65 74 75 72 6e 20 46 65 3d 62 2b 46 65 2c 57 3d 7b 69 64 3a 43 2b 2b 2c 63 61 6c 6c 62 61 63 6b 3a 5a 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 57 2c 73 74 61 72 74 54 69 6d 65 3a 62 2c 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3a 46 65 2c 73 6f 72 74 49 6e 64 65 78 3a 2d 31 7d 2c 62 3e 63 65 3f 28 57 2e 73 6f 72 74 49 6e 64 65 78 3d 62 2c 6e 28 76 2c 57 29 2c 74 28 67 29 3d 3d 3d 6e 75 6c 6c 26 26 57 3d 3d 3d 74 28 76 29 26 26 28 49 3f 28 77 28 51 29 2c 51 3d 2d 31 29 3a 49 3d 21 30 2c 47 6e 28 7a 2c 62 2d 63 65 29 29 29 3a 28 57 2e 73 6f 72 74 49 6e 64 65 78 3d 46 65 2c 6e 28 67 2c 57 29 2c 50 Data Ascii: 1073741823;break;case 4:Fe=1e4;break;default:Fe=5e3}return Fe=b+Fe,W={id:C++,callback:Z,priorityLevel:W,startTime:b,expirationTime:Fe,sortIndex:-1},b>ce?(W.sortIndex=b,n(v,W),t(g)===null&&W===t(v)&&(I?(w(Q),Q=-1):I=!0,Gn(z,b-ce))):(W.sortIndex=Fe,n(g,W),P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50264	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:21 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:21 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 458 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift66ce9f2424a9d65a823b541fa0d cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:21 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 ee44697df8ff7fee1512bec7b4da5368.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: va0mH-k9T4EOui6IAiTJAem_bJhb4AQtjJj8XTAgyV3LCne9n0XEJw==
2024-05-23 13:51:21 UTC	458	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50274	34.36.216.150	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:21 UTC	782	OUT	GET /connectors/clickagy/usersync?cookieQ=1&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f#1716472280674
2024-05-23 13:51:21 UTC	631	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f#1716472280674; Domain=.sitescout.com; Expires=Fri, 23-May-2025 13:51:21 GMT; Path=/; Secure; SameSite=None location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=5&cm=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553 Content-Length: 0 date: Thu, 23 May 2024 13:51:21 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50276	104.22.50.98	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:21 UTC	605	OUT	GET /?zdid=1332&zcluid=c4e190252a3ef1b7 HTTP/1.1 Host: spl.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:21 UTC	1119	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://c1.adform.net location: https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 set-cookie: zc=7745f62c-3738-44ad-6482-93a794c9b45d; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure set-cookie: zsc=m%24%91S5.%B2%A1%1Du6%F1J%19%C3osE%92%D7o.%E5%95%F5%8B%0D%1A%EB%7F%C2%8F%FA%9ES%03%F85%8C%80%3A%5Dx5T%2A%CD%D0H%0F%FE%FB%C7%CDM%91%C6%1A%217r%0B%AE%DEl%9B%9Bt%07%BD%04a~%03%5C~O4%0B%8B%D7%83%22; Path=/; Domain=.zeotap.com; Max-Age=86400; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885852eff4542fb-EWR
2024-05-23 13:51:21 UTC	250	IN	Data Raw: 31 31 38 0d 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 7a 65 6f 74 61 70 5f 64 64 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 26 61 6d 70 3b 7a 70 61 72 74 6e 65 72 69 64 3d 31 26 61 6d 70 3b 65 6e 76 3d 6d 57 65 62 26 61 6d 70 3b 65 76 65 6e 74 54 79 70 65 3d 6d 61 70 26 61 6d 70 3b 69 64 5f 6d 69 64 5f 34 3d 37 37 34 35 66 36 32 63 2d 33 37 33 38 2d 34 34 61 64 2d 36 34 38 32 2d 39 33 61 37 39 34 63 39 62 34 35 64 26 61 6d 70 3b 72 65 71 49 64 3d 66 38 31 38 62 65 66 33 2d 66 32 64 64 2d 34 36 38 61 2d 34 37 30 33 2d 66 38 32 65 36 31 63 64 31 37 66 65 26 61 6d 70 3b 7a 63 6c 75 69 64 3d 63 34 65 31 39 30 32 35 32 Data Ascii: 118<a href="https://cm.g.doubleclick.net/pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252
2024-05-23 13:51:21 UTC	37	IN	Data Raw: 61 33 65 66 31 62 37 26 61 6d 70 3b 7a 64 69 64 3d 31 33 33 32 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a 0d 0a Data Ascii: a3ef1b7&zdid=1332">Found</a>.
2024-05-23 13:51:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50284	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	751	OUT	GET /assets/index-12250e24.js HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://play.libsyn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:22 UTC	382	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:22 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 669543 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/javascript connection: close
2024-05-23 13:51:22 UTC	1078	IN	Data Raw: 76 61 72 20 45 6d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 41 6d 3d 28 65 2c 74 2c 72 29 3d 3e 74 20 69 6e 20 65 3f 45 6d 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 72 7d 29 3a 65 5b 74 5d 3d 72 3b 76 61 72 20 54 75 3d 28 65 2c 74 2c 72 29 3d 3e 28 41 6d 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 72 29 2c 72 29 3b 69 6d 70 6f 72 74 7b 72 20 61 73 20 7a 2c 61 20 61 73 20 6b 6d 2c 63 20 61 73 20 59 2c 67 20 61 73 20 50 69 2c 62 20 61 73 20 66 74 2c 52 20 61 73 20 52 65 2c 5f 20 61 73 20 6b 65 2c 64 20 61 73 20 76 64 7d 66 72 6f 6d 22 2e 2f 76 65 6e 64 6f 72 Data Ascii: var Em=Object.defineProperty;var Am=(e,t,r)=>t in e?Em(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var Tu=(e,t,r)=>(Am(e,typeof t!="symbol"?t+"":t,r),r);import{r as z,a as km,c as Y,g as Pi,b as ft,R as Re,_ as ke,d as vd}from"./vendor
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 0a 20 2a 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 69 6e 20 74 68 65 20 72 6f 6f 74 20 64 69 72 65 63 74 6f 72 79 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 74 72 65 65 2e 0a 20 2a 2f 76 61 72 20 44 6d 3d 7a 2c 43 6d 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 65 6c 65 6d 65 6e 74 22 29 2c 24 6d 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 72 61 67 6d 65 6e 74 22 29 2c 49 6d 3d 4f 62 6a 65 63 Data Ascii: ght (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT license found in the * LICENSE file in the root directory of this source tree. */var Dm=z,Cm=Symbol.for("react.element"),$m=Symbol.for("react.fragment"),Im=Objec
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 72 67 75 6d 65 6e 74 73 2e 20 50 6c 65 61 73 65 20 75 73 65 20 60 70 61 72 73 65 49 53 4f 60 20 74 6f 20 70 61 72 73 65 20 73 74 72 69 6e 67 73 2e 20 53 65 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 2e 69 6f 2f 66 6a 75 6c 65 22 29 2c 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 6e 65 77 20 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 29 29 2c 6e 65 77 20 44 61 74 65 28 4e 61 4e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 6d 28 65 2c 74 29 7b 48 65 28 32 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 72 3d 6b 74 28 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 6e 3d 75 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 72 2b 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 6d 28 65 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 65 28 44 61 74 65 2e 55 54 43 28 65 2e 67 65 74 46 Data Ascii: rguments. Please use `parseISO` to parse strings. See: https://git.io/fjule"),console.warn(new Error().stack)),new Date(NaN))}function Mm(e,t){He(2,arguments);var r=kt(e).getTime(),n=ut(t);return new Date(r+n)}function Nm(e){var t=new Date(Date.UTC(e.getF
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 76 65 72 58 59 65 61 72 73 3a 7b 6f 6e 65 3a 22 6f 76 65 72 20 31 20 79 65 61 72 22 2c 6f 74 68 65 72 3a 22 6f 76 65 72 20 7b 7b 63 6f 75 6e 74 7d 7d 20 79 65 61 72 73 22 7d 2c 61 6c 6d 6f 73 74 58 59 65 61 72 73 3a 7b 6f 6e 65 3a 22 61 6c 6d 6f 73 74 20 31 20 79 65 61 72 22 2c 6f 74 68 65 72 3a 22 61 6c 6d 6f 73 74 20 7b 7b 63 6f 75 6e 74 7d 7d 20 79 65 61 72 73 22 7d 7d 2c 42 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 61 3d 6a 6d 5b 65 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 22 73 74 72 69 6e 67 22 3f 6e 3d 61 3a 74 3d 3d 3d 31 3f 6e 3d 61 2e 6f 6e 65 3a 6e 3d 61 2e 6f 74 68 65 72 2e 72 65 70 6c 61 63 65 28 22 7b 7b 63 6f 75 6e 74 7d 7d 22 2c 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 72 21 3d 6e 75 6c 6c 26 Data Ascii: verXYears:{one:"over 1 year",other:"over {{count}} years"},almostXYears:{one:"almost 1 year",other:"almost {{count}} years"}},Bm=function(e,t,r){var n,a=jm[e];return typeof a=="string"?n=a:t===1?n=a.one:n=a.other.replace("{{count}}",t.toString()),r!=null&
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 64 65 66 61 75 6c 74 57 69 64 74 68 3b 69 3d 65 2e 76 61 6c 75 65 73 5b 6c 5d 7c 7c 65 2e 76 61 6c 75 65 73 5b 73 5d 7d 76 61 72 20 63 3d 65 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 3f 65 2e 61 72 67 75 6d 65 6e 74 43 61 6c 6c 62 61 63 6b 28 74 29 3a 74 3b 72 65 74 75 72 6e 20 69 5b 63 5d 7d 7d 76 61 72 20 51 6d 3d 7b 6e 61 72 72 6f 77 3a 5b 22 42 22 2c 22 41 22 5d 2c 61 62 62 72 65 76 69 61 74 65 64 3a 5b 22 42 43 22 2c 22 41 44 22 5d 2c 77 69 64 65 3a 5b 22 42 65 66 6f 72 65 20 43 68 72 69 73 74 22 2c 22 41 6e 6e 6f 20 44 6f 6d 69 6e 69 22 5d 7d 2c 4a 6d 3d 7b 6e 61 72 72 6f 77 3a 5b 22 31 22 2c 22 32 22 2c 22 33 22 2c 22 34 22 5d 2c 61 62 62 72 65 76 69 61 74 65 64 3a 5b 22 51 31 22 2c 22 51 32 22 2c 22 51 33 22 2c 22 51 34 22 5d 2c 77 69 64 Data Ascii: defaultWidth;i=e.values[l]\|\|e.values[s]}var c=e.argumentCallback?e.argumentCallback(t):t;return i[c]}}var Qm={narrow:["B","A"],abbreviated:["BC","AD"],wide:["Before Christ","Anno Domini"]},Jm={narrow:["1","2","3","4"],abbreviated:["Q1","Q2","Q3","Q4"],wid
2024-05-23 13:51:22 UTC	4	IN	Data Raw: 20 74 68 65 Data Ascii: the
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 20 65 76 65 6e 69 6e 67 22 2c 6e 69 67 68 74 3a 22 61 74 20 6e 69 67 68 74 22 7d 2c 77 69 64 65 3a 7b 61 6d 3a 22 61 2e 6d 2e 22 2c 70 6d 3a 22 70 2e 6d 2e 22 2c 6d 69 64 6e 69 67 68 74 3a 22 6d 69 64 6e 69 67 68 74 22 2c 6e 6f 6f 6e 3a 22 6e 6f 6f 6e 22 2c 6d 6f 72 6e 69 6e 67 3a 22 69 6e 20 74 68 65 20 6d 6f 72 6e 69 6e 67 22 2c 61 66 74 65 72 6e 6f 6f 6e 3a 22 69 6e 20 74 68 65 20 61 66 74 65 72 6e 6f 6f 6e 22 2c 65 76 65 6e 69 6e 67 3a 22 69 6e 20 74 68 65 20 65 76 65 6e 69 6e 67 22 2c 6e 69 67 68 74 3a 22 61 74 20 6e 69 67 68 74 22 7d 7d 2c 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 4e 75 6d 62 65 72 28 65 29 2c 6e 3d 72 25 31 30 30 3b 69 66 28 6e 3e 32 30 7c 7c 6e 3c 31 30 29 73 77 69 74 63 68 28 6e 25 31 30 29 7b 63 61 73 Data Ascii: evening",night:"at night"},wide:{am:"a.m.",pm:"p.m.",midnight:"midnight",noon:"noon",morning:"in the morning",afternoon:"in the afternoon",evening:"in the evening",night:"at night"}},ng=function(e,t){var r=Number(e),n=r%100;if(n>20\|\|n<10)switch(n%10){cas
2024-05-23 13:51:22 UTC	1436	IN	Data Raw: 65 2e 70 61 72 73 65 50 61 74 74 65 72 6e 29 3b 69 66 28 21 69 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 75 3d 65 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3f 65 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 28 69 5b 30 5d 29 3a 69 5b 30 5d 3b 75 3d 72 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3f 72 2e 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 28 75 29 3a 75 3b 76 61 72 20 6f 3d 74 2e 73 6c 69 63 65 28 61 2e 6c 65 6e 67 74 68 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 75 2c 72 65 73 74 3a 6f 7d 7d 7d 76 61 72 20 73 67 3d 2f 5e 28 5c 64 2b 29 28 74 68 7c 73 74 7c 6e 64 7c 72 64 29 3f 2f 69 2c 6c 67 3d 2f 5c 64 2b 2f 69 2c 63 67 3d 7b 6e 61 72 72 6f 77 3a 2f 5e 28 62 7c 61 29 2f 69 2c 61 62 62 72 65 76 69 61 74 65 64 3a 2f 5e 28 62 5c 2e 3f 5c 73 3f 63 Data Ascii: e.parsePattern);if(!i)return null;var u=e.valueCallback?e.valueCallback(i[0]):i[0];u=r.valueCallback?r.valueCallback(u):u;var o=t.slice(a.length);return{value:u,rest:o}}}var sg=/^(\d+)(th\|st\|nd\|rd)?/i,lg=/\d+/i,cg={narrow:/^(b\|a)/i,abbreviated:/^(b\.?\s?c
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 68 74 3a 2f 6e 69 67 68 74 2f 69 7d 7d 2c 77 67 3d 7b 6f 72 64 69 6e 61 6c 4e 75 6d 62 65 72 3a 53 64 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 3a 73 67 2c 70 61 72 73 65 50 61 74 74 65 72 6e 3a 6c 67 2c 76 61 6c 75 65 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 7d 7d 29 2c 65 72 61 3a 4f 74 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 73 3a 63 67 2c 64 65 66 61 75 6c 74 4d 61 74 63 68 57 69 64 74 68 3a 22 77 69 64 65 22 2c 70 61 72 73 65 50 61 74 74 65 72 6e 73 3a 66 67 2c 64 65 66 61 75 6c 74 50 61 72 73 65 57 69 64 74 68 3a 22 61 6e 79 22 7d 29 2c 71 75 61 72 74 65 72 3a 4f 74 28 7b 6d 61 74 63 68 50 61 74 74 65 72 6e 73 3a 64 67 2c 64 65 66 61 75 6c 74 4d 61 74 63 68 57 69 Data Ascii: ht:/night/i}},wg={ordinalNumber:Sd({matchPattern:sg,parsePattern:lg,valueCallback:function(e){return parseInt(e,10)}}),era:Ot({matchPatterns:cg,defaultMatchWidth:"wide",parsePatterns:fg,defaultParseWidth:"any"}),quarter:Ot({matchPatterns:dg,defaultMatchWi
2024-05-23 13:51:22 UTC	1436	IN	Data Raw: 65 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 54 64 28 65 29 2c 72 3d 6e 65 77 20 44 61 74 65 28 30 29 3b 72 2e 73 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 74 2c 30 2c 34 29 2c 72 2e 73 65 74 55 54 43 48 6f 75 72 73 28 30 2c 30 2c 30 2c 30 29 3b 76 61 72 20 6e 3d 57 61 28 72 29 3b 72 65 74 75 72 6e 20 6e 7d 76 61 72 20 45 67 3d 36 30 34 38 65 35 3b 66 75 6e 63 74 69 6f 6e 20 41 67 28 65 29 7b 48 65 28 31 2c 61 72 67 75 6d 65 6e 74 73 29 3b 76 61 72 20 74 3d 6b 74 28 65 29 2c 72 3d 57 61 28 74 29 2e 67 65 74 54 69 6d 65 28 29 2d 50 67 28 74 29 2e 67 65 74 54 69 6d 65 28 29 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2f 45 67 29 2b 31 7d 66 75 6e 63 74 69 6f 6e 20 47 61 28 65 2c 74 29 7b 48 65 28 31 2c 61 72 67 75 6d 65 6e Data Ascii: e(1,arguments);var t=Td(e),r=new Date(0);r.setUTCFullYear(t,0,4),r.setUTCHours(0,0,0,0);var n=Wa(r);return n}var Eg=6048e5;function Ag(e){He(1,arguments);var t=kt(e),r=Wa(t).getTime()-Pg(t).getTime();return Math.round(r/Eg)+1}function Ga(e,t){He(1,argumen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50283	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	752	OUT	GET /assets/vendor-c69516f0.js HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://play.libsyn.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:22 UTC	382	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:22 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 243841 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/javascript connection: close
2024-05-23 13:51:22 UTC	1078	IN	Data Raw: 76 61 72 20 75 75 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3c 22 75 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f 77 3a 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3c 22 75 22 3f 67 6c 6f 62 61 6c 3a 74 79 70 65 6f 66 20 73 65 6c 66 3c 22 75 22 3f 73 65 6c 66 3a 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6c 67 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 22 64 65 66 61 75 6c 74 22 29 3f 65 2e 64 65 66 61 75 6c 74 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 72 52 28 65 29 7b 69 66 28 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b Data Ascii: var uu=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function lg(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function rR(e){if(e.__esModule)return e;
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 2e 70 72 6f 66 69 6c 65 72 22 29 2c 54 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 70 72 6f 76 69 64 65 72 22 29 2c 52 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 63 6f 6e 74 65 78 74 22 29 2c 50 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 66 6f 72 77 61 72 64 5f 72 65 66 22 29 2c 4f 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 73 75 73 70 65 6e 73 65 22 29 2c 41 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6d 65 6d 6f 22 29 2c 4c 32 3d 53 79 6d 62 6f 6c 2e 66 6f 72 28 22 72 65 61 63 74 2e 6c 61 7a 79 22 29 2c 24 68 3d 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3b 66 75 6e 63 74 69 6f 6e 20 4e 32 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 Data Ascii: .profiler"),T2=Symbol.for("react.provider"),R2=Symbol.for("react.context"),P2=Symbol.for("react.forward_ref"),O2=Symbol.for("react.suspense"),A2=Symbol.for("react.memo"),L2=Symbol.for("react.lazy"),$h=Symbol.iterator;function N2(e){return e===null\|\|typeof
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 5d 29 3b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 64 3d 3d 3d 31 29 6f 2e 63 68 69 6c 64 72 65 6e 3d 74 3b 65 6c 73 65 20 69 66 28 31 3c 64 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 64 29 2c 76 3d 30 3b 76 3c 64 3b 76 2b 2b 29 67 5b 76 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 76 2b 32 5d 3b 6f 2e 63 68 69 6c 64 72 65 6e 3d 67 7d 69 66 28 65 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 66 6f 72 28 75 20 69 6e 20 64 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 2c 64 29 6f 5b 75 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6f 5b 75 5d 3d 64 5b 75 5d 29 3b 72 65 74 75 72 6e 7b 24 24 74 79 70 65 6f 66 3a 51 75 2c 74 79 70 65 3a 65 2c 6b 65 79 3a 73 2c 72 65 66 3a 66 2c 70 72 6f 70 73 3a 6f 2c 5f 6f 77 6e 65 72 Data Ascii: ]);var d=arguments.length-2;if(d===1)o.children=t;else if(1<d){for(var g=Array(d),v=0;v<d;v++)g[v]=arguments[v+2];o.children=g}if(e&&e.defaultProps)for(u in d=e.defaultProps,d)o[u]===void 0&&(o[u]=d[u]);return{$$typeof:Qu,type:e,key:s,ref:f,props:o,_owner
2024-05-23 13:51:22 UTC	1412	IN	Data Raw: 6e 28 22 2c 20 22 29 2b 22 7d 22 3a 6e 29 2b 22 29 2e 20 49 66 20 79 6f 75 20 6d 65 61 6e 74 20 74 6f 20 72 65 6e 64 65 72 20 61 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 6f 66 20 63 68 69 6c 64 72 65 6e 2c 20 75 73 65 20 61 6e 20 61 72 72 61 79 20 69 6e 73 74 65 61 64 2e 22 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 4b 6c 28 65 2c 6e 2c 74 29 7b 69 66 28 65 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 75 3d 5b 5d 2c 6f 3d 30 3b 72 65 74 75 72 6e 20 6f 6f 28 65 2c 75 2c 22 22 2c 22 22 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 73 2c 6f 2b 2b 29 7d 29 2c 75 7d 66 75 6e 63 74 69 6f 6e 20 44 32 28 65 29 7b 69 66 28 65 2e 5f 73 74 61 74 75 73 3d 3d 3d 2d 31 29 7b 76 61 72 20 6e 3d 65 2e 5f Data Ascii: n(", ")+"}":n)+"). If you meant to render a collection of children, use an array instead.");return f}function Kl(e,n,t){if(e==null)return e;var u=[],o=0;return oo(e,u,"","",function(s){return n.call(t,s,o++)}),u}function D2(e){if(e._status===-1){var n=e._
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 79 70 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 76 61 72 20 64 3d 65 2e 74 79 70 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3b 66 6f 72 28 67 20 69 6e 20 6e 29 64 67 2e 63 61 6c 6c 28 6e 2c 67 29 26 26 21 70 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 67 29 26 26 28 75 5b 67 5d 3d 6e 5b 67 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 64 21 3d 3d 76 6f 69 64 20 30 3f 64 5b 67 5d 3a 6e 5b 67 5d 29 7d 76 61 72 20 67 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 3b 69 66 28 67 3d 3d 3d 31 29 75 2e 63 68 69 6c 64 72 65 6e 3d 74 3b 65 6c 73 65 20 69 66 28 31 3c 67 29 7b 64 3d 41 72 72 61 79 28 67 29 3b 66 6f 72 28 76 61 72 20 76 3d 30 3b 76 3c 67 3b 76 2b 2b 29 64 5b 76 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 76 2b 32 5d 3b 75 2e 63 68 69 6c 64 72 65 6e Data Ascii: ype.defaultProps)var d=e.type.defaultProps;for(g in n)dg.call(n,g)&&!pg.hasOwnProperty(g)&&(u[g]=n[g]===void 0&&d!==void 0?d[g]:n[g])}var g=arguments.length-2;if(g===1)u.children=t;else if(1<g){d=Array(g);for(var v=0;v<g;v++)d[v]=arguments[v+2];u.children
2024-05-23 13:51:22 UTC	52	IN	Data Raw: 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6d 70 65 72 61 74 69 76 65 48 61 Data Ascii: le=function(e,n,t){return on.current.useImperativeHa
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 6e 64 6c 65 28 65 2c 6e 2c 74 29 7d 3b 6f 65 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 49 6e 73 65 72 74 69 6f 6e 45 66 66 65 63 74 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 4c 61 79 6f 75 74 45 66 66 65 63 74 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 4d 65 6d 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 6e 2e 63 75 72 72 65 6e 74 2e 75 73 65 4d 65 6d 6f 28 65 2c 6e 29 7d 3b 6f 65 2e 75 73 65 52 65 64 75 63 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 Data Ascii: ndle(e,n,t)};oe.useInsertionEffect=function(e,n){return on.current.useInsertionEffect(e,n)};oe.useLayoutEffect=function(e,n){return on.current.useLayoutEffect(e,n)};oe.useMemo=function(e,n){return on.current.useMemo(e,n)};oe.useReducer=function(e,n,t){ret
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 3d 3d 30 3f 62 3a 57 2e 69 64 2d 5a 2e 69 64 7d 69 66 28 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 76 61 72 20 73 3d 70 65 72 66 6f 72 6d 61 6e 63 65 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 6e 6f 77 28 29 7d 7d 65 6c 73 65 7b 76 61 72 20 66 3d 44 61 74 65 2c 64 3d 66 2e 6e 6f 77 28 29 3b 65 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 2e 6e 6f 77 28 29 2d 64 7d 7d 76 61 72 20 67 3d 5b 5d 2c 76 3d 5b 5d 2c 43 3d 31 2c 6b 3d 6e 75 6c 6c 2c 54 3d 33 2c 46 3d 21 31 2c 50 3d 21 31 2c 49 Data Ascii: ==0?b:W.id-Z.id}if(typeof performance=="object"&&typeof performance.now=="function"){var s=performance;e.unstable_now=function(){return s.now()}}else{var f=Date,d=f.now();e.unstable_now=function(){return f.now()-d}}var g=[],v=[],C=1,k=null,T=3,F=!1,P=!1,I
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 6f 66 20 5f 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 28 76 72 29 7d 3b 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 3c 22 75 22 29 7b 76 61 72 20 44 69 3d 6e 65 77 20 4d 65 73 73 61 67 65 43 68 61 6e 6e 65 6c 2c 6d 73 3d 44 69 2e 70 6f 72 74 32 3b 44 69 2e 70 6f 72 74 31 2e 6f 6e 6d 65 73 73 61 67 65 3d 76 72 2c 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 75 6c 6c 29 7d 7d 65 6c 73 65 20 6d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 71 28 76 72 2c 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 69 28 57 29 7b 48 3d 57 2c 4b 7c 7c 28 4b 3d 21 30 2c 6d 72 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 47 6e 28 57 2c 5a 29 7b 51 3d 71 28 66 75 6e Data Ascii: of _=="function")mr=function(){_(vr)};else if(typeof MessageChannel<"u"){var Di=new MessageChannel,ms=Di.port2;Di.port1.onmessage=vr,mr=function(){ms.postMessage(null)}}else mr=function(){q(vr,0)};function zi(W){H=W,K\|\|(K=!0,mr())}function Gn(W,Z){Q=q(fun
2024-05-23 13:51:22 UTC	1412	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 34 3a 46 65 3d 31 65 34 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 46 65 3d 35 65 33 7d 72 65 74 75 72 6e 20 46 65 3d 62 2b 46 65 2c 57 3d 7b 69 64 3a 43 2b 2b 2c 63 61 6c 6c 62 61 63 6b 3a 5a 2c 70 72 69 6f 72 69 74 79 4c 65 76 65 6c 3a 57 2c 73 74 61 72 74 54 69 6d 65 3a 62 2c 65 78 70 69 72 61 74 69 6f 6e 54 69 6d 65 3a 46 65 2c 73 6f 72 74 49 6e 64 65 78 3a 2d 31 7d 2c 62 3e 63 65 3f 28 57 2e 73 6f 72 74 49 6e 64 65 78 3d 62 2c 6e 28 76 2c 57 29 2c 74 28 67 29 3d 3d 3d 6e 75 6c 6c 26 26 57 3d 3d 3d 74 28 76 29 26 26 28 49 3f 28 77 28 51 29 2c 51 3d 2d 31 29 3a 49 3d 21 30 2c 47 6e 28 7a 2c 62 2d 63 65 29 29 29 3a 28 57 2e 73 6f 72 74 49 6e 64 65 78 3d 46 65 2c 6e 28 67 2c 57 29 2c 50 7c 7c 46 7c 7c 28 50 3d 21 30 2c 7a Data Ascii: reak;case 4:Fe=1e4;break;default:Fe=5e3}return Fe=b+Fe,W={id:C++,callback:Z,priorityLevel:W,startTime:b,expirationTime:Fe,sortIndex:-1},b>ce?(W.sortIndex=b,n(v,W),t(g)===null&&W===t(v)&&(I?(w(Q),Q=-1):I=!0,Gn(z,b-ce))):(W.sortIndex=Fe,n(g,W),P\|\|F\|\|(P=!0,z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50282	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	736	OUT	GET /assets/index-7d834d9e.css HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:22 UTC	374	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:22 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 84339 vary: Accept-Encoding x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: text/css connection: close
2024-05-23 13:51:22 UTC	1086	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 31 33 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 64 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 Data Ascii: /! Font Awesome Free 5.13.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fad,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 2c 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 6c 65 66 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 33 65 6d 7d 2e 66 61 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 62 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 6c 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 72 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 2c 2e 66 61 73 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 33 65 6d 7d 2e 66 61 2d 73 70 69 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 2d 73 70 69 6e 20 32 73 20 6c 69 6e Data Ascii: a-pull-left,.far.fa-pull-left,.fas.fa-pull-left{margin-right:.3em}.fa.fa-pull-right,.fab.fa-pull-right,.fal.fa-pull-right,.far.fa-pull-right,.fas.fa-pull-right{margin-left:.3em}.fa-spin{-webkit-animation:fa-spin 2s linear infinite;animation:fa-spin 2s lin
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 6e 74 61 6c 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2d 31 29 7d 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 62 6f 74 68 2c 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2c 3a 72 6f 6f 74 20 2e 66 61 2d 66 6c 69 70 2d 76 65 72 74 69 63 61 6c 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 2c 3a 72 6f 6f 74 20 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 6e 6f 6e 65 3b 66 69 6c 74 65 72 3a 6e 6f 6e 65 7d 2e 66 61 2d 73 74 61 63 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c Data Ascii: ntal.fa-flip-vertical{-webkit-transform:scale(-1);transform:scale(-1)}:root .fa-flip-both,:root .fa-flip-horizontal,:root .fa-flip-vertical,:root .fa-rotate-90,:root .fa-rotate-180,:root .fa-rotate-270{-webkit-filter:none;filter:none}.fa-stack{display:inl
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 bd 22 7d 2e 66 61 2d 61 6e 64 72 6f 69 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 85 bb 22 7d 2e 66 61 2d 61 6e 67 65 6c 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 89 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 83 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 80 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 81 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: r:before{content:""}.fa-android:before{content:""}.fa-angellist:before{content:""}.fa-angle-double-down:before{content:""}.fa-angle-double-left:before{content:""}.fa-angle-double-right:before{content:""}.fa-angle-double-up:before{content
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 66 61 2d 61 73 73 69 73 74 69 76 65 2d 6c 69 73 74 65 6e 69 6e 67 2d 73 79 73 74 65 6d 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8a a2 22 7d 2e 66 61 2d 61 73 74 65 72 69 73 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 81 a9 22 7d 2e 66 61 2d 61 73 79 6d 6d 65 74 72 69 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8d b2 22 7d 2e 66 61 2d 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 ba 22 7d 2e 66 61 2d 61 74 6c 61 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 98 22 7d 2e 66 61 2d 61 74 6c 61 73 73 69 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9d bb 22 7d 2e 66 61 2d 61 74 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 92 22 7d 2e 66 61 2d 61 75 64 69 62 Data Ascii: fa-assistive-listening-systems:before{content:""}.fa-asterisk:before{content:""}.fa-asymmetrik:before{content:""}.fa-at:before{content:""}.fa-atlas:before{content:""}.fa-atlassian:before{content:""}.fa-atom:before{content:""}.fa-audib
2024-05-23 13:51:22 UTC	4	IN	Data Raw: 63 65 3a 62 Data Ascii: ce:b
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 b4 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 86 b5 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 b3 22 7d 2e 66 61 2d 62 65 6c 6c 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 87 b6 22 7d 2e 66 61 2d 62 65 7a 69 65 72 2d 63 75 72 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 9b 22 7d 2e 66 61 2d 62 69 62 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 99 87 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 88 86 22 7d 2e 66 61 2d 62 69 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 Data Ascii: efore{content:""}.fa-behance-square:before{content:""}.fa-bell:before{content:""}.fa-bell-slash:before{content:""}.fa-bezier-curve:before{content:""}.fa-bible:before{content:""}.fa-bicycle:before{content:""}.fa-biking:before{content:"
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 2d 74 69 73 73 75 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a5 9b 22 7d 2e 66 61 2d 62 6f 78 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a8 22 7d 2e 66 61 2d 62 72 61 69 6c 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 8a a1 22 7d 2e 66 61 2d 62 72 61 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 9c 22 7d 2e 66 61 2d 62 72 65 61 64 2d 73 6c 69 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9f ac 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 82 b1 22 7d 2e 66 61 2d 62 72 69 65 66 63 61 73 65 2d 6d 65 64 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 91 a9 22 7d 2e 66 61 2d 62 72 6f 61 64 63 61 73 74 2d 74 6f Data Ascii: -tissue:before{content:""}.fa-boxes:before{content:""}.fa-braille:before{content:""}.fa-brain:before{content:""}.fa-bread-slice:before{content:""}.fa-briefcase:before{content:""}.fa-briefcase-medical:before{content:""}.fa-broadcast-to
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 9f 22 7d 2e 66 61 2d 63 61 72 2d 63 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 a1 22 7d 2e 66 61 2d 63 61 72 2d 73 69 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 97 a4 22 7d 2e 66 61 2d 63 61 72 61 76 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef a3 bf 22 7d 2e 66 61 2d 63 61 72 65 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 97 22 7d 2e 66 61 2d 63 61 72 65 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 99 22 7d 2e 66 61 2d 63 61 72 65 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 83 9a 22 7d 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 64 6f 77 6e 3a 62 65 66 6f Data Ascii: ore{content:""}.fa-car-crash:before{content:""}.fa-car-side:before{content:""}.fa-caravan:before{content:""}.fa-caret-down:before{content:""}.fa-caret-left:before{content:""}.fa-caret-right:before{content:""}.fa-caret-square-down:befo
2024-05-23 13:51:22 UTC	1412	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 a0 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 85 8a 22 7d 2e 66 61 2d 63 68 65 65 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 9f af 22 7d 2e 66 61 2d 63 68 65 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 b9 22 7d 2e 66 61 2d 63 68 65 73 73 2d 62 69 73 68 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 ba 22 7d 2e 66 61 2d 63 68 65 73 73 2d 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 bc 22 7d 2e 66 61 2d 63 68 65 73 73 2d 6b 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 90 bf 22 7d 2e 66 61 2d 63 68 65 73 73 2d 6b 6e 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ore{content:""}.fa-check-square:before{content:""}.fa-cheese:before{content:""}.fa-chess:before{content:""}.fa-chess-bishop:before{content:""}.fa-chess-board:before{content:""}.fa-chess-king:before{content:""}.fa-chess-knight:before{c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50281	162.19.138.83	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	777	OUT	GET /c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#2; 3pi=10#1716472277163#-141909363#6252180897247519748\|124#1716472279908#-487590125
2024-05-23 13:51:22 UTC	1419	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=2#1716472282254#809728343#3507891500191884572\|10#1716472277163#-141909363#6252180897247519748\|124#1716472279908#-487590125; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:22 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Thu, 23 May 2024 13:51:21 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-23 13:51:22 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50285	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	819	OUT	GET /pixel.gif?clkgypv=pxl&ch=5&cm=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"}]
2024-05-23 13:51:22 UTC	1060	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:22 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://idsync.rlcdn.com/420246.gif?partner_uid=Zk9J0cMGPKkzOkJE-hOvl2TE set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:46 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:46 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50279	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:22 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drifteac47b84251aaeffaea89ec44f3 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 13:51:22 GMT server: istio-envoy connection: close
2024-05-23 13:51:22 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50289	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	570	OUT	OPTIONS /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: _zitok,authorization,content-type,visited_url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:22 UTC	607	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 13:51:22 GMT Connection: close apigw-requestid: YOh6Ni7yPHcEM8A= x-powered-by: Express vary: Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 0 x-cache: Miss from cloudfront via: 1.1 cedbf7a51c689bd1e26af4b73768d270.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: fseNnNjFn3reTovvdQq1KGdO36oyvdejLoMPOgvMFkzcMvcEhw2GKA== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888585361e6b0c84-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50291	142.250.185.130	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	863	OUT	GET /pixel?google_nid=zeotap_ddp&google_cm&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:22 UTC	810	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://mwzeom.zeotap.com/mw?google_gid=CAESEFiSCCEpK_XY_hBYWTauXJE&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 Date: Thu, 23 May 2024 13:51:22 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 469 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:22 UTC	469	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 77 7a 65 6f 6d 2e 7a 65 6f 74 61 70 2e 63 6f 6d 2f 6d 77 3f 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 46 69 53 43 43 45 70 4b 5f 58 59 5f 68 42 59 57 54 61 75 58 4a 45 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 26 61 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://mwzeom.zeotap.com/mw?google_gid=CAESEFiSCCEpK_XY_hBYWTauXJE&google_cver=1&a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50295	204.16.247.184	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	603	OUT	GET /api/episode/id/29751633 HTTP/1.1 Host: html5-player.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://play.libsyn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.libsyn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:22 UTC	539	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:22 GMT server: Apache set-cookie: libsyn-paywall-s=icmg9uepqrlrr17giq1cljsrku; expires=Fri, 24-May-2024 13:51:22 GMT; Max-Age=86400; path=/; domain=libsyn.com; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache access-control-allow-origin: * access-control-allow-credentials: true access-control-max-age: 86400 x-libsyn-host: v74pl-02 content-length: 2532 content-type: application/json connection: close
2024-05-23 13:51:22 UTC	921	IN	Data Raw: 7b 22 69 74 65 6d 5f 69 64 22 3a 32 39 37 35 31 36 33 33 2c 22 5f 69 74 65 6d 22 3a 7b 22 69 74 65 6d 5f 62 6f 64 79 22 3a 22 3c 70 3e 49 6e 20 74 68 69 73 20 65 70 69 73 6f 64 65 20 6f 66 20 74 68 65 20 54 68 65 20 45 73 73 65 6e 74 69 61 6c 20 50 6f 64 63 61 73 74 2c 20 4e 61 74 68 61 6e 20 69 73 20 6a 6f 69 6e 20 62 79 20 41 74 75 6c 20 41 72 79 61 2c 20 43 68 69 65 66 20 45 6e 65 72 67 79 20 53 74 72 61 74 65 67 69 73 74 20 61 74 20 53 26 61 6d 70 3b 50 20 47 6c 6f 62 61 6c 20 74 6f 20 64 69 73 63 75 73 73 20 77 68 61 74 20 41 74 75 6c 20 68 61 64 20 73 65 65 6e 20 72 65 63 65 6e 74 6c 79 20 61 74 20 54 68 65 20 57 6f 72 6c 64 20 45 63 6f 6e 6f 6d 69 63 20 46 6f 72 75 6d 20 4d 65 65 74 69 6e 67 20 69 6e 20 32 30 32 34 2c 20 61 73 20 77 65 6c 6c 20 61 Data Ascii: {"item_id":29751633,"_item":{"item_body":"<p>In this episode of the The Essential Podcast, Nathan is join by Atul Arya, Chief Energy Strategist at S&P Global to discuss what Atul had seen recently at The World Economic Forum Meeting in 2024, as well a
2024-05-23 13:51:22 UTC	1460	IN	Data Raw: 36 6d 31 20 66 31 69 65 73 63 76 68 20 66 68 67 71 78 31 39 20 66 31 6f 6c 79 72 6a 65 20 66 31 70 39 33 65 69 72 20 66 31 6e 65 76 34 31 61 20 66 31 68 38 68 62 37 37 20 66 31 6c 71 76 7a 36 75 20 66 31 30 61 77 37 35 74 20 66 73 6c 65 33 66 71 20 66 31 37 61 65 35 7a 6e 5c 22 20 74 69 74 6c 65 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 61 77 65 65 6b 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 5c 2f 69 6e 64 65 78 2e 68 74 6d 6c 5c 22 20 68 72 65 66 3d 20 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 61 77 65 65 6b 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 5c 2f 69 6e 64 65 78 2e 68 74 6d 6c 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 20 5c 22 6e 6f 72 65 66 65 72 72 65 72 20 6e 6f 6f 70 65 6e 65 72 5c 22 20 61 72 69 61 2d 6c Data Ascii: 6m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn\" title=\"https:\/\/ceraweek.com\/podcast\/index.html\" href= \"https:\/\/ceraweek.com\/podcast\/index.html\" target=\"_blank\" rel= \"noreferrer noopener\" aria-l
2024-05-23 13:51:22 UTC	151	IN	Data Raw: 70 6f 64 63 61 73 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 73 3f 66 65 65 64 3d 61 48 52 30 63 48 4d 36 4c 79 39 30 61 47 56 6c 63 33 4e 6c 62 6e 52 70 59 57 78 77 62 32 52 6a 59 58 4e 30 4c 6d 78 70 59 6e 4e 35 62 69 35 6a 62 32 30 76 63 6e 4e 7a 22 7d 7d 2c 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 22 32 30 32 34 2d 30 32 2d 30 31 20 31 37 3a 30 30 3a 30 30 22 7d Data Ascii: podcast_url":"https:\/\/www.google.com\/podcasts?feed=aHR0cHM6Ly90aGVlc3NlbnRpYWxwb2RjYXN0LmxpYnN5bi5jb20vcnNz"}},"release_date":"2024-02-01 17:00:00"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50290	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:23 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 458 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift22f21ea4f44aa379816b23338dc cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 13:51:22 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 1fa5d8f57b04797d33d03ff93cb7543e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: SKPgigRGJK_29Po58sL8ExGzp7BRG7OWf0ZvECuwmTZaWLh7-8ZIGg==
2024-05-23 13:51:23 UTC	458	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50298	35.244.174.68	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	718	OUT	GET /420246.gif?partner_uid=Zk9J0cMGPKkzOkJE-hOvl2TE HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=zc1d838tqq3OqJPN3yx0QhirN6N+uLH3XSLqV53NrAM=; pxrc=CM2TvbIGEgUI6AcQABIFCOhHEAA=
2024-05-23 13:51:22 UTC	761	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://aorta.clickagy.com/pixel.gif?ch=114&cm=66239d93f40ebe711ac52618dac642b663630aabe96d6c2f51b264b4355b4ad925abae5358c0e7bc P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=5n6qvnTl34rOqJPN3yx0QhirN6N+uLH3XSLqV53NrAM=; Path=/; Domain=rlcdn.com; Expires=Fri, 23 May 2025 13:51:22 GMT; Secure; SameSite=None Set-Cookie: pxrc=CM2TvbIGEgUI6AcQABIFCOhHEAASBgj/6gEQDQ==; Path=/; Domain=rlcdn.com; Expires=Mon, 22 Jul 2024 13:51:22 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 23 May 2024 13:51:22 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50294	63.140.62.17	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	750	OUT	POST /ee/irl1/v1/interact?configId=a09783d4-f2df-4c99-9355-5ed608d27275&requestId=6801e961-cf34-487b-ab9c-71dd474eb94a HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive Content-Length: 2594 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain; charset=UTF-8 Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:22 UTC	2594	OUT	Data Raw: 7b 22 6d 65 74 61 22 3a 7b 22 63 6f 6e 66 69 67 4f 76 65 72 72 69 64 65 73 22 3a 7b 7d 2c 22 74 61 72 67 65 74 22 3a 7b 22 6d 69 67 72 61 74 69 6f 6e 22 3a 74 72 75 65 7d 2c 22 73 74 61 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6d 62 6f 78 22 2c 22 76 61 6c 75 65 22 3a 22 73 65 73 73 69 6f 6e 23 36 31 34 32 36 38 36 36 34 32 34 39 35 39 36 35 35 35 37 32 39 39 34 34 38 36 35 37 36 36 35 32 32 33 37 33 38 37 2d 41 57 69 51 4e 4f 23 31 37 31 36 34 37 34 31 33 31 22 7d 2c 7b 22 6b 65 79 22 3a 22 6b 6e 64 63 74 72 5f 30 31 42 31 32 38 39 41 36 34 31 43 36 36 32 43 30 41 34 39 35 43 33 39 5f 41 Data Ascii: {"meta":{"configOverrides":{},"target":{"migration":true},"state":{"domain":"spglobal.com","cookiesEnabled":true,"entries":[{"key":"mbox","value":"session#61426866424959655572994486576652237387-AWiQNO#1716474131"},{"key":"kndctr_01B1289A641C662C0A495C39_A
2024-05-23 13:51:23 UTC	634	IN	HTTP/1.1 200 OK x-request-id: 6801e961-cf34-487b-ab9c-71dd474eb94a vary: Origin access-control-allow-origin: https://www.spglobal.com access-control-allow-credentials: true access-control-expose-headers: Retry-After, X-Adobe-Edge, X-Request-ID date: Thu, 23 May 2024 13:51:22 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag content-type: application/json;charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-05-23 13:51:23 UTC	901	IN	Data Raw: 33 37 65 0d 0a 7b 22 72 65 71 75 65 73 74 49 64 22 3a 22 36 38 30 31 65 39 36 31 2d 63 66 33 34 2d 34 38 37 62 2d 61 62 39 63 2d 37 31 64 64 34 37 34 65 62 39 34 61 22 2c 22 68 61 6e 64 6c 65 22 3a 5b 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 7b 22 69 64 22 3a 22 36 31 34 32 36 38 36 36 34 32 34 39 35 39 36 35 35 35 37 32 39 39 34 34 38 36 35 37 36 36 35 32 32 33 37 33 38 37 22 2c 22 6e 61 6d 65 73 70 61 63 65 22 3a 7b 22 63 6f 64 65 22 3a 22 45 43 49 44 22 7d 7d 5d 2c 22 74 79 70 65 22 3a 22 69 64 65 6e 74 69 74 79 3a 72 65 73 75 6c 74 22 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 5d 2c 22 74 79 70 65 22 3a 22 61 63 74 69 76 61 74 69 6f 6e 3a 70 75 6c 6c 22 2c 22 65 76 65 6e 74 49 6e 64 65 78 22 3a 30 7d 2c 7b 22 70 61 79 6c 6f 61 64 22 3a 5b 5d 2c 22 74 79 70 Data Ascii: 37e{"requestId":"6801e961-cf34-487b-ab9c-71dd474eb94a","handle":[{"payload":[{"id":"61426866424959655572994486576652237387","namespace":{"code":"ECID"}}],"type":"identity:result"},{"payload":[],"type":"activation:pull","eventIndex":0},{"payload":[],"typ
2024-05-23 13:51:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50297	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:22 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:23 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift5c168fb463f97c01fccd6e7c9a8 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 13:51:23 GMT server: istio-envoy connection: close
2024-05-23 13:51:23 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50299	34.195.15.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 1334519-19.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: RArtLXUhuzf1WaY8PdrOyg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:23 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:23 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50303	3.218.167.115	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	805	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 1510748-48.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: scLRP1vyx5y7lArYPzujNQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:23 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:23 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50309	204.16.247.184	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	603	OUT	GET /api/episode/id/30072173 HTTP/1.1 Host: html5-player.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://play.libsyn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.libsyn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:23 UTC	539	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:23 GMT server: Apache set-cookie: libsyn-paywall-s=9dtg8biojdjav2g0e49smt4pmm; expires=Fri, 24-May-2024 13:51:23 GMT; Max-Age=86400; path=/; domain=libsyn.com; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache access-control-allow-origin: * access-control-allow-credentials: true access-control-max-age: 86400 x-libsyn-host: v74pl-03 content-length: 1335 content-type: application/json connection: close
2024-05-23 13:51:23 UTC	921	IN	Data Raw: 7b 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 5f 69 74 65 6d 22 3a 7b 22 69 74 65 6d 5f 62 6f 64 79 22 3a 22 3c 70 3e 41 6e 64 79 20 43 72 69 74 63 68 6c 6f 77 2c 20 53 26 61 6d 70 3b 50 20 47 6c 6f 62 61 6c 73 20 48 65 61 64 20 6f 66 20 45 4d 45 41 20 4e 65 77 73 2c 20 6a 6f 69 6e 73 20 74 68 65 20 70 6f 64 63 61 73 74 20 74 6f 20 68 65 6c 70 20 4e 61 74 68 61 6e 20 67 65 74 20 61 20 62 65 74 74 65 72 20 67 72 61 73 70 20 6f 6e 20 77 68 61 74 27 73 20 68 61 70 70 65 6e 69 6e 67 20 77 69 74 68 20 47 6c 6f 62 61 6c 20 4f 69 6c 20 4d 61 72 6b 65 74 73 2e 3c 5c 2f 70 3e 20 22 2c 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 69 74 65 6d 5f 74 69 74 6c 65 22 3a 22 4d 61 6b 69 6e 67 20 53 65 6e 73 65 20 6f 66 20 4f 69 6c 20 4d 61 Data Ascii: {"item_id":30072173,"_item":{"item_body":"<p>Andy Critchlow, S&P Globals Head of EMEA News, joins the podcast to help Nathan get a better grasp on what's happening with Global Oil Markets.<\/p> ","item_id":30072173,"item_title":"Making Sense of Oil Ma
2024-05-23 13:51:23 UTC	414	IN	Data Raw: 64 73 2e 6c 69 62 73 79 6e 2e 63 6f 6d 5c 2f 32 35 39 36 39 34 5c 2f 72 73 73 22 2c 22 69 74 75 6e 65 73 5f 73 74 6f 72 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 70 6f 64 63 61 73 74 73 2e 61 70 70 6c 65 2e 63 6f 6d 5c 2f 75 73 5c 2f 70 6f 64 63 61 73 74 5c 2f 74 68 65 2d 65 73 73 65 6e 74 69 61 6c 2d 70 6f 64 63 61 73 74 5c 2f 69 64 31 35 30 35 36 30 35 37 38 37 22 2c 22 73 68 6f 77 5f 69 64 22 3a 32 35 39 36 39 34 2c 22 73 68 6f 77 5f 74 69 74 6c 65 22 3a 22 54 68 65 20 45 73 73 65 6e 74 69 61 6c 20 50 6f 64 63 61 73 74 22 2c 22 73 70 6f 74 69 66 79 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 70 65 6e 2e 73 70 6f 74 69 66 79 2e 63 6f 6d 5c 2f 73 68 6f 77 5c 2f 30 61 54 4b 30 5a 4c 4a 34 68 61 77 73 78 47 6e 68 71 54 4a 65 34 22 2c Data Ascii: ds.libsyn.com\/259694\/rss","itunes_store_url":"https:\/\/podcasts.apple.com\/us\/podcast\/the-essential-podcast\/id1505605787","show_id":259694,"show_title":"The Essential Podcast","spotify_url":"https:\/\/open.spotify.com\/show\/0aTK0ZLJ4hawsxGnhqTJe4",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50300	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:23 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 450 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift9859c14462ea79495e4e19eb221 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:22 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 fd9d525f4633063393693172d96013ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: VOAbAlZLK763t8jQnBMUavxeKzSzNAZ0AtgvkFTXrzW1jqVBWKD5GQ==
2024-05-23 13:51:23 UTC	450	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50308	162.19.138.82	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	590	OUT	GET /c/10/2/0/3.gif?puid=3507891500191884572&gdpr=0&gdpr_consent= HTTP/1.1 Host: id5-sync.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=d7345f5d-a273-7ba8-b34a-4a32a288c9f0#1716472276206#2; 3pi=2#1716472282254#809728343#3507891500191884572\|10#1716472277163#-141909363#6252180897247519748\|124#1716472279908#-487590125
2024-05-23 13:51:23 UTC	1419	IN	HTTP/1.1 200 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=2#1716472283305#809728343#3507891500191884572\|10#1716472277163#-141909363#6252180897247519748\|124#1716472279908#-487590125; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:23 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure content-type: image/gif;charset=UTF-8 transfer-encoding: chunked date: Thu, 23 May 2024 13:51:22 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-05-23 13:51:23 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50315	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	876	OUT	GET /pixel.gif?ch=114&cm=66239d93f40ebe711ac52618dac642b663630aabe96d6c2f51b264b4355b4ad925abae5358c0e7bc HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"}]
2024-05-23 13:51:23 UTC	1296	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:23 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:47 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:47 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50314	172.67.40.173	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	1036	OUT	GET /mw?google_gid=CAESEFiSCCEpK_XY_hBYWTauXJE&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://c1.adform.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=7745f62c-3738-44ad-6482-93a794c9b45d; zsc=m%24%91S5.%B2%A1%1Du6%F1J%19%C3osE%92%D7o.%E5%95%F5%8B%0D%1A%EB%7F%C2%8F%FA%9ES%03%F85%8C%80%3A%5Dx5T%2A%CD%D0H%0F%FE%FB%C7%CDM%91%C6%1A%217r%0B%AE%DEl%9B%9Bt%07%BD%04a~%03%5C~O4%0B%8B%D7%83%22
2024-05-23 13:51:23 UTC	579	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:23 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://c1.adform.net set-cookie: zc=7745f62c-3738-44ad-6482-93a794c9b45d; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8885853cace343d9-EWR
2024-05-23 13:51:23 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50312	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	790	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" visited_url: https://www.spglobal.com/en sec-ch-ua-mobile: ?0 Authorization: Bearer 1edd5669f11674524557 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json _zitok: ac746a0716b51e6738171716472254 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc"
2024-05-23 13:51:24 UTC	618	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 13:51:24 GMT Content-Type: text/plain; charset=utf-8 Connection: close vary: Accept-Encoding apigw-requestid: YOh6Xjg9vHcEMoA= x-powered-by: Express etag: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc" access-control-allow-origin: * access-control-expose-headers: * x-cache: Miss from cloudfront via: 1.1 0252b483f7b420504a413a83f987b080.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: sLjnCx5SP1Uq31gthKqlG-SOOjQZPdFLagOvKeFRSI6KM2YB_0jguw== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885853c8f2d196c-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50307	52.49.44.23	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	411	OUT	GET /sync/stickyads/446c1f822c2967226f60d9a9212036d5?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:23 UTC	882	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:23 GMT Content-Length: 0 Connection: close Location: https://ads.stickyadstv.com/user-registering?dataProviderId=199&userId=y-9djGH69E2oNcM6w.F47CGYjOfQCc8Hu9rLb.B9y5~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBNtJT2YCEGCxjUqthzlzPlRDc_FJgQAFEgEBAQGbUGZZZgAAAAAA_eMAAA&S=AQAAApTMh5nS_9iZYPc9T0HwA7s; Expires=Fri, 23 May 2025 19:51:23 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50313	204.16.247.184	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	370	OUT	GET /api/episode/id/29751633 HTTP/1.1 Host: html5-player.libsyn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:23 UTC	468	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:23 GMT server: Apache set-cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs; expires=Fri, 24-May-2024 13:51:23 GMT; Max-Age=86400; path=/; domain=libsyn.com; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-libsyn-host: v74pl-01 access-control-allow-origin: * content-length: 2532 content-type: application/json connection: close
2024-05-23 13:51:23 UTC	992	IN	Data Raw: 7b 22 69 74 65 6d 5f 69 64 22 3a 32 39 37 35 31 36 33 33 2c 22 5f 69 74 65 6d 22 3a 7b 22 69 74 65 6d 5f 62 6f 64 79 22 3a 22 3c 70 3e 49 6e 20 74 68 69 73 20 65 70 69 73 6f 64 65 20 6f 66 20 74 68 65 20 54 68 65 20 45 73 73 65 6e 74 69 61 6c 20 50 6f 64 63 61 73 74 2c 20 4e 61 74 68 61 6e 20 69 73 20 6a 6f 69 6e 20 62 79 20 41 74 75 6c 20 41 72 79 61 2c 20 43 68 69 65 66 20 45 6e 65 72 67 79 20 53 74 72 61 74 65 67 69 73 74 20 61 74 20 53 26 61 6d 70 3b 50 20 47 6c 6f 62 61 6c 20 74 6f 20 64 69 73 63 75 73 73 20 77 68 61 74 20 41 74 75 6c 20 68 61 64 20 73 65 65 6e 20 72 65 63 65 6e 74 6c 79 20 61 74 20 54 68 65 20 57 6f 72 6c 64 20 45 63 6f 6e 6f 6d 69 63 20 46 6f 72 75 6d 20 4d 65 65 74 69 6e 67 20 69 6e 20 32 30 32 34 2c 20 61 73 20 77 65 6c 6c 20 61 Data Ascii: {"item_id":29751633,"_item":{"item_body":"<p>In this episode of the The Essential Podcast, Nathan is join by Atul Arya, Chief Energy Strategist at S&P Global to discuss what Atul had seen recently at The World Economic Forum Meeting in 2024, as well a
2024-05-23 13:51:23 UTC	1460	IN	Data Raw: 37 35 74 20 66 73 6c 65 33 66 71 20 66 31 37 61 65 35 7a 6e 5c 22 20 74 69 74 6c 65 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 61 77 65 65 6b 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 5c 2f 69 6e 64 65 78 2e 68 74 6d 6c 5c 22 20 68 72 65 66 3d 20 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 61 77 65 65 6b 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 5c 2f 69 6e 64 65 78 2e 68 74 6d 6c 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 6c 3d 20 5c 22 6e 6f 72 65 66 65 72 72 65 72 20 6e 6f 6f 70 65 6e 65 72 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 20 5c 22 4c 69 6e 6b 20 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 72 61 77 65 65 6b 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 5c 2f 69 6e 64 65 78 2e 68 74 6d 6c 5c 22 3e 68 74 74 70 73 3a 5c 2f 5c 2f 63 65 Data Ascii: 75t fsle3fq f17ae5zn\" title=\"https:\/\/ceraweek.com\/podcast\/index.html\" href= \"https:\/\/ceraweek.com\/podcast\/index.html\" target=\"_blank\" rel= \"noreferrer noopener\" aria-label= \"Link https:\/\/ceraweek.com\/podcast\/index.html\">https:\/\/ce
2024-05-23 13:51:23 UTC	80	IN	Data Raw: 33 4e 6c 62 6e 52 70 59 57 78 77 62 32 52 6a 59 58 4e 30 4c 6d 78 70 59 6e 4e 35 62 69 35 6a 62 32 30 76 63 6e 4e 7a 22 7d 7d 2c 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 22 32 30 32 34 2d 30 32 2d 30 31 20 31 37 3a 30 30 3a 30 30 22 7d Data Ascii: 3NlbnRpYWxwb2RjYXN0LmxpYnN5bi5jb20vcnNz"}},"release_date":"2024-02-01 17:00:00"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50316	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:23 UTC	787	OUT	GET /assets/libsyn-logo--black.png HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.libsyn.com/embed/episode/id/29751633/height/64/theme/modern/size/small/thumbnail/yes/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:23 UTC	352	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:23 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 27216 x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: image/png connection: close
2024-05-23 13:51:23 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 88 00 00 02 8b 08 06 00 00 00 75 dd 79 14 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 45 2a 82 56 10 11 cc 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 b9 f4 43 68 d2 90 a4 b8 38 0a ae 05 07 3f 16 ab 0e 2e ce ba 3a b8 0a 82 e0 07 88 93 a3 93 a2 8b 94 f8 bf a4 d0 22 c6 83 e3 7e bc bb f7 b8 7b 07 08 f5 32 53 cd 8e 71 40 d5 2c 23 15 8f 89 d9 dc 8a 18 78 45 10 fd e8 85 88 61 89 99 7a 22 bd 90 81 e7 f8 ba 87 8f af 77 51 9e e5 7d ee cf d1 ad e4 4d 06 f8 44 e2 59 a6 1b 16 f1 3a f1 f4 a6 a5 73 de 27 0e b3 92 a4 10 9f 13 8f 19 74 41 e2 47 ae cb 2e bf 71 2e 3a 2c f0 cc b0 91 49 cd 11 87 89 c5 62 1b cb 6d cc 4a 86 4a 3c 45 1c 51 54 8d f2 85 ac cb 0a Data Ascii: PNGIHDRuyiCCPICC profile(}=H@_SE*VP,8J`Zu0Ch8?.:"~{2Sq@,#xEaz"wQ}MDY:s'tAG.q.:,IbmJJ<EQT
2024-05-23 13:51:23 UTC	1460	IN	Data Raw: 08 88 92 24 49 32 20 aa 06 ac 6e 48 a3 3b 97 3c bf 24 19 10 55 29 6f b2 09 4a e5 5b 36 41 e5 9d 92 04 c2 86 c1 50 92 01 51 d2 30 ec b4 09 2a ef a8 dc af 0d 89 92 0c 88 aa 3c 6f 66 d2 e2 cf 21 cf 23 49 06 44 45 73 43 6b 18 16 27 aa 89 db ed c5 e0 2c 83 a2 a4 ba 06 c4 8f d9 84 51 87 44 6f 6c 93 f3 a4 4d 50 79 ab 6c 02 49 75 0d 88 8f db 84 51 86 43 49 92 64 40 94 0c 8a 25 b3 dd 26 88 c2 f1 b8 40 b6 24 03 a2 2a ee 18 6f 62 a5 b1 db 26 88 ee a1 4b 92 0c 88 aa a4 b5 b9 9b 99 37 b5 c9 69 da 04 51 58 de 26 28 7a 6e 49 8a 3a 20 3e 61 13 46 cb 1b d8 64 b9 d7 79 1c 4e b4 09 24 d5 31 20 7e c3 26 8c 2e 14 1a 0c cb c1 0a 62 bc 0f 5a 9e 63 92 a2 0f 88 aa e7 0d 4e e3 f1 b4 4d 50 79 17 e0 92 51 92 0c 88 92 86 e8 16 9b c0 07 2e 49 32 20 6a d2 2e b5 09 a4 a1 3a db 50 28 a9 Data Ascii: $I2 nH;<$U)oJ[6APQ0<of!#IDEsCk',QDolMPylIuQCId@%&@$ob&K7iQX&(znI: >aFdyN$1 ~&.bZcNMPyQ.I2 j.:P(
2024-05-23 13:51:23 UTC	1460	IN	Data Raw: 5f b6 12 78 12 61 19 31 43 a0 26 11 10 a7 69 4d 88 eb 78 bd 19 66 40 6c e2 62 d9 b1 79 09 f0 21 dc 06 ac 8c 1e b5 09 a2 71 01 ae 87 18 83 7c 35 f0 b9 38 11 44 e5 d2 a0 55 41 ec 5a f8 59 32 82 17 70 13 61 4a bc aa 6f 5d 41 38 b4 c2 31 79 4e 54 89 cb 45 c0 17 59 38 ce d7 73 ad bc 56 27 1f a7 25 c7 cf 65 60 54 a5 90 d8 28 b8 a7 2f b8 de 8c 22 20 6e 36 20 46 e3 85 b9 70 a8 f2 98 23 8c f9 3d c3 a6 a8 bc f3 09 cb 91 ec c9 5d c4 0d 87 93 b7 92 30 39 e4 64 42 45 f0 8c e4 78 49 55 34 55 10 10 db 1a 45 40 fc 0a 2e 96 1d 93 ec 52 37 ce b2 2c 97 1b 0d 88 d1 d8 00 dc 83 e3 10 27 69 35 61 9b b7 13 08 55 41 c7 08 2a 46 3d 6f a1 3b 8a 80 e8 52 37 71 71 a9 9b f2 fa 8e 4d 10 8d cb 08 2b 06 58 ad 1f bd 74 ac e0 99 84 09 23 97 e0 b2 31 32 34 8e 7c 99 1b 80 6f d9 d6 51 71 a9 Data Ascii: _xa1C&iMxf@lby!q\|58DUAZY2paJo]A81yNTEY8sV'%e`T(/" n6 Fp#=]09dBExIU4UE@.R7,'i5aUA*F=o;R7qqM+Xt#124\|oQq
2024-05-23 13:51:23 UTC	1412	IN	Data Raw: 07 c3 d4 3a 5a 6b 16 9e 46 98 65 3c 2e 6b 81 69 9c ac 22 a9 c2 01 11 03 62 94 2e f1 c6 54 09 87 80 5b 6c 86 a1 05 c3 15 84 7d ae d3 b1 85 6b 27 f8 9a 56 17 bc 46 ab 88 92 2a 17 10 bf 65 73 47 e5 07 68 8d 7f b2 7a 58 4e 69 f5 de 6e e6 c1 43 61 7a 8d 5c 43 98 89 fc 12 e0 1c fa 5f 9e 66 14 b2 3b ab 78 fe 49 1a aa 25 63 fc bf dc 51 25 2e e9 40 fc 47 70 a2 4a d9 3d 60 13 0c f4 d0 bc 94 b0 1f f2 d9 25 09 84 79 cb 08 8b d6 3f 5d f0 da 5d 38 5b d2 d0 2e 86 a3 96 ee a8 a2 78 5c 4c f1 38 44 ab 19 e5 62 37 73 6f d7 c2 6c 37 f2 79 c0 0b 93 f7 f8 ca 12 bf ee ec 92 37 9e 77 92 2a 17 10 d3 a7 d8 cf da e4 d1 05 44 bb 98 cb cd 6e e6 ee a1 30 db 8d 7c 29 a1 1b 79 dc 93 4e 06 95 56 11 db fd 4c 9e 97 92 4a 1d 10 53 9f b6 c9 a3 f2 6a 1c 87 58 15 76 33 2f 0c 51 a9 0d 84 49 27 Data Ascii: :ZkFe<.ki"b.T[l}k'VFesGhzXNinCaz\C_f;xI%cQ%.@GpJ=`%y?]]8[.x\L8Db7sol7y7wDn0\|)yNVLJSjXv3/QI'
2024-05-23 13:51:23 UTC	1460	IN	Data Raw: 36 89 e9 12 27 fb 80 fd 36 4f ed 9c 44 98 b8 62 57 b3 64 40 2c 8d bb 3c 24 51 b2 9b b9 bc 56 01 7f 48 e8 52 ce 9a 4b 3e b6 d9 44 b5 bc 2f 6c c4 f1 88 92 01 b1 44 66 80 eb 3c 2c d1 b1 9b b9 7c 1a c0 8f 02 1f 06 ce ef f0 e7 76 00 87 6c ae da 59 4e f1 78 44 43 a2 64 40 9c 88 26 f0 37 1e 96 28 d9 cd 5c 1e 67 13 16 c3 be b6 cd 39 08 ad 0a e2 1c 8e 45 ac ab a2 f1 88 f9 87 0c 49 06 c4 b1 84 43 80 af 7a 58 a2 64 37 f3 e4 ad 00 de 01 fc 29 61 8b b5 5e 59 45 ac af 8d b4 1f 8f 28 c9 80 38 56 3b 81 ad 1e 9a e8 a4 dd cc de 60 26 e3 12 c2 f0 8d d7 f5 f1 b0 66 15 51 00 a7 e1 78 44 c9 80 58 12 7f e8 a1 89 d2 0f 52 bc ed 9e 37 99 d1 59 05 fc 26 f0 fb 43 78 70 9b b1 39 6b 7b 9f 38 8d f9 e3 11 0d 89 92 01 71 ac 5c ee 26 6e 3f ce fc 2a 84 5d cc a3 d3 00 ae 22 4c 42 b9 6a c0 Data Ascii: 6'6ODbWd@,<$QVHRK>D/lDf<,\|vlYNxDCd@&7(\g9EICzXd7)a^YE(8V;`&fQxDXR7Y&Cxp9k{8q\&n?*]"LBj
2024-05-23 13:51:23 UTC	1460	IN	Data Raw: 36 e9 a1 b2 5b c5 80 68 37 73 dc 9e 00 2e 22 ec ce 51 e5 25 6f 62 9c a5 dc 6f 48 74 d9 1b 19 12 07 0b 82 b7 11 ba 83 9f 26 2c ed 42 87 c0 57 f4 75 af 01 b0 df 8a 61 3f e1 6d 98 c7 ad 4e ef 81 c6 08 ff bd 66 3f ed 5a c5 80 d8 00 7e 97 b0 45 9b e2 f4 16 c2 78 c4 74 2c e2 1c f3 c7 4a 94 dd c6 24 1c 1e 5f b3 e3 56 54 45 3c 16 38 d9 b7 b4 ba d8 9b 84 a3 99 9a 84 c4 74 72 c8 62 83 e0 30 ba 8c fb 09 0d 83 1c 07 ab c0 e5 0b 9a cd c5 fe 03 65 fe a1 2f 06 6e f5 f8 47 ab ca 4b de bc 1a f8 05 2f 4a f3 42 e2 99 c0 91 be ad d5 c5 41 c2 5a 89 87 22 0b 89 0f 01 77 03 0f 00 f7 12 c6 58 1f 1a 62 10 1c 46 35 b0 df f6 35 f4 d5 3c 61 96 f9 35 2f 4d 2e 26 8a d7 35 84 c5 56 ab b2 e4 cd 12 e0 9d b8 1d 64 51 40 5c 81 13 56 d4 9b 39 c2 38 bb fd 15 0d 89 b7 03 f7 24 41 77 2b ad aa Data Ascii: 6[h7s."Q%oboHt&,BWua?mNf?Z~Ext,J$_VTE<8trb0e/nGK/JBAZ"wXbF55<a5/M.&5VdQ@\V98$Aw+
2024-05-23 13:51:23 UTC	104	IN	Data Raw: 11 ff 13 f0 07 1e de 5a e8 67 8f e6 57 03 bf 60 93 95 f6 3a 94 ad 22 4e 13 76 59 59 66 f3 94 d6 0e c2 98 c2 4e 33 90 87 51 29 ec 14 0a 17 eb 6f 92 87 cc 19 5c fe 46 9a 27 b6 0a 62 7a a3 d9 02 fc 92 87 b7 16 da 55 11 f3 93 20 7e 0e b8 d6 e6 2a f5 b9 9b bf 29 ef 01 8e b3 69 4a e5 20 f3 c7 15 ee cf 05 bf 6c b5 70 Data Ascii: ZgW`:"NvYYfN3Q)o\F'bzU ~*)iJ lp
2024-05-23 13:51:23 UTC	1460	IN	Data Raw: d8 95 c2 39 ba 57 12 fb 75 29 70 31 61 4c f3 1e ac 26 4a 0b 02 55 6c 3f 53 03 f8 3a 70 85 87 b8 16 ce 4a 6e 5a f9 2a 62 fa 7e 78 17 2e 63 53 a5 6b 51 b6 92 78 02 b0 de e6 99 b8 6d 84 e5 69 76 d3 5b b5 70 58 95 c2 b9 31 fe 8c 37 00 ff 44 6b d9 1d c7 27 aa d6 62 1c 83 98 06 c4 ef 02 3f e1 21 ae 85 75 c0 27 0a 6e 34 d3 c0 6f 12 c6 1c a9 3a 21 31 3b ab 79 1f 61 bc a9 5d cd e3 97 56 0b 1f 48 c2 e1 c1 5c 18 ec 54 2d cc ff ba e8 ef f5 52 29 1c a7 53 80 d7 12 f6 75 7e 32 f7 90 69 45 51 b5 7e 6a 8f ed e7 5a ca fc 59 74 8a db b3 81 fb 08 63 89 e6 08 6b e9 bd 9f b0 36 a6 55 80 ea 5d 93 f2 e3 11 cf 05 96 d8 3c 63 51 54 2d ec 34 0b b9 53 b5 b0 8c 95 c2 5e ec 20 2c 83 f5 60 ee 35 7b 1d 51 6d 4c 47 fa 73 a5 e3 99 76 03 df e7 61 ae 85 63 81 4f 26 c7 7d 75 12 0e d7 65 2e Data Ascii: 9Wu)p1aL&JUl?S:pJnZ*b~x.cSkQxmiv[pX17Dk'b?!u'n4o:!1;ya]VH\T-R)Su~2iEQ~jZYtck6U]<cQT-4S^ ,`5{QmLGsvacO&}ue.
2024-05-23 13:51:23 UTC	1460	IN	Data Raw: fb f0 c9 bb da 21 31 bf 1d 1f b4 2a 89 4b c7 f8 5a b6 01 f7 11 96 ac c9 77 27 67 ab 84 56 0c 35 2c 6b 80 cb 81 d7 00 cf 4a 1e 50 b6 63 65 51 03 3e 6d d7 f5 67 6f 10 d6 c7 7b c6 b7 42 2d cd 24 4f d9 87 71 56 73 ac d7 b6 fc 78 c4 95 c0 69 84 7d ba 47 69 37 f0 10 61 8b c7 7c 30 cc 57 05 67 b1 62 a8 d1 4b 2b 8b 77 e2 98 45 f5 60 da 26 60 06 58 0e bc c0 a6 a8 9d a9 24 30 e4 b7 b9 f2 a2 19 4f 48 cc 8f 47 9c 21 2c 73 b4 9a d1 2c a4 7d 90 30 09 ea 91 e4 c1 23 1b 02 b3 95 c1 fc 87 15 43 8d 5a 5a 59 7c 25 f0 a2 e4 3d 75 88 b0 b0 bc 0b 72 ab ed 53 76 9d 7f fe 06 61 26 f3 16 df 0e b5 75 0f 61 70 b7 55 c4 78 af 6f e3 a8 24 a6 0b 5d 67 83 21 74 1e 67 68 c5 50 65 70 3d f0 95 e4 c1 c6 71 8b 02 ac 20 a6 37 90 3d 84 05 75 2f f1 2d 51 4b ab 09 93 08 8a c6 1f 3a 1e 31 8e 73 Data Ascii: !1*KZw'gV5,kJPceQ>mgo{B-$OqVsxi}Gi7a\|0WgbK+wE`&`X$0OHG!,s,}0#CZZY\|%=urSva&uapUxo$]g!tghPep=q 7=u/-QK:1s
2024-05-23 13:51:23 UTC	1360	IN	Data Raw: b3 55 ea 66 2b 61 59 af 6c 38 9c 6d 77 fd 33 20 f6 17 12 6f 06 de 6a 73 28 b9 20 2f 05 76 e4 82 61 13 ab 87 93 b4 0b f8 4d e0 8e 4c f8 9b ed 12 0c 7b 0d 87 79 d9 bf 77 b3 21 51 43 0c 84 2b 80 b5 c0 49 c0 19 c0 a9 84 71 af c7 50 bf 65 65 34 dc 80 f8 e5 36 01 71 c1 f5 cf 80 d8 5f 40 7c 82 30 61 e5 1c 9b 44 84 2a e2 0c ad 95 ed f3 e1 c1 2a e2 78 7d 06 78 2f 61 51 db ec d6 78 d9 90 38 48 d5 b0 db 75 21 fd 37 be 45 18 db 73 be 87 42 3d 84 c2 4e 81 f0 94 e4 d7 47 e1 50 30 0d cf 23 c0 57 92 eb e1 0c 0b 27 a9 cc e3 1b af f7 4a 41 3a ae ec e7 81 d7 da 24 4a 9c 46 d8 be 69 4f c1 ef 39 1e 71 7c fe 28 09 68 ed 26 a1 b4 5b e3 b0 39 a4 eb c2 1c 61 56 e0 bf 26 bf f7 26 0f 89 68 3f 8e 70 05 61 42 c9 2a ac 0a 6a 7c 1a b4 af 5a 2f 60 05 b1 ff 6a c1 1e 60 23 a1 92 28 91 3c Data Ascii: Uf+aYl8mw3 ojs( /vaML{yw!QC+IqPee46q_@\|0aD*x}x/aQx8Hu!7EsB=NGP0#W'JA:$JFiO9q\|(h&[9aV&&h?paBj\|Z/`j`#(<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50322	204.16.247.184	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:24 UTC	370	OUT	GET /api/episode/id/30072173 HTTP/1.1 Host: html5-player.libsyn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	468	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:24 GMT server: Apache set-cookie: libsyn-paywall-s=o7jv698e1c4uv748de21evqt1n; expires=Fri, 24-May-2024 13:51:24 GMT; Max-Age=86400; path=/; domain=libsyn.com; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-libsyn-host: v74pl-03 access-control-allow-origin: * content-length: 1335 content-type: application/json connection: close
2024-05-23 13:51:32 UTC	992	IN	Data Raw: 7b 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 5f 69 74 65 6d 22 3a 7b 22 69 74 65 6d 5f 62 6f 64 79 22 3a 22 3c 70 3e 41 6e 64 79 20 43 72 69 74 63 68 6c 6f 77 2c 20 53 26 61 6d 70 3b 50 20 47 6c 6f 62 61 6c 73 20 48 65 61 64 20 6f 66 20 45 4d 45 41 20 4e 65 77 73 2c 20 6a 6f 69 6e 73 20 74 68 65 20 70 6f 64 63 61 73 74 20 74 6f 20 68 65 6c 70 20 4e 61 74 68 61 6e 20 67 65 74 20 61 20 62 65 74 74 65 72 20 67 72 61 73 70 20 6f 6e 20 77 68 61 74 27 73 20 68 61 70 70 65 6e 69 6e 67 20 77 69 74 68 20 47 6c 6f 62 61 6c 20 4f 69 6c 20 4d 61 72 6b 65 74 73 2e 3c 5c 2f 70 3e 20 22 2c 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 69 74 65 6d 5f 74 69 74 6c 65 22 3a 22 4d 61 6b 69 6e 67 20 53 65 6e 73 65 20 6f 66 20 4f 69 6c 20 4d 61 Data Ascii: {"item_id":30072173,"_item":{"item_body":"<p>Andy Critchlow, S&P Globals Head of EMEA News, joins the podcast to help Nathan get a better grasp on what's happening with Global Oil Markets.<\/p> ","item_id":30072173,"item_title":"Making Sense of Oil Ma
2024-05-23 13:51:32 UTC	343	IN	Data Raw: 65 2e 63 6f 6d 5c 2f 75 73 5c 2f 70 6f 64 63 61 73 74 5c 2f 74 68 65 2d 65 73 73 65 6e 74 69 61 6c 2d 70 6f 64 63 61 73 74 5c 2f 69 64 31 35 30 35 36 30 35 37 38 37 22 2c 22 73 68 6f 77 5f 69 64 22 3a 32 35 39 36 39 34 2c 22 73 68 6f 77 5f 74 69 74 6c 65 22 3a 22 54 68 65 20 45 73 73 65 6e 74 69 61 6c 20 50 6f 64 63 61 73 74 22 2c 22 73 70 6f 74 69 66 79 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 70 65 6e 2e 73 70 6f 74 69 66 79 2e 63 6f 6d 5c 2f 73 68 6f 77 5c 2f 30 61 54 4b 30 5a 4c 4a 34 68 61 77 73 78 47 6e 68 71 54 4a 65 34 22 2c 22 67 6f 6f 67 6c 65 5f 70 6f 64 63 61 73 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 73 3f 66 65 65 64 3d 61 48 52 30 63 48 4d 36 4c Data Ascii: e.com\/us\/podcast\/the-essential-podcast\/id1505605787","show_id":259694,"show_title":"The Essential Podcast","spotify_url":"https:\/\/open.spotify.com\/show\/0aTK0ZLJ4hawsxGnhqTJe4","google_podcast_url":"https:\/\/www.google.com\/podcasts?feed=aHR0cHM6L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50324	63.140.62.17	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:24 UTC	452	OUT	GET /ee/irl1/v1/interact?configId=a09783d4-f2df-4c99-9355-5ed608d27275&requestId=6801e961-cf34-487b-ab9c-71dd474eb94a HTTP/1.1 Host: edge.adobedc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:24 UTC	419	IN	HTTP/1.1 404 Not Found x-request-id: 6801e961-cf34-487b-ab9c-71dd474eb94a vary: Origin date: Thu, 23 May 2024 13:51:23 GMT x-konductor: N/A x-adobe-edge: IRL1;6 server: jag content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50327	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:24 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:24 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 450 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drifte14e3254c25a9b3c5514da043f8 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:24 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 5f5fdd347d6ea8b242af79ee38a02fae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: mPeRwMRS10tn0DHf3NlFSL6EOA5WHWfOOQEUMeJrtHIhjpJ2Ld8avg==
2024-05-23 13:51:24 UTC	450	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50330	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:24 UTC	635	OUT	GET /gw1/rtp/api/v1_1/visitor?sid=spglobal-1716472255217-b61b91f1&aid=spglobal&1716472282772 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:24 UTC	699	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:24 GMT Server: Jetty(9.4.45.v20220203) Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Last-Modified: Thu May 23 08:51:24 CDT 2024 Pragma: No-cache Access-Control-Allow-Origin: https://www.spglobal.com Vary: Origin Access-Control-Allow-Credentials: true Content-Type: application/json Strict-Transport-Security: max-age=63113904 Connection: close Transfer-Encoding: chunked Set-Cookie: BIGipServerabrtp1_https=!cLDu2CZ+V6KJEeOJMaUfYxEamMjeMvB8G7iGgl1Ldr3VPdYRKKTLifHtpabvr9rJWT2Zjzhb7d0wXBk=; expires=Thu, 23-May-2024 14:26:24 GMT; path=/; Httponly; Secure
2024-05-23 13:51:24 UTC	3364	IN	Data Raw: 64 31 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 73 75 6c 74 73 22 3a 7b 22 6f 72 67 22 3a 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 4c 4c 43 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 4f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 7d 2c 22 69 6e 64 75 73 74 72 69 65 73 22 3a 5b 22 54 65 6c 65 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 22 5d 2c 22 69 73 70 22 3a 74 72 75 65 2c 22 6d 61 74 63 68 65 64 53 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 32 35 34 31 36 2c 22 6e 61 6d 65 22 3a 22 49 6e 64 75 73 74 72 79 20 7c 20 43 Data Ascii: d1d{"status":200,"results":{"org":"Centurylink Communications LLC","location":{"country":"United States Of America","city":"New York City","state":"NY"},"industries":["Telecommunications"],"isp":true,"matchedSegments":[{"code":25416,"name":"Industry \| C
2024-05-23 13:51:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50331	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:24 UTC	608	OUT	GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472282776 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:24 UTC	453	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:24 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/json;charset=utf-8 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-Length: 48 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!CahO3wL7XdaO4sSJMaUfYxEamMjeMmWERGOx4ey5so8Hj7cShKASkEwWpZJuSLVfygd5Zo3Be894TWE=; expires=Thu, 23-May-2024 14:26:24 GMT; path=/; Httponly; Secure
2024-05-23 13:51:24 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 7b 22 73 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 22 7d Data Ascii: {"code":200,"body":{"segments":[]},"content":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50329	162.247.243.39	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:24 UTC	574	OUT	GET /nr-full-1.260.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.spglobal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:24 UTC	814	IN	HTTP/1.1 200 OK Connection: close Content-Length: 93404 x-amz-id-2: hfI6cyQhCZvGezE/vzu4dGLV7tx8xlhSUln04H36gsFcZA72V2IdZTEwNGb3gmArZWLF9PyZFA/cw2zip3s1poARBVFxeVmY x-amz-request-id: 7WZ0RK4DEBJM8FKJ Last-Modified: Mon, 13 May 2024 21:56:00 GMT ETag: "04729d4a31aad3dbb4feb482ce6e12cf" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 x-amz-version-id: pQ5GbYEHY7WcnSYi3szfhKX7oxruxf9l Content-Type: application/javascript Server: AmazonS3 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 23 May 2024 13:51:24 GMT Via: 1.1 varnish X-Served-By: cache-ewr18170-EWR X-Cache: HIT X-Cache-Hits: 5 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-05-23 13:51:24 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 66 75 6c 6c 2d 31 2e 32 36 30 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 30 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 30 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 5d 2c 7b 32 35 37 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 6f 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 73 3d 69 28 34 32 34 37 29 2c 72 3d 69 28 31 31 31 37 29 2c 6e 3d 69 28 36 32 39 31 29 2c 61 3d 69 Data Ascii: /! For license information please see nr-full-1.260.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.260.0.PROD"]=self["webpackChunk:NRBA-1.260.0.PROD"]\|\|[]).push([[63],{2573:(e,t,i)=>{i.d(t,{o:()=>c});var s=i(4247),r=i(1117),n=i(6291),a=i
2024-05-23 13:51:24 UTC	16384	IN	Data Raw: 6e 79 4c 69 73 74 29 2c 74 68 69 73 2e 61 6a 61 78 45 76 65 6e 74 73 3d 5b 5d 2c 74 68 69 73 2e 73 70 61 41 6a 61 78 45 76 65 6e 74 73 3d 7b 7d 2c 74 68 69 73 2e 73 65 6e 74 41 6a 61 78 45 76 65 6e 74 73 3d 5b 5d 3b 63 6f 6e 73 74 20 72 3d 74 68 69 73 3b 74 68 69 73 2e 65 65 2e 6f 6e 28 22 69 6e 74 65 72 61 63 74 69 6f 6e 44 6f 6e 65 22 2c 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 73 70 61 41 6a 61 78 45 76 65 6e 74 73 5b 65 2e 69 64 5d 26 26 28 74 7c 7c 74 68 69 73 2e 73 70 61 41 6a 61 78 45 76 65 6e 74 73 5b 65 2e 69 64 5d 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 74 68 69 73 2e 61 6a 61 78 45 76 65 6e 74 73 2e 70 75 73 68 28 65 29 29 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 73 70 61 41 6a 61 78 45 76 65 6e 74 73 5b 65 2e 69 64 5d 29 7d 29 29 2c 28 30 2c Data Ascii: nyList),this.ajaxEvents=[],this.spaAjaxEvents={},this.sentAjaxEvents=[];const r=this;this.ee.on("interactionDone",((e,t)=>{this.spaAjaxEvents[e.id]&&(t\|\|this.spaAjaxEvents[e.id].forEach((e=>this.ajaxEvents.push(e))),delete this.spaAjaxEvents[e.id])})),(0,
2024-05-23 13:51:24 UTC	16384	IN	Data Raw: 22 29 3a 74 68 69 73 2e 73 74 6f 72 65 53 75 70 70 6f 72 74 61 62 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 47 65 6e 65 72 69 63 2f 52 65 73 6f 75 72 63 65 73 2f 4e 6f 6e 2d 41 6a 61 78 2f 45 78 74 65 72 6e 61 6c 22 29 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 29 7b 63 6f 6e 73 74 20 73 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6d 61 72 6b 22 29 2c 72 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6d 65 61 73 75 72 65 22 29 3b 74 68 69 73 2e 73 74 6f 72 65 53 75 70 70 6f 72 74 61 62 69 6c 69 74 79 4d 65 74 72 69 63 73 28 22 47 65 6e 65 72 69 63 2f 50 65 72 66 6f 72 6d 61 6e 63 65 2f 4d 61 72 6b 2f Data Ascii: "):this.storeSupportabilityMetrics("Generic/Resources/Non-Ajax/External")})),"undefined"!=typeof performance){const s=performance.getEntriesByType("mark"),r=performance.getEntriesByType("measure");this.storeSupportabilityMetrics("Generic/Performance/Mark/
2024-05-23 13:51:24 UTC	15798	IN	Data Raw: 74 68 69 73 2e 75 38 3d 74 7d 63 61 74 63 68 28 65 29 7b 7d 7d 70 72 65 70 61 72 65 48 61 72 76 65 73 74 28 29 7b 6c 65 74 7b 6f 70 74 73 3a 65 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 69 66 28 21 74 68 69 73 2e 72 65 63 6f 72 64 65 72 7c 7c 21 74 68 69 73 2e 74 69 6d 65 4b 65 65 70 65 72 3f 2e 72 65 61 64 79 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 72 65 63 6f 72 64 65 72 2e 67 65 74 45 76 65 6e 74 73 28 29 3b 69 66 28 21 74 2e 65 76 65 6e 74 73 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 6d 6f 64 65 21 3d 3d 79 2e 49 4b 2e 46 55 4c 4c 7c 7c 74 68 69 73 2e 62 6c 6f 63 6b 65 64 29 72 65 74 75 72 6e Data Ascii: this.u8=t}catch(e){}}prepareHarvest(){let{opts:e}=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};if(!this.recorder\|\|!this.timeKeeper?.ready)return;const t=this.recorder.getEvents();if(!t.events.length\|\|this.mode!==y.IK.FULL\|\|this.blocked)return
2024-05-23 13:51:24 UTC	16384	IN	Data Raw: 73 3d 7b 7d 3b 63 75 73 74 6f 6d 44 61 74 61 42 79 41 70 69 3d 7b 7d 3b 71 75 65 75 65 54 69 6d 65 3b 61 70 70 54 69 6d 65 3b 6e 65 77 52 6f 75 74 65 3b 73 74 61 74 75 73 3d 62 3b 64 6f 6d 54 69 6d 65 73 74 61 6d 70 3d 30 3b 68 69 73 74 6f 72 79 54 69 6d 65 73 74 61 6d 70 3d 30 3b 63 72 65 61 74 65 64 42 79 41 70 69 3d 21 31 3b 6b 65 65 70 4f 70 65 6e 55 6e 74 69 6c 45 6e 64 41 70 69 3d 21 31 3b 6f 6e 44 6f 6e 65 3d 5b 5d 3b 63 61 6e 63 65 6c 6c 61 74 69 6f 6e 54 69 6d 65 72 3b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 69 2c 73 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 62 65 6c 54 79 70 65 3d 76 2c 74 68 69 73 2e 74 72 69 67 67 65 72 3d 74 2c 74 68 69 73 2e 73 74 61 72 74 3d 69 2c 74 68 69 73 2e 6f 6c 64 52 6f 75 74 65 3d 73 2c 74 68 69 73 2e Data Ascii: s={};customDataByApi={};queueTime;appTime;newRoute;status=b;domTimestamp=0;historyTimestamp=0;createdByApi=!1;keepOpenUntilEndApi=!1;onDone=[];cancellationTimer;constructor(e,t,i,s){super(e),this.belType=v,this.trigger=t,this.start=i,this.oldRoute=s,this.
2024-05-23 13:51:24 UTC	12070	IN	Data Raw: 74 69 66 69 65 72 7d 2c 7b 2e 2e 2e 28 30 2c 61 2e 67 47 29 28 29 2c 69 6e 66 6f 3a 7b 2e 2e 2e 28 30 2c 61 2e 67 47 29 28 29 2e 69 6e 66 6f 2c 6a 73 41 74 74 72 69 62 75 74 65 73 3a 65 7d 2c 72 75 6e 74 69 6d 65 3a 28 30 2c 72 2e 4f 50 29 28 74 68 69 73 2e 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 29 7d 29 7d 7d 7d 7d 2c 38 35 38 32 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 6c 61 7a 79 46 65 61 74 75 72 65 4c 6f 61 64 65 72 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 73 3d 69 28 33 33 32 35 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 22 61 67 67 72 65 67 61 74 65 22 3d 3d 3d 74 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 73 2e 44 2e 61 6a 61 78 3a 72 65 74 75 72 6e 20 69 2e 65 28 36 33 29 2e 74 68 65 6e 28 69 2e 62 69 6e Data Ascii: tifier},{...(0,a.gG)(),info:{...(0,a.gG)().info,jsAttributes:e},runtime:(0,r.OP)(this.agentIdentifier)})}}}},8582:(e,t,i)=>{i.d(t,{lazyFeatureLoader:()=>r});var s=i(3325);function r(e,t){if("aggregate"===t)switch(e){case s.D.ajax:return i.e(63).then(i.bin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50336	18.245.86.77	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:24 UTC	651	OUT	GET /include/1716472500000/px2iwrcmfxwz.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "7c4c8a7061350329f108e3f92f2b6acc" If-Modified-Since: Wed, 22 May 2024 13:34:06 GMT
2024-05-23 13:51:25 UTC	846	IN	HTTP/1.1 304 Not Modified Connection: close Server: istio-envoy Date: Thu, 23 May 2024 13:51:25 GMT Last-Modified: Wed, 22 May 2024 13:34:06 GMT ETag: "7c4c8a7061350329f108e3f92f2b6acc" x-amz-version-id: XYnjHdjtoHL3LHbO4aoVXXJc8JG50RFv access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 24 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 18fab39b23fb6b3013058d6df5faf0bc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: L1eheMRwLst7LeeDyZCwp1ir-gvPqDn172a5qkZTdRJg-RGlzQxOyw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50340	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	572	OUT	OPTIONS /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: _vtok,_zitok,content-type,visited-url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:25 UTC	1089	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: GET,HEAD via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=5K3fr4L91QU_WJ3N9s3reXlXHa.JE6XsDK01hBE8VD8-1716472285-1.0.1.1-1_8lTDqKH.AQ1KtOx2jKwA5AXrxyFVJV3ajkWRqHzsseP0WDY.jhgudgFHYYPPERbor71WrC3_FTkZ_bbKuR2g; path=/; expires=Thu, 23-May-24 14:21:25 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=M_8rEbudZ8o.KKxl2RU28exCZ6.fj4BWKucM.nbflhw-1716472285376-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 888585474fd90f3e-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:25 UTC	13	IN	Data Raw: 38 0d 0a 47 45 54 2c 48 45 41 44 0d 0a Data Ascii: 8GET,HEAD
2024-05-23 13:51:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50341	34.195.15.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 1334519-19.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: w2RisahLDikC87CpmZgiVg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:25 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:25 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50344	204.16.247.184	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	603	OUT	GET /api/episode/id/30072173 HTTP/1.1 Host: html5-player.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://play.libsyn.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.libsyn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:25 UTC	539	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:25 GMT server: Apache set-cookie: libsyn-paywall-s=e5dh5jomdpdg3j9j72gg049hm0; expires=Fri, 24-May-2024 13:51:25 GMT; Max-Age=86400; path=/; domain=libsyn.com; secure; HttpOnly expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache access-control-allow-origin: * access-control-allow-credentials: true access-control-max-age: 86400 x-libsyn-host: v74pl-01 content-length: 1335 content-type: application/json connection: close
2024-05-23 13:51:25 UTC	921	IN	Data Raw: 7b 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 5f 69 74 65 6d 22 3a 7b 22 69 74 65 6d 5f 62 6f 64 79 22 3a 22 3c 70 3e 41 6e 64 79 20 43 72 69 74 63 68 6c 6f 77 2c 20 53 26 61 6d 70 3b 50 20 47 6c 6f 62 61 6c 73 20 48 65 61 64 20 6f 66 20 45 4d 45 41 20 4e 65 77 73 2c 20 6a 6f 69 6e 73 20 74 68 65 20 70 6f 64 63 61 73 74 20 74 6f 20 68 65 6c 70 20 4e 61 74 68 61 6e 20 67 65 74 20 61 20 62 65 74 74 65 72 20 67 72 61 73 70 20 6f 6e 20 77 68 61 74 27 73 20 68 61 70 70 65 6e 69 6e 67 20 77 69 74 68 20 47 6c 6f 62 61 6c 20 4f 69 6c 20 4d 61 72 6b 65 74 73 2e 3c 5c 2f 70 3e 20 22 2c 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 69 74 65 6d 5f 74 69 74 6c 65 22 3a 22 4d 61 6b 69 6e 67 20 53 65 6e 73 65 20 6f 66 20 4f 69 6c 20 4d 61 Data Ascii: {"item_id":30072173,"_item":{"item_body":"<p>Andy Critchlow, S&P Globals Head of EMEA News, joins the podcast to help Nathan get a better grasp on what's happening with Global Oil Markets.<\/p> ","item_id":30072173,"item_title":"Making Sense of Oil Ma
2024-05-23 13:51:25 UTC	414	IN	Data Raw: 64 73 2e 6c 69 62 73 79 6e 2e 63 6f 6d 5c 2f 32 35 39 36 39 34 5c 2f 72 73 73 22 2c 22 69 74 75 6e 65 73 5f 73 74 6f 72 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 70 6f 64 63 61 73 74 73 2e 61 70 70 6c 65 2e 63 6f 6d 5c 2f 75 73 5c 2f 70 6f 64 63 61 73 74 5c 2f 74 68 65 2d 65 73 73 65 6e 74 69 61 6c 2d 70 6f 64 63 61 73 74 5c 2f 69 64 31 35 30 35 36 30 35 37 38 37 22 2c 22 73 68 6f 77 5f 69 64 22 3a 32 35 39 36 39 34 2c 22 73 68 6f 77 5f 74 69 74 6c 65 22 3a 22 54 68 65 20 45 73 73 65 6e 74 69 61 6c 20 50 6f 64 63 61 73 74 22 2c 22 73 70 6f 74 69 66 79 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6f 70 65 6e 2e 73 70 6f 74 69 66 79 2e 63 6f 6d 5c 2f 73 68 6f 77 5c 2f 30 61 54 4b 30 5a 4c 4a 34 68 61 77 73 78 47 6e 68 71 54 4a 65 34 22 2c Data Ascii: ds.libsyn.com\/259694\/rss","itunes_store_url":"https:\/\/podcasts.apple.com\/us\/podcast\/the-essential-podcast\/id1505605787","show_id":259694,"show_title":"The Essential Podcast","spotify_url":"https:\/\/open.spotify.com\/show\/0aTK0ZLJ4hawsxGnhqTJe4",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50345	35.244.159.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	879	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
2024-05-23 13:51:25 UTC	660	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270; Version=1; Expires=Fri, 23-May-2025 13:51:25 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://aorta.clickagy.com/pixel.gif?ch=4&cm=5e07638e-be7e-42f3-942b-3117d96e7e8e&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D Date: Thu, 23 May 2024 13:51:25 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50342	3.218.167.115	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	805	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 1510748-48.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: kOZd/2smIHDSYCLL4K8e4A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:25 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:25 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50343	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	786	OUT	GET /assets/libsyn-logo--black.png HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:25 UTC	352	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:25 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 27216 x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: image/png connection: close
2024-05-23 13:51:25 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 88 00 00 02 8b 08 06 00 00 00 75 dd 79 14 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 45 2a 82 56 10 11 cc 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 b9 f4 43 68 d2 90 a4 b8 38 0a ae 05 07 3f 16 ab 0e 2e ce ba 3a b8 0a 82 e0 07 88 93 a3 93 a2 8b 94 f8 bf a4 d0 22 c6 83 e3 7e bc bb f7 b8 7b 07 08 f5 32 53 cd 8e 71 40 d5 2c 23 15 8f 89 d9 dc 8a 18 78 45 10 fd e8 85 88 61 89 99 7a 22 bd 90 81 e7 f8 ba 87 8f af 77 51 9e e5 7d ee cf d1 ad e4 4d 06 f8 44 e2 59 a6 1b 16 f1 3a f1 f4 a6 a5 73 de 27 0e b3 92 a4 10 9f 13 8f 19 74 41 e2 47 ae cb 2e bf 71 2e 3a 2c f0 cc b0 91 49 cd 11 87 89 c5 62 1b cb 6d cc 4a 86 4a 3c 45 1c 51 54 8d f2 85 ac cb 0a Data Ascii: PNGIHDRuyiCCPICC profile(}=H@_SE*VP,8J`Zu0Ch8?.:"~{2Sq@,#xEaz"wQ}MDY:s'tAG.q.:,IbmJJ<EQT
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 08 88 92 24 49 32 20 aa 06 ac 6e 48 a3 3b 97 3c bf 24 19 10 55 29 6f b2 09 4a e5 5b 36 41 e5 9d 92 04 c2 86 c1 50 92 01 51 d2 30 ec b4 09 2a ef a8 dc af 0d 89 92 0c 88 aa 3c 6f 66 d2 e2 cf 21 cf 23 49 06 44 45 73 43 6b 18 16 27 aa 89 db ed c5 e0 2c 83 a2 a4 ba 06 c4 8f d9 84 51 87 44 6f 6c 93 f3 a4 4d 50 79 ab 6c 02 49 75 0d 88 8f db 84 51 86 43 49 92 64 40 94 0c 8a 25 b3 dd 26 88 c2 f1 b8 40 b6 24 03 a2 2a ee 18 6f 62 a5 b1 db 26 88 ee a1 4b 92 0c 88 aa a4 b5 b9 9b 99 37 b5 c9 69 da 04 51 58 de 26 28 7a 6e 49 8a 3a 20 3e 61 13 46 cb 1b d8 64 b9 d7 79 1c 4e b4 09 24 d5 31 20 7e c3 26 8c 2e 14 1a 0c cb c1 0a 62 bc 0f 5a 9e 63 92 a2 0f 88 aa e7 0d 4e e3 f1 b4 4d 50 79 17 e0 92 51 92 0c 88 92 86 e8 16 9b c0 07 2e 49 32 20 6a d2 2e b5 09 a4 a1 3a db 50 28 a9 Data Ascii: $I2 nH;<$U)oJ[6APQ0<of!#IDEsCk',QDolMPylIuQCId@%&@$ob&K7iQX&(znI: >aFdyN$1 ~&.bZcNMPyQ.I2 j.:P(
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 5f b6 12 78 12 61 19 31 43 a0 26 11 10 a7 69 4d 88 eb 78 bd 19 66 40 6c e2 62 d9 b1 79 09 f0 21 dc 06 ac 8c 1e b5 09 a2 71 01 ae 87 18 83 7c 35 f0 b9 38 11 44 e5 d2 a0 55 41 ec 5a f8 59 32 82 17 70 13 61 4a bc aa 6f 5d 41 38 b4 c2 31 79 4e 54 89 cb 45 c0 17 59 38 ce d7 73 ad bc 56 27 1f a7 25 c7 cf 65 60 54 a5 90 d8 28 b8 a7 2f b8 de 8c 22 20 6e 36 20 46 e3 85 b9 70 a8 f2 98 23 8c f9 3d c3 a6 a8 bc f3 09 cb 91 ec c9 5d c4 0d 87 93 b7 92 30 39 e4 64 42 45 f0 8c e4 78 49 55 34 55 10 10 db 1a 45 40 fc 0a 2e 96 1d 93 ec 52 37 ce b2 2c 97 1b 0d 88 d1 d8 00 dc 83 e3 10 27 69 35 61 9b b7 13 08 55 41 c7 08 2a 46 3d 6f a1 3b 8a 80 e8 52 37 71 71 a9 9b f2 fa 8e 4d 10 8d cb 08 2b 06 58 ad 1f bd 74 ac e0 99 84 09 23 97 e0 b2 31 32 34 8e 7c 99 1b 80 6f d9 d6 51 71 a9 Data Ascii: _xa1C&iMxf@lby!q\|58DUAZY2paJo]A81yNTEY8sV'%e`T(/" n6 Fp#=]09dBExIU4UE@.R7,'i5aUA*F=o;R7qqM+Xt#124\|oQq
2024-05-23 13:51:25 UTC	1412	IN	Data Raw: 07 c3 d4 3a 5a 6b 16 9e 46 98 65 3c 2e 6b 81 69 9c ac 22 a9 c2 01 11 03 62 94 2e f1 c6 54 09 87 80 5b 6c 86 a1 05 c3 15 84 7d ae d3 b1 85 6b 27 f8 9a 56 17 bc 46 ab 88 92 2a 17 10 bf 65 73 47 e5 07 68 8d 7f b2 7a 58 4e 69 f5 de 6e e6 c1 43 61 7a 8d 5c 43 98 89 fc 12 e0 1c fa 5f 9e 66 14 b2 3b ab 78 fe 49 1a aa 25 63 fc bf dc 51 25 2e e9 40 fc 47 70 a2 4a d9 3d 60 13 0c f4 d0 bc 94 b0 1f f2 d9 25 09 84 79 cb 08 8b d6 3f 5d f0 da 5d 38 5b d2 d0 2e 86 a3 96 ee a8 a2 78 5c 4c f1 38 44 ab 19 e5 62 37 73 6f d7 c2 6c 37 f2 79 c0 0b 93 f7 f8 ca 12 bf ee ec 92 37 9e 77 92 2a 17 10 d3 a7 d8 cf da e4 d1 05 44 bb 98 cb cd 6e e6 ee a1 30 db 8d 7c 29 a1 1b 79 dc 93 4e 06 95 56 11 db fd 4c 9e 97 92 4a 1d 10 53 9f b6 c9 a3 f2 6a 1c 87 58 15 76 33 2f 0c 51 a9 0d 84 49 27 Data Ascii: :ZkFe<.ki"b.T[l}k'VFesGhzXNinCaz\C_f;xI%cQ%.@GpJ=`%y?]]8[.x\L8Db7sol7y7wDn0\|)yNVLJSjXv3/QI'
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 36 89 e9 12 27 fb 80 fd 36 4f ed 9c 44 98 b8 62 57 b3 64 40 2c 8d bb 3c 24 51 b2 9b b9 bc 56 01 7f 48 e8 52 ce 9a 4b 3e b6 d9 44 b5 bc 2f 6c c4 f1 88 92 01 b1 44 66 80 eb 3c 2c d1 b1 9b b9 7c 1a c0 8f 02 1f 06 ce ef f0 e7 76 00 87 6c ae da 59 4e f1 78 44 43 a2 64 40 9c 88 26 f0 37 1e 96 28 d9 cd 5c 1e 67 13 16 c3 be b6 cd 39 08 ad 0a e2 1c 8e 45 ac ab a2 f1 88 f9 87 0c 49 06 c4 b1 84 43 80 af 7a 58 a2 64 37 f3 e4 ad 00 de 01 fc 29 61 8b b5 5e 59 45 ac af 8d b4 1f 8f 28 c9 80 38 56 3b 81 ad 1e 9a e8 a4 dd cc de 60 26 e3 12 c2 f0 8d d7 f5 f1 b0 66 15 51 00 a7 e1 78 44 c9 80 58 12 7f e8 a1 89 d2 0f 52 bc ed 9e 37 99 d1 59 05 fc 26 f0 fb 43 78 70 9b b1 39 6b 7b 9f 38 8d f9 e3 11 0d 89 92 01 71 ac 5c ee 26 6e 3f ce fc 2a 84 5d cc a3 d3 00 ae 22 4c 42 b9 6a c0 Data Ascii: 6'6ODbWd@,<$QVHRK>D/lDf<,\|vlYNxDCd@&7(\g9EICzXd7)a^YE(8V;`&fQxDXR7Y&Cxp9k{8q\&n?*]"LBj
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 36 e9 a1 b2 5b c5 80 68 37 73 dc 9e 00 2e 22 ec ce 51 e5 25 6f 62 9c a5 dc 6f 48 74 d9 1b 19 12 07 0b 82 b7 11 ba 83 9f 26 2c ed 42 87 c0 57 f4 75 af 01 b0 df 8a 61 3f e1 6d 98 c7 ad 4e ef 81 c6 08 ff bd 66 3f ed 5a c5 80 d8 00 7e 97 b0 45 9b e2 f4 16 c2 78 c4 74 2c e2 1c f3 c7 4a 94 dd c6 24 1c 1e 5f b3 e3 56 54 45 3c 16 38 d9 b7 b4 ba d8 9b 84 a3 99 9a 84 c4 74 72 c8 62 83 e0 30 ba 8c fb 09 0d 83 1c 07 ab c0 e5 0b 9a cd c5 fe 03 65 fe a1 2f 06 6e f5 f8 47 ab ca 4b de bc 1a f8 05 2f 4a f3 42 e2 99 c0 91 be ad d5 c5 41 c2 5a 89 87 22 0b 89 0f 01 77 03 0f 00 f7 12 c6 58 1f 1a 62 10 1c 46 35 b0 df f6 35 f4 d5 3c 61 96 f9 35 2f 4d 2e 26 8a d7 35 84 c5 56 ab b2 e4 cd 12 e0 9d b8 1d 64 51 40 5c 81 13 56 d4 9b 39 c2 38 bb fd 15 0d 89 b7 03 f7 24 41 77 2b ad aa Data Ascii: 6[h7s."Q%oboHt&,BWua?mNf?Z~Ext,J$_VTE<8trb0e/nGK/JBAZ"wXbF55<a5/M.&5VdQ@\V98$Aw+
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 11 ff 13 f0 07 1e de 5a e8 67 8f e6 57 03 bf 60 93 95 f6 3a 94 ad 22 4e 13 76 59 59 66 f3 94 d6 0e c2 98 c2 4e 33 90 87 51 29 ec 14 0a 17 eb 6f 92 87 cc 19 5c fe 46 9a 27 b6 0a 62 7a a3 d9 02 fc 92 87 b7 16 da 55 11 f3 93 20 7e 0e b8 d6 e6 2a f5 b9 9b bf 29 ef 01 8e b3 69 4a e5 20 f3 c7 15 ee cf 05 bf 6c b5 70 d8 95 c2 39 ba 57 12 fb 75 29 70 31 61 4c f3 1e ac 26 4a 0b 02 55 6c 3f 53 03 f8 3a 70 85 87 b8 16 ce 4a 6e 5a f9 2a 62 fa 7e 78 17 2e 63 53 a5 6b 51 b6 92 78 02 b0 de e6 99 b8 6d 84 e5 69 76 d3 5b b5 70 58 95 c2 b9 31 fe 8c 37 00 ff 44 6b d9 1d c7 27 aa d6 62 1c 83 98 06 c4 ef 02 3f e1 21 ae 85 75 c0 27 0a 6e 34 d3 c0 6f 12 c6 1c a9 3a 21 31 3b ab 79 1f 61 bc a9 5d cd e3 97 56 0b 1f 48 c2 e1 c1 5c 18 ec 54 2d cc ff ba e8 ef f5 52 29 1c a7 53 80 d7 Data Ascii: ZgW`:"NvYYfN3Q)o\F'bzU ~)iJ lp9Wu)p1aL&JUl?S:pJnZb~x.cSkQxmiv[pX17Dk'b?!u'n4o:!1;ya]VH\T-R)S
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: d6 e5 6f 0e 12 aa 3e 5b 92 af c1 c9 27 1a dc 4a e6 4f 6c 99 21 2c e7 75 98 56 4f 99 d7 32 0d e5 a9 bb 6e 3f 77 83 b0 aa bd 0b 67 d7 d3 d3 84 a5 6f da 75 35 7b b3 ad f6 35 2d bf 1d df 24 97 bf 49 97 ac d9 4a f1 de c7 56 0c 35 4c f7 03 9f 23 6c 10 b0 af e0 01 58 ea c9 74 cd 7f 7e 17 ce ae f7 d3 f7 be cc 05 b4 99 fb f0 c9 bb da 21 31 bf 1d 1f b4 2a 89 4b c7 f8 5a b6 01 f7 11 96 ac c9 77 27 67 ab 84 56 0c 35 2c 6b 80 cb 81 d7 00 cf 4a 1e 50 b6 63 65 51 03 3e 6d d7 f5 67 6f 10 d6 c7 7b c6 b7 42 2d cd 24 4f d9 87 71 56 73 ac d7 b6 fc 78 c4 95 c0 69 84 7d ba 47 69 37 f0 10 61 8b c7 7c 30 cc 57 05 67 b1 62 a8 d1 4b 2b 8b 77 e2 98 45 f5 60 da 26 60 06 58 0e bc c0 a6 a8 9d a9 24 30 e4 b7 b9 f2 a2 19 4f 48 cc 8f 47 9c 21 2c 73 b4 9a d1 2c a4 7d 90 30 09 ea 91 e4 c1 Data Ascii: o>['JOl!,uVO2n?wgou5{5-$IJV5L#lXt~!1*KZw'gV5,kJPceQ>mgo{B-$OqVsxi}Gi7a\|0WgbK+wE`&`X$0OHG!,s,}0
2024-05-23 13:51:25 UTC	1080	IN	Data Raw: bf 9d 7c 1c 6b 73 6b 8c 81 b0 91 84 c0 63 0c 83 ea 33 20 2e cf 5c c3 d2 2e e6 42 d3 b6 57 57 69 37 fc 13 c0 2b 09 fb b4 ca 0b f7 91 84 99 6a 73 b9 f7 49 f6 c1 42 93 f3 7e e0 9f 68 8d 17 ed b5 4b b9 d9 e3 f5 20 75 90 30 33 f0 14 e0 04 9b 5d 8b bc ae 64 87 31 e4 6f ec 6b 08 33 54 4f 21 cc a8 3f 31 79 30 39 8a 30 b3 55 ea 66 2b 61 59 af 6c 38 9c 6d 77 fd 33 20 f6 17 12 6f 06 de 6a 73 28 b9 20 2f 05 76 e4 82 61 13 ab 87 93 b4 0b f8 4d e0 8e 4c f8 9b ed 12 0c 7b 0d 87 79 d9 bf 77 b3 21 51 43 0c 84 2b 80 b5 c0 49 c0 19 c0 a9 84 71 af c7 50 bf 65 65 34 dc 80 f8 e5 36 01 71 c1 f5 cf 80 d8 5f 40 7c 82 30 61 e5 1c 9b 44 84 2a e2 0c ad 95 ed f3 e1 c1 2a e2 78 7d 06 78 2f 61 51 db ec d6 78 d9 90 38 48 d5 b0 db 75 21 fd 37 be 45 18 db 73 be 87 42 3d 84 c2 4e 81 f0 94 Data Ascii: \|kskc3 .\.BWWi7+jsIB~hK u03]d1ok3TO!?1y090Uf+aYl8mw3 ojs( /vaML{yw!QC+IqPee46q_@\|0aD**x}x/aQx8Hu!7EsB=N
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: dd 7c bc a7 cb a2 43 61 be 0b f9 64 c2 b8 c2 93 08 6b d8 4a 75 e4 42 d9 13 0c 89 e9 9e bc 52 91 03 c0 b7 93 93 d2 ed f8 5a ee 24 ec 8c b2 bd 4d 28 8c 31 1c 66 af bf f9 45 b5 bf 0f 78 a3 a7 cb 40 c1 30 35 9d 3c 94 9d 88 55 59 29 e5 42 d9 13 bc d0 1f c0 c5 b3 d5 de 12 c2 de ac db 33 27 61 dd 2b 89 37 02 ef a3 fd 64 94 59 aa 39 de b0 df 6b 47 2a 5d 2f f1 2e c2 ce 2b 2e 85 d3 5b 30 cc ce 42 3e 95 30 ac e3 78 db 4f 9a c7 49 2a 13 be d0 df 8c cb de a8 bd 65 c9 4d eb e9 5c e0 a9 e3 f2 37 1f 05 fe 27 9d 27 a3 54 75 bc e1 62 42 22 c9 fb e3 eb 84 61 2b 76 39 b7 0f 85 69 db ad 23 74 21 9f 46 e8 42 9e b2 89 24 03 62 d9 2e f2 4d c2 cc c4 6b 6d 12 b5 71 04 b0 9c 30 26 31 1f 0e ea 52 45 7c 0f 61 f1 eb 18 27 a3 2c 46 b6 b2 7c 10 f8 56 72 11 3f cf d3 66 5e 30 84 d6 d8 c2 Data Ascii: \|CadkJuBRZ$M(1fEx@05<UY)B3'a+7dY9kG]/.+.[0B>0xOIeM\7''TubB"a+v9i#t!FB$b.Mkmq0&1RE\|a',F\|Vr?f^0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50349	172.64.150.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	375	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:25 UTC	555	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 13:51:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 34 Connection: close apigw-requestid: YOh6qgsyPHcEMyg= x-powered-by: Express etag: W/"22-rSbFy3+q7HC5w4g2QQFk/dDLFDo" x-cache: Error from cloudfront via: 1.1 86a640712a72b4264f1681744fa48612.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: 3ANPAdQr-HVwkXuH4uP3FZvGocPcgM9QaMCgL-PPkaAyT6ebNhmIwg== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88858548ab067cfc-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:25 UTC	34	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 22 7d Data Ascii: {"error":"Failed to authenticate"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50352	172.67.40.173	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	803	OUT	GET /mw?google_gid=CAESEFiSCCEpK_XY_hBYWTauXJE&google_cver=1&zpartnerid=1&env=mWeb&eventType=map&id_mid_4=7745f62c-3738-44ad-6482-93a794c9b45d&reqId=f818bef3-f2dd-468a-4703-f82e61cd17fe&zcluid=c4e190252a3ef1b7&zdid=1332 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=7745f62c-3738-44ad-6482-93a794c9b45d; zsc=m%24%91S5.%B2%A1%1Du6%F1J%19%C3osE%92%D7o.%E5%95%F5%8B%0D%1A%EB%7F%C2%8F%FA%9ES%03%F85%8C%80%3A%5Dx5T%2A%CD%D0H%0F%FE%FB%C7%CDM%91%C6%1A%217r%0B%AE%DEl%9B%9Bt%07%BD%04a~%03%5C~O4%0B%8B%D7%83%22
2024-05-23 13:51:25 UTC	431	IN	HTTP/1.1 403 Forbidden Date: Thu, 23 May 2024 13:51:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Thu, 23 May 2024 13:51:40 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 88858548daee8c57-EWR
2024-05-23 13:51:25 UTC	938	IN	Data Raw: 31 35 66 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 15fe<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-05-23 13:51:25 UTC	1369	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 3b 0a 20 20 20 20 20 20 63 6f 6f 6b 69 65 45 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 77 72 61 Data Ascii: r.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert'); cookieEl.style.display = 'block'; }) }</script>...<![endif]--></head><body> <div id="cf-wra
2024-05-23 13:51:25 UTC	1369	IN	Data Raw: 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 6b 73 2e 20 54 68 65 20 61 63 74 69 6f 6e 20 79 6f 75 20 6a 75 73 74 20 70 65 72 66 6f 72 6d 65 64 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 74 68 61 74 20 63 6f 75 6c 64 20 74 72 69 67 67 65 72 20 74 68 69 73 20 62 6c 6f 63 6b 20 69 6e 63 6c 75 64 69 6e 67 20 73 75 62 6d 69 74 74 69 6e 67 20 61 20 63 65 72 74 61 69 6e 20 77 6f 72 64 20 6f 72 20 70 68 72 61 73 65 2c 20 61 20 53 51 4c 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 6d 61 6c 66 6f 72 6d 65 64 20 64 61 74 61 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p> </div> <div cl
2024-05-23 13:51:25 UTC	1369	IN	Data Raw: 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 70 Data Ascii: den">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></sp
2024-05-23 13:51:25 UTC	593	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 28 29 20 7b 76 61 72 20 5f 30 78 69 20 3d 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 20 7c 7c 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 20 28 5f 30 78 69 29 20 7b 76 61 72 20 5f 30 78 6a 20 3d 20 5f 30 78 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5f 30 78 6a 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6a 73 3b 5f 30 78 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 5f 30 78 6a 29 3b 7d 7d 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 21 3d 3d 20 27 6c 6f 61 64 69 6e 67 27 29 20 7b 68 61 Data Ascii: );function handler() {var _0xi = _0xh.contentDocument \|\| _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading') {ha
2024-05-23 13:51:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50351	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	421	OUT	GET /assets/libsyn-logo--black.png HTTP/1.1 Host: play.libsyn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
2024-05-23 13:51:25 UTC	352	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:25 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 27216 x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: image/png connection: close
2024-05-23 13:51:25 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 88 00 00 02 8b 08 06 00 00 00 75 dd 79 14 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 45 2a 82 56 10 11 cc 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 b9 f4 43 68 d2 90 a4 b8 38 0a ae 05 07 3f 16 ab 0e 2e ce ba 3a b8 0a 82 e0 07 88 93 a3 93 a2 8b 94 f8 bf a4 d0 22 c6 83 e3 7e bc bb f7 b8 7b 07 08 f5 32 53 cd 8e 71 40 d5 2c 23 15 8f 89 d9 dc 8a 18 78 45 10 fd e8 85 88 61 89 99 7a 22 bd 90 81 e7 f8 ba 87 8f af 77 51 9e e5 7d ee cf d1 ad e4 4d 06 f8 44 e2 59 a6 1b 16 f1 3a f1 f4 a6 a5 73 de 27 0e b3 92 a4 10 9f 13 8f 19 74 41 e2 47 ae cb 2e bf 71 2e 3a 2c f0 cc b0 91 49 cd 11 87 89 c5 62 1b cb 6d cc 4a 86 4a 3c 45 1c 51 54 8d f2 85 ac cb 0a Data Ascii: PNGIHDRuyiCCPICC profile(}=H@_SE*VP,8J`Zu0Ch8?.:"~{2Sq@,#xEaz"wQ}MDY:s'tAG.q.:,IbmJJ<EQT
2024-05-23 13:51:25 UTC	1436	IN	Data Raw: 08 88 92 24 49 32 20 aa 06 ac 6e 48 a3 3b 97 3c bf 24 19 10 55 29 6f b2 09 4a e5 5b 36 41 e5 9d 92 04 c2 86 c1 50 92 01 51 d2 30 ec b4 09 2a ef a8 dc af 0d 89 92 0c 88 aa 3c 6f 66 d2 e2 cf 21 cf 23 49 06 44 45 73 43 6b 18 16 27 aa 89 db ed c5 e0 2c 83 a2 a4 ba 06 c4 8f d9 84 51 87 44 6f 6c 93 f3 a4 4d 50 79 ab 6c 02 49 75 0d 88 8f db 84 51 86 43 49 92 64 40 94 0c 8a 25 b3 dd 26 88 c2 f1 b8 40 b6 24 03 a2 2a ee 18 6f 62 a5 b1 db 26 88 ee a1 4b 92 0c 88 aa a4 b5 b9 9b 99 37 b5 c9 69 da 04 51 58 de 26 28 7a 6e 49 8a 3a 20 3e 61 13 46 cb 1b d8 64 b9 d7 79 1c 4e b4 09 24 d5 31 20 7e c3 26 8c 2e 14 1a 0c cb c1 0a 62 bc 0f 5a 9e 63 92 a2 0f 88 aa e7 0d 4e e3 f1 b4 4d 50 79 17 e0 92 51 92 0c 88 92 86 e8 16 9b c0 07 2e 49 32 20 6a d2 2e b5 09 a4 a1 3a db 50 28 a9 Data Ascii: $I2 nH;<$U)oJ[6APQ0<of!#IDEsCk',QDolMPylIuQCId@%&@$ob&K7iQX&(znI: >aFdyN$1 ~&.bZcNMPyQ.I2 j.:P(
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 21 91 51 07 44 97 ba 89 cb aa cc 4d cb 2e b0 72 b9 d5 80 18 0d d7 43 8c 5f b6 12 78 12 61 19 31 43 a0 26 11 10 a7 69 4d 88 eb 78 bd 19 66 40 6c e2 62 d9 b1 79 09 f0 21 dc 06 ac 8c 1e b5 09 a2 71 01 ae 87 18 83 7c 35 f0 b9 38 11 44 e5 d2 a0 55 41 ec 5a f8 59 32 82 17 70 13 61 4a bc aa 6f 5d 41 38 b4 c2 31 79 4e 54 89 cb 45 c0 17 59 38 ce d7 73 ad bc 56 27 1f a7 25 c7 cf 65 60 54 a5 90 d8 28 b8 a7 2f b8 de 8c 22 20 6e 36 20 46 e3 85 b9 70 a8 f2 98 23 8c f9 3d c3 a6 a8 bc f3 09 cb 91 ec c9 5d c4 0d 87 93 b7 92 30 39 e4 64 42 45 f0 8c e4 78 49 55 34 55 10 10 db 1a 45 40 fc 0a 2e 96 1d 93 ec 52 37 ce b2 2c 97 1b 0d 88 d1 d8 00 dc 83 e3 10 27 69 35 61 9b b7 13 08 55 41 c7 08 2a 46 3d 6f a1 3b 8a 80 e8 52 37 71 71 a9 9b f2 fa 8e 4d 10 8d cb 08 2b 06 58 ad 1f bd Data Ascii: !QDM.rC_xa1C&iMxf@lby!q\|58DUAZY2paJo]A81yNTEY8sV'%e`T(/" n6 Fp#=]09dBExIU4UE@.R7,'i5aUA*F=o;R7qqM+X
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: c9 1b 49 95 0b 88 69 55 c9 71 88 71 b9 94 85 dd cc de 98 ca c7 6e e6 e1 07 c3 d4 3a 5a 6b 16 9e 46 98 65 3c 2e 6b 81 69 9c ac 22 a9 c2 01 11 03 62 94 2e f1 c6 54 09 87 80 5b 6c 86 a1 05 c3 15 84 7d ae d3 b1 85 6b 27 f8 9a 56 17 bc 46 ab 88 92 2a 17 10 bf 65 73 47 e5 07 68 8d 7f b2 7a 58 4e 69 f5 de 6e e6 c1 43 61 7a 8d 5c 43 98 89 fc 12 e0 1c fa 5f 9e 66 14 b2 3b ab 78 fe 49 1a aa 25 63 fc bf dc 51 25 2e e9 40 fc 47 70 a2 4a d9 3d 60 13 0c f4 d0 bc 94 b0 1f f2 d9 25 09 84 79 cb 08 8b d6 3f 5d f0 da 5d 38 5b d2 d0 2e 86 a3 96 ee a8 a2 78 5c 4c f1 38 44 ab 19 e5 62 37 73 6f d7 c2 6c 37 f2 79 c0 0b 93 f7 f8 ca 12 bf ee ec 92 37 9e 77 92 2a 17 10 d3 a7 d8 cf da e4 d1 05 44 bb 98 cb cd 6e e6 ee a1 30 db 8d 7c 29 a1 1b 79 dc 93 4e 06 95 56 11 db fd 4c 9e 97 92 Data Ascii: IiUqqn:ZkFe<.ki"b.T[l}k'VFesGhzXNinCaz\C_f;xI%cQ%.@GpJ=`%y?]]8[.x\L8Db7sol7y7wDn0\|)yNVL
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 24 51 b2 9b b9 bc 56 01 7f 48 e8 52 ce 9a 4b 3e b6 d9 44 b5 bc 2f 6c c4 f1 88 92 01 b1 44 66 80 eb 3c 2c d1 b1 9b b9 7c 1a c0 8f 02 1f 06 ce ef f0 e7 76 00 87 6c ae da 59 4e f1 78 44 43 a2 64 40 9c 88 26 f0 37 1e 96 28 d9 cd 5c 1e 67 13 16 c3 be b6 cd 39 08 ad 0a e2 1c 8e 45 ac ab a2 f1 88 f9 87 0c 49 06 c4 b1 84 43 80 af 7a 58 a2 64 37 f3 e4 ad 00 de 01 fc 29 61 8b b5 5e 59 45 ac af 8d b4 1f 8f 28 c9 80 38 56 3b 81 ad 1e 9a e8 a4 dd cc de 60 26 e3 12 c2 f0 8d d7 f5 f1 b0 66 15 51 00 a7 e1 78 44 c9 80 58 12 7f e8 a1 89 d2 0f 52 bc ed 9e 37 99 d1 59 05 fc 26 f0 fb 43 78 70 9b b1 39 6b 7b 9f 38 8d f9 e3 11 0d 89 92 01 71 ac 5c ee 26 6e 3f ce fc 2a 84 5d cc a3 d3 00 ae 22 4c 42 b9 6a c0 73 11 5a 15 c4 59 e0 29 9b b5 b6 96 03 1b 0a ee 1b 86 44 29 52 4b 4a fa Data Ascii: $QVHRK>D/lDf<,\|vlYNxDCd@&7(\g9EICzXd7)a^YE(8V;`&fQxDXR7Y&Cxp9k{8q\&n?*]"LBjsZY)D)RKJ
2024-05-23 13:51:25 UTC	28	IN	Data Raw: dc 6f 48 74 d9 1b 19 12 07 0b 82 b7 11 ba 83 9f 26 2c ed 42 87 c0 57 f4 75 af 01 b0 Data Ascii: oHt&,BWu
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: df 8a 61 3f e1 6d 98 c7 ad 4e ef 81 c6 08 ff bd 66 3f ed 5a c5 80 d8 00 7e 97 b0 45 9b e2 f4 16 c2 78 c4 74 2c e2 1c f3 c7 4a 94 dd c6 24 1c 1e 5f b3 e3 56 54 45 3c 16 38 d9 b7 b4 ba d8 9b 84 a3 99 9a 84 c4 74 72 c8 62 83 e0 30 ba 8c fb 09 0d 83 1c 07 ab c0 e5 0b 9a cd c5 fe 03 65 fe a1 2f 06 6e f5 f8 47 ab ca 4b de bc 1a f8 05 2f 4a f3 42 e2 99 c0 91 be ad d5 c5 41 c2 5a 89 87 22 0b 89 0f 01 77 03 0f 00 f7 12 c6 58 1f 1a 62 10 1c 46 35 b0 df f6 35 f4 d5 3c 61 96 f9 35 2f 4d 2e 26 8a d7 35 84 c5 56 ab b2 e4 cd 12 e0 9d b8 1d 64 51 40 5c 81 13 56 d4 9b 39 c2 38 bb fd 15 0d 89 b7 03 f7 24 41 77 2b ad aa e0 a8 83 60 2f 93 41 7a 69 3b 83 9f 2a 1f 10 ed 66 8e df e7 81 37 50 8d 25 6f 62 5e c2 66 58 21 d1 09 2b ea 27 24 3e 4a e8 76 6d e6 02 62 99 82 62 5a 19 7c Data Ascii: a?mNf?Z~Ext,J$_VTE<8trb0e/nGK/JBAZ"wXbF55<a5/M.&5VdQ@\V98$Aw+`/Azi;*f7P%ob^fX!+'$>JvmbbZ\|
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 5c fe 46 9a 27 b6 0a 62 7a a3 d9 02 fc 92 87 b7 16 da 55 11 f3 93 20 7e 0e b8 d6 e6 2a f5 b9 9b bf 29 ef 01 8e b3 69 4a e5 20 f3 c7 15 ee cf 05 bf 6c b5 70 d8 95 c2 39 ba 57 12 fb 75 29 70 31 61 4c f3 1e ac 26 4a 0b 02 55 6c 3f 53 03 f8 3a 70 85 87 b8 16 ce 4a 6e 5a f9 2a 62 fa 7e 78 17 2e 63 53 a5 6b 51 b6 92 78 02 b0 de e6 99 b8 6d 84 e5 69 76 d3 5b b5 70 58 95 c2 b9 31 fe 8c 37 00 ff 44 6b d9 1d c7 27 aa d6 62 1c 83 98 06 c4 ef 02 3f e1 21 ae 85 75 c0 27 0a 6e 34 d3 c0 6f 12 c6 1c a9 3a 21 31 3b ab 79 1f 61 bc a9 5d cd e3 97 56 0b 1f 48 c2 e1 c1 5c 18 ec 54 2d cc ff ba e8 ef f5 52 29 1c a7 53 80 d7 12 f6 75 7e 32 f7 90 69 45 51 b5 7e 6a 8f ed e7 5a ca fc 59 74 8a db b3 81 fb 08 63 89 e6 08 6b e9 bd 9f b0 36 a6 55 80 ea 5d 93 f2 e3 11 cf 05 96 d8 3c 63 Data Ascii: \F'bzU ~)iJ lp9Wu)p1aL&JUl?S:pJnZb~x.cSkQxmiv[pX17Dk'b?!u'n4o:!1;ya]VH\T-R)Su~2iEQ~jZYtck6U]<c
2024-05-23 13:51:25 UTC	1460	IN	Data Raw: 7b b3 ad f6 35 2d bf 1d df 24 97 bf 49 97 ac d9 4a f1 de c7 56 0c 35 4c f7 03 9f 23 6c 10 b0 af e0 01 58 ea c9 74 cd 7f 7e 17 ce ae f7 d3 f7 be cc 05 b4 99 fb f0 c9 bb da 21 31 bf 1d 1f b4 2a 89 4b c7 f8 5a b6 01 f7 11 96 ac c9 77 27 67 ab 84 56 0c 35 2c 6b 80 cb 81 d7 00 cf 4a 1e 50 b6 63 65 51 03 3e 6d d7 f5 67 6f 10 d6 c7 7b c6 b7 42 2d cd 24 4f d9 87 71 56 73 ac d7 b6 fc 78 c4 95 c0 69 84 7d ba 47 69 37 f0 10 61 8b c7 7c 30 cc 57 05 67 b1 62 a8 d1 4b 2b 8b 77 e2 98 45 f5 60 da 26 60 06 58 0e bc c0 a6 a8 9d a9 24 30 e4 b7 b9 f2 a2 19 4f 48 cc 8f 47 9c 21 2c 73 b4 9a d1 2c a4 7d 90 30 09 ea 91 e4 c1 23 1b 02 b3 95 c1 fc 87 15 43 8d 5a 5a 59 7c 25 f0 a2 e4 3d 75 88 b0 b0 bc 0b 72 ab ed 53 76 9d 7f fe 06 61 26 f3 16 df 0e b5 75 0f 61 70 b7 55 c4 78 af 6f Data Ascii: {5-$IJV5L#lXt~!1*KZw'gV5,kJPceQ>mgo{B-$OqVsxi}Gi7a\|0WgbK+wE`&`X$0OHG!,s,}0#CZZY\|%=urSva&uapUxo
2024-05-23 13:51:25 UTC	1412	IN	Data Raw: c1 42 93 f3 7e e0 9f 68 8d 17 ed b5 4b b9 d9 e3 f5 20 75 90 30 33 f0 14 e0 04 9b 5d 8b bc ae 64 87 31 e4 6f ec 6b 08 33 54 4f 21 cc a8 3f 31 79 30 39 8a 30 b3 55 ea 66 2b 61 59 af 6c 38 9c 6d 77 fd 33 20 f6 17 12 6f 06 de 6a 73 28 b9 20 2f 05 76 e4 82 61 13 ab 87 93 b4 0b f8 4d e0 8e 4c f8 9b ed 12 0c 7b 0d 87 79 d9 bf 77 b3 21 51 43 0c 84 2b 80 b5 c0 49 c0 19 c0 a9 84 71 af c7 50 bf 65 65 34 dc 80 f8 e5 36 01 71 c1 f5 cf 80 d8 5f 40 7c 82 30 61 e5 1c 9b 44 84 2a e2 0c ad 95 ed f3 e1 c1 2a e2 78 7d 06 78 2f 61 51 db ec d6 78 d9 90 38 48 d5 b0 db 75 21 fd 37 be 45 18 db 73 be 87 42 3d 84 c2 4e 81 f0 94 e4 d7 47 e1 50 30 0d cf 23 c0 57 92 eb e1 0c 0b 27 a9 cc e3 1b af f7 4a 41 3a ae ec e7 81 d7 da 24 4a 9c 46 d8 be 69 4f c1 ef 39 1e 71 7c fe 28 09 68 ed 26 Data Ascii: B~hK u03]d1ok3TO!?1y090Uf+aYl8mw3 ojs( /vaML{yw!QC+IqPee46q_@\|0aD**x}x/aQx8Hu!7EsB=NGP0#W'JA:$JFiO9q\|(h&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50346	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 651 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:25 UTC	651	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 31 38 62 34 37 65 32 63 2d 34 35 32 38 2d 34 32 63 32 2d 38 37 32 61 2d 30 38 34 66 62 62 39 66 35 64 65 33 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 31 35 31 30 37 34 38 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 36 6b 32 79 75 62 72 36 66 77 37 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 63 35 32 34 36 61 65 34 2d 66 63 32 31 2d 34 39 31 35 2d Data Ascii: metric_payload=%7B%22id%22%3A%2218b47e2c-4528-42c2-872a-084fbb9f5de3%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A1510748%2C%22embedId%22%3A%22n6k2yubr6fw7%22%2C%22sessionId%22%3A%22c5246ae4-fc21-4915-
2024-05-23 13:51:26 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:26 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 15c155db23d60e51 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-05-23 13:51:26 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50355	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	843	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"}]
2024-05-23 13:51:26 UTC	906	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:26 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: f77f875056f2 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://dpm.demdex.net/ibs:dpid=79908&dpuuid=Zk9J0cMGPKkzOkJE-hOvl2TE&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:50 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50347	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:25 UTC	630	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 64 65 34 39 35 66 61 38 2d 39 33 39 34 2d 34 62 62 34 2d 62 61 66 66 2d 39 61 31 62 35 62 63 66 30 39 65 66 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 31 33 33 34 35 31 39 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 70 78 32 69 77 72 63 6d 66 78 77 7a 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 32 39 36 38 35 37 34 39 2d 61 32 30 30 2d 34 65 37 31 2d Data Ascii: metric_payload=%7B%22id%22%3A%22de495fa8-9394-4bb4-baff-9a1b5bcf09ef%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A1334519%2C%22embedId%22%3A%22px2iwrcmfxwz%22%2C%22sessionId%22%3A%2229685749-a200-4e71-
2024-05-23 13:51:26 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:26 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: ff9efc44f390f825 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-05-23 13:51:26 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50354	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	860	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 241 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"}]
2024-05-23 13:51:25 UTC	241	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 32 34 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 35 36 36 38 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 25 32 46 65 6e 25 32 46 26 61 63 63 6f 75 6e 74 5f 69 64 3d 6d 78 32 38 6f 36 32 75 7a 71 62 62 66 26 6c 69 73 74 3d 39 35 76 35 32 67 32 78 76 63 36 71 67 26 63 68 3d 32 37 38 26 63 6d 3d 61 63 37 34 36 61 30 37 31 36 62 35 31 65 36 37 33 38 31 37 31 37 31 36 34 37 32 32 35 34 26 63 73 3d 66 61 6c 73 65 Data Ascii: ws=1&lang=en-US&cookies=true&tz=240&screen_res=1280x1024&browser_res=1280x5668&ref=&url=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&account_id=mx28o62uzqbbf&list=95v52g2xvc6qg&ch=278&cm=ac746a0716b51e6738171716472254&cs=false
2024-05-23 13:51:26 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:26 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://www.spglobal.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:50 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:26 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50356	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	1145	OUT	POST /1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ&rst=59195&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/&ptid=85a29931a2f9233e&af=err,xhr,stn,ins&be=6339&fe=51717&dc=10443&perf=%7B%22timing%22:%7B%22of%22:1716472224723,%22n%22:0,%22f%22:5278,%22dn%22:5279,%22dne%22:5279,%22c%22:5279,%22s%22:5279,%22ce%22:5956,%22rq%22:5956,%22rp%22:6340,%22rpe%22:6596,%22di%22:16781,%22ds%22:16781,%22de%22:16782,%22dc%22:57749,%22l%22:57757,%22le%22:58056%7D,%22navigation%22:%7B%7D%7D&fp=16473 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:26 UTC	437	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Thu, 23 May 2024 13:51:26 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com access-control-expose-headers: Date timing-allow-origin: https://www.spglobal.com x-served-by: cache-ewr18138-EWR
2024-05-23 13:51:26 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 31 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 31 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 67 33 4e 7a 45 32 4e 58 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 78 4d 6a 63 30 4d 44 49 78 4e 67 22 7d 5d 7d 7d Data Ascii: {"stn":1,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":1,"sts":0,"app":{"agents":[{"entityGuid":"MTg3NzE2NXxCUk9XU0VSfEFQUExJQ0FUSU9OfDExMjc0MDIxNg"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50361	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	981	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/javascript visited-url: https://www.spglobal.com/en _vtok: OC40Ni4xMjMuMTc1 _zitok: ac746a0716b51e6738171716472254 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:26 UTC	656	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:26 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885854bde0842ec-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:26 UTC	713	IN	Data Raw: 31 32 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 1209(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-05-23 13:51:26 UTC	1369	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e Data Ascii: rentNode.insertBefore(d,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...
2024-05-23 13:51:26 UTC	1369	IN	Data Raw: 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 70 2b 22 53 65 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 Data Ascii: onStorage.setItem(p+"Session",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.ha
2024-05-23 13:51:26 UTC	1174	IN	Data Raw: 28 6e 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 65 29 29 3a 74 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 Data Ascii: (n),clearInterval(e)):t++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystat
2024-05-23 13:51:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50350	3.78.151.12	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:25 UTC	514	OUT	GET /ping_match.gif?st=FREEWHEEL&rurl=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D593&userId=_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=UvkZkbdd1Sa8QF5; matchadform=5
2024-05-23 13:51:26 UTC	721	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 23 May 2024 13:51:25 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://ads.stickyadstv.com/user-registering?dataProviderId=593&userId=UvkZkbdd1Sa8QF5 Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-0c47e0e37cf640e0f@eu-central-1a@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=UvkZkbdd1Sa8QF5; Domain=.w55c.net; Expires=Mon, 23 Jun 2025 13:51:26 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchfreewheel=5; Domain=.w55c.net; Expires=Sat, 22 Jun 2024 13:51:26 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50360	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:26 UTC	1044	OUT	GET /core?d=1&embedId=px2iwrcmfxwz&eId=px2iwrcmfxwz&region=US&forceShow=false&skipCampaigns=false&sessionId=75129f8f-dcd4-4652-af2c-8e054b6e6926&sessionStarted=1716472284.101&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472275617&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fen HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:26 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:26 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 51af81e043ccc832110abdd207ad168a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: Cmxci-cUmdEaZ-ZM8V7dDlGZ4mJt1Ka4SQZt_HrAl8QMsmqie1MBqw==
2024-05-23 13:51:26 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50362	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:26 UTC	752	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472275617 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:26 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:26 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3479e400df017e0f31c5d6c2d353931e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: AH2-FjSNYZoQgLNHiyn1ioQ_ykAoC5tg0N6dccWPJkDOfLcdlj1RYA==
2024-05-23 13:51:26 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50369	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	563	OUT	OPTIONS /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:27 UTC	1052	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,Authorization,visitorId,_zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: POST via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=hP0lXVJ4extcfI8.89QMt3BY.m5sfoL6nALanpbMxg0-1716472287-1.0.1.1-sZHYNVlRjIaIsjk2NFJvDSfbJgtvWkv02ApWo1cwSpUHKT1YdVH6OsTaJS7AUGH9GUVLC5LMK7AQvnui.jbOzQ; path=/; expires=Thu, 23-May-24 14:21:27 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=8WmwZwePpAc_SpLyXsUYSpyh37HrjLG43bCf0n.NvGU-1716472287491-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 888585547c5c4282-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:27 UTC	9	IN	Data Raw: 34 0d 0a 50 4f 53 54 0d 0a Data Ascii: 4POST
2024-05-23 13:51:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50367	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	961	OUT	GET /pixel.gif?ch=4&cm=5e07638e-be7e-42f3-942b-3117d96e7e8e&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"}]
2024-05-23 13:51:27 UTC	1131	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:27 GMT Content-Type: text/plain Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: a595a19e5c67 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/sd?id=537073026&val=Zk9J0cMGPKkzOkJE-hOvl2TE set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:51 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:51 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50366	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	786	OUT	GET /assets/libsyn-logo--black.png HTTP/1.1 Host: play.libsyn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.libsyn.com/embed/episode/id/30072173/height/64/theme/modern/size/small/thumbnail/no/custom-color/ffffff/time-start/00:00:00/hide-playlist/yes/hide-subscribe/yes/hide-share/yes/font-color/000000 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:27 UTC	352	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:27 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 27216 x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: image/png connection: close
2024-05-23 13:51:27 UTC	1096	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 88 00 00 02 8b 08 06 00 00 00 75 dd 79 14 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 45 2a 82 56 10 11 cc 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 b9 f4 43 68 d2 90 a4 b8 38 0a ae 05 07 3f 16 ab 0e 2e ce ba 3a b8 0a 82 e0 07 88 93 a3 93 a2 8b 94 f8 bf a4 d0 22 c6 83 e3 7e bc bb f7 b8 7b 07 08 f5 32 53 cd 8e 71 40 d5 2c 23 15 8f 89 d9 dc 8a 18 78 45 10 fd e8 85 88 61 89 99 7a 22 bd 90 81 e7 f8 ba 87 8f af 77 51 9e e5 7d ee cf d1 ad e4 4d 06 f8 44 e2 59 a6 1b 16 f1 3a f1 f4 a6 a5 73 de 27 0e b3 92 a4 10 9f 13 8f 19 74 41 e2 47 ae cb 2e bf 71 2e 3a 2c f0 cc b0 91 49 cd 11 87 89 c5 62 1b cb 6d cc 4a 86 4a 3c 45 1c 51 54 8d f2 85 ac cb 0a Data Ascii: PNGIHDRuyiCCPICC profile(}=H@_SE*VP,8J`Zu0Ch8?.:"~{2Sq@,#xEaz"wQ}MDY:s'tAG.q.:,IbmJJ<EQT
2024-05-23 13:51:27 UTC	1460	IN	Data Raw: 33 36 41 14 4e cc fd da ee 66 49 b5 08 88 92 24 49 32 20 aa 06 ac 6e 48 a3 3b 97 3c bf 24 19 10 55 29 6f b2 09 4a e5 5b 36 41 e5 9d 92 04 c2 86 c1 50 92 01 51 d2 30 ec b4 09 2a ef a8 dc af 0d 89 92 0c 88 aa 3c 6f 66 d2 e2 cf 21 cf 23 49 06 44 45 73 43 6b 18 16 27 aa 89 db ed c5 e0 2c 83 a2 a4 ba 06 c4 8f d9 84 51 87 44 6f 6c 93 f3 a4 4d 50 79 ab 6c 02 49 75 0d 88 8f db 84 51 86 43 49 92 64 40 94 0c 8a 25 b3 dd 26 88 c2 f1 b8 40 b6 24 03 a2 2a ee 18 6f 62 a5 b1 db 26 88 ee a1 4b 92 0c 88 aa a4 b5 b9 9b 99 37 b5 c9 69 da 04 51 58 de 26 28 7a 6e 49 8a 3a 20 3e 61 13 46 cb 1b d8 64 b9 d7 79 1c 4e b4 09 24 d5 31 20 7e c3 26 8c 2e 14 1a 0c cb c1 0a 62 bc 0f 5a 9e 63 92 a2 0f 88 aa e7 0d 4e e3 f1 b4 4d 50 79 17 e0 92 51 92 0c 88 92 86 e8 16 9b c0 07 2e 49 32 20 Data Ascii: 36ANfI$I2 nH;<$U)oJ[6APQ0<of!#IDEsCk',QDolMPylIuQCId@%&@$ob&K7iQX&(znI: >aFdyN$1 ~&.bZcNMPyQ.I2
2024-05-23 13:51:27 UTC	1460	IN	Data Raw: cb 2e b0 72 b9 d5 80 18 0d d7 43 8c 5f b6 12 78 12 61 19 31 43 a0 26 11 10 a7 69 4d 88 eb 78 bd 19 66 40 6c e2 62 d9 b1 79 09 f0 21 dc 06 ac 8c 1e b5 09 a2 71 01 ae 87 18 83 7c 35 f0 b9 38 11 44 e5 d2 a0 55 41 ec 5a f8 59 32 82 17 70 13 61 4a bc aa 6f 5d 41 38 b4 c2 31 79 4e 54 89 cb 45 c0 17 59 38 ce d7 73 ad bc 56 27 1f a7 25 c7 cf 65 60 54 a5 90 d8 28 b8 a7 2f b8 de 8c 22 20 6e 36 20 46 e3 85 b9 70 a8 f2 98 23 8c f9 3d c3 a6 a8 bc f3 09 cb 91 ec c9 5d c4 0d 87 93 b7 92 30 39 e4 64 42 45 f0 8c e4 78 49 55 34 55 10 10 db 1a 45 40 fc 0a 2e 96 1d 93 ec 52 37 ce b2 2c 97 1b 0d 88 d1 d8 00 dc 83 e3 10 27 69 35 61 9b b7 13 08 55 41 c7 08 2a 46 3d 6f a1 3b 8a 80 e8 52 37 71 71 a9 9b f2 fa 8e 4d 10 8d cb 08 2b 06 58 ad 1f bd 74 ac e0 99 84 09 23 97 e0 b2 31 32 Data Ascii: .rC_xa1C&iMxf@lby!q\|58DUAZY2paJo]A81yNTEY8sV'%e`T(/" n6 Fp#=]09dBExIU4UE@.R7,'i5aUA*F=o;R7qqM+Xt#12
2024-05-23 13:51:27 UTC	1460	IN	Data Raw: b9 94 85 dd cc de 98 ca c7 6e e6 e1 07 c3 d4 3a 5a 6b 16 9e 46 98 65 3c 2e 6b 81 69 9c ac 22 a9 c2 01 11 03 62 94 2e f1 c6 54 09 87 80 5b 6c 86 a1 05 c3 15 84 7d ae d3 b1 85 6b 27 f8 9a 56 17 bc 46 ab 88 92 2a 17 10 bf 65 73 47 e5 07 68 8d 7f b2 7a 58 4e 69 f5 de 6e e6 c1 43 61 7a 8d 5c 43 98 89 fc 12 e0 1c fa 5f 9e 66 14 b2 3b ab 78 fe 49 1a aa 25 63 fc bf dc 51 25 2e e9 40 fc 47 70 a2 4a d9 3d 60 13 0c f4 d0 bc 94 b0 1f f2 d9 25 09 84 79 cb 08 8b d6 3f 5d f0 da 5d 38 5b d2 d0 2e 86 a3 96 ee a8 a2 78 5c 4c f1 38 44 ab 19 e5 62 37 73 6f d7 c2 6c 37 f2 79 c0 0b 93 f7 f8 ca 12 bf ee ec 92 37 9e 77 92 2a 17 10 d3 a7 d8 cf da e4 d1 05 44 bb 98 cb cd 6e e6 ee a1 30 db 8d 7c 29 a1 1b 79 dc 93 4e 06 95 56 11 db fd 4c 9e 97 92 4a 1d 10 53 9f b6 c9 a3 f2 6a 1c 87 Data Ascii: n:ZkFe<.ki"b.T[l}k'VFesGhzXNinCaz\C_f;xI%cQ%.@GpJ=`%y?]]8[.x\L8Db7sol7y7wDn0\|)yNVLJSj
2024-05-23 13:51:27 UTC	1460	IN	Data Raw: ce 9a 4b 3e b6 d9 44 b5 bc 2f 6c c4 f1 88 92 01 b1 44 66 80 eb 3c 2c d1 b1 9b b9 7c 1a c0 8f 02 1f 06 ce ef f0 e7 76 00 87 6c ae da 59 4e f1 78 44 43 a2 64 40 9c 88 26 f0 37 1e 96 28 d9 cd 5c 1e 67 13 16 c3 be b6 cd 39 08 ad 0a e2 1c 8e 45 ac ab a2 f1 88 f9 87 0c 49 06 c4 b1 84 43 80 af 7a 58 a2 64 37 f3 e4 ad 00 de 01 fc 29 61 8b b5 5e 59 45 ac af 8d b4 1f 8f 28 c9 80 38 56 3b 81 ad 1e 9a e8 a4 dd cc de 60 26 e3 12 c2 f0 8d d7 f5 f1 b0 66 15 51 00 a7 e1 78 44 c9 80 58 12 7f e8 a1 89 d2 0f 52 bc ed 9e 37 99 d1 59 05 fc 26 f0 fb 43 78 70 9b b1 39 6b 7b 9f 38 8d f9 e3 11 0d 89 92 01 71 ac 5c ee 26 6e 3f ce fc 2a 84 5d cc a3 d3 00 ae 22 4c 42 b9 6a c0 73 11 5a 15 c4 59 e0 29 9b b5 b6 96 03 1b 0a ee 1b 86 44 29 52 4b 4a fa ba 5c ee 26 4e cf 22 ec d2 f1 88 e1 Data Ascii: K>D/lDf<,\|vlYNxDCd@&7(\g9EICzXd7)a^YE(8V;`&fQxDXR7Y&Cxp9k{8q\&n?*]"LBjsZY)D)RKJ\&N"
2024-05-23 13:51:27 UTC	16	IN	Data Raw: 11 ba 83 9f 26 2c ed 42 87 c0 57 f4 75 af 01 b0 Data Ascii: &,BWu
2024-05-23 13:51:27 UTC	1448	IN	Data Raw: df 8a 61 3f e1 6d 98 c7 ad 4e ef 81 c6 08 ff bd 66 3f ed 5a c5 80 d8 00 7e 97 b0 45 9b e2 f4 16 c2 78 c4 74 2c e2 1c f3 c7 4a 94 dd c6 24 1c 1e 5f b3 e3 56 54 45 3c 16 38 d9 b7 b4 ba d8 9b 84 a3 99 9a 84 c4 74 72 c8 62 83 e0 30 ba 8c fb 09 0d 83 1c 07 ab c0 e5 0b 9a cd c5 fe 03 65 fe a1 2f 06 6e f5 f8 47 ab ca 4b de bc 1a f8 05 2f 4a f3 42 e2 99 c0 91 be ad d5 c5 41 c2 5a 89 87 22 0b 89 0f 01 77 03 0f 00 f7 12 c6 58 1f 1a 62 10 1c 46 35 b0 df f6 35 f4 d5 3c 61 96 f9 35 2f 4d 2e 26 8a d7 35 84 c5 56 ab b2 e4 cd 12 e0 9d b8 1d 64 51 40 5c 81 13 56 d4 9b 39 c2 38 bb fd 15 0d 89 b7 03 f7 24 41 77 2b ad aa e0 a8 83 60 2f 93 41 7a 69 3b 83 9f 2a 1f 10 ed 66 8e df e7 81 37 50 8d 25 6f 62 5e c2 66 58 21 d1 09 2b ea 27 24 3e 4a e8 76 6d e6 02 62 99 82 62 5a 19 7c Data Ascii: a?mNf?Z~Ext,J$_VTE<8trb0e/nGK/JBAZ"wXbF55<a5/M.&5VdQ@\V98$Aw+`/Azi;*f7P%ob^fX!+'$>JvmbbZ\|
2024-05-23 13:51:27 UTC	1460	IN	Data Raw: 51 29 ec 14 0a 17 eb 6f 92 87 cc 19 5c fe 46 9a 27 b6 0a 62 7a a3 d9 02 fc 92 87 b7 16 da 55 11 f3 93 20 7e 0e b8 d6 e6 2a f5 b9 9b bf 29 ef 01 8e b3 69 4a e5 20 f3 c7 15 ee cf 05 bf 6c b5 70 d8 95 c2 39 ba 57 12 fb 75 29 70 31 61 4c f3 1e ac 26 4a 0b 02 55 6c 3f 53 03 f8 3a 70 85 87 b8 16 ce 4a 6e 5a f9 2a 62 fa 7e 78 17 2e 63 53 a5 6b 51 b6 92 78 02 b0 de e6 99 b8 6d 84 e5 69 76 d3 5b b5 70 58 95 c2 b9 31 fe 8c 37 00 ff 44 6b d9 1d c7 27 aa d6 62 1c 83 98 06 c4 ef 02 3f e1 21 ae 85 75 c0 27 0a 6e 34 d3 c0 6f 12 c6 1c a9 3a 21 31 3b ab 79 1f 61 bc a9 5d cd e3 97 56 0b 1f 48 c2 e1 c1 5c 18 ec 54 2d cc ff ba e8 ef f5 52 29 1c a7 53 80 d7 12 f6 75 7e 32 f7 90 69 45 51 b5 7e 6a 8f ed e7 5a ca fc 59 74 8a db b3 81 fb 08 63 89 e6 08 6b e9 bd 9f b0 36 a6 55 80 Data Ascii: Q)o\F'bzU ~)iJ lp9Wu)p1aL&JUl?S:pJnZb~x.cSkQxmiv[pX17Dk'b?!u'n4o:!1;ya]VH\T-R)Su~2iEQ~jZYtck6U
2024-05-23 13:51:27 UTC	1460	IN	Data Raw: bd 0b 67 d7 d3 d3 84 a5 6f da 75 35 7b b3 ad f6 35 2d bf 1d df 24 97 bf 49 97 ac d9 4a f1 de c7 56 0c 35 4c f7 03 9f 23 6c 10 b0 af e0 01 58 ea c9 74 cd 7f 7e 17 ce ae f7 d3 f7 be cc 05 b4 99 fb f0 c9 bb da 21 31 bf 1d 1f b4 2a 89 4b c7 f8 5a b6 01 f7 11 96 ac c9 77 27 67 ab 84 56 0c 35 2c 6b 80 cb 81 d7 00 cf 4a 1e 50 b6 63 65 51 03 3e 6d d7 f5 67 6f 10 d6 c7 7b c6 b7 42 2d cd 24 4f d9 87 71 56 73 ac d7 b6 fc 78 c4 95 c0 69 84 7d ba 47 69 37 f0 10 61 8b c7 7c 30 cc 57 05 67 b1 62 a8 d1 4b 2b 8b 77 e2 98 45 f5 60 da 26 60 06 58 0e bc c0 a6 a8 9d a9 24 30 e4 b7 b9 f2 a2 19 4f 48 cc 8f 47 9c 21 2c 73 b4 9a d1 2c a4 7d 90 30 09 ea 91 e4 c1 23 1b 02 b3 95 c1 fc 87 15 43 8d 5a 5a 59 7c 25 f0 a2 e4 3d 75 88 b0 b0 bc 0b 72 ab ed 53 76 9d 7f fe 06 61 26 f3 16 df Data Ascii: gou5{5-$IJV5L#lXt~!1*KZw'gV5,kJPceQ>mgo{B-$OqVsxi}Gi7a\|0WgbK+wE`&`X$0OHG!,s,}0#CZZY\|%=urSva&
2024-05-23 13:51:27 UTC	1424	IN	Data Raw: ca 0b f7 91 84 99 6a 73 b9 f7 49 f6 c1 42 93 f3 7e e0 9f 68 8d 17 ed b5 4b b9 d9 e3 f5 20 75 90 30 33 f0 14 e0 04 9b 5d 8b bc ae 64 87 31 e4 6f ec 6b 08 33 54 4f 21 cc a8 3f 31 79 30 39 8a 30 b3 55 ea 66 2b 61 59 af 6c 38 9c 6d 77 fd 33 20 f6 17 12 6f 06 de 6a 73 28 b9 20 2f 05 76 e4 82 61 13 ab 87 93 b4 0b f8 4d e0 8e 4c f8 9b ed 12 0c 7b 0d 87 79 d9 bf 77 b3 21 51 43 0c 84 2b 80 b5 c0 49 c0 19 c0 a9 84 71 af c7 50 bf 65 65 34 dc 80 f8 e5 36 01 71 c1 f5 cf 80 d8 5f 40 7c 82 30 61 e5 1c 9b 44 84 2a e2 0c ad 95 ed f3 e1 c1 2a e2 78 7d 06 78 2f 61 51 db ec d6 78 d9 90 38 48 d5 b0 db 75 21 fd 37 be 45 18 db 73 be 87 42 3d 84 c2 4e 81 f0 94 e4 d7 47 e1 50 30 0d cf 23 c0 57 92 eb e1 0c 0b 27 a9 cc e3 1b af f7 4a 41 3a ae ec e7 81 d7 da 24 4a 9c 46 d8 be 69 4f Data Ascii: jsIB~hK u03]d1ok3TO!?1y090Uf+aYl8mw3 ojs( /vaML{yw!QC+IqPee46q_@\|0aD**x}x/aQx8Hu!7EsB=NGP0#W'JA:$JFiO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50375	34.149.2.41	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	640	OUT	GET /widget/concured-shim.js HTTP/1.1 Host: cdn.concured.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "3bf94b2503b59b5845342d97ee58afd7" If-Modified-Since: Wed, 19 Jul 2023 15:25:05 GMT
2024-05-23 13:51:27 UTC	433	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 13:51:27 GMT Last-Modified: Wed, 19 Jul 2023 15:25:05 GMT ETag: "3bf94b2503b59b5845342d97ee58afd7" Content-Type: text/javascript X-GUploader-UploadID: ABPtcPo1PVeMn02-gaFCKNDKF-x-_NtVcV2EAwCtr7Lvjy6uub_J3gkvBwkUBWT_d0m_p4m3ag Content-Length: 0 Server: UploadServer Cache-Control: public,max-age=0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50376	54.159.240.171	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	590	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:27 UTC	422	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:27 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://www.spglobal.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-05-23 13:51:27 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50365	3.33.220.150	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	935	OUT	GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2F&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUYASABKAIyCwj2iIqIxc79PBAFOAFaCXN0aWNreWFkc2AC
2024-05-23 13:51:27 UTC	585	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:27 GMT Content-Type: text/html Content-Length: 895 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRgFKAMyCwiIs5nHxc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..; expires=Fri, 23 May 2025 13:51:27 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:27 UTC	895	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50368	52.18.219.127	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	821	OUT	GET /ibs:dpid=79908&dpuuid=Zk9J0cMGPKkzOkJE-hOvl2TE&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=65333287272203360842745703209020999402; dpm=65333287272203360842745703209020999402
2024-05-23 13:51:27 UTC	944	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:27 GMT Content-Length: 0 Connection: close X-TID: kWdSQQIqQWA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=124&cm=65333287272203360842745703209020999402 DCS: dcs-prod-irl1-1-v061-00df4207c.edge-irl1.demdex.com 2 ms set-cookie: dpm=65333287272203360842745703209020999402; Max-Age=15552000; Expires=Tue, 19 Nov 2024 13:51:27 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=65333287272203360842745703209020999402; Max-Age=15552000; Expires=Tue, 19 Nov 2024 13:51:27 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50363	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:27 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 2161 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:27 UTC	2161	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 66 39 38 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e8458f989225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:27 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:27 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50379	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:28 UTC	951	OUT	POST /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Content-Length: 37 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: bearer e8a59e45996cead00c71c0093304a0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:28 UTC	37	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 65 6e 22 7d Data Ascii: {"url":"https://www.spglobal.com/en"}
2024-05-23 13:51:28 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:28 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow etag: W/"e00-UQmDY9qLYZ5Nt6UCwN8iJWYEwus" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88858558dfee0ced-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:28 UTC	685	IN	Data Raw: 65 30 30 0d 0a 5b 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 66 66 65 33 66 32 63 33 2d 65 30 66 63 2d 34 32 62 30 2d 61 61 61 32 2d 62 66 32 34 63 31 39 63 65 65 34 62 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 76 2e 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 2f 65 6e 2f 63 61 6d 70 61 69 67 6e 73 2f 63 6f 6d 6d 65 72 63 69 61 6c 2d 6c 65 6e 64 69 6e 67 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 72 65 71 75 65 73 74 46 6f 72 6d 5f 65 6d 62 65 64 64 65 64 5f 32 27 5d 22 2c 22 66 6f 72 6d 49 66 72 61 6d 65 57 72 61 70 70 65 72 53 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 Data Ascii: e00[{"inputs":null,"formId":"ffe3f2c3-e0fc-42b0-aaa2-bf24c19cee4b","url":"https://dev.www.spglobal.com/marketintelligence/en/campaigns/commercial-lending","selector":"form[id='requestForm_embedded_2']","formIframeWrapperSelector":null,"isManual":true,"s
2024-05-23 13:51:28 UTC	1369	IN	Data Raw: 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 34 66 66 65 65 64 38 66 2d 31 63 30 63 2d 34 39 30 37 2d 62 36 37 33 2d 66 30 62 62 33 38 31 39 65 36 36 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 67 65 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 70 67 6c 6f 62 61 6c 2f 63 6f 72 70 6f 72 61 74 65 2f 75 73 2f 65 6e 2d 74 65 73 74 2f 66 6f 72 6d 73 2d 74 65 73 74 69 6e 67 2e 68 74 6d 6c 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 67 75 69 64 65 43 6f 6e 74 61 69 6e 65 72 46 6f 72 6d 27 5d 22 2c 22 66 6f 72 6d 49 66 Data Ascii: formLoadTimeout":4000},"isDevelopmentMode":false},{"inputs":null,"formId":"4ffeed8f-1c0c-4907-b673-f0bb3819e66e","url":"https://stage.spglobal.com/content/spglobal/corporate/us/en-test/forms-testing.html","selector":"form[id='guideContainerForm']","formIf
2024-05-23 13:51:28 UTC	1369	IN	Data Raw: 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 43 69 74 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 69 74 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 69 65 6c 64 22 3a 22 63 6f 6e 74 61 63 74 43 69 74 79 22 2c 22 61 74 74 72 53 65 6c 65 63 74 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 Data Ascii: or":"name"},{"complete":false,"nameAttr":"City","displayName":"City","elementType":"input","mappedField":"contactCity","attrSelector":"name"},{"complete":false,"nameAttr":"complianceCountry","displayName":"complianceCountry","elementType":"input","mappedF
2024-05-23 13:51:28 UTC	168	IN	Data Raw: 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 61 6d 65 4d 61 70 70 69 6e 67 4f 74 68 65 72 50 61 67 65 73 22 3a 74 72 75 65 2c 22 61 64 64 69 74 69 6f 6e 61 6c 53 65 74 74 69 6e 67 73 22 3a 7b 22 6e 6f 46 6f 63 75 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 45 6d 61 69 6c 56 65 72 69 66 79 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 5d 0d 0a Data Ascii: tor":null,"isManual":true,"sameMappingOtherPages":true,"additionalSettings":{"noFocus":false,"noEmailVerify":false,"formLoadTimeout":4000},"isDevelopmentMode":false}]
2024-05-23 13:51:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50381	35.244.159.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:28 UTC	683	OUT	GET /w/1.0/sd?id=537073026&val=Zk9J0cMGPKkzOkJE-hOvl2TE HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
2024-05-23 13:51:28 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 13:51:28 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50380	34.120.111.58	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:28 UTC	598	OUT	GET /script/config/spglobal/19bf0a5e.json HTTP/1.1 Host: assets.concured.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:28 UTC	590	IN	HTTP/1.1 404 Not Found Content-Type: application/xml; charset=UTF-8 Content-Length: 127 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Cache-Control, Content-Length, Content-Type, Date, Expires, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: ABPtcPqcgAd79KGJ_GwKdzZk01ZK9eZg2J7Df18-aDAyvUYnfXrD-XgM1C1n85EkwuVGc3jybYA Date: Thu, 23 May 2024 13:51:28 GMT Expires: Thu, 23 May 2024 13:51:28 GMT Cache-Control: private, max-age=0 Server: UploadServer Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:28 UTC	127	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 27 31 2e 30 27 20 65 6e 63 6f 64 69 6e 67 3d 27 55 54 46 2d 38 27 3f 3e 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 4e 6f 53 75 63 68 4b 65 79 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 54 68 65 20 73 70 65 63 69 66 69 65 64 20 6b 65 79 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 4d 65 73 73 61 67 65 3e 3c 2f 45 72 72 6f 72 3e Data Ascii: <?xml version='1.0' encoding='UTF-8'?><Error><Code>NoSuchKey</Code><Message>The specified key does not exist.</Message></Error>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50378	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:28 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:28 UTC	336	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 32 31 32 34 2e 31 39 39 39 39 39 39 39 39 39 35 33 34 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 Data Ascii: metrics=%5B%7B%22value%22%3A2124.1999999999534%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C
2024-05-23 13:51:28 UTC	690	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:28 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: df210132b8f97e58 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-05-23 13:51:28 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50377	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:28 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:28 UTC	336	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 32 31 33 30 2e 37 39 39 39 39 39 39 39 39 39 38 38 34 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 Data Ascii: metrics=%5B%7B%22value%22%3A2130.7999999999884%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C
2024-05-23 13:51:28 UTC	690	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:28 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: ccb1bfeb3bc5c1a1 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-05-23 13:51:28 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50382	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:28 UTC	922	OUT	GET /pixel.gif?clkgypv=pxl&ch=124&cm=65333287272203360842745703209020999402 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"}]
2024-05-23 13:51:28 UTC	1220	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:28 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: a595a19e5c67 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc&google_cm&google_hm=Wms5SjBjTUdQS2t6T2tKRS1oT3ZsMlRF set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:52 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:52 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50387	192.28.144.124	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:28 UTC	877	OUT	POST /webevents/visitWebPage?_mchNc=1716472286556&_mchCn=&_mchId=491-VNG-790&_mchTk=_mch-spglobal.com-1716472256002-46107&_mchHo=www.spglobal.com&_mchPo=&_mchRu=%2Fen&_mchPc=https%3A&_mchVr=163&_mchEcid=01B1289A641C662C0A495C39%40AdobeOrg%3A%3A61426866424959655572994486576652237387&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 Host: 491-vng-790.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:28 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 23 May 2024 13:51:28 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 8db0429c-293e-4465-a513-b7cd8305de11 Access-Control-Allow-Origin: *
2024-05-23 13:51:28 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50392	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:29 UTC	897	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"}]
2024-05-23 13:51:29 UTC	217	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 32 34 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 36 37 36 30 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 65 6e 26 61 63 63 6f 75 6e 74 5f 69 64 3d 6d 78 32 38 6f 36 32 75 7a 71 62 62 66 26 6c 69 73 74 3d 39 35 76 35 32 67 32 78 76 63 36 71 67 26 63 68 3d 32 37 38 26 63 6d 3d 61 63 37 34 36 61 30 37 31 36 62 35 31 65 36 37 33 38 31 37 31 37 31 36 34 37 32 32 35 34 26 63 73 3d 66 61 6c 73 65 Data Ascii: ws=1&lang=en-US&cookies=true&tz=240&screen_res=1280x1024&browser_res=1280x6760&ref=&url=https%3A%2F%2Fwww.spglobal.com%2Fen&account_id=mx28o62uzqbbf&list=95v52g2xvc6qg&ch=278&cm=ac746a0716b51e6738171716472254&cs=false
2024-05-23 13:51:29 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:29 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: a595a19e5c67 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://www.spglobal.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:53 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:29 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50388	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:29 UTC	880	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"}]
2024-05-23 13:51:29 UTC	906	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:29 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 39e965e6e4d1 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://dpm.demdex.net/ibs:dpid=79908&dpuuid=Zk9J0cMGPKkzOkJE-hOvl2TE&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:53 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50390	18.172.103.101	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:29 UTC	890	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRgFKAMyCwiIs5nHxc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ.. If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT
2024-05-23 13:51:29 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Thu, 23 May 2024 07:33:30 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 413634bfcacd752107ee361d53948cee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: r47jFutpW17NetAm9zKjUcMGtOufUDkyyKXntDO7Zz3l2Awhza99eA== Age: 32571

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50396	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:29 UTC	838	OUT	GET /pixel/62b46da73ec962008fbce029 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/marketintelligence/en/pages/product-login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:29 UTC	601	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:29 GMT Content-Type: text/javascript Content-Length: 0 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 88858560790441e7-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50397	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:29 UTC	429	OUT	GET /gw1/rtp/api/v1_1/visitor?sid=spglobal-1716472255217-b61b91f1&aid=spglobal&1716472282772 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:29 UTC	590	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:29 GMT Server: Jetty(9.4.45.v20220203) Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Last-Modified: Thu May 23 08:51:29 CDT 2024 Pragma: No-cache Content-Type: application/json Strict-Transport-Security: max-age=63113904 Connection: close Transfer-Encoding: chunked Set-Cookie: BIGipServerabrtp1_https=!kmOnsgu+8lqhQgSJMaUfYxEamMjeMkeCFuTgh/El65PbsQOdnBUYYX2ZKHumjOnjCcDQHnrbSKSFtIU=; expires=Thu, 23-May-2024 14:26:29 GMT; path=/; Httponly; Secure
2024-05-23 13:51:29 UTC	3364	IN	Data Raw: 64 31 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 32 30 30 2c 22 72 65 73 75 6c 74 73 22 3a 7b 22 6f 72 67 22 3a 22 43 65 6e 74 75 72 79 6c 69 6e 6b 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 20 4c 4c 43 22 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 4f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 7d 2c 22 69 6e 64 75 73 74 72 69 65 73 22 3a 5b 22 54 65 6c 65 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 22 5d 2c 22 69 73 70 22 3a 74 72 75 65 2c 22 6d 61 74 63 68 65 64 53 65 67 6d 65 6e 74 73 22 3a 5b 7b 22 63 6f 64 65 22 3a 31 32 37 33 38 2c 22 6e 61 6d 65 22 3a 22 41 6c 6c 20 49 6e 64 75 73 74 72 79 Data Ascii: d1d{"status":200,"results":{"org":"Centurylink Communications LLC","location":{"country":"United States Of America","city":"New York City","state":"NY"},"industries":["Telecommunications"],"isp":true,"matchedSegments":[{"code":12738,"name":"All Industry
2024-05-23 13:51:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50398	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:29 UTC	402	OUT	GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472282776 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:29 UTC	453	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:29 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/json;charset=utf-8 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-Length: 48 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!flFsNGg1h100Ec2JMaUfYxEamMjeMpqmtwLIPnPBB25oNhZvGA+w/v4mJ/DdREcS8F5AkQL/M/2i1Hc=; expires=Thu, 23-May-2024 14:26:29 GMT; path=/; Httponly; Secure
2024-05-23 13:51:29 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 7b 22 73 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 22 7d Data Ascii: {"code":200,"body":{"segments":[]},"content":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50402	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:30 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 88858565ad148cdc-EWR
2024-05-23 13:51:30 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50408	54.159.240.171	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	590	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	422	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://www.spglobal.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-05-23 13:51:30 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50407	104.18.36.155	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	864	OUT	GET /rum?cm_dsp_id=39&external_user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expiration=1719064287&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; CMPS=1297; CMPRO=1297
2024-05-23 13:51:30 UTC	988	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:30 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 8885856659bc435b-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zk9Jy0t3ueUAAApMASTdAAAA; Path=/; Domain=casalemedia.com; Expires=Fri, 23 May 2025 13:51:30 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=1297; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 13:51:30 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AWdgQ15AnFge0BdpCc2eGkb94sR%2FuXiyK%2BYymJA%2FwUWePJZXliOPRsPb01j7xSs7mFHNgEd4jbt50kJNcPKj%2Bbyey1JL8vnKlorSuPD3de0GRB6ifhZrgoCF%2FCkiqFxGUx5Vdi366IBLfQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50403	52.18.219.127	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	821	OUT	GET /ibs:dpid=79908&dpuuid=Zk9J0cMGPKkzOkJE-hOvl2TE&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=65333287272203360842745703209020999402; dpm=65333287272203360842745703209020999402
2024-05-23 13:51:30 UTC	944	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:30 GMT Content-Length: 0 Connection: close X-TID: 3V5tuAJ8Qbo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=124&cm=65333287272203360842745703209020999402 DCS: dcs-prod-irl1-2-v061-0fecc9ca4.edge-irl1.demdex.com 2 ms set-cookie: dpm=65333287272203360842745703209020999402; Max-Age=15552000; Expires=Tue, 19 Nov 2024 13:51:30 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=65333287272203360842745703209020999402; Max-Age=15552000; Expires=Tue, 19 Nov 2024 13:51:30 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50411	3.218.167.115	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	805	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 1510748-48.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: Hp+OeG3tJGcvnau5Uveyuw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:30 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:30 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50410	34.195.15.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 1334519-19.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: HrSKF1fc79miOONbvrUhmw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:30 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:30 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50406	185.89.211.116	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	1169	OUT	GET /getuid?https%3a%2f%2fmatch.adsrvr.org%2ftrack%2fcmf%2fappnexus%3fttd%3d1%26anid%3d%24UID&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; receive-cookie-deprecation=1; uuid2=3507891500191884572; anj=dTM7k!M40<E:2jUF']wIg2GTtv9+21!]taa8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<x*TD4YQp$kNOZ<tIvErm0wUyl)(Vv/zx]H?>/ECOc4GsDWDDZGr:Gm`byWsw-sI!+leN3FR@PsXH%!5NOuewL+B
2024-05-23 13:51:30 UTC	1485	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://match.adsrvr.org/track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 AN-X-Request-Uuid: 363eb60d-745d-425e-94dd-32d31f45830b Set-Cookie: XANDR_PANID=6O1-3kSU0PcbJsDdHHSDeykbcVPGntlPtiNkAtlcM86ijeVNraFoEuCVfRRDK3Bun4RDRVd3vuv-HEK97aBlzxrGrbYQ9PM9U45McD3aUP8.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:30 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:30 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:30 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 956.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.5	50404	142.250.186.98	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	758	OUT	GET /pixel?google_nid=clickagy&google_sc&google_cm&google_hm=Wms5SjBjTUdQS2t6T2tKRS1oT3ZsMlRF HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:30 UTC	656	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://aorta.clickagy.com/pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 Date: Thu, 23 May 2024 13:51:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 291 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:30 UTC	291	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 6f 72 74 61 2e 63 6c 69 63 6b 61 67 79 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 3f 63 68 3d 38 26 61 6d 70 3b 63 6d 3d 43 41 45 53 45 4e 42 37 36 2d 35 42 77 76 49 62 32 6c 44 6d 73 69 38 50 74 32 73 26 61 6d 70 3b 67 6f 6f 67 6c 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://aorta.clickagy.com/pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.5	50405	142.250.185.130	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	1047	OUT	GET /pixel?google_nid=TheTradeDesk&google_cm&google_sc&google_hm=ZjAzYWFlODAtYjQ1Yy00MGI3LThjN2EtNDE4YjM5MzY3Yzk3&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:30 UTC	739	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1 Date: Thu, 23 May 2024 13:51:30 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 386 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:30 UTC	386	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 6f 6f 67 6c 65 3f 67 5f 75 75 69 64 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 74 74 64 5f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.adsrvr.org/track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.5	50409	3.33.220.150	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	1023	OUT	GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fen&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRgFKAMyCwiIs5nHxc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
2024-05-23 13:51:30 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:30 GMT Content-Type: text/html Content-Length: 818 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:30 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiag_3ixc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..; expires=Fri, 23 May 2025 13:51:30 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:30 UTC	818	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.5	50414	104.244.42.72	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	620	OUT	GET /settings?session_id=394edb16d9da2cff3adda4f9a379805c1d7ddc11 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://platform.twitter.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://platform.twitter.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	567	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:29 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Thu, 23 May 2024 13:51:30 GMT content-length: 870 x-transaction-id: c0f463df0092075c strict-transport-security: max-age=631138519 access-control-allow-origin: https://platform.twitter.com access-control-allow-credentials: true x-response-time: 6 x-connection-hash: 2868b5da434b760df291606a9abace404316c15ac1b653a1e34debd4ce73754f connection: close
2024-05-23 13:51:30 UTC	870	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 Data Ascii: {"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.5	50418	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	816	OUT	POST /events/1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ&rst=64021&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/&ptid=85a29931a2f9233e HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 149 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	149	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 63 70 6c 2c 33 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 32 35 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 33 35 3b 65 2c 27 6c 6f 61 64 2c 31 38 73 6f 2c 33 3b 35 2c 31 2c 32 3b 36 2c 33 2c 32 35 30 2e 3b 36 2c 34 2c 31 2e 33 35 3b 65 2c 27 70 61 67 65 48 69 64 65 2c 6e 36 6b 2c 33 3b 35 2c 31 2c 32 3b 36 2c 33 2c 32 35 30 2e 3b 36 2c 34 2c 31 2e 33 35 Data Ascii: bel.6;e,'fp,cpl,3;5,'net-etype,'3g;6,'net-rtt,250.;6,'net-dlink,1.35;e,'load,18so,3;5,1,2;6,3,250.;6,4,1.35;e,'pageHide,n6k,3;5,1,2;6,3,250.;6,4,1.35
2024-05-23 13:51:30 UTC	351	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Thu, 23 May 2024 13:51:30 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-served-by: cache-ewr18140-EWR
2024-05-23 13:51:30 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.5	50419	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	818	OUT	POST /jserrors/1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ&rst=64023&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/&ptid=85a29931a2f9233e HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	909	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 4c 6f 61 64 65 72 54 79 70 65 2f 70 72 6f 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 52 75 6e 74 69 6d 65 2f 42 72 6f 77 73 65 72 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 46 72 61 6d 65 77 6f 72 6b 2f 56 75 65 2f 44 65 74 65 Data Ascii: {"sm":[{"params":{"name":"Generic/LoaderType/pro/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/Runtime/Browser/Detected"},"stats":{"c":1}},{"params":{"name":"Framework/Vue/Dete
2024-05-23 13:51:30 UTC	358	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Thu, 23 May 2024 13:51:30 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-served-by: cache-nyc-kteb1890074-NYC
2024-05-23 13:51:30 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.5	50412	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	501	OUT	OPTIONS /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	377	IN	HTTP/1.1 200 OK access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 1209600 access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:30 GMT server: istio-envoy connection: close transfer-encoding: chunked
2024-05-23 13:51:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.5	50416	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	819	OUT	POST /jserrors/1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ&rst=64026&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/&ptid=85a29931a2f9233e HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 5860 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	5860	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 61 73 73 65 74 73 2e 63 6f 6e 63 75 72 65 64 2e 63 6f 6d 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 61 73 73 65 74 73 2e 63 6f 6e 63 75 72 65 64 2e 63 6f 6d 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 73 63 72 69 70 74 2f 63 6f 6e 66 69 67 2f 73 70 67 6c 6f 62 61 6c 2f 31 39 62 66 30 61 35 65 2e 6a 73 6f 6e 22 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 73 74 61 74 75 73 22 3a 34 30 34 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 74 78 53 69 7a 65 22 3a 7b 22 74 22 3a 30 7d 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 31 32 37 7d 2c 22 Data Ascii: {"xhr":[{"params":{"hostname":"assets.concured.com","port":"443","protocol":"https","host":"assets.concured.com:443","pathname":"/script/config/spglobal/19bf0a5e.json","method":"GET","status":404},"metrics":{"count":1,"txSize":{"t":0},"rxSize":{"t":127},"
2024-05-23 13:51:30 UTC	358	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Thu, 23 May 2024 13:51:30 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-served-by: cache-nyc-kteb1890055-NYC
2024-05-23 13:51:30 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.5	50417	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	817	OUT	POST /events/1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ&rst=64030&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/&ptid=85a29931a2f9233e HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 1719 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	1719	OUT	Data Raw: 62 65 6c 2e 37 3b 32 2c 2c 65 6b 66 2c 6d 67 2c 2c 2c 27 47 45 54 2c 62 38 2c 27 61 73 73 65 74 73 2e 63 6f 6e 63 75 72 65 64 2e 63 6f 6d 3a 34 34 33 2c 27 2f 73 63 72 69 70 74 2f 63 6f 6e 66 69 67 2f 73 70 67 6c 6f 62 61 6c 2f 31 39 62 66 30 61 35 65 2e 6a 73 6f 6e 2c 2c 33 6a 2c 31 2c 27 30 2c 21 21 21 3b 32 2c 2c 67 69 32 2c 6a 30 2c 2c 2c 30 2c 35 6b 2c 27 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 3a 34 34 33 2c 27 2f 63 6f 6e 73 65 6e 74 2f 31 62 31 31 34 35 32 62 2d 36 32 63 63 2d 34 66 61 64 2d 38 31 34 39 2d 39 62 33 39 63 34 30 33 32 39 61 34 2f 31 62 31 31 34 35 32 62 2d 36 32 63 63 2d 34 66 61 64 2d 38 31 34 39 2d 39 62 33 39 63 34 30 33 32 39 61 34 2e 6a 73 6f 6e 2c 2c 34 32 35 2c 2c 33 2c 21 21 21 3b 32 2c 2c 68 31 33 2c 6b 70 2c 2c Data Ascii: bel.7;2,,ekf,mg,,,'GET,b8,'assets.concured.com:443,'/script/config/spglobal/19bf0a5e.json,,3j,1,'0,!!!;2,,gi2,j0,,,0,5k,'cdn.cookielaw.org:443,'/consent/1b11452b-62cc-4fad-8149-9b39c40329a4/1b11452b-62cc-4fad-8149-9b39c40329a4.json,,425,,3,!!!;2,,h13,kp,,
2024-05-23 13:51:30 UTC	358	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Thu, 23 May 2024 13:51:30 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-served-by: cache-nyc-kteb1890070-NYC
2024-05-23 13:51:30 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.5	50413	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	501	OUT	OPTIONS /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:30 UTC	377	IN	HTTP/1.1 200 OK access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 1209600 access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:30 GMT server: istio-envoy connection: close transfer-encoding: chunked
2024-05-23 13:51:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.5	50415	185.89.211.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	820	OUT	GET /getuid?https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D209%26userId%3D$UID%26gdpr%3D%26gdpr_consent%3D HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=3507891500191884572; XANDR_PANID=25ibNVgOTkSHEsG1FNznYrsK2urJcSEbv4MPPaz-uGdreY2S-9Mdv_M0SMHpUxudc6PhWTxCLrLuhyXImxtoqbx1zHSsKj4Ln9kO50RceJc.; receive-cookie-deprecation=1; anj=dTM7k!M40<E:2jUF']wIg2GTtv9+21!]taa8i_imf$9G=A^A/A/C$lW%Rlh3J!HCB?f]6!).=E/TT<x*TD4YQp$kNOZ<tIvErm0wUyl)(Vv/zx]H?>/ECOc4GsDWDDZGr:Gm`byWsw-sI!+leN3FR@PsXH%!5NOuewL+B
2024-05-23 13:51:30 UTC	1475	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 13:51:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ads.stickyadstv.com/user-registering?dataProviderId=209&userId=3507891500191884572&gdpr=&gdpr_consent= AN-X-Request-Uuid: 2d8e81c0-cf52-4f7e-8042-0885e960f92e Set-Cookie: XANDR_PANID=25ibNVgOTkSHEsG1FNznYrsK2urJcSEbv4MPPaz-uGdreY2S-9Mdv_M0SMHpUxudc6PhWTxCLrLuhyXImxtoqbx1zHSsKj4Ln9kO50RceJc.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:30 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 13:51:30 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=3507891500191884572; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 13:51:30 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.5	50420	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:30 UTC	570	OUT	OPTIONS /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: _zitok,authorization,content-type,visited_url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	607	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 13:51:31 GMT Connection: close apigw-requestid: YOh7hiFmPHcEMig= x-powered-by: Express vary: Access-Control-Request-Headers access-control-allow-origin: * access-control-allow-methods: * access-control-allow-headers: * access-control-max-age: 0 x-cache: Miss from cloudfront via: 1.1 54a56da0fe0bae919389c7d572d4720e.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: TfXQRZreez67sIGA-LVbTYqm0fI55g_Mvzh4F20sUbCnE9hdb2gd0w== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885856aed0080e0-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.5	50427	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	950	OUT	GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
2024-05-23 13:51:31 UTC	1119	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: image/gif Content-Length: 43 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 39e965e6e4d1 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:55 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:55 GMT; SameSite=None; Secure
2024-05-23 13:51:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.5	50425	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	1095	OUT	GET /track/cmf/appnexus?ttd=1&anid=3507891500191884572&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiag_3ixc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
2024-05-23 13:51:31 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCNTr5L6vzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAEoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB; expires=Fri, 23 May 2025 13:51:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:31 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.5	50421	142.250.185.198	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	1330	OUT	GET /activityi;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1 Host: 11756258.fls.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:31 UTC	1210	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:51:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Follow-Only-When-Prerender-Shown: 1 Strict-Transport-Security: max-age=21600 Location: https://11756258.fls.doubleclick.net/activityi;dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.5	50430	54.208.138.231	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	782	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289418&z=0.25825000654887664 HTTP/1.1 Host: a.idio.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:31 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:31 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.5	50432	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	961	OUT	GET /pixel.gif?clkgypv=pxl&ch=124&cm=65333287272203360842745703209020999402 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
2024-05-23 13:51:31 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: a595a19e5c67 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc&google_cm&google_hm=Wms5SjBjTUdQS2t6T2tKRS1oT3ZsMlRF set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:55 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.5	50424	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	1144	OUT	GET /track/cmf/google?g_uuid=&gdpr=0&gdpr_consent=&ttd_tdid=f03aae80-b45c-40b7-8c7a-418b39367c97&google_gid=CAESEGIl0PIhbdDJSX1Culjregk&google_cver=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiag_3ixc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
2024-05-23 13:51:31 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAEoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB; expires=Fri, 23 May 2025 13:51:31 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:31 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.5	50423	142.250.186.102	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	1311	OUT	GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:31 UTC	3948	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:51:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5473459969502921408"}],"aggregatable_trigger_data":[{"filters":[{"14":["12593915"]}],"key_piece":"0xc259d5b69d511d38","source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]},{"key_piece":"0x4669cf00f9937fab","not_filters":{"14":["12593915"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"628539424":81,"628539425":81,"628539426":81,"628539427":7946,"628678596":32,"628678597":32,"628678598":32,"628678599":3177},"debug_key":"11463456649838510251","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5473459969502921408","filters":[{"14":["12593915"],"source_type":["event"]},{ [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 22-Jun-2024 13:51:31 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.5	50431	54.208.138.231	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	845	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289421&z=0.8996201111484932 HTTP/1.1 Host: a.idio.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:31 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:31 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.5	50422	142.250.185.162	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	1340	OUT	GET /td/fls/rul/activityi;fledge=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:31 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:51:31 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 13:51:31 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-05-23 13:51:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.5	50429	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 662 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	662	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 33 33 34 35 31 39 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 38 31 39 37 39 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1334519,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472281979,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:31 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:31 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 20 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.5	50440	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	421	OUT	GET /assets/libsyn-logo--black.png HTTP/1.1 Host: play.libsyn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
2024-05-23 13:51:31 UTC	352	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:31 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 27216 x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: image/png connection: close
2024-05-23 13:51:31 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 88 00 00 02 8b 08 06 00 00 00 75 dd 79 14 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 45 2a 82 56 10 11 cc 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 b9 f4 43 68 d2 90 a4 b8 38 0a ae 05 07 3f 16 ab 0e 2e ce ba 3a b8 0a 82 e0 07 88 93 a3 93 a2 8b 94 f8 bf a4 d0 22 c6 83 e3 7e bc bb f7 b8 7b 07 08 f5 32 53 cd 8e 71 40 d5 2c 23 15 8f 89 d9 dc 8a 18 78 45 10 fd e8 85 88 61 89 99 7a 22 bd 90 81 e7 f8 ba 87 8f af 77 51 9e e5 7d ee cf d1 ad e4 4d 06 f8 44 e2 59 a6 1b 16 f1 3a f1 f4 a6 a5 73 de 27 0e b3 92 a4 10 9f 13 8f 19 74 41 e2 47 ae cb 2e bf 71 2e 3a 2c f0 cc b0 91 49 cd 11 87 89 c5 62 1b cb 6d cc 4a 86 4a 3c 45 1c 51 54 8d f2 85 ac cb 0a Data Ascii: PNGIHDRuyiCCPICC profile(}=H@_SE*VP,8J`Zu0Ch8?.:"~{2Sq@,#xEaz"wQ}MDY:s'tAG.q.:,IbmJJ<EQT
2024-05-23 13:51:31 UTC	1460	IN	Data Raw: 08 88 92 24 49 32 20 aa 06 ac 6e 48 a3 3b 97 3c bf 24 19 10 55 29 6f b2 09 4a e5 5b 36 41 e5 9d 92 04 c2 86 c1 50 92 01 51 d2 30 ec b4 09 2a ef a8 dc af 0d 89 92 0c 88 aa 3c 6f 66 d2 e2 cf 21 cf 23 49 06 44 45 73 43 6b 18 16 27 aa 89 db ed c5 e0 2c 83 a2 a4 ba 06 c4 8f d9 84 51 87 44 6f 6c 93 f3 a4 4d 50 79 ab 6c 02 49 75 0d 88 8f db 84 51 86 43 49 92 64 40 94 0c 8a 25 b3 dd 26 88 c2 f1 b8 40 b6 24 03 a2 2a ee 18 6f 62 a5 b1 db 26 88 ee a1 4b 92 0c 88 aa a4 b5 b9 9b 99 37 b5 c9 69 da 04 51 58 de 26 28 7a 6e 49 8a 3a 20 3e 61 13 46 cb 1b d8 64 b9 d7 79 1c 4e b4 09 24 d5 31 20 7e c3 26 8c 2e 14 1a 0c cb c1 0a 62 bc 0f 5a 9e 63 92 a2 0f 88 aa e7 0d 4e e3 f1 b4 4d 50 79 17 e0 92 51 92 0c 88 92 86 e8 16 9b c0 07 2e 49 32 20 6a d2 2e b5 09 a4 a1 3a db 50 28 a9 Data Ascii: $I2 nH;<$U)oJ[6APQ0<of!#IDEsCk',QDolMPylIuQCId@%&@$ob&K7iQX&(znI: >aFdyN$1 ~&.bZcNMPyQ.I2 j.:P(
2024-05-23 13:51:31 UTC	1460	IN	Data Raw: 5f b6 12 78 12 61 19 31 43 a0 26 11 10 a7 69 4d 88 eb 78 bd 19 66 40 6c e2 62 d9 b1 79 09 f0 21 dc 06 ac 8c 1e b5 09 a2 71 01 ae 87 18 83 7c 35 f0 b9 38 11 44 e5 d2 a0 55 41 ec 5a f8 59 32 82 17 70 13 61 4a bc aa 6f 5d 41 38 b4 c2 31 79 4e 54 89 cb 45 c0 17 59 38 ce d7 73 ad bc 56 27 1f a7 25 c7 cf 65 60 54 a5 90 d8 28 b8 a7 2f b8 de 8c 22 20 6e 36 20 46 e3 85 b9 70 a8 f2 98 23 8c f9 3d c3 a6 a8 bc f3 09 cb 91 ec c9 5d c4 0d 87 93 b7 92 30 39 e4 64 42 45 f0 8c e4 78 49 55 34 55 10 10 db 1a 45 40 fc 0a 2e 96 1d 93 ec 52 37 ce b2 2c 97 1b 0d 88 d1 d8 00 dc 83 e3 10 27 69 35 61 9b b7 13 08 55 41 c7 08 2a 46 3d 6f a1 3b 8a 80 e8 52 37 71 71 a9 9b f2 fa 8e 4d 10 8d cb 08 2b 06 58 ad 1f bd 74 ac e0 99 84 09 23 97 e0 b2 31 32 34 8e 7c 99 1b 80 6f d9 d6 51 71 a9 Data Ascii: _xa1C&iMxf@lby!q\|58DUAZY2paJo]A81yNTEY8sV'%e`T(/" n6 Fp#=]09dBExIU4UE@.R7,'i5aUA*F=o;R7qqM+Xt#124\|oQq
2024-05-23 13:51:31 UTC	1460	IN	Data Raw: 07 c3 d4 3a 5a 6b 16 9e 46 98 65 3c 2e 6b 81 69 9c ac 22 a9 c2 01 11 03 62 94 2e f1 c6 54 09 87 80 5b 6c 86 a1 05 c3 15 84 7d ae d3 b1 85 6b 27 f8 9a 56 17 bc 46 ab 88 92 2a 17 10 bf 65 73 47 e5 07 68 8d 7f b2 7a 58 4e 69 f5 de 6e e6 c1 43 61 7a 8d 5c 43 98 89 fc 12 e0 1c fa 5f 9e 66 14 b2 3b ab 78 fe 49 1a aa 25 63 fc bf dc 51 25 2e e9 40 fc 47 70 a2 4a d9 3d 60 13 0c f4 d0 bc 94 b0 1f f2 d9 25 09 84 79 cb 08 8b d6 3f 5d f0 da 5d 38 5b d2 d0 2e 86 a3 96 ee a8 a2 78 5c 4c f1 38 44 ab 19 e5 62 37 73 6f d7 c2 6c 37 f2 79 c0 0b 93 f7 f8 ca 12 bf ee ec 92 37 9e 77 92 2a 17 10 d3 a7 d8 cf da e4 d1 05 44 bb 98 cb cd 6e e6 ee a1 30 db 8d 7c 29 a1 1b 79 dc 93 4e 06 95 56 11 db fd 4c 9e 97 92 4a 1d 10 53 9f b6 c9 a3 f2 6a 1c 87 58 15 76 33 2f 0c 51 a9 0d 84 49 27 Data Ascii: :ZkFe<.ki"b.T[l}k'VFesGhzXNinCaz\C_f;xI%cQ%.@GpJ=`%y?]]8[.x\L8Db7sol7y7wDn0\|)yNVLJSjXv3/QI'
2024-05-23 13:51:31 UTC	1460	IN	Data Raw: f1 88 92 01 b1 44 66 80 eb 3c 2c d1 b1 9b b9 7c 1a c0 8f 02 1f 06 ce ef f0 e7 76 00 87 6c ae da 59 4e f1 78 44 43 a2 64 40 9c 88 26 f0 37 1e 96 28 d9 cd 5c 1e 67 13 16 c3 be b6 cd 39 08 ad 0a e2 1c 8e 45 ac ab a2 f1 88 f9 87 0c 49 06 c4 b1 84 43 80 af 7a 58 a2 64 37 f3 e4 ad 00 de 01 fc 29 61 8b b5 5e 59 45 ac af 8d b4 1f 8f 28 c9 80 38 56 3b 81 ad 1e 9a e8 a4 dd cc de 60 26 e3 12 c2 f0 8d d7 f5 f1 b0 66 15 51 00 a7 e1 78 44 c9 80 58 12 7f e8 a1 89 d2 0f 52 bc ed 9e 37 99 d1 59 05 fc 26 f0 fb 43 78 70 9b b1 39 6b 7b 9f 38 8d f9 e3 11 0d 89 92 01 71 ac 5c ee 26 6e 3f ce fc 2a 84 5d cc a3 d3 00 ae 22 4c 42 b9 6a c0 73 11 5a 15 c4 59 e0 29 9b b5 b6 96 03 1b 0a ee 1b 86 44 29 52 4b 4a fa ba 5c ee 26 4e cf 22 ec d2 f1 88 e1 70 a4 56 01 bf 43 e7 d9 c9 83 78 12 Data Ascii: Df<,\|vlYNxDCd@&7(\g9EICzXd7)a^YE(8V;`&fQxDXR7Y&Cxp9k{8q\&n?*]"LBjsZY)D)RKJ\&N"pVCx
2024-05-23 13:51:31 UTC	4	IN	Data Raw: 75 af 01 b0 Data Ascii: u
2024-05-23 13:51:31 UTC	1460	IN	Data Raw: df 8a 61 3f e1 6d 98 c7 ad 4e ef 81 c6 08 ff bd 66 3f ed 5a c5 80 d8 00 7e 97 b0 45 9b e2 f4 16 c2 78 c4 74 2c e2 1c f3 c7 4a 94 dd c6 24 1c 1e 5f b3 e3 56 54 45 3c 16 38 d9 b7 b4 ba d8 9b 84 a3 99 9a 84 c4 74 72 c8 62 83 e0 30 ba 8c fb 09 0d 83 1c 07 ab c0 e5 0b 9a cd c5 fe 03 65 fe a1 2f 06 6e f5 f8 47 ab ca 4b de bc 1a f8 05 2f 4a f3 42 e2 99 c0 91 be ad d5 c5 41 c2 5a 89 87 22 0b 89 0f 01 77 03 0f 00 f7 12 c6 58 1f 1a 62 10 1c 46 35 b0 df f6 35 f4 d5 3c 61 96 f9 35 2f 4d 2e 26 8a d7 35 84 c5 56 ab b2 e4 cd 12 e0 9d b8 1d 64 51 40 5c 81 13 56 d4 9b 39 c2 38 bb fd 15 0d 89 b7 03 f7 24 41 77 2b ad aa e0 a8 83 60 2f 93 41 7a 69 3b 83 9f 2a 1f 10 ed 66 8e df e7 81 37 50 8d 25 6f 62 5e c2 66 58 21 d1 09 2b ea 27 24 3e 4a e8 76 6d e6 02 62 99 82 62 5a 19 7c Data Ascii: a?mNf?Z~Ext,J$_VTE<8trb0e/nGK/JBAZ"wXbF55<a5/M.&5VdQ@\V98$Aw+`/Azi;*f7P%ob^fX!+'$>JvmbbZ\|
2024-05-23 13:51:31 UTC	1460	IN	Data Raw: 5c fe 46 9a 27 b6 0a 62 7a a3 d9 02 fc 92 87 b7 16 da 55 11 f3 93 20 7e 0e b8 d6 e6 2a f5 b9 9b bf 29 ef 01 8e b3 69 4a e5 20 f3 c7 15 ee cf 05 bf 6c b5 70 d8 95 c2 39 ba 57 12 fb 75 29 70 31 61 4c f3 1e ac 26 4a 0b 02 55 6c 3f 53 03 f8 3a 70 85 87 b8 16 ce 4a 6e 5a f9 2a 62 fa 7e 78 17 2e 63 53 a5 6b 51 b6 92 78 02 b0 de e6 99 b8 6d 84 e5 69 76 d3 5b b5 70 58 95 c2 b9 31 fe 8c 37 00 ff 44 6b d9 1d c7 27 aa d6 62 1c 83 98 06 c4 ef 02 3f e1 21 ae 85 75 c0 27 0a 6e 34 d3 c0 6f 12 c6 1c a9 3a 21 31 3b ab 79 1f 61 bc a9 5d cd e3 97 56 0b 1f 48 c2 e1 c1 5c 18 ec 54 2d cc ff ba e8 ef f5 52 29 1c a7 53 80 d7 12 f6 75 7e 32 f7 90 69 45 51 b5 7e 6a 8f ed e7 5a ca fc 59 74 8a db b3 81 fb 08 63 89 e6 08 6b e9 bd 9f b0 36 a6 55 80 ea 5d 93 f2 e3 11 cf 05 96 d8 3c 63 Data Ascii: \F'bzU ~)iJ lp9Wu)p1aL&JUl?S:pJnZb~x.cSkQxmiv[pX17Dk'b?!u'n4o:!1;ya]VH\T-R)Su~2iEQ~jZYtck6U]<c
2024-05-23 13:51:31 UTC	1460	IN	Data Raw: 7b b3 ad f6 35 2d bf 1d df 24 97 bf 49 97 ac d9 4a f1 de c7 56 0c 35 4c f7 03 9f 23 6c 10 b0 af e0 01 58 ea c9 74 cd 7f 7e 17 ce ae f7 d3 f7 be cc 05 b4 99 fb f0 c9 bb da 21 31 bf 1d 1f b4 2a 89 4b c7 f8 5a b6 01 f7 11 96 ac c9 77 27 67 ab 84 56 0c 35 2c 6b 80 cb 81 d7 00 cf 4a 1e 50 b6 63 65 51 03 3e 6d d7 f5 67 6f 10 d6 c7 7b c6 b7 42 2d cd 24 4f d9 87 71 56 73 ac d7 b6 fc 78 c4 95 c0 69 84 7d ba 47 69 37 f0 10 61 8b c7 7c 30 cc 57 05 67 b1 62 a8 d1 4b 2b 8b 77 e2 98 45 f5 60 da 26 60 06 58 0e bc c0 a6 a8 9d a9 24 30 e4 b7 b9 f2 a2 19 4f 48 cc 8f 47 9c 21 2c 73 b4 9a d1 2c a4 7d 90 30 09 ea 91 e4 c1 23 1b 02 b3 95 c1 fc 87 15 43 8d 5a 5a 59 7c 25 f0 a2 e4 3d 75 88 b0 b0 bc 0b 72 ab ed 53 76 9d 7f fe 06 61 26 f3 16 df 0e b5 75 0f 61 70 b7 55 c4 78 af 6f Data Ascii: {5-$IJV5L#lXt~!1*KZw'gV5,kJPceQ>mgo{B-$OqVsxi}Gi7a\|0WgbK+wE`&`X$0OHG!,s,}0#CZZY\|%=urSva&uapUxo
2024-05-23 13:51:31 UTC	1412	IN	Data Raw: c1 42 93 f3 7e e0 9f 68 8d 17 ed b5 4b b9 d9 e3 f5 20 75 90 30 33 f0 14 e0 04 9b 5d 8b bc ae 64 87 31 e4 6f ec 6b 08 33 54 4f 21 cc a8 3f 31 79 30 39 8a 30 b3 55 ea 66 2b 61 59 af 6c 38 9c 6d 77 fd 33 20 f6 17 12 6f 06 de 6a 73 28 b9 20 2f 05 76 e4 82 61 13 ab 87 93 b4 0b f8 4d e0 8e 4c f8 9b ed 12 0c 7b 0d 87 79 d9 bf 77 b3 21 51 43 0c 84 2b 80 b5 c0 49 c0 19 c0 a9 84 71 af c7 50 bf 65 65 34 dc 80 f8 e5 36 01 71 c1 f5 cf 80 d8 5f 40 7c 82 30 61 e5 1c 9b 44 84 2a e2 0c ad 95 ed f3 e1 c1 2a e2 78 7d 06 78 2f 61 51 db ec d6 78 d9 90 38 48 d5 b0 db 75 21 fd 37 be 45 18 db 73 be 87 42 3d 84 c2 4e 81 f0 94 e4 d7 47 e1 50 30 0d cf 23 c0 57 92 eb e1 0c 0b 27 a9 cc e3 1b af f7 4a 41 3a ae ec e7 81 d7 da 24 4a 9c 46 d8 be 69 4f c1 ef 39 1e 71 7c fe 28 09 68 ed 26 Data Ascii: B~hK u03]d1ok3TO!?1y090Uf+aYl8mw3 ojs( /vaML{yw!QC+IqPee46q_@\|0aD**x}x/aQx8Hu!7EsB=NGP0#W'JA:$JFiO9q\|(h&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.5	50445	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	635	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:31 UTC	570	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:31 GMT Content-Length: 0 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885856e383a0f63-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.5	50448	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	893	OUT	GET /1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtdCwYBThsCQRYZ&rst=59195&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/&ptid=85a29931a2f9233e&af=err,xhr,stn,ins&be=6339&fe=51717&dc=10443&perf=%7B%22timing%22:%7B%22of%22:1716472224723,%22n%22:0,%22f%22:5278,%22dn%22:5279,%22dne%22:5279,%22c%22:5279,%22s%22:5279,%22ce%22:5956,%22rq%22:5956,%22rp%22:6340,%22rpe%22:6596,%22di%22:16781,%22ds%22:16781,%22de%22:16782,%22dc%22:57749,%22l%22:57757,%22le%22:58056%7D,%22navigation%22:%7B%7D%7D&fp=16473 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Thu, 23 May 2024 13:51:31 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-nyc-kteb1890050-NYC
2024-05-23 13:51:31 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.5	50442	23.20.26.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	659	OUT	GET /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
2024-05-23 13:51:31 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:55 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:31 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.5	50433	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 113 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	113	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 70 78 32 69 77 72 63 6d 66 78 77 7a 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 65 6e 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%22px2iwrcmfxwz%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.spglobal.com%2Fen%22%7D
2024-05-23 13:51:31 UTC	888	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 208 Connection: close date: Thu, 23 May 2024 13:51:31 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: cc1b5cb2b6a3d41e vary: Accept-Encoding x-envoy-upstream-service-time: 1 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 9929448596fb4faec2a082aabe759212.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: OR6GFWvK_Kqz-WMK1RSEDE4yiyeIwZOhj_YALoCwF-kjQv6XUQ7Cmg==
2024-05-23 13:51:31 UTC	208	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 70 78 32 69 77 72 63 6d 66 78 77 7a 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 6f 6e 55 55 49 44 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"embedId":"px2iwrcmfxwz","fallback":true,"targetingEvaluated":false,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":null,"driftEngageVerificationUUID":null,"driftEngageDomains":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.5	50434	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 660 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	660	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 35 31 30 37 34 38 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 38 31 39 38 31 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1510748,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472281981,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:31 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:31 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 42 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.5	50449	54.92.244.178	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	421	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
2024-05-23 13:51:31 UTC	135	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close
2024-05-23 13:51:31 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.5	50441	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:31 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftda91ca842bfb05d3bd15f4b65a4 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:31 GMT server: istio-envoy connection: close
2024-05-23 13:51:31 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.5	50455	104.18.37.212	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	829	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" visited_url: https://www.spglobal.com/marketintelligence/en/pages/product-login sec-ch-ua-mobile: ?0 Authorization: Bearer 1edd5669f11674524557 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json _zitok: ac746a0716b51e6738171716472254 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc"
2024-05-23 13:51:31 UTC	618	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: text/plain; charset=utf-8 Connection: close vary: Accept-Encoding apigw-requestid: YOh7oi1ZPHcEMew= x-powered-by: Express etag: W/"c7-8WNoh1JlsLqKW9xUzUMWQjmtMRc" access-control-allow-origin: * access-control-expose-headers: * x-cache: Miss from cloudfront via: 1.1 1721c5705940b20c9d951889ca1932b6.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: mDv2M5iaXsi5uPHIGmxNdn-bPhLEB-Ke_67bENsemipfXjB0ic2hag== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885856f6f028c39-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.5	50435	18.172.103.101	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	958	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsIxtuWmq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiag_3ixc79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
2024-05-23 13:51:31 UTC	414	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 23 May 2024 13:51:31 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fc3eb7fa4cd190aa982f25199966ad5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: DnES4_b4tdzpKXJq4xVaTr9tBh0rjb7jhwGDYKq6FDINOdjXf2GX0A== Age: 32573

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.5	50456	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	612	OUT	GET /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:31 UTC	634	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885856f59644205-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:31 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.5	50458	35.244.159.8	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	447	OUT	GET /w/1.0/sd?id=537073026&val=Zk9J0cMGPKkzOkJE-hOvl2TE HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=92256832-4583-414a-b868-62be597b4342\|1716472270
2024-05-23 13:51:31 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 13:51:31 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:31 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.5	50450	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:31 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:31 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.5	50457	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:31 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftc5702504c09bb9f7955c3adc4f4 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:31 GMT server: istio-envoy connection: close
2024-05-23 13:51:32 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.5	50460	204.16.247.177	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	421	OUT	GET /assets/libsyn-logo--black.png HTTP/1.1 Host: play.libsyn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
2024-05-23 13:51:32 UTC	352	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:32 GMT server: Apache/2.4.52 (Ubuntu) accept-ranges: bytes content-length: 27216 x-libsyn-host: (null) access-control-allow-origin: * expires: Thu, 1 Jan 1970 00:00:00 GMT pragma: no-cache cache-control: max-age=0, no-cache, no-store, must-revalidate content-type: image/png connection: close
2024-05-23 13:51:32 UTC	1108	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 88 00 00 02 8b 08 06 00 00 00 75 dd 79 14 00 00 01 85 69 43 43 50 49 43 43 20 70 72 6f 66 69 6c 65 00 00 28 91 7d 91 3d 48 c3 40 1c c5 5f 53 a5 45 2a 82 56 10 11 cc 50 9d 2c 88 8a 38 4a 15 8b 60 a1 b4 15 5a 75 30 b9 f4 43 68 d2 90 a4 b8 38 0a ae 05 07 3f 16 ab 0e 2e ce ba 3a b8 0a 82 e0 07 88 93 a3 93 a2 8b 94 f8 bf a4 d0 22 c6 83 e3 7e bc bb f7 b8 7b 07 08 f5 32 53 cd 8e 71 40 d5 2c 23 15 8f 89 d9 dc 8a 18 78 45 10 fd e8 85 88 61 89 99 7a 22 bd 90 81 e7 f8 ba 87 8f af 77 51 9e e5 7d ee cf d1 ad e4 4d 06 f8 44 e2 59 a6 1b 16 f1 3a f1 f4 a6 a5 73 de 27 0e b3 92 a4 10 9f 13 8f 19 74 41 e2 47 ae cb 2e bf 71 2e 3a 2c f0 cc b0 91 49 cd 11 87 89 c5 62 1b cb 6d cc 4a 86 4a 3c 45 1c 51 54 8d f2 85 ac cb 0a Data Ascii: PNGIHDRuyiCCPICC profile(}=H@_SE*VP,8J`Zu0Ch8?.:"~{2Sq@,#xEaz"wQ}MDY:s'tAG.q.:,IbmJJ<EQT
2024-05-23 13:51:32 UTC	1460	IN	Data Raw: 08 88 92 24 49 32 20 aa 06 ac 6e 48 a3 3b 97 3c bf 24 19 10 55 29 6f b2 09 4a e5 5b 36 41 e5 9d 92 04 c2 86 c1 50 92 01 51 d2 30 ec b4 09 2a ef a8 dc af 0d 89 92 0c 88 aa 3c 6f 66 d2 e2 cf 21 cf 23 49 06 44 45 73 43 6b 18 16 27 aa 89 db ed c5 e0 2c 83 a2 a4 ba 06 c4 8f d9 84 51 87 44 6f 6c 93 f3 a4 4d 50 79 ab 6c 02 49 75 0d 88 8f db 84 51 86 43 49 92 64 40 94 0c 8a 25 b3 dd 26 88 c2 f1 b8 40 b6 24 03 a2 2a ee 18 6f 62 a5 b1 db 26 88 ee a1 4b 92 0c 88 aa a4 b5 b9 9b 99 37 b5 c9 69 da 04 51 58 de 26 28 7a 6e 49 8a 3a 20 3e 61 13 46 cb 1b d8 64 b9 d7 79 1c 4e b4 09 24 d5 31 20 7e c3 26 8c 2e 14 1a 0c cb c1 0a 62 bc 0f 5a 9e 63 92 a2 0f 88 aa e7 0d 4e e3 f1 b4 4d 50 79 17 e0 92 51 92 0c 88 92 86 e8 16 9b c0 07 2e 49 32 20 6a d2 2e b5 09 a4 a1 3a db 50 28 a9 Data Ascii: $I2 nH;<$U)oJ[6APQ0<of!#IDEsCk',QDolMPylIuQCId@%&@$ob&K7iQX&(znI: >aFdyN$1 ~&.bZcNMPyQ.I2 j.:P(
2024-05-23 13:51:32 UTC	1424	IN	Data Raw: 5f b6 12 78 12 61 19 31 43 a0 26 11 10 a7 69 4d 88 eb 78 bd 19 66 40 6c e2 62 d9 b1 79 09 f0 21 dc 06 ac 8c 1e b5 09 a2 71 01 ae 87 18 83 7c 35 f0 b9 38 11 44 e5 d2 a0 55 41 ec 5a f8 59 32 82 17 70 13 61 4a bc aa 6f 5d 41 38 b4 c2 31 79 4e 54 89 cb 45 c0 17 59 38 ce d7 73 ad bc 56 27 1f a7 25 c7 cf 65 60 54 a5 90 d8 28 b8 a7 2f b8 de 8c 22 20 6e 36 20 46 e3 85 b9 70 a8 f2 98 23 8c f9 3d c3 a6 a8 bc f3 09 cb 91 ec c9 5d c4 0d 87 93 b7 92 30 39 e4 64 42 45 f0 8c e4 78 49 55 34 55 10 10 db 1a 45 40 fc 0a 2e 96 1d 93 ec 52 37 ce b2 2c 97 1b 0d 88 d1 d8 00 dc 83 e3 10 27 69 35 61 9b b7 13 08 55 41 c7 08 2a 46 3d 6f a1 3b 8a 80 e8 52 37 71 71 a9 9b f2 fa 8e 4d 10 8d cb 08 2b 06 58 ad 1f bd 74 ac e0 99 84 09 23 97 e0 b2 31 32 34 8e 7c 99 1b 80 6f d9 d6 51 71 a9 Data Ascii: _xa1C&iMxf@lby!q\|58DUAZY2paJo]A81yNTEY8sV'%e`T(/" n6 Fp#=]09dBExIU4UE@.R7,'i5aUA*F=o;R7qqM+Xt#124\|oQq
2024-05-23 13:51:32 UTC	1460	IN	Data Raw: bc 0c b8 78 c4 e1 30 b5 26 77 fd 76 c9 1b 49 95 0b 88 69 55 c9 71 88 71 b9 94 85 dd cc de 98 ca c7 6e e6 e1 07 c3 d4 3a 5a 6b 16 9e 46 98 65 3c 2e 6b 81 69 9c ac 22 a9 c2 01 11 03 62 94 2e f1 c6 54 09 87 80 5b 6c 86 a1 05 c3 15 84 7d ae d3 b1 85 6b 27 f8 9a 56 17 bc 46 ab 88 92 2a 17 10 bf 65 73 47 e5 07 68 8d 7f b2 7a 58 4e 69 f5 de 6e e6 c1 43 61 7a 8d 5c 43 98 89 fc 12 e0 1c fa 5f 9e 66 14 b2 3b ab 78 fe 49 1a aa 25 63 fc bf dc 51 25 2e e9 40 fc 47 70 a2 4a d9 3d 60 13 0c f4 d0 bc 94 b0 1f f2 d9 25 09 84 79 cb 08 8b d6 3f 5d f0 da 5d 38 5b d2 d0 2e 86 a3 96 ee a8 a2 78 5c 4c f1 38 44 ab 19 e5 62 37 73 6f d7 c2 6c 37 f2 79 c0 0b 93 f7 f8 ca 12 bf ee ec 92 37 9e 77 92 2a 17 10 d3 a7 d8 cf da e4 d1 05 44 bb 98 cb cd 6e e6 ee a1 30 db 8d 7c 29 a1 1b 79 dc Data Ascii: x0&wvIiUqqn:ZkFe<.ki"b.T[l}k'VFesGhzXNinCaz\C_f;xI%cQ%.@GpJ=`%y?]]8[.x\L8Db7sol7y7wDn0\|)y
2024-05-23 13:51:32 UTC	1460	IN	Data Raw: 44 98 b8 62 57 b3 64 40 2c 8d bb 3c 24 51 b2 9b b9 bc 56 01 7f 48 e8 52 ce 9a 4b 3e b6 d9 44 b5 bc 2f 6c c4 f1 88 92 01 b1 44 66 80 eb 3c 2c d1 b1 9b b9 7c 1a c0 8f 02 1f 06 ce ef f0 e7 76 00 87 6c ae da 59 4e f1 78 44 43 a2 64 40 9c 88 26 f0 37 1e 96 28 d9 cd 5c 1e 67 13 16 c3 be b6 cd 39 08 ad 0a e2 1c 8e 45 ac ab a2 f1 88 f9 87 0c 49 06 c4 b1 84 43 80 af 7a 58 a2 64 37 f3 e4 ad 00 de 01 fc 29 61 8b b5 5e 59 45 ac af 8d b4 1f 8f 28 c9 80 38 56 3b 81 ad 1e 9a e8 a4 dd cc de 60 26 e3 12 c2 f0 8d d7 f5 f1 b0 66 15 51 00 a7 e1 78 44 c9 80 58 12 7f e8 a1 89 d2 0f 52 bc ed 9e 37 99 d1 59 05 fc 26 f0 fb 43 78 70 9b b1 39 6b 7b 9f 38 8d f9 e3 11 0d 89 92 01 71 ac 5c ee 26 6e 3f ce fc 2a 84 5d cc a3 d3 00 ae 22 4c 42 b9 6a c0 73 11 5a 15 c4 59 e0 29 9b b5 b6 96 Data Ascii: DbWd@,<$QVHRK>D/lDf<,\|vlYNxDCd@&7(\g9EICzXd7)a^YE(8V;`&fQxDXR7Y&Cxp9k{8q\&n?*]"LBjsZY)
2024-05-23 13:51:32 UTC	40	IN	Data Raw: 00 2e 22 ec ce 51 e5 25 6f 62 9c a5 dc 6f 48 74 d9 1b 19 12 07 0b 82 b7 11 ba 83 9f 26 2c ed 42 87 c0 57 f4 75 af 01 b0 Data Ascii: ."Q%oboHt&,BWu
2024-05-23 13:51:32 UTC	1460	IN	Data Raw: df 8a 61 3f e1 6d 98 c7 ad 4e ef 81 c6 08 ff bd 66 3f ed 5a c5 80 d8 00 7e 97 b0 45 9b e2 f4 16 c2 78 c4 74 2c e2 1c f3 c7 4a 94 dd c6 24 1c 1e 5f b3 e3 56 54 45 3c 16 38 d9 b7 b4 ba d8 9b 84 a3 99 9a 84 c4 74 72 c8 62 83 e0 30 ba 8c fb 09 0d 83 1c 07 ab c0 e5 0b 9a cd c5 fe 03 65 fe a1 2f 06 6e f5 f8 47 ab ca 4b de bc 1a f8 05 2f 4a f3 42 e2 99 c0 91 be ad d5 c5 41 c2 5a 89 87 22 0b 89 0f 01 77 03 0f 00 f7 12 c6 58 1f 1a 62 10 1c 46 35 b0 df f6 35 f4 d5 3c 61 96 f9 35 2f 4d 2e 26 8a d7 35 84 c5 56 ab b2 e4 cd 12 e0 9d b8 1d 64 51 40 5c 81 13 56 d4 9b 39 c2 38 bb fd 15 0d 89 b7 03 f7 24 41 77 2b ad aa e0 a8 83 60 2f 93 41 7a 69 3b 83 9f 2a 1f 10 ed 66 8e df e7 81 37 50 8d 25 6f 62 5e c2 66 58 21 d1 09 2b ea 27 24 3e 4a e8 76 6d e6 02 62 99 82 62 5a 19 7c Data Ascii: a?mNf?Z~Ext,J$_VTE<8trb0e/nGK/JBAZ"wXbF55<a5/M.&5VdQ@\V98$Aw+`/Azi;*f7P%ob^fX!+'$>JvmbbZ\|
2024-05-23 13:51:32 UTC	924	IN	Data Raw: 5c fe 46 9a 27 b6 0a 62 7a a3 d9 02 fc 92 87 b7 16 da 55 11 f3 93 20 7e 0e b8 d6 e6 2a f5 b9 9b bf 29 ef 01 8e b3 69 4a e5 20 f3 c7 15 ee cf 05 bf 6c b5 70 d8 95 c2 39 ba 57 12 fb 75 29 70 31 61 4c f3 1e ac 26 4a 0b 02 55 6c 3f 53 03 f8 3a 70 85 87 b8 16 ce 4a 6e 5a f9 2a 62 fa 7e 78 17 2e 63 53 a5 6b 51 b6 92 78 02 b0 de e6 99 b8 6d 84 e5 69 76 d3 5b b5 70 58 95 c2 b9 31 fe 8c 37 00 ff 44 6b d9 1d c7 27 aa d6 62 1c 83 98 06 c4 ef 02 3f e1 21 ae 85 75 c0 27 0a 6e 34 d3 c0 6f 12 c6 1c a9 3a 21 31 3b ab 79 1f 61 bc a9 5d cd e3 97 56 0b 1f 48 c2 e1 c1 5c 18 ec 54 2d cc ff ba e8 ef f5 52 29 1c a7 53 80 d7 12 f6 75 7e 32 f7 90 69 45 51 b5 7e 6a 8f ed e7 5a ca fc 59 74 8a db b3 81 fb 08 63 89 e6 08 6b e9 bd 9f b0 36 a6 55 80 ea 5d 93 f2 e3 11 cf 05 96 d8 3c 63 Data Ascii: \F'bzU ~)iJ lp9Wu)p1aL&JUl?S:pJnZb~x.cSkQxmiv[pX17Dk'b?!u'n4o:!1;ya]VH\T-R)Su~2iEQ~jZYtck6U]<c
2024-05-23 13:51:32 UTC	512	IN	Data Raw: 86 37 be ca 9f cb e9 71 ac e3 a4 95 19 c2 8c e4 07 80 5d c9 cf 0e f3 bb 8a 9b 05 0f 44 fd 74 23 97 79 87 93 aa ba 08 78 1d 61 38 c4 63 c9 c3 2b d8 f5 ac 0a 04 a7 ba fc 9c cb 32 27 a6 ea e3 56 c2 80 7d ab 88 71 9d cf 75 9a b4 32 68 c5 b0 d3 32 35 56 0b 27 67 33 f0 11 60 4b ee 58 78 2d 52 69 4c d7 e8 67 6d 24 17 40 f7 67 ae 9f 23 69 cd 62 2f 5a f6 c6 27 f8 6a 9e cf 45 93 56 8e 22 ae 45 b4 17 5b 31 6c d2 7d 99 1a 27 9d 8c df 7a e0 25 84 b1 f1 bb 08 63 a5 e7 32 ef 65 af 49 2a cd 93 78 5d 7e d6 06 61 c9 9b 6d 1e fa da 71 c2 4a bc d7 ae fc a4 95 33 08 33 4a ab 1e 0c 47 59 31 b4 5a 58 3e 1f 24 6c 0d bb 13 c7 29 aa 04 a6 6b f8 33 1f 04 4e c2 25 6f ea e6 48 e6 2f 3b 41 ee 02 ec 13 7b 75 43 62 be 9a b8 17 38 86 d6 64 96 aa 05 c3 51 56 0c ad 16 96 d7 45 c0 2b 09 55 Data Ascii: 7q]Dt#yxa8c+2'V}qu2h25V'g3`KXx-RiLgm$@g#ib/Z'jEV"E[1l}'z%c2eI*x]~amqJ33JGY1ZX>$l)k3N%oH/;A{uCb8dQVE+U
2024-05-23 13:51:32 UTC	1460	IN	Data Raw: d7 32 0d e5 a9 bb 6e 3f 77 83 b0 aa bd 0b 67 d7 d3 d3 84 a5 6f da 75 35 7b b3 ad f6 35 2d bf 1d df 24 97 bf 49 97 ac d9 4a f1 de c7 56 0c 35 4c f7 03 9f 23 6c 10 b0 af e0 01 58 ea c9 74 cd 7f 7e 17 ce ae f7 d3 f7 be cc 05 b4 99 fb f0 c9 bb da 21 31 bf 1d 1f b4 2a 89 4b c7 f8 5a b6 01 f7 11 96 ac c9 77 27 67 ab 84 56 0c 35 2c 6b 80 cb 81 d7 00 cf 4a 1e 50 b6 63 65 51 03 3e 6d d7 f5 67 6f 10 d6 c7 7b c6 b7 42 2d cd 24 4f d9 87 71 56 73 ac d7 b6 fc 78 c4 95 c0 69 84 7d ba 47 69 37 f0 10 61 8b c7 7c 30 cc 57 05 67 b1 62 a8 d1 4b 2b 8b 77 e2 98 45 f5 60 da 26 60 06 58 0e bc c0 a6 a8 9d a9 24 30 e4 b7 b9 f2 a2 19 4f 48 cc 8f 47 9c 21 2c 73 b4 9a d1 2c a4 7d 90 30 09 ea 91 e4 c1 23 1b 02 b3 95 c1 fc 87 15 43 8d 5a 5a 59 7c 25 f0 a2 e4 3d 75 88 b0 b0 bc 0b 72 ab Data Ascii: 2n?wgou5{5-$IJV5L#lXt~!1*KZw'gV5,kJPceQ>mgo{B-$OqVsxi}Gi7a\|0WgbK+wE`&`X$0OHG!,s,}0#CZZY\|%=ur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.5	50464	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	843	OUT	GET /gw1/trw?aid=spglobal&trwv.uid=spglobal-1716472255215-3a36b654&trwv.vc=1&trwsa.sid=spglobal-1716472255217-b61b91f1&trwsb.cpv=2&ctzo=-04:00&uri=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&ma=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&pm=&viewedTypes=&rts=1716472289897 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	435	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Server: Jetty(9.4.45.v20220203) Content-Type: application/x-javascript;charset=utf-8 Cache-Control: no-cache Content-Length: 0 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!buuYOPbCYNB2eSSJMaUfYxEamMjeMmeg96QgTuS0D4Q7EjXx50jhsjuvxm0u/Wz/Nn4Oue5RsCS+pvU=; expires=Thu, 23-May-2024 14:26:32 GMT; path=/; Httponly; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.5	50465	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	697	OUT	GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A491-VNG-790%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.24843124122508198&rts=1716472289950 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/javascript;charset=utf-8 Cache-Control: no-cache Content-Length: 0 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!+5lJCI/eE/MbGH2JMaUfYxEamMjeMs+5jL80p0rgmHrxb/H17wky+Pg+SKSZpubk2nJtImVOY0vsD+w=; expires=Thu, 23-May-2024 14:26:32 GMT; path=/; Httponly; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.5	50463	23.20.26.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	659	OUT	GET /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"}]
2024-05-23 13:51:32 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 39e965e6e4d1 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:56 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:32 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.5	50459	142.250.186.98	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	758	OUT	GET /pixel?google_nid=clickagy&google_sc&google_cm&google_hm=Wms5SjBjTUdQS2t6T2tKRS1oT3ZsMlRF HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:32 UTC	656	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://aorta.clickagy.com/pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 Date: Thu, 23 May 2024 13:51:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 291 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:32 UTC	291	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 6f 72 74 61 2e 63 6c 69 63 6b 61 67 79 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 3f 63 68 3d 38 26 61 6d 70 3b 63 6d 3d 43 41 45 53 45 4e 42 37 36 2d 35 42 77 76 49 62 32 6c 44 6d 73 69 38 50 74 32 73 26 61 6d 70 3b 67 6f 6f 67 6c 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://aorta.clickagy.com/pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.5	50466	192.28.144.124	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	922	OUT	POST /webevents/visitWebPage?_mchNc=1716472290402&_mchCn=&_mchId=565-BDO-100&_mchTk=_mch-spglobal.com-1716472256002-46107&_mchHo=www.spglobal.com&_mchPo=&_mchRu=%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&_mchPc=https%3A&_mchVr=163&_mchEcid=01B1289A641C662C0A495C39%40AdobeOrg%3A%3A61426866424959655572994486576652237387&_mchHa=&_mchRe=&_mchQp= HTTP/1.1 Host: 565-bdo-100.mktoresp.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	241	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 23 May 2024 13:51:32 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 2 Connection: close X-Request-Id: 86372491-4a8c-4905-bae2-432b762631a6 Access-Control-Allow-Origin: *
2024-05-23 13:51:32 UTC	2	IN	Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.5	50462	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	6112	OUT	GET /ct?id=36498&url=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&sf=0&tpi=&ch=cheq4ppc&uvid=&tsf=0&tsfmi=&tsfu=&cb=1716472289501&hl=1&op=0&ag=300509663&rand=746718229522998980176122669166101862225065117717611698525827222092820873586156280681&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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 [TRUNCATED] Host: obs.fishrobotflower.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:32 UTC	244	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 23 May 2024 13:51:32 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close Transfer-Encoding: chunked
2024-05-23 13:51:32 UTC	935	IN	Data Raw: 64 30 38 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 33 36 34 39 38 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 33 36 34 39 38 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 33 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 Data Ascii: d08typeof __ctcg_ct_36498_exec === 'function' && __ctcg_ct_36498_exec({"tc":"37dfbd8ee84e00126be8c332e845839f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd661955264577090
2024-05-23 13:51:32 UTC	2358	IN	Data Raw: 36 32 39 61 38 33 65 33 62 65 32 35 63 66 62 31 65 64 35 38 37 35 32 38 39 61 66 62 35 66 30 34 39 35 66 37 30 35 35 39 31 36 66 66 65 39 65 31 32 32 66 64 36 35 63 34 66 38 35 36 66 64 62 65 33 63 61 65 36 65 66 37 36 30 65 36 30 66 38 64 34 31 38 39 65 63 34 35 39 33 30 38 32 64 66 36 61 39 39 34 36 30 33 65 33 61 36 34 30 34 32 38 30 65 34 32 31 36 61 64 65 30 38 61 36 38 64 35 30 30 62 35 34 30 34 66 35 31 33 35 65 61 65 32 31 64 61 63 63 34 34 31 35 39 61 30 66 63 61 36 65 65 61 65 36 36 64 30 66 30 66 36 65 30 39 34 62 61 66 33 65 33 34 31 32 34 32 31 66 64 34 37 38 36 64 62 34 35 37 63 64 37 30 36 33 63 34 66 63 35 36 39 34 66 37 30 37 32 66 37 37 63 61 65 37 30 31 64 63 35 65 39 63 33 36 36 38 38 37 65 38 39 36 33 65 38 66 33 36 65 39 62 65 64 35 Data Ascii: 629a83e3be25cfb1ed5875289afb5f0495f7055916ffe9e122fd65c4f856fdbe3cae6ef760e60f8d4189ec4593082df6a994603e3a6404280e4216ade08a68d500b5404f5135eae21dacc44159a0fca6eeae66d0f0f6e094baf3e3412421fd4786db457cd7063c4fc5694f7072f77cae701dc5e9c366887e8963e8f36e9bed5
2024-05-23 13:51:32 UTC	55	IN	Data Raw: 66 30 62 31 62 32 37 36 62 36 36 61 32 31 38 61 66 61 22 2c 22 70 68 66 22 3a 74 72 75 65 2c 22 70 68 66 69 22 3a 74 72 75 65 7d 2c 22 22 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: f0b1b276b66a218afa","phf":true,"phfi":true},"");0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.5	50461	142.250.185.198	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	1364	OUT	GET /activityi;dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1 Host: 11756258.fls.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:32 UTC	663	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:51:32 GMT Expires: Thu, 23 May 2024 13:51:32 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=21600 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 13:51:32 UTC	709	IN	Data Raw: 32 62 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 65 72 76 69 63 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 64 6d 2f 66 6c 73 2f 7a 2f 64 63 5f 70 72 65 3d 43 4c 6d 34 7a 4d 6e 31 6f 34 59 44 46 64 Data Ascii: 2be<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title></title></head><body style="background-color: transparent"><img src="https://adservice.google.com/ddm/fls/z/dc_pre=CLm4zMn1o4YDFd
2024-05-23 13:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.5	50467	142.250.186.166	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	523	OUT	POST /.well-known/attribution-reporting/debug/verbose HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive Content-Length: 140 Pragma: no-cache Cache-Control: no-cache Content-Type: application/json Origin: https://ad.doubleclick.net Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	140	OUT	Data Raw: 5b 7b 22 62 6f 64 79 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 5f 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 22 2c 22 74 72 69 67 67 65 72 5f 64 65 62 75 67 5f 6b 65 79 22 3a 22 31 31 34 36 33 34 35 36 36 34 39 38 33 38 35 31 30 32 35 31 22 7d 2c 22 74 79 70 65 22 3a 22 74 72 69 67 67 65 72 2d 6e 6f 2d 6d 61 74 63 68 69 6e 67 2d 73 6f 75 72 63 65 22 7d 5d Data Ascii: [{"body":{"attribution_destination":"https://spglobal.com","trigger_debug_key":"11463456649838510251"},"type":"trigger-no-matching-source"}]
2024-05-23 13:51:32 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 13:51:32 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.5	50472	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	611	OUT	OPTIONS /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: _vtok,_zitok,content-type,visited-url Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/marketintelligence/en/pages/product-login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	1089	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: GET,HEAD via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=zUGuMTxyL7iIpj..BuFTgx01G4xLYj.2QJ4LygFltrk-1716472292-1.0.1.1-vSpvMdUopI2HhIHAF3Oqturo6qYkhDHqLbyxSkDRNQXb41EMfOv4oML9sH1yEJKMyMG5vzxUezZbY39H7Rb.tA; path=/; expires=Thu, 23-May-24 14:21:32 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=65HY3lEhtQHBkzKCCfeHrMOPS.FnbgsOugku2.SqYU4-1716472292620-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 888585749d1817f9-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:32 UTC	13	IN	Data Raw: 38 0d 0a 47 45 54 2c 48 45 41 44 0d 0a Data Ascii: 8GET,HEAD
2024-05-23 13:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.5	50468	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift081f632417a95d95208a470e0a1 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:32 GMT server: istio-envoy connection: close
2024-05-23 13:51:32 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.5	50474	18.245.86.77	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	651	OUT	GET /include/1716472500000/n6k2yubr6fw7.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "7c4c8a7061350329f108e3f92f2b6acc" If-Modified-Since: Wed, 22 May 2024 13:34:06 GMT
2024-05-23 13:51:33 UTC	846	IN	HTTP/1.1 304 Not Modified Connection: close Server: istio-envoy Date: Thu, 23 May 2024 13:51:33 GMT Last-Modified: Wed, 22 May 2024 13:34:06 GMT ETag: "7c4c8a7061350329f108e3f92f2b6acc" x-amz-version-id: XYnjHdjtoHL3LHbO4aoVXXJc8JG50RFv access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 31 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 81cb77eb84eee291ebbd90b4c274c1c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P6 X-Amz-Cf-Id: Mfpzlu0AA7URSmLpNz1Y6bQZHqMtj6UNCg7SKOGsDwaAj_VjJFMJ_Q==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.5	50477	198.47.127.205	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	1025	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=f03aae80-b45c-40b7-8c7a-418b39367c97&r=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dpubmatic HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KRTBCOOKIE_391=22924-6252180897247519748&KRTB&23263-6252180897247519748&KRTB&23481-6252180897247519748; PugT=1716472274
2024-05-23 13:51:33 UTC	798	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 13:51:31 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: KRTBCOOKIE_377=6810-f03aae80-b45c-40b7-8c7a-418b39367c97&KRTB&22918-f03aae80-b45c-40b7-8c7a-418b39367c97&KRTB&22926-f03aae80-b45c-40b7-8c7a-418b39367c97&KRTB&23031-f03aae80-b45c-40b7-8c7a-418b39367c97; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 13:51:31 GMT; path=/ Set-Cookie: PugT=1716472291; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 13:51:31 GMT; path=/ Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 13:51:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.5	50482	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	563	OUT	OPTIONS /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type Origin: https://www.spglobal.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	1052	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for,x-ws-collect-type,Authorization,visitorId,_zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow allow: POST via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=m0WUXcrqOqFWfOW33mayI.iqHMvu98CmO_WJAsGFb8o-1716472292-1.0.1.1-0u8REq9Ae3mlSDDa2USznLwpUCjWbNahIjje_fDh_scRPz5i9NDH.Gzlof.lAnUu6tG35qR7S89GPiIn7IQWug; path=/; expires=Thu, 23-May-24 14:21:32 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=MR4dqv7FGlHws.mw3jV3Aiu8mOITpDOISv18Bg6Yza4-1716472292919-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 888585765e0f42bb-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:32 UTC	9	IN	Data Raw: 34 0d 0a 50 4f 53 54 0d 0a Data Ascii: 4POST
2024-05-23 13:51:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.5	50480	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	696	OUT	GET /gw1/msg?a=2&sid=spglobal-1716472255217-b61b91f1&aid=spglobal&ma=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&viewedTypes=&0.3340324958241343&rts=1716472290951 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	426	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/javascript;charset=utf-8 Cache-Control: no-cache Content-Length: 0 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!XoX9LjxyjGMHHNyJMaUfYxEamMjeMntsdQncEXYL4jD+DW3f2k3VyoUA1qm1YEsLLXCItoK59a4+rKE=; expires=Thu, 23-May-2024 14:26:32 GMT; path=/; Httponly; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.5	50476	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:33 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift3e224194e19a0fdba5d7b5efe7f cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:32 GMT server: istio-envoy connection: close
2024-05-23 13:51:33 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.5	50481	204.16.247.184	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	423	OUT	GET /api/episode/id/30072173 HTTP/1.1 Host: html5-player.libsyn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: libsyn-paywall-s=01143p20k1m69avblpangj90hs
2024-05-23 13:51:37 UTC	312	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:32 GMT server: Apache expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-libsyn-host: v74pl-03 access-control-allow-origin: * content-length: 1335 content-type: application/json connection: close
2024-05-23 13:51:37 UTC	1148	IN	Data Raw: 7b 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 5f 69 74 65 6d 22 3a 7b 22 69 74 65 6d 5f 62 6f 64 79 22 3a 22 3c 70 3e 41 6e 64 79 20 43 72 69 74 63 68 6c 6f 77 2c 20 53 26 61 6d 70 3b 50 20 47 6c 6f 62 61 6c 73 20 48 65 61 64 20 6f 66 20 45 4d 45 41 20 4e 65 77 73 2c 20 6a 6f 69 6e 73 20 74 68 65 20 70 6f 64 63 61 73 74 20 74 6f 20 68 65 6c 70 20 4e 61 74 68 61 6e 20 67 65 74 20 61 20 62 65 74 74 65 72 20 67 72 61 73 70 20 6f 6e 20 77 68 61 74 27 73 20 68 61 70 70 65 6e 69 6e 67 20 77 69 74 68 20 47 6c 6f 62 61 6c 20 4f 69 6c 20 4d 61 72 6b 65 74 73 2e 3c 5c 2f 70 3e 20 22 2c 22 69 74 65 6d 5f 69 64 22 3a 33 30 30 37 32 31 37 33 2c 22 69 74 65 6d 5f 74 69 74 6c 65 22 3a 22 4d 61 6b 69 6e 67 20 53 65 6e 73 65 20 6f 66 20 4f 69 6c 20 4d 61 Data Ascii: {"item_id":30072173,"_item":{"item_body":"<p>Andy Critchlow, S&P Globals Head of EMEA News, joins the podcast to help Nathan get a better grasp on what's happening with Global Oil Markets.<\/p> ","item_id":30072173,"item_title":"Making Sense of Oil Ma
2024-05-23 13:51:37 UTC	187	IN	Data Raw: 6f 77 5c 2f 30 61 54 4b 30 5a 4c 4a 34 68 61 77 73 78 47 6e 68 71 54 4a 65 34 22 2c 22 67 6f 6f 67 6c 65 5f 70 6f 64 63 61 73 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 70 6f 64 63 61 73 74 73 3f 66 65 65 64 3d 61 48 52 30 63 48 4d 36 4c 79 39 30 61 47 56 6c 63 33 4e 6c 62 6e 52 70 59 57 78 77 62 32 52 6a 59 58 4e 30 4c 6d 78 70 59 6e 4e 35 62 69 35 6a 62 32 30 76 63 6e 4e 7a 22 7d 7d 2c 22 72 65 6c 65 61 73 65 5f 64 61 74 65 22 3a 22 32 30 32 34 2d 30 32 2d 32 33 20 30 36 3a 30 30 3a 30 30 22 7d Data Ascii: ow\/0aTK0ZLJ4hawsxGnhqTJe4","google_podcast_url":"https:\/\/www.google.com\/podcasts?feed=aHR0cHM6Ly90aGVlc3NlbnRpYWxwb2RjYXN0LmxpYnN5bi5jb20vcnNz"}},"release_date":"2024-02-23 06:00:00"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.5	50483	172.64.155.119	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:33 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 888585770b0d43ed-EWR
2024-05-23 13:51:33 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.5	50484	54.92.244.178	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	421	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
2024-05-23 13:51:33 UTC	135	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:32 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close
2024-05-23 13:51:33 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.5	50475	35.214.149.91	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	934	OUT	GET /syncd?dsp_id=93&user_group=1&user_id=f03aae80-b45c-40b7-8c7a-418b39367c97&expires=30&redir=https%3A%2F%2Fmatch.adsrvr.org%2Ftrack%2Fcmf%2Fgeneric%3Fttd_pid%3Dbidswitch HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=9326d0b9-3a0d-4d01-bbb3-688e8f328e75; c=1716472267; tuuid_lu=1716472269
2024-05-23 13:51:33 UTC	248	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 13:51:33 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=bidswitch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.5	50479	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 624 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:32 UTC	624	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 70 78 32 69 77 72 63 6d 66 78 77 7a 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 6c 65 61 64 5f 69 64 3d 64 62 63 61 35 37 38 39 2d 33 36 63 30 2d 34 38 65 33 2d 39 33 64 35 2d 65 64 39 61 36 35 65 37 37 36 61 65 26 6d 61 72 6b 65 74 6f 5f 63 6f 6f 6b 69 65 3d 69 64 25 33 41 35 36 35 2d 42 44 4f 2d 31 30 30 25 32 36 74 6f 6b 65 6e 25 33 41 5f 6d 63 68 2d 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2d 31 37 31 36 34 37 32 32 35 36 30 30 32 2d 34 36 31 30 37 26 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 6f 25 32 32 25 33 41 25 32 32 69 64 25 33 41 35 36 35 2d 42 44 4f 2d 31 30 30 25 32 36 74 6f 6b 65 6e 25 Data Ascii: embed_id=px2iwrcmfxwz&client_id=f6zuizdyhxrm7r&consent_id=has_consent&lead_id=dbca5789-36c0-48e3-93d5-ed9a65e776ae&marketo_cookie=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&integrations=%7B%22marketo%22%3A%22id%3A565-BDO-100%26token%
2024-05-23 13:51:33 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Thu, 23 May 2024 13:51:33 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: fac6018adfaa5e60 vary: Accept-Encoding x-envoy-upstream-service-time: 188 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 e94fc0df161940e9096df2b4fe60d4f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: dDPDZ_W202er-6jdia2INhlpay45BiEiBNmJtypaco5NCvJfQgw2qw==
2024-05-23 13:51:33 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 30 31 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 38 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 6e Data Ascii: 4151{"location":{"ip":"8.46.123.175","city":"New York","subdivision":"New York","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":501,"postalCode":"10118","latitude":40.7123,"longitude":-74.0068},"tokenResult":{"accessToken
2024-05-23 13:51:33 UTC	1242	IN	Data Raw: 6c 73 65 2c 22 77 65 65 6b 64 61 79 73 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 74 68 72 65 61 64 65 64 57 69 74 68 50 72 65 76 69 6f 75 73 22 3a 66 61 6c 73 65 2c 22 63 61 6d 70 61 69 67 6e 52 65 65 6e 72 6f 6c 6c 6d 65 6e 74 54 79 70 65 22 3a 22 41 4c 57 41 59 53 22 2c 22 61 63 63 6f 75 6e 74 4c 69 73 74 49 64 73 22 3a 5b 5d 2c 22 65 78 63 6c 75 64 65 64 41 63 63 6f 75 6e 74 4c 69 73 74 49 64 73 22 3a 5b 5d 2c 22 6f 72 64 65 72 49 6e 50 6c 61 79 62 6f 6f 6b 22 3a 6e 75 6c 6c 2c 22 61 6c 6c 6f 77 54 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 22 3a 74 72 75 65 2c 22 69 73 44 72 69 66 74 56 69 64 65 6f 43 61 6d 70 61 69 67 6e 22 3a 66 61 6c 73 65 2c 22 75 70 64 61 74 65 64 41 74 22 3a 31 37 31 35 38 38 33 30 32 30 33 39 32 2c 22 69 73 45 78 70 65 72 69 6d Data Ascii: lse,"weekdaysOnly":false,"threadedWithPrevious":false,"campaignReenrollmentType":"ALWAYS","accountListIds":[],"excludedAccountListIds":[],"orderInPlaybook":null,"allowTeamAvailability":true,"isDriftVideoCampaign":false,"updatedAt":1715883020392,"isExperim
2024-05-23 13:51:33 UTC	16384	IN	Data Raw: 34 34 30 30 0d 0a 68 65 72 65 21 20 57 65 6c 63 6f 6d 65 20 74 6f 20 6f 75 72 20 73 69 74 65 2e 20 4f 75 72 20 74 65 61 6d 20 69 73 20 61 77 61 79 20 6e 6f 77 20 61 6e 64 20 75 6e 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 61 74 74 65 6e 64 20 74 6f 20 6d 65 73 73 61 67 65 73 2e 20 59 6f 75 20 63 61 6e 20 76 69 73 69 74 20 74 68 65 20 43 6f 6e 74 61 63 74 20 55 73 20 70 61 67 65 20 66 6f 72 20 66 75 72 74 68 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 61 77 61 79 4d 65 73 73 61 67 65 53 65 6e 64 65 72 49 64 22 3a 30 2c 22 65 6d 61 69 6c 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 61 77 61 79 49 6d 61 67 65 55 72 6c 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 4d 65 73 73 61 67 65 22 3a 6e 75 6c 6c 2c 22 63 6f 6e Data Ascii: 4400here! Welcome to our site. Our team is away now and unavailable to attend to messages. You can visit the Contact Us page for further information.","awayMessageSenderId":0,"emailCaptureMessage":null,"awayImageUrl":null,"confirmationMessage":null,"con
2024-05-23 13:51:33 UTC	1032	IN	Data Raw: 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 49 64 22 3a 39 30 35 30 31 33 7d 2c 7b 22 69 64 22 3a 39 34 37 33 38 38 2c 22 6d 65 6d 62 65 72 73 22 3a 5b 32 31 37 34 35 38 39 2c 32 31 38 35 38 35 31 2c 32 32 32 39 39 32 35 2c 35 31 31 31 31 38 32 2c 35 31 35 32 30 31 36 2c 35 31 37 36 38 39 39 2c 35 31 37 37 32 35 38 2c 35 32 38 34 32 37 35 5d 2c 22 61 75 74 6f 4f 66 66 6c 69 6e 65 22 3a 74 72 75 65 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 4d 6f 64 65 22 3a 22 41 4c 57 41 59 53 5f 4f 4e 4c 49 4e 45 22 2c 22 74 65 61 6d 41 76 61 69 6c 61 62 69 6c 69 74 79 49 64 22 3a 39 30 35 35 35 38 7d 2c 7b 22 69 64 22 3a 39 35 33 38 38 33 2c 22 6d 65 6d 62 65 72 73 22 3a 5b 35 31 34 30 39 30 34 5d 2c 22 61 75 74 6f 4f 66 66 6c 69 6e 65 22 3a 74 72 Data Ascii: ,"teamAvailabilityId":905013},{"id":947388,"members":[2174589,2185851,2229925,5111182,5152016,5176899,5177258,5284275],"autoOffline":true,"teamAvailabilityMode":"ALWAYS_ONLINE","teamAvailabilityId":905558},{"id":953883,"members":[5140904],"autoOffline":tr
2024-05-23 13:51:33 UTC	7655	IN	Data Raw: 31 64 64 66 0d 0a 30 30 22 2c 22 64 61 79 4f 66 57 65 65 6b 22 3a 22 57 45 45 4b 44 41 59 53 22 7d 2c 7b 22 6f 70 65 6e 73 22 3a 22 31 39 3a 30 30 3a 30 30 22 2c 22 63 6c 6f 73 65 73 22 3a 22 32 33 3a 35 39 3a 30 30 22 2c 22 64 61 79 4f 66 57 65 65 6b 22 3a 22 57 45 45 4b 44 41 59 53 22 7d 2c 7b 22 6f 70 65 6e 73 22 3a 22 30 30 3a 30 30 3a 30 30 22 2c 22 63 6c 6f 73 65 73 22 3a 22 30 32 3a 30 30 3a 30 30 22 2c 22 64 61 79 4f 66 57 65 65 6b 22 3a 22 57 45 45 4b 44 41 59 53 22 7d 5d 7d 2c 7b 22 69 64 22 3a 39 30 32 32 35 36 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 55 53 2f 4d 6f 75 6e 74 61 69 6e 22 2c 22 6f 70 65 6e 48 6f 75 72 73 22 3a 5b 7b 22 6f 70 65 6e 73 22 3a 22 30 31 3a 30 30 3a 30 30 22 2c 22 63 6c 6f 73 65 73 22 3a 22 31 30 3a 30 30 3a 30 30 22 2c Data Ascii: 1ddf00","dayOfWeek":"WEEKDAYS"},{"opens":"19:00:00","closes":"23:59:00","dayOfWeek":"WEEKDAYS"},{"opens":"00:00:00","closes":"02:00:00","dayOfWeek":"WEEKDAYS"}]},{"id":902256,"timezone":"US/Mountain","openHours":[{"opens":"01:00:00","closes":"10:00:00",
2024-05-23 13:51:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.5	50485	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:32 UTC	987	OUT	GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
2024-05-23 13:51:33 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 39e965e6e4d1 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:57 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:33 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.5	50478	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 571 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:33 UTC	571	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 70 78 32 69 77 72 63 6d 66 78 77 7a 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 37 35 31 32 39 66 38 66 2d 64 63 64 34 2d 34 36 35 32 2d 61 66 32 63 2d 38 65 30 35 34 62 36 65 36 39 32 36 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 39 63 36 33 35 32 35 33 2d 36 64 34 33 2d 34 30 64 65 2d 39 66 32 36 2d 64 30 65 32 31 35 64 31 33 34 37 39 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%22px2iwrcmfxwz%22%2C%22sessionId%22%3A%2275129f8f-dcd4-4652-af2c-8e054b6e6926%22%2C%22instanceId%22%3A%229c635253-6d43-40de-9f26-d0e215d13479%22%2C%22context%22%3A%7B%22url%22%3A
2024-05-23 13:51:33 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:33 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: ef175cd5503449ab vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 15 server: istio-envoy connection: close
2024-05-23 13:51:33 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.5	50486	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	1059	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/javascript visited-url: https://www.spglobal.com/marketintelligence/en/pages/product-login _vtok: OC40Ni4xMjMuMTc1 _zitok: ac746a0716b51e6738171716472254 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/marketintelligence/en/pages/product-login Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:33 UTC	656	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:33 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888585797b42436c-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:33 UTC	713	IN	Data Raw: 31 32 30 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 1209(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-05-23 13:51:33 UTC	1369	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e Data Ascii: rentNode.insertBefore(d,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...
2024-05-23 13:51:33 UTC	1369	IN	Data Raw: 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 70 2b 22 53 65 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 Data Ascii: onStorage.setItem(p+"Session",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.ha
2024-05-23 13:51:33 UTC	1174	IN	Data Raw: 28 6e 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 65 29 29 3a 74 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 Data Ascii: (n),clearInterval(e)):t++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystat
2024-05-23 13:51:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.5	50488	104.244.42.136	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	407	OUT	GET /settings?session_id=394edb16d9da2cff3adda4f9a379805c1d7ddc11 HTTP/1.1 Host: syndication.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:33 UTC	468	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:33 GMT perf: 7402827104 vary: Origin server: tsa_b content-type: application/json; charset=utf-8 cache-control: must-revalidate, max-age=600 last-modified: Thu, 23 May 2024 13:51:33 GMT content-length: 870 x-transaction-id: 906bb97ff4686972 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: 2e2931e1320b0a1806210aef6426a82054b7a04f391dcd43558017b4176a0325 connection: close
2024-05-23 13:51:33 UTC	870	IN	Data Raw: 7b 22 73 68 6f 75 6c 64 5f 6f 62 74 61 69 6e 5f 63 6f 6f 6b 69 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 74 66 77 5f 74 69 6d 65 6c 69 6e 65 5f 6c 69 73 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 5b 5d 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 66 6f 6c 6c 6f 77 65 72 5f 63 6f 75 6e 74 5f 73 75 6e 73 65 74 22 3a 7b 22 62 75 63 6b 65 74 22 3a 74 72 75 65 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 74 77 65 65 74 5f 65 64 69 74 5f 62 61 63 6b 65 6e 64 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 74 66 77 5f 72 65 66 73 72 63 5f 73 65 73 73 69 6f 6e 22 3a 7b 22 62 75 63 6b 65 74 22 3a 22 6f 6e 22 2c 22 76 65 72 73 Data Ascii: {"should_obtain_cookie_consent":false,"features":{"tfw_timeline_list":{"bucket":[],"version":null},"tfw_follower_count_sunset":{"bucket":true,"version":null},"tfw_tweet_edit_backend":{"bucket":"on","version":null},"tfw_refsrc_session":{"bucket":"on","vers

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.5	50487	216.58.206.66	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	1155	OUT	GET /ddm/fls/z/dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://11756258.fls.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:33 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:51:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.5	50489	104.16.117.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	951	OUT	POST /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive Content-Length: 76 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json sec-ch-ua-mobile: ?0 Authorization: bearer e8a59e45996cead00c71c0093304a0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:33 UTC	76	OUT	Data Raw: 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 2f 65 6e 2f 70 61 67 65 73 2f 70 72 6f 64 75 63 74 2d 6c 6f 67 69 6e 22 7d Data Ascii: {"url":"https://www.spglobal.com/marketintelligence/en/pages/product-login"}
2024-05-23 13:51:33 UTC	684	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:33 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com x-robots-tag: noindex, nofollow etag: W/"e00-UQmDY9qLYZ5Nt6UCwN8iJWYEwus" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885857b39360f75-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:33 UTC	685	IN	Data Raw: 65 30 30 0d 0a 5b 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 66 66 65 33 66 32 63 33 2d 65 30 66 63 2d 34 32 62 30 2d 61 61 61 32 2d 62 66 32 34 63 31 39 63 65 65 34 62 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 64 65 76 2e 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 2f 65 6e 2f 63 61 6d 70 61 69 67 6e 73 2f 63 6f 6d 6d 65 72 63 69 61 6c 2d 6c 65 6e 64 69 6e 67 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 72 65 71 75 65 73 74 46 6f 72 6d 5f 65 6d 62 65 64 64 65 64 5f 32 27 5d 22 2c 22 66 6f 72 6d 49 66 72 61 6d 65 57 72 61 70 70 65 72 53 65 6c 65 63 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 Data Ascii: e00[{"inputs":null,"formId":"ffe3f2c3-e0fc-42b0-aaa2-bf24c19cee4b","url":"https://dev.www.spglobal.com/marketintelligence/en/campaigns/commercial-lending","selector":"form[id='requestForm_embedded_2']","formIframeWrapperSelector":null,"isManual":true,"s
2024-05-23 13:51:33 UTC	1369	IN	Data Raw: 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 6e 70 75 74 73 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 49 64 22 3a 22 34 66 66 65 65 64 38 66 2d 31 63 30 63 2d 34 39 30 37 2d 62 36 37 33 2d 66 30 62 62 33 38 31 39 65 36 36 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 61 67 65 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2f 63 6f 6e 74 65 6e 74 2f 73 70 67 6c 6f 62 61 6c 2f 63 6f 72 70 6f 72 61 74 65 2f 75 73 2f 65 6e 2d 74 65 73 74 2f 66 6f 72 6d 73 2d 74 65 73 74 69 6e 67 2e 68 74 6d 6c 22 2c 22 73 65 6c 65 63 74 6f 72 22 3a 22 66 6f 72 6d 5b 69 64 3d 27 67 75 69 64 65 43 6f 6e 74 61 69 6e 65 72 46 6f 72 6d 27 5d 22 2c 22 66 6f 72 6d 49 66 Data Ascii: formLoadTimeout":4000},"isDevelopmentMode":false},{"inputs":null,"formId":"4ffeed8f-1c0c-4907-b673-f0bb3819e66e","url":"https://stage.spglobal.com/content/spglobal/corporate/us/en-test/forms-testing.html","selector":"form[id='guideContainerForm']","formIf
2024-05-23 13:51:33 UTC	1369	IN	Data Raw: 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 43 69 74 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 43 69 74 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 69 65 6c 64 22 3a 22 63 6f 6e 74 61 63 74 43 69 74 79 22 2c 22 61 74 74 72 53 65 6c 65 63 74 6f 72 22 3a 22 6e 61 6d 65 22 7d 2c 7b 22 63 6f 6d 70 6c 65 74 65 22 3a 66 61 6c 73 65 2c 22 6e 61 6d 65 41 74 74 72 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 63 6f 6d 70 6c 69 61 6e 63 65 43 6f 75 6e 74 72 79 22 2c 22 65 6c 65 6d 65 6e 74 54 79 70 65 22 3a 22 69 6e 70 75 74 22 2c 22 6d 61 70 70 65 64 46 Data Ascii: or":"name"},{"complete":false,"nameAttr":"City","displayName":"City","elementType":"input","mappedField":"contactCity","attrSelector":"name"},{"complete":false,"nameAttr":"complianceCountry","displayName":"complianceCountry","elementType":"input","mappedF
2024-05-23 13:51:33 UTC	168	IN	Data Raw: 74 6f 72 22 3a 6e 75 6c 6c 2c 22 69 73 4d 61 6e 75 61 6c 22 3a 74 72 75 65 2c 22 73 61 6d 65 4d 61 70 70 69 6e 67 4f 74 68 65 72 50 61 67 65 73 22 3a 74 72 75 65 2c 22 61 64 64 69 74 69 6f 6e 61 6c 53 65 74 74 69 6e 67 73 22 3a 7b 22 6e 6f 46 6f 63 75 73 22 3a 66 61 6c 73 65 2c 22 6e 6f 45 6d 61 69 6c 56 65 72 69 66 79 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 4c 6f 61 64 54 69 6d 65 6f 75 74 22 3a 34 30 30 30 7d 2c 22 69 73 44 65 76 65 6c 6f 70 6d 65 6e 74 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 5d 0d 0a Data Ascii: tor":null,"isManual":true,"sameMappingOtherPages":true,"additionalSettings":{"noFocus":false,"noEmailVerify":false,"formLoadTimeout":4000},"isDevelopmentMode":false}]
2024-05-23 13:51:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.5	50490	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 4710 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:33 UTC	4710	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 33 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e845839f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:34 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:33 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.5	50491	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	1034	OUT	GET /track/cmf/generic?ttd_pid=pubmatic HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAEoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB
2024-05-23 13:51:33 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:33 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAIoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB; expires=Fri, 23 May 2025 13:51:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:33 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.5	50493	52.54.153.98	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	546	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&c=ihs&d=378&a=consume&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289418&z=0.25825000654887664 HTTP/1.1 Host: a.idio.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:33 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:33 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:33 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.5	50492	23.20.26.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	751	OUT	GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
2024-05-23 13:51:34 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:33 GMT Content-Type: image/gif Content-Length: 43 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: f77f875056f2 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:57 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.5	50498	52.54.153.98	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	609	OUT	GET /ia.gif?r=&s=444b955e-5006-4b25-bc94-c724f251faf8&x%5Bidio_visitor_id%5D%5B0%5D=39aea97a-c32d-435c-81f5-0e4304aa3679&x%5Bmarketo_id%5D%5B0%5D=_mch-spglobal.com-1716472256002-46107&c=ihs&d=378&a=identify&u=https%3A%2F%2Fwww.spglobal.com%2Fen&l=1716472289421&z=0.8996201111484932 HTTP/1.1 Host: a.idio.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:34 UTC	208	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 13:51:33 GMT Server: nginx Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Length: 26 Connection: Close
2024-05-23 13:51:34 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.5	50494	15.197.193.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	1035	OUT	GET /track/cmf/generic?ttd_pid=bidswitch HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAEoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB
2024-05-23 13:51:33 UTC	652	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:33 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAIoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB; expires=Fri, 23 May 2025 13:51:33 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:33 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.5	50504	34.36.216.150	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	463	OUT	GET /dmp/pixelSync?nid=103&gdpr=&gdpr_consent=&gdpr=null HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f#1716472280674
2024-05-23 13:51:34 UTC	1190	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f#1716472280674; Domain=.sitescout.com; Expires=Fri, 23-May-2025 13:51:33 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI1OSI6MTcxNjQ3MjI5Mzk1NywiMzkiOjE3MTY0NzIyOTM5NTcsIjciOjE3MTY0NzIyOTM5NTd9; Domain=.sitescout.com; Expires=Sat, 22-Jun-2024 13:51:33 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26partner_url%3Dhttps%253A%252F%252Fads.stickyadstv.com%252Fuser-registering%253FdataProviderId%253D721%2526userId%253D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Thu, 23 May 2024 13:51:33 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.5	50502	172.64.150.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	375	OUT	GET /unified/v1/master/getSubscriptions HTTP/1.1 Host: js.zi-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:34 UTC	555	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 13:51:34 GMT Content-Type: application/json; charset=utf-8 Content-Length: 34 Connection: close apigw-requestid: YOh7-gz9PHcEMTg= x-powered-by: Express etag: W/"22-rSbFy3+q7HC5w4g2QQFk/dDLFDo" x-cache: Error from cloudfront via: 1.1 079cd4553da15b2329bffae6abe6157e.cloudfront.net (CloudFront) x-amz-cf-pop: JFK50-P6 x-amz-cf-id: Ruo7JLBtxYM0Suloql-rakBbjl1hX2PtEWkmpvw5Dv7uHIBcDW-gBA== CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8885857d3b5d558f-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:34 UTC	34	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 61 75 74 68 65 6e 74 69 63 61 74 65 22 7d Data Ascii: {"error":"Failed to authenticate"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.5	50501	142.250.186.38	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	1002	OUT	GET /activity;register_conversion=1;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=161265342.1716472243;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login? HTTP/1.1 Host: ad.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ar_debug=1; IDE=AHWqTUniK2JaNiC9bC6QbwlwzNvDnWMK2HdOcCDvLbnEa2qEPoV0YeCo8iX5whPt
2024-05-23 13:51:34 UTC	3948	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:51:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Attribution-Reporting-Register-Trigger: {"aggregatable_deduplication_keys":[{"deduplication_key":"5473459969502921408"}],"aggregatable_trigger_data":[{"filters":[{"14":["12593915"]}],"key_piece":"0xc259d5b69d511d38","source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]},{"key_piece":"0x4669cf00f9937fab","not_filters":{"14":["12593915"]},"source_keys":["12","13","14","15","16","17","18","19","20","21","628539424","628539425","628539426","628539427","628678596","628678597","628678598","628678599"]}],"aggregatable_values":{"12":65,"13":65,"14":65,"15":6356,"16":65,"17":65,"18":6356,"19":65,"20":65,"21":6356,"628539424":81,"628539425":81,"628539426":81,"628539427":7946,"628678596":32,"628678597":32,"628678598":32,"628678599":3177},"debug_key":"11463456649838510251","debug_reporting":true,"event_trigger_data":[{"deduplication_key":"5473459969502921408","filters":[{"14":["12593915"],"source_type":["event"]},{ [TRUNCATED] Content-Type: image/png Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: ar_debug=1; expires=Sat, 22-Jun-2024 13:51:34 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.5	50505	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:33 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 2000 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:33 UTC	2000	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 33 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e845839f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:34 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:34 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.5	50497	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:34 UTC	1108	OUT	GET /core?d=1&embedId=n6k2yubr6fw7&eId=n6k2yubr6fw7&region=US&forceShow=false&skipCampaigns=false&sessionId=3bc6b5a1-dc2d-4c37-9337-988f2e03ceb7&sessionStarted=1716472291.903&campaignRefreshToken=8dfc3293-9d41-4ca1-89ea-bcca389fe9e6&hideController=false&pageLoadStartTime=1716472282236&mode=CHAT&driftEnableLog=false&loadStrategy=EAGER&secureIframe=false&u=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:34 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:34 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 3bbd9c639a192694d597e09ea3006bce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: VogEouQFaW35xAGhC2kdgGXWKzLSnfWnH8upbxFpGT2jWc9bAx7IMw==
2024-05-23 13:51:34 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.5	50496	3.160.212.44	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:34 UTC	752	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1716472282236 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:34 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Wed, 22 May 2024 13:33:49 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: i.vF5EvXCF8G43FXFwL_TDmTZbh53d6C Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 22 Date: Thu, 23 May 2024 13:51:34 GMT Cache-Control: no-cache ETag: "994158c9401b7ef401678606fe49ef49" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 bcaeff16a86c397dc599d5442bef82b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: MXP53-P3 X-Amz-Cf-Id: nOEvht1JF-wh11gRL4J4F8PVuNRJhEvVV6VCZXqa1nzyjcZXxDUqfg==
2024-05-23 13:51:34 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.5	50503	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:34 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:34 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 458 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift53e32244a669f2fe91176163aad cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 13:51:34 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 efb576f3260fb935bd57cce721b78428.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: J6WAFtEz9t2lAgyxP_dNzk3DUqgLHP5aye5G14BaT8j6yVfIeC5lOg==
2024-05-23 13:51:34 UTC	458	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.5	50507	34.195.15.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:34 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0 HTTP/1.1 Host: 1334519-19.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: jn4gj4/jqh35CAnzVZ9Rag== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:34 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:34 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.5	50506	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:34 UTC	2264	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obs.fishrobotflower.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:34 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 23 May 2024 13:51:34 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-05-23 13:51:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.5	50508	23.20.26.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:34 UTC	751	OUT	GET /pixel.gif?ch=8&cm=CAESENB76-5BwvIb2lDmsi8Pt2s&google_cver=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
2024-05-23 13:51:34 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:34 GMT Content-Type: image/gif Content-Length: 43 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:58 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.5	50509	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:35 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drifta7dc3784aecb2041e20ea7664a4 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 2 date: Thu, 23 May 2024 13:51:34 GMT server: istio-envoy connection: close
2024-05-23 13:51:35 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.5	50510	54.77.98.227	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	850	OUT	GET /qmap?c=1389&tp=STSC&tpid=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26partner_url%3Dhttps%253A%252F%252Fads.stickyadstv.com%252Fuser-registering%253FdataProviderId%253D721%2526userId%253D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=ead1c4978695489dadb5610506d96b01
2024-05-23 13:51:35 UTC	572	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:35 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.6.95 Location: https://pixel.tapad.com/idsync/ex/push?partner_id=2499&partner_device_id=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&partner_url=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D721%26userId%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26gdpr%3D0%26gdpr_consent%3D Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.5	50511	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	608	OUT	GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472293515 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:35 UTC	453	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:35 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/json;charset=utf-8 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-Length: 48 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!xA5LvY9lg7tC/XmJMaUfYxEamMjeMpuJVgA8lsqrE7VTJ/NdlNkBPkGjB0HLpJrQcc1cWfGzIuJyf7w=; expires=Thu, 23-May-2024 14:26:35 GMT; path=/; Httponly; Secure
2024-05-23 13:51:35 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 7b 22 73 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 22 7d Data Ascii: {"code":200,"body":{"segments":[]},"content":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.5	50514	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	1175	OUT	POST /1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtEBAUBRRoTQAkFQlQQGQkNA19bTVMVEU8%3D&rst=12556&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/pages/product-login&ptid=1ba195abfb1ffda3&af=err,xhr,stn,ins&be=649&fe=11856&dc=6414&perf=%7B%22timing%22:%7B%22of%22:1716472281024,%22n%22:0,%22f%22:3,%22dn%22:23,%22dne%22:23,%22c%22:23,%22s%22:23,%22ce%22:336,%22rq%22:336,%22rp%22:649,%22rpe%22:1212,%22di%22:7055,%22ds%22:7055,%22de%22:7063,%22dc%22:12474,%22l%22:12476,%22le%22:12505%7D,%22navigation%22:%7B%7D%7D&fp=3920&fcp=3920 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:35 UTC	437	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Thu, 23 May 2024 13:51:35 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: https://www.spglobal.com access-control-expose-headers: Date timing-allow-origin: https://www.spglobal.com x-served-by: cache-ewr18122-EWR
2024-05-23 13:51:35 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 31 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 31 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 54 67 33 4e 7a 45 32 4e 58 78 43 55 6b 39 58 55 30 56 53 66 45 46 51 55 45 78 4a 51 30 46 55 53 55 39 4f 66 44 45 78 4d 6a 63 30 4d 44 49 78 4e 67 22 7d 5d 7d 7d Data Ascii: {"stn":1,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":1,"sts":0,"app":{"agents":[{"entityGuid":"MTg3NzE2NXxCUk9XU0VSfEFQUExJQ0FUSU9OfDExMjc0MDIxNg"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.5	50515	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	973	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 262 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
2024-05-23 13:51:35 UTC	262	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 32 34 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 32 36 30 38 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 25 32 46 65 6e 25 32 46 70 61 67 65 73 25 32 46 70 72 6f 64 75 63 74 2d 6c 6f 67 69 6e 26 61 63 63 6f 75 6e 74 5f 69 64 3d 6d 78 32 38 6f 36 32 75 7a 71 62 62 66 26 6c 69 73 74 3d 39 35 76 35 32 67 32 78 76 63 36 71 67 26 63 68 3d 32 37 38 26 63 6d 3d 61 63 37 34 36 61 30 37 31 36 62 35 31 65 36 37 33 38 31 37 31 37 31 36 34 37 32 32 35 34 26 63 Data Ascii: ws=1&lang=en-US&cookies=true&tz=240&screen_res=1280x1024&browser_res=1280x2608&ref=&url=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&account_id=mx28o62uzqbbf&list=95v52g2xvc6qg&ch=278&cm=ac746a0716b51e6738171716472254&c
2024-05-23 13:51:35 UTC	744	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:35 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: a595a19e5c67 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://www.spglobal.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:29:59 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:35 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.5	50517	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	635	OUT	GET /pixel/62b46da73ec962008fbce029/?iszitag=true HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:35 UTC	570	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:35 GMT Content-Length: 0 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888585870c87430a-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.5	50519	104.16.118.43	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	612	OUT	GET /formcomplete-v2/forms HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=nE9ZsF2oacPJMwUDWn_rOc4kMG4H3qmmQU4OJnG8mSE-1716472246-1.0.1.1-7SIFUK_AZxpw3U71ScFk1Q0D8sFPox828FH8W50lwQU7MGq76_TUGozayGhKVnr_ZRpHgPAhd2QFSPHpm4d85A; _cfuvid=9Bc0Tvu_iAWl1W_lY9MDY2gPpn7WCGe.cpuLgfFhX9Q-1716472246445-0.0.1.1-604800000
2024-05-23 13:51:35 UTC	634	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 13:51:35 GMT Content-Type: application/json; charset=utf-8 Content-Length: 2 Connection: close x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,Authorization, visitorId, _zitok access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow etag: W/"2-vyGp6PvFo4RvsFtPoIWeCReyIC8" via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888585873ede7ca5-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 13:51:35 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.5	50523	54.159.240.171	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	590	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:35 UTC	422	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:35 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://www.spglobal.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-05-23 13:51:35 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.5	50512	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:35 UTC	158	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 36 6b 32 79 75 62 72 36 66 77 37 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 25 32 46 6d 61 72 6b 65 74 69 6e 74 65 6c 6c 69 67 65 6e 63 65 25 32 46 65 6e 25 32 46 70 61 67 65 73 25 32 46 70 72 6f 64 75 63 74 2d 6c 6f 67 69 6e 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%22n6k2yubr6fw7%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login%22%7D
2024-05-23 13:51:35 UTC	888	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 208 Connection: close date: Thu, 23 May 2024 13:51:35 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 39efc3e18f5cdaed vary: Accept-Encoding x-envoy-upstream-service-time: 3 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 0a4b38fa4b7e435c9572519905d42268.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: -CGdroUHr181TTg5uNbu-YzSwFoY41jB7qsZaoQ7zpuuJTRF6wcCJg==
2024-05-23 13:51:35 UTC	208	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 6e 36 6b 32 79 75 62 72 36 66 77 37 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 52 45 51 55 49 52 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 6f 6e 55 55 49 44 22 3a 6e 75 6c 6c 2c 22 64 72 69 66 74 45 6e 67 61 67 65 44 6f 6d 61 69 6e 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"embedId":"n6k2yubr6fw7","fallback":true,"targetingEvaluated":false,"signedIdentityStatus":"REQUIRED","demandBaseToken":null,"cookieDomains":null,"driftEngageVerificationUUID":null,"driftEngageDomains":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.5	50516	3.33.220.150	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	1136	OUT	GET /track/up?adv=9o593qw&ref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login&upid=b2bmdj2&upv=1.1.0&paapi=1 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFIAIoAzILCJqD_eLFzv08EAVCDyINCAESCQoFdGllcjMQAVoHOW81OTNxd2AB
2024-05-23 13:51:35 UTC	653	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:35 GMT Content-Type: text/html Content-Length: 382 Connection: close server: Kestrel set-cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; expires=Fri, 23 May 2025 13:51:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiu4teUxs79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..; expires=Fri, 23 May 2025 13:51:35 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 13:51:35 UTC	382	IN	Data Raw: 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 61 64 73 72 76 72 2e 6f 72 67 2f 75 6e 69 76 65 72 73 61 6c 5f 70 69 78 65 6c 2e 31 2e 31 2e 30 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 75 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 43 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <html><head> <script type="text/javascript" src="https://js.adsrvr.org/universal_pixel.1.1.0.js"></script></head><body> <div id="universalPixelContainer"> <script type="text/javascript"> (function(global) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.5	50521	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:35 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:35 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.5	50520	216.58.206.34	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	907	OUT	GET /ddm/fls/z/dc_pre=CLm4zMn1o4YDFdrMOwIdnnUAPw;src=11756258;type=onsite;cat=spsitewd;ord=7966436102231;npa=0;auiddc=;ps=1;pcor=190497103;uaa=x86;uab=64;uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;gtm=45fe45k0z8813622785za201zb813622785;gcd=13l3l3l3l1;dma=0;epver=2;~oref=https%3A%2F%2Fwww.spglobal.com%2Fmarketintelligence%2Fen%2Fpages%2Fproduct-login HTTP/1.1 Host: adservice.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:35 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 23 May 2024 13:51:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 13:51:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.5	50522	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	2028	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:35 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 23 May 2024 13:51:35 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2024-05-23 13:51:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.5	50518	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:35 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:36 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 450 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift3d9b88844f3bde07bb5ed043269 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:35 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 d60e84ebd0183f97f50eb1677fb4b7be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: hCY5PV9-Q5icGSxyFqxOb7E8OHIMdBNi7FM_b29rdqz1kgRcTqdJkw==
2024-05-23 13:51:36 UTC	450	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.5	50524	34.198.38.143	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	956	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
2024-05-23 13:51:36 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 36719021a034 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:30:00 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.5	50527	192.28.144.84	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	517	OUT	GET /gw1/ga/sgm?sid=spglobal-1716472255217-b61b91f1&1716472293515 HTTP/1.1 Host: abrtp1.marketo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: BIGipServerabrtp1_https=!flFsNGg1h100Ec2JMaUfYxEamMjeMpqmtwLIPnPBB25oNhZvGA+w/v4mJ/DdREcS8F5AkQL/M/2i1Hc=
2024-05-23 13:51:36 UTC	453	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:36 GMT Server: Jetty(9.4.45.v20220203) Content-Type: text/json;charset=utf-8 Cache-Control: no-cache Access-Control-Allow-Origin: * Content-Length: 48 Strict-Transport-Security: max-age=63113904 Connection: close Set-Cookie: BIGipServerabrtp1_https=!sx4oQ7sepzksIICJMaUfYxEamMjeMqgxIwxxpiFfqeXTzg1162o6g3G/jDTwkpVyHsxC15BH2c/oMqQ=; expires=Thu, 23-May-2024 14:26:36 GMT; path=/; Httponly; Secure
2024-05-23 13:51:36 UTC	48	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 32 30 30 2c 22 62 6f 64 79 22 3a 7b 22 73 65 67 6d 65 6e 74 73 22 3a 5b 5d 7d 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 22 7d Data Ascii: {"code":200,"body":{"segments":[]},"content":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.5	50525	34.111.113.62	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	617	OUT	GET /idsync/ex/push?partner_id=2499&partner_device_id=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&partner_url=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D721%26userId%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:36 UTC	1277	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:36 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716472296323;Expires=Mon, 22 Jul 2024 13:51:36 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=2b2d55cf-a8af-4149-b717-ff43feeea344;Expires=Mon, 22 Jul 2024 13:51:36 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/push/check?partner_id=2499&partner_device_id=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&partner_url=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D721%26userId%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26gdpr%3D0%26gdpr_consent%3D Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.5	50528	162.247.243.29	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	923	OUT	GET /1/a306fc3768?a=112512892&v=1.260.0&to=YAFWMRAFWEYCURIIWFlLdTYyS1tUEVkDFV5ZEFEJDg1RUA1RA05SWUtEBAUBRRoTQAkFQlQQGQkNA19bTVMVEU8%3D&rst=12556&ck=0&s=0&ref=https://www.spglobal.com/marketintelligence/en/pages/product-login&ptid=1ba195abfb1ffda3&af=err,xhr,stn,ins&be=649&fe=11856&dc=6414&perf=%7B%22timing%22:%7B%22of%22:1716472281024,%22n%22:0,%22f%22:3,%22dn%22:23,%22dne%22:23,%22c%22:23,%22s%22:23,%22ce%22:336,%22rq%22:336,%22rp%22:649,%22rpe%22:1212,%22di%22:7055,%22ds%22:7055,%22de%22:7063,%22dc%22:12474,%22l%22:12476,%22le%22:12505%7D,%22navigation%22:%7B%7D%7D&fp=3920&fcp=3920 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:36 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Thu, 23 May 2024 13:51:36 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-nyc-kteb1890023-NYC
2024-05-23 13:51:36 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.5	50530	54.92.244.178	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	421	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE
2024-05-23 13:51:36 UTC	135	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close
2024-05-23 13:51:36 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.5	50529	23.20.26.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	696	OUT	GET /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
2024-05-23 13:51:36 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:36 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 39e965e6e4d1 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:30:00 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:36 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 6b 39 4a 30 63 4d 47 50 4b 6b 7a 4f 6b 4a 45 2d 68 4f 76 6c 32 54 45 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"Zk9J0cMGPKkzOkJE-hOvl2TE","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.5	50526	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 2110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:36 UTC	2110	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 33 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e845839f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:36 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.5	50532	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:36 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:36 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.5	50531	18.172.103.101	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	958	OUT	GET /universal_pixel.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "2775054c068b37509e0798448f7fd32c" If-Modified-Since: Mon, 20 May 2024 07:02:14 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://insight.adsrvr.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f03aae80-b45c-40b7-8c7a-418b39367c97; TDCPM=CAESFgoHcnViaWNvbhILCIbdkNKuzv08EAUSFQoGZ29vZ2xlEgsI0r_jvq_O_TwQBRIXCghhcHBuZXh1cxILCL74lpqvzv08EAUSFQoGY2FzYWxlEgsI0pSXmq_O_TwQBRIYCgliaWRzd2l0Y2gSCwikt_q1r879PBAFEhcKCHB1Ym1hdGljEgsIlN36ta_O_TwQBRgFKAMyCwiu4teUxs79PBAFQg8iDQgBEgkKBXRpZXIzEAFaBzlvNTkzcXdgAQ..
2024-05-23 13:51:36 UTC	460	IN	HTTP/1.1 304 Not Modified Connection: close Last-Modified: Mon, 20 May 2024 07:02:14 GMT x-amz-server-side-encryption: AES256 Server: AmazonS3 Date: Thu, 23 May 2024 07:33:30 GMT ETag: "2775054c068b37509e0798448f7fd32c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 360184e3d21355e6dfcea5cbe81a7f44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: mRtwyk_G-lCDHi2f-nsLp2SPesKRgcz_qburybkOqivVUsmAKXVCQg== Age: 32578

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.5	50537	3.218.167.115	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	805	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAlHm4pY8BYgABUYA._0136dv6VBlUEMtnfM6kUcFW28ENpYKedNaI16wzNJI&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 1510748-48.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: iIEABqs1PD2yPj4oO78EPw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:37 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:36 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.5	50538	34.195.15.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA43i4pY8BYgABUYA.L3UgZNdMknOAturCKXwWWiPxQSqBNbWzJ4PTjbENT14&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 1334519-19.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: fEKY3s8qWLWVDs2Ub9icyA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:37 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:36 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.5	50534	18.238.243.86	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:36 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 669 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:36 UTC	669	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 6e 36 6b 32 79 75 62 72 36 66 77 37 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 6c 65 61 64 5f 69 64 3d 64 62 63 61 35 37 38 39 2d 33 36 63 30 2d 34 38 65 33 2d 39 33 64 35 2d 65 64 39 61 36 35 65 37 37 36 61 65 26 6d 61 72 6b 65 74 6f 5f 63 6f 6f 6b 69 65 3d 69 64 25 33 41 35 36 35 2d 42 44 4f 2d 31 30 30 25 32 36 74 6f 6b 65 6e 25 33 41 5f 6d 63 68 2d 73 70 67 6c 6f 62 61 6c 2e 63 6f 6d 2d 31 37 31 36 34 37 32 32 35 36 30 30 32 2d 34 36 31 30 37 26 69 6e 74 65 67 72 61 74 69 6f 6e 73 3d 25 37 42 25 32 32 6d 61 72 6b 65 74 6f 25 32 32 25 33 41 25 32 32 69 64 25 33 41 35 36 35 2d 42 44 4f 2d 31 30 30 25 32 36 74 6f 6b 65 6e 25 Data Ascii: embed_id=n6k2yubr6fw7&client_id=f6zuizdyhxrm7r&consent_id=has_consent&lead_id=dbca5789-36c0-48e3-93d5-ed9a65e776ae&marketo_cookie=id%3A565-BDO-100%26token%3A_mch-spglobal.com-1716472256002-46107&integrations=%7B%22marketo%22%3A%22id%3A565-BDO-100%26token%
2024-05-23 13:51:37 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Thu, 23 May 2024 13:51:37 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: cb4d60b440cd37f1 vary: Accept-Encoding x-envoy-upstream-service-time: 355 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 941049c97e511f86acc1525badae21c2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P1 X-Amz-Cf-Id: CeieYVN58nMGDcNY1Hg1HgykjhS_EJLR4ZpJwbqmy_cl5H9uAc1Ufg==
2024-05-23 13:51:37 UTC	15487	IN	Data Raw: 33 66 38 64 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 35 30 31 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 31 30 31 31 38 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 33 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 36 38 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 6e Data Ascii: 3f8d{"location":{"ip":"8.46.123.175","city":"New York","subdivision":"New York","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":501,"postalCode":"10118","latitude":40.7123,"longitude":-74.0068},"tokenResult":{"accessToken
2024-05-23 13:51:37 UTC	790	IN	Data Raw: 72 73 22 3a 5b 32 32 38 34 33 38 36 5d 2c 22 70 6c 61 6e 6e 65 64 22 3a 66 61 6c 73 65 7d 7d 2c 22 77 69 64 67 65 74 43 68 61 74 42 6f 6f 74 73 74 72 61 70 52 65 73 70 6f 6e 73 65 22 3a 7b 22 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 43 6f 6e 76 65 72 73 61 74 69 6f 6e 73 22 3a 5b 5d 2c 22 63 61 6d 70 61 69 67 6e 45 6e 72 6f 6c 6c 6d 65 6e 74 22 3a 7b 7d 2c 22 66 6f 6c 6c 6f 77 69 6e 67 43 61 6d 70 61 69 67 6e 73 22 3a 5b 5d 2c 22 61 63 74 69 76 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 73 65 6e 74 72 79 43 6f 6e 66 69 67 22 3a 7b 22 61 6c 6c 6f 77 4c 69 73 74 4f 72 67 49 64 73 22 3a 5b 31 5d 2c 22 6c 69 6d 69 74 22 3a 30 2e 35 2c 22 73 65 6e 74 72 79 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d Data Ascii: rs":[2284386],"planned":false}},"widgetChatBootstrapResponse":{"conversations":[],"campaignConversations":[],"campaignEnrollment":{},"followingCampaigns":[],"activeConversation":null},"sentryConfig":{"allowListOrgIds":[1],"limit":0.5,"sentryEnabled":true}
2024-05-23 13:51:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.5	50533	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 616 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:37 UTC	616	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 36 6b 32 79 75 62 72 36 66 77 37 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 33 62 63 36 62 35 61 31 2d 64 63 32 64 2d 34 63 33 37 2d 39 33 33 37 2d 39 38 38 66 32 65 30 33 63 65 62 37 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 30 61 35 38 35 61 35 66 2d 62 33 62 39 2d 34 65 37 65 2d 61 62 64 31 2d 35 62 36 33 31 61 37 37 31 37 34 38 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%22n6k2yubr6fw7%22%2C%22sessionId%22%3A%223bc6b5a1-dc2d-4c37-9337-988f2e03ceb7%22%2C%22instanceId%22%3A%220a585a5f-b3b9-4e7e-abd1-5b631a771748%22%2C%22context%22%3A%7B%22url%22%3A
2024-05-23 13:51:37 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:37 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: a6956c0b1452909e vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-05-23 13:51:37 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.5	50535	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 427 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:37 UTC	427	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 35 31 30 37 34 38 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 38 39 31 36 35 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1510748,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472289165,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:37 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:37 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 28 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.5	50536	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 428 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:37 UTC	428	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 33 33 34 35 31 39 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 38 39 31 36 36 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1334519,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472289166,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:37 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:37 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 4 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.5	50542	34.111.113.62	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	703	OUT	GET /idsync/ex/push/check?partner_id=2499&partner_device_id=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&partner_url=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D721%26userId%3D49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716472296323; TapAd_DID=2b2d55cf-a8af-4149-b717-ff43feeea344
2024-05-23 13:51:37 UTC	1226	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 13:51:37 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716472296323;Expires=Mon, 22 Jul 2024 13:51:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=2b2d55cf-a8af-4149-b717-ff43feeea344;Expires=Mon, 22 Jul 2024 13:51:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 22 Jul 2024 13:51:37 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://ads.stickyadstv.com/user-registering?dataProviderId=721&userId=49f7f86d-9a75-4cba-820c-c9d8e8f98d1f-664f49d8-5553&gdpr=0&gdpr_consent= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.5	50541	23.20.26.217	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	720	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; chs=[{"ch":"278","t":"2024-05-23 13:51:13"},{"ch":"128","t":"2024-05-23 13:51:17"},{"ch":"120","t":"2024-05-23 13:51:19"},{"ch":"5","t":"2024-05-23 13:51:22"},{"ch":"114","t":"2024-05-23 13:51:23"},{"ch":"4","t":"2024-05-23 13:51:27"},{"ch":"124","t":"2024-05-23 13:51:28"},{"ch":"8","t":"2024-05-23 13:51:31"}]
2024-05-23 13:51:37 UTC	714	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 13:51:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close server: Aorta/20240521.a8f9a7f21 X-Aorta-Host: 39e965e6e4d1 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=Zk9J0cMGPKkzOkJE-hOvl2TE; Max-Age=63027504; Expires=Sat, 23 May 2026 01:30:01 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-05-23 13:51:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 90 00 00 ff 00 00 00 00 00 21 f9 04 05 10 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 04 01 00 3b Data Ascii: GIF89a!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.5	50543	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:37 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:37 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.5	50539	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:37 UTC	630	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 34 65 63 39 61 38 37 61 2d 37 34 61 35 2d 34 65 34 36 2d 62 61 39 31 2d 36 62 66 64 37 37 65 33 63 32 66 63 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 31 33 33 34 35 31 39 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 70 78 32 69 77 72 63 6d 66 78 77 7a 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 37 35 31 32 39 66 38 66 2d 64 63 64 34 2d 34 36 35 32 2d Data Ascii: metric_payload=%7B%22id%22%3A%224ec9a87a-74a5-4e46-ba91-6bfd77e3c2fc%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A1334519%2C%22embedId%22%3A%22px2iwrcmfxwz%22%2C%22sessionId%22%3A%2275129f8f-dcd4-4652-
2024-05-23 13:51:37 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:37 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 7316b5cb21995a96 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 11 server: istio-envoy connection: close
2024-05-23 13:51:37 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.5	50540	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:37 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 458 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftd4aa9b845cbaa1564f0e2e412c6 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:37 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 e2239bbca97bdb08942ca2cd020caca8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: yWho-gxmJLmfUkONARM8h63GwDMPkxh-wqDStSqVVJa0W98sSqJ-YA==
2024-05-23 13:51:37 UTC	458	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.5	50544	34.195.15.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0 HTTP/1.1 Host: 1334519-19.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: bW22qoEcKPwnyKT+dy44RA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:37 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:37 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.5	50545	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:37 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:38 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift9dc710e4f87ade2cdc395b4878b cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 13:51:37 GMT server: istio-envoy connection: close
2024-05-23 13:51:38 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.5	50546	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:38 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 2112 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:38 UTC	2112	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 33 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e845839f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:38 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:38 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.5	50550	3.218.167.115	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:38 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAM7i4pY8BYgABUYA.AM0F1nj-VhoZCsCa01mh8i0iJmEA1nllyPdi0Y9Ipr8&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 1510748-48.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: bt2PwQQ8VQgjJUqc8vkCqQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:38 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:38 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.5	50549	18.172.112.40	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:38 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:38 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 450 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift60e6b8e468c824a86a64864950e cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:38 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 1fa1c6285afcbdedfbb042a0993ed182.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P8 X-Amz-Cf-Id: Dmzggq4-S1vdJ9yujbZCz-vnk-qmE4W3gV57oWmVLXwO-qFiKEYsYg==
2024-05-23 13:51:38 UTC	450	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.5	50548	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:38 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:38 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drifte49c40e4bd2a9100e6336274da0 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 13:51:38 GMT server: istio-envoy connection: close
2024-05-23 13:51:38 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.5	50551	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:39 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:39 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:39 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.5	50552	54.163.32.160	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:39 UTC	523	OUT	GET /d/sync/cookie/generic?partner=stickyadstv&append=1&cb=9240255&redirect=https%3A%2F%2Fads.stickyadstv.com%2Fuser-registering%3FdataProviderId%3D690%26userId%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:39 UTC	486	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 23 May 2024 13:51:39 GMT Location: https://ads.stickyadstv.com/user-registering?dataProviderId=690&userId=7e2dce09-6606-42a4-bd8b-ea017ca6a49e Set-Cookie: cu=7e2dce09-6606-42a4-bd8b-ea017ca6a49e\|1716472299263; Path=/; Domain=ipredictive.com; Expires=Fri, 23 May 2025 13:51:39 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 19bb7f3d-16e3-4471-8bee-2f807ed29a30 Content-Length: 134 Connection: Close
2024-05-23 13:51:39 UTC	134	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 73 74 69 63 6b 79 61 64 73 74 76 2e 63 6f 6d 2f 75 73 65 72 2d 72 65 67 69 73 74 65 72 69 6e 67 3f 64 61 74 61 50 72 6f 76 69 64 65 72 49 64 3d 36 39 30 26 61 6d 70 3b 75 73 65 72 49 64 3d 37 65 32 64 63 65 30 39 2d 36 36 30 36 2d 34 32 61 34 2d 62 64 38 62 2d 65 61 30 31 37 63 61 36 61 34 39 65 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://ads.stickyadstv.com/user-registering?dataProviderId=690&userId=7e2dce09-6606-42a4-bd8b-ea017ca6a49e">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.5	50554	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:40 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:40 UTC	336	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 31 37 30 30 2e 35 39 39 39 39 39 39 39 39 39 37 36 37 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 Data Ascii: metrics=%5B%7B%22value%22%3A1700.5999999999767%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C
2024-05-23 13:51:40 UTC	690	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:40 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: cc345fee7784661e vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-05-23 13:51:40 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.5	50555	3.218.167.115	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:40 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAM7i4pY8BYgABUYA.AM0F1nj-VhoZCsCa01mh8i0iJmEA1nllyPdi0Y9Ipr8&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 1510748-48.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: lJeMHrf/cqex0RQXFoJUpw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:40 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:40 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.5	50556	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:40 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 674 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:40 UTC	674	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 30 36 61 31 66 64 30 36 2d 64 32 30 33 2d 34 35 63 39 2d 39 63 39 32 2d 33 62 63 33 33 62 36 38 31 31 62 31 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 31 35 31 30 37 34 38 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 6e 36 6b 32 79 75 62 72 36 66 77 37 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 33 62 63 36 62 35 61 31 2d 64 63 32 64 2d 34 63 33 37 2d Data Ascii: metric_payload=%7B%22id%22%3A%2206a1fd06-d203-45c9-9c92-3bc33b6811b1%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A1510748%2C%22embedId%22%3A%22n6k2yubr6fw7%22%2C%22sessionId%22%3A%223bc6b5a1-dc2d-4c37-
2024-05-23 13:51:40 UTC	691	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:40 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: f0264dce7f989e0d vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 12 server: istio-envoy connection: close
2024-05-23 13:51:40 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.5	50560	34.195.15.24	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:40 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTMzNDUxOS0yMTk5MDAzMjMwMC00ZAAGb3JnX2lkbQAAAAcxMzM0NTE5ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDBkAAl1c2VyX3R5cGVkAARsZWFkbgYA3qe4pY8BYgABUYA.CNyQpG-9dA66PHBAgfsWMyNfMG35aWAQQGZ-v-n_GrU&remote_ip=52.205.21.197&vsn=2.0.0 HTTP/1.1 Host: 1334519-19.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: AYh2pgMktMYY1yEnkvJzqA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:41 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:41 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.5	50558	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:41 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 662 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:41 UTC	662	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 33 33 34 35 31 39 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 39 33 33 32 38 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1334519,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472293328,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:41 UTC	246	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:41 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 106 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.5	50557	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:41 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:41 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftc1fd441425ab1c624926550a9e1 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:41 GMT server: istio-envoy connection: close
2024-05-23 13:51:41 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.5	50561	3.94.218.138	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:41 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:41 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift0db648c4ca0a971de7018f5191f cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 13:51:41 GMT server: istio-envoy connection: close
2024-05-23 13:51:41 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.5	50563	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:43 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 427 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:43 UTC	427	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 35 31 30 37 34 38 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 39 35 37 32 38 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1510748,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472295728,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:43 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:43 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 38 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.5	50564	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:43 UTC	678	OUT	POST /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive Content-Length: 2114 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.spglobal.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.spglobal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:43 UTC	2114	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 62 65 38 63 33 33 32 65 38 34 35 38 33 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 64 31 37 38 39 36 34 32 66 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 34 63 38 36 38 32 64 64 30 31 32 39 33 39 34 65 66 62 37 65 37 36 30 32 64 32 33 66 64 36 36 31 39 35 35 32 36 34 35 37 37 30 39 30 35 37 30 36 30 65 33 64 30 32 30 64 63 32 62 64 36 33 34 36 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 64 35 36 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e00126be8c332e845839f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d5d1789642f17071a10acf9f29f674c8682dd0129394efb7e7602d23fd66195526457709057060e3d020dc2bd634677be26bb25cb43e29b25f45471ad0f2e6410dd56fe5aecd2948a7fe07
2024-05-23 13:51:43 UTC	283	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://www.spglobal.com Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:43 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.5	50562	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:43 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 428 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:43 UTC	428	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 33 33 34 35 31 39 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 39 35 37 35 30 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1334519,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472295750,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:43 UTC	246	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:43 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 191 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.5	65445	3.218.167.115	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:43 UTC	806	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAAVMTUxMDc0OC0yMTk5MDAzMjMwMi00ZAAGb3JnX2lkbQAAAAcxNTEwNzQ4ZAAJc2NvcGVfc2V0bQAAAARsZWFkZAAHdXNlcl9pZG0AAAALMjE5OTAwMzIzMDJkAAl1c2VyX3R5cGVkAARsZWFkbgYAM7i4pY8BYgABUYA.AM0F1nj-VhoZCsCa01mh8i0iJmEA1nllyPdi0Y9Ipr8&remote_ip=3.226.111.211&vsn=2.0.0 HTTP/1.1 Host: 1510748-48.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: /z+VAKb0wDTJ0rLmoAJ/Zg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-05-23 13:51:43 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Thu, 23 May 2024 13:51:43 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.5	65446	34.193.113.164	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:43 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:43 UTC	335	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 31 35 33 38 2e 33 39 39 39 39 39 39 39 39 39 36 35 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 25 Data Ascii: metrics=%5B%7B%22value%22%3A1538.399999999965%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C%
2024-05-23 13:51:43 UTC	690	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 13:51:43 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 6fc0cc69150824a7 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-05-23 13:51:43 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.5	65448	54.83.110.109	443	2276	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:44 UTC	400	OUT	GET /mon HTTP/1.1 Host: obs.fishrobotflower.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=541d656e5616e493bfdbc356a86b4389
2024-05-23 13:51:44 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 23 May 2024 13:51:44 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
500	192.168.2.5	65449	34.193.113.164	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:44 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 896 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:44 UTC	896	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 31 35 31 30 37 34 38 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 34 37 32 32 39 37 32 34 33 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e Data Ascii: {"application":"widget","orgId":1510748,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1716472297243,"level":"INFO","message":"WS Reconn
2024-05-23 13:51:44 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Thu, 23 May 2024 13:51:44 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 16 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
501	192.168.2.5	65450	3.94.218.138	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 13:51:44 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 13:51:44 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift6055b994d21a9d336321a099948 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 13:51:44 GMT server: istio-envoy connection: close
2024-05-23 13:51:44 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Target ID:	0
Start time:	09:50:05
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:50:09
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:50:11
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://info.ipreo.com/Privacy-Policy.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:51:22
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7592 --field-trial-handle=1704,i,9798268253561337021,15967687481112649863,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://info.ipreo.com/Privacy-Policy.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Cryptography

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Windows Analysis Report
http://info.ipreo.com/Privacy-Policy.html